$ rpki-client -vvf rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft File: 5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft (raw, json) Hash identifier: rXCNYiPaicBUtk4tWz2nxeNwckMZF66Qm/YzvwTNTK0= Subject key identifier: C5:9F:D0:65:59:1E:A3:97:52:C7:78:09:48:E8:05:45:ED:84:36:94 Authority key identifier: E4:21:42:E3:E5:84:57:62:D0:E8:D6:8B:02:FB:10:E8:75:BC:6B:F2 Certificate issuer: /CN=A912DA1D/serialNumber=E42142E3E5845762D0E8D68B02FB10E875BC6BF2 Certificate serial: 0410 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft Manifest number: 03FA Signing time: Fri 17 Apr 2026 00:23:52 +0000 Manifest this update: Fri 17 Apr 2026 00:23:52 +0000 Manifest next update: Fri 24 Apr 2026 00:23:52 +0000 Files and hashes: 1: 5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl (hash: q7l7VxymtOrhHE6V7Mbh3H5+PnjkCaFEI1HdcoIyUYg=) 2: 36B1CD340A6D11ED89FD3F13C4F9AE02.roa (hash: YL8hbnsNwgCnn/NcUCv0iY/57aut2UGD2Ataw87mmvw=) 3: 0589A4B8DF9511EDAAA7E22AC4F9AE02.roa (hash: 8QW6SQzpdf8WqjCw4pnkX0HYCGVvI59bpneK0fchnuE=) 4: 44B90434DFA011ED8C895F7CC4F9AE02.roa (hash: fOCLl/2VKdNa0vhoