$ rpki-client -vvf rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/5GuTGFhaweBs84Ti7swh9HQzibs.mft File: 5GuTGFhaweBs84Ti7swh9HQzibs.mft (raw, json) Hash identifier: Pv1fPUHJLa61sAWRr2DvK5aTsSqkF+nnm2VagPArDbY= Subject key identifier: 28:65:4D:40:EF:3F:8F:28:84:9B:80:EC:10:8F:41:6E:E8:69:90:31 Authority key identifier: E4:6B:93:18:58:5A:C1:E0:6C:F3:84:E2:EE:CC:21:F4:74:33:89:BB Certificate issuer: /CN=A91F83B6/serialNumber=E46B9318585AC1E06CF384E2EECC21F4743389BB Certificate serial: D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5GuTGFhaweBs84Ti7swh9HQzibs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/5GuTGFhaweBs84Ti7swh9HQzibs.mft Manifest number: D2 Signing time: Sun 05 Apr 2026 06:09:25 +0000 Manifest this update: Sun 05 Apr 2026 06:09:24 +0000 Manifest next update: Sun 12 Apr 2026 06:09:24 +0000 Files and hashes: 1: 5GuTGFhaweBs84Ti7swh9HQzibs.crl (hash: W8AvbiYyRGyO6l8RiwP0xZ0BK6tswaR+a7XRuVqGq5g=) 2: 3CA27876F73F11EF95C5F011C4F9AE02.roa (hash: rUwmt+bo32fXyc76egq+OZINFYA/ahBwXXwNyoCKn6k=) 3: E0E5603A371611F0A29AF975C4F9AE02.roa (hash: C3aagPpa6AuSNI4mAxmbbsp6/a45ylNp6b8evhWo/ho=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/5GuTGFhaweBs84Ti7swh9HQzibs.crl rsync://rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/5GuTGFhaweBs84Ti7swh9HQzibs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5GuTGFhaweBs84Ti7swh9HQzibs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 06:09:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 216 (0xd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F83B6, serialNumber=E46B9318585AC1E06CF384E2EECC21F4743389BB Validity Not Before: Apr 5 06:09:24 2026 GMT Not After : Apr 12 06:09:24 2026 GMT Subject: CN=69d1fc94-682d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:81:8f:42:9e:e5:13:cd:34:7a:15:b7:79:cc: 8f:9f:df:cc:4e:1e:09:c6:41:b7:8b:ed:a2:22:f4: 54:f2:d1:ca:d7:ee:0b:90:cb:a5:a1:38:dd:83:07: 41:1a:88:aa:17:86:f1:5a:d6:a9:35:7a:45:98:e4: da:28:e3:d3:0d:38:26:c3:96:46:3d:4c:9b:f4:6f: 3c:ea:20:6a:14:71:5c:a4:6d:b8:da:35:5f:7e:74: 04:dc:6b:7d:61:16:3b:7b:36:a9:c4:bd:69:16:32: e3:5a:c5:d4:75:72:e5:a2:88:ff:94:c3:21:d7:d5: fe:eb:b0:00:39:35:d8:a2:ba:22:62:78:0a:15:6a: 8c:24:ba:43:da:a8:d5:85:2b:46:32:ad:17:df:f5: 29:bf:4c:dc:08:d8:b7:00:8a:9c:58:44:92:e3:b0: 43:e2:42:72:75:05:62:fe:11:4f:57:df:56:32:f0: 2d:27:34:06:b7:c3:97:42:1a:f0:1f:92:6f:3e:83: bf:7f:b3:1b:cd:de:fd:51:aa:2a:2b:91:87:ef:eb: ef:76:f9:ad:43:9b:e3:7b:96:f8:cc:27:fb:00:c4: 5d:0b:9b:69:97:53:d6:6d:85:b6:09:53:80:5a:8b: 13:d0:c3:24:9b:40:26:fd:4d:d7:e1:ba:47:45:7f: 5e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:65:4D:40:EF:3F:8F:28:84:9B:80:EC:10:8F:41:6E:E8:69:90:31 X509v3 Authority Key Identifier: