$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft File: G5HVFg99VrcFqFFsahz0L0ln71Y.mft (raw, json) Hash identifier: v+G7h7d9m2wyxXSuX8BhInUFiqQnh9Hm9VkFPtx+xhk= Subject key identifier: 93:D8:75:91:5A:F9:A9:18:02:FC:77:93:51:D0:EF:86:D5:8D:DA:35 Authority key identifier: 1B:91:D5:16:0F:7D:56:B7:05:A8:51:6C:6A:1C:F4:2F:49:67:EF:56 Certificate issuer: /CN=A91EF554/serialNumber=1B91D5160F7D56B705A8516C6A1CF42F4967EF56 Certificate serial: 09E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G5HVFg99VrcFqFFsahz0L0ln71Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft Manifest number: 09D6 Signing time: Sat 28 Mar 2026 19:47:47 +0000 Manifest this update: Sat 28 Mar 2026 19:47:47 +0000 Manifest next update: Sat 04 Apr 2026 19:47:47 +0000 Files and hashes: 1: G5HVFg99VrcFqFFsahz0L0ln71Y.crl (hash: CUp+sRXq/oqKkT51htwSPJ6ShTNQXc0G/ORVNTbUlzg=) 2: A37D1F4AF51A11F08A3A39E6586F56BC.roa (hash: jR0WlKY8LzR2LUBl37yUqlZt1qZx888jsAWYo1rjx1o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.crl rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G5HVFg99VrcFqFFsahz0L0ln71Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 Apr 2026 19:47:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2528 (0x9e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF554, serialNumber=1B91D5160F7D56B705A8516C6A1CF42F4967EF56 Validity Not Before: Mar 28 19:47:47 2026 GMT Not After : Apr 4 19:47:47 2026 GMT Subject: CN=69c83063-4de5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:6f:e4:eb:97:dc:b9:00:69:97:0a:dc:0d:de: 49:9d:31:57:c1:52:b1:0f:ad:fa:37:5a:a1:b9:8f: 41:e4:4a:b4:bd:bb:b4:cc:e0:ef:c3:4d:46:81:f9: ed:c2:d7:07:7e:57:c0:34:77:6d:91:d9:91:40:cf: d7:5e:f3:a5:8b:6e:dc:e3:75:c3:2c:ac:dc:0f:e5: 9c:48:e5:96:5d:59:1c:5a:be:f0:72:fb:66:af:77: 7c:b5:b4:3a:df:dd:99:ba:02:66:19:dc:99:1c:41: e8:f6:d9:54:c6:31:3d:84:dd:be:bf:60:fa:10:81: ec:fa:61:d4:1c:f5:e2:3d:75:43:c8:8c:61:f6:2d: 90:f1:38:4d:bf:f8:47:00:e4:38:21:e9:f5:df:57: 26:4a:25:ba:62:77:50:a7:0a:2a:db:15:b1:40:7b: 6d:cc:5b:ac:be:82:ec:f2:2a:60:d0:e9:6f:eb:36: 26:23:7c:f0:a0:63:c8:06:16:1c:c2:3c:7a:3e:1d: db:36:8c:91:09:dc:d3:84:22:47:2e:f2:28:f8:8f: 2b:18:39:4b:22:15:34:91:a9:a4:98:f3:5a:1d:27: 3e:1b:5d:d2:f4:ff:71:db:ca:b5:49:1d:a1:f1:1f: 06:38:f3:8e:24:ab:f7:ee:11:64:85:fa:0f:12:5b: 52:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:D8:75:91:5A:F9:A9:18:02:FC:77:93:51:D0:EF:86:D5:8D:DA:35 X509v3 Authority Key Identifier: keyid:1B:91:D5:16:0F:7D:56:B7:05:A8:51:6C:6A:1C:F4:2F:49:67:EF:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G5HVFg99VrcFqFFsahz0L0ln71Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:0a:0a:a7:f9:85:2a:ef:7a:20:74:d9:b5:13:46:c2:63:d5: c3:f9:63:08:3a:a9:9e:46:a1:07:ed:28:41:de:3b:7f:22:94: 0c:49:47:f4:03:48:16:45:35:a1:81:a2:a2:af:ce:95:35:1d: 11:18:e8:3c:ac:63:9b:6e:8c:0d:61:d1:e8:58:d1:dd:d0:a5: 69:82:14:3d:4f:5a:30:c0:c1:dd:6b:39:11:67:5b:2e:9c:c5: cb:b1:59:3f:38:f2:1d:6c:32:5a:d0:a2:f8:e5:9d:51:9d:2d: 82:d2:c8:b7:bd:ab:70:f4:65:0a:fe:5a:6b:1e:f8:04:25:20: 0b:9b:98:27:cd:3b:77:3f:a1:4b:b7:93:6b:1a:02:50:c4:b3: 95:a3:cf:c6:3e:45:c1:67:1c:5a:d6:dd:df:51:13:30:ed:bf: 69:7b:90:c3:6c:0a:79:b2:de:c1:86:13:f2:9f:f0:7d:32:68: f0:65:e6:dd:a8:3a:21:84:fb:7b:20:17:52:43:31:0e:2b:a0: 19:42:d7:8b:d6:75:04:4c:55:96:e3:0a:71:af:6f:31:7e:34: a1:03:6d:dc:c1:18:be:15:bb:a6:06:8a:fe:89:9f:1e:5f:29: 1c:b4:2d:58:13:79:cf:ca:85:bc:c3:e5:23:9c:48:3c:e7:13: 2e:6a:dc:cf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCeAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY1NTQxMTAvBgNVBAUTKDFCOTFENTE2MEY3RDU2QjcwNUE4NTE2QzZBMUNGNDJG NDk2N0VGNTYwHhcNMjYwMzI4MTk0NzQ3WhcNMjYwNDA0MTk0NzQ3WjAYMRYwFAYD VQQDEw02OWM4MzA2My00ZGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+m/k65fcuQBplwrcDd5JnTFXwVKxD636N1qhuY9B5Eq0vbu0zODvw01Ggfnt wtcHflfANHdtkdmRQM/XXvOli27c43XDLKzcD+WcSOWWXVkcWr7wcvtmr3d8tbQ6 392ZugJmGdyZHEHo9tlUxjE9hN2+v2D6EIHs+mHUHPXiPXVDyIxh9i2Q8ThNv/hH AOQ4Ien131cmSiW6YndQpwoq2xWxQHttzFusvoLs8ipg0Olv6zYmI3zwoGPIBhYc wjx6Ph3bNoyRCdzThCJHLvIo+I8rGDlLIhU0kamkmPNaHSc+G13S9P9x28q1SR2h 8R8GOPOOJKv37hFkhfoPEltSpQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJPYdZFa +akYAvx3k1HQ74bVjdo1MB8GA1UdIwQYMBaAFBuR1RYPfVa3BahRbGoc9C9JZ+9W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjU1NC9FQjFDQkJFMjlF NUIxMUVBQjI0OEZDNTFDNEY5QUUwMi9HNUhWRmc5OVZyY0ZxRkZzYWh6MEwwbG43 MVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0c1SFZGZzk5VnJjRnFGRnNhaHowTDBsbjcxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjU1NC9FQjFDQkJFMjlFNUIxMUVBQjI0OEZDNTFDNEY5QUUwMi9HNUhWRmc5OVZy Y0ZxRkZzYWh6MEwwbG43MVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIQoKp/mFKu96IHTZtRNGwmPVw/ljCDqpnkahB+0oQd47fyKUDElH9ANIFkU1 oYGioq/OlTUdERjoPKxjm26MDWHR6FjR3dClaYIUPU9aMMDB3Ws5EWdbLpzFy7FZ PzjyHWwyWtCi+OWdUZ0tgtLIt72rcPRlCv5aax74BCUgC5uYJ807dz+hS7eTaxoC UMSzlaPPxj5FwWccWtbd31ETMO2/aXuQw2wKebLewYYT8p/wfTJo8GXm3ag6IYT7 eyAXUkMxDiugGULXi9Z1BExVluMKca9vMX40oQNt3MEYvhW7pgaK/omfHl8pHLQt WBN5z8qFvMPlI5xIPOcTLmrczw== -----END CERTIFICATE-----Generated at Sun Mar 29 18:48:51 2026 by rpki-client