keyid:E4:6B:93:18:58:5A:C1:E0:6C:F3:84:E2:EE:CC:21:F4:74:33:89:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/5GuTGFhaweBs84Ti7swh9HQzibs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5GuTGFhaweBs84Ti7swh9HQzibs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/5GuTGFhaweBs84Ti7swh9HQzibs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:da:f9:31:a4:52:9e:42:2b:d9:09:e7:7c:20:50:c3:36:c0: 59:cb:64:80:76:4d:87:d5:91:97:e5:93:a1:bc:8e:0e:67:a1: 92:52:7c:3e:7d:f0:40:5f:63:ec:29:c4:0e:02:2b:00:9b:af: 99:0c:86:a4:4a:cc:6d:00:d0:7c:48:75:ff:99:08:9c:d0:7c: 61:8f:9f:07:33:76:44:22:9c:b6:16:4e:16:ce:e3:99:c3:dd: 31:94:c5:97:83:8f:65:b3:16:c4:e8:21:d8:31:19:a6:40:97: da:25:c6:69:6a:14:ba:fc:62:d3:f1:1e:d8:90:85:80:62:e7: 6d:1a:80:5a:f5:ae:38:c5:12:45:45:34:11:79:fe:f5:43:15: 0e:8a:41:43:ec:f2:8f:fb:e7:df:ce:fc:82:bd:b6:d9:08:6f: 8d:91:0b:c4:98:6a:3d:c3:57:2f:41:93:8d:8c:7e:8c:78:bc: 6b:50:1d:37:56:69:e1:97:15:19:44:62:98:d4:dc:2a:5c:ae: 17:f2:e3:fb:10:ca:34:c0:1a:f3:7e:e0:f3:10:8e:56:00:38: 6f:dc:92:67:25:b8:1c:4f:ed:5c:9f:40:37:f3:9a:88:b4:f1: 0a:04:0f:98:ef:83:52:da:04:ef:83:b0:28:a3:ad:7e:97:e4: 22:e6:b9:04 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgzQjYxMTAvBgNVBAUTKEU0NkI5MzE4NTg1QUMxRTA2Q0YzODRFMkVFQ0MyMUY0 NzQzMzg5QkIwHhcNMjYwNDA1MDYwOTI0WhcNMjYwNDEyMDYwOTI0WjAYMRYwFAYD VQQDEw02OWQxZmM5NC02ODJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxoGPQp7lE800ehW3ecyPn9/MTh4JxkG3i+2iIvRU8tHK1+4LkMuloTjdgwdB GoiqF4bxWtapNXpFmOTaKOPTDTgmw5ZGPUyb9G886iBqFHFcpG242jVffnQE3Gt9 YRY7ezapxL1pFjLjWsXUdXLlooj/lMMh19X+67AAOTXYoroiYngKFWqMJLpD2qjV hStGMq0X3/Upv0zcCNi3AIqcWESS47BD4kJydQVi/hFPV99WMvAtJzQGt8OXQhrw H5JvPoO/f7Mbzd79UaoqK5GH7+vvdvmtQ5vje5b4zCf7AMRdC5tpl1PWbYW2CVOA WosT0MMkm0Am/U3X4bpHRX9etwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFChlTUDv P48ohJuA7BCPQW7oaZAxMB8GA1UdIwQYMBaAFORrkxhYWsHgbPOE4u7MIfR0M4m7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODNCNi9FOEYxOEIyMkY3 M0UxMUVGOTY4NzM3MERDNEY5QUUwMi81R3VUR0ZoYXdlQnM4NFRpN3N3aDlIUXpp YnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVHdVRHRmhhd2VCczg0VGk3c3doOUhRemlicy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODNCNi9FOEYxOEIyMkY3M0UxMUVGOTY4NzM3MERDNEY5QUUwMi81R3VUR0ZoYXdl QnM4NFRpN3N3aDlIUXppYnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaNr5MaRSnkIr2QnnfCBQwzbAWctkgHZNh9WRl+WTobyODmehklJ8Pn3wQF9j 7CnEDgIrAJuvmQyGpErMbQDQfEh1/5kInNB8YY+fBzN2RCKcthZOFs7jmcPdMZTF l4OPZbMWxOgh2DEZpkCX2iXGaWoUuvxi0/Ee2JCFgGLnbRqAWvWuOMUSRUU0EXn+ 9UMVDopBQ+zyj/vn3878gr222QhvjZELxJhqPcNXL0GTjYx+jHi8a1AdN1Zp4ZcV GURimNTcKlyuF/Lj+xDKNMAa837g8xCOVgA4b9ySZyW4HE/tXJ9AN/OaiLTxCgQP mO+DUtoE74OwKKOtfpfkIua5BA== -----END CERTIFICATE-----Generated at Mon Apr 6 08:49:01 2026 by rpki-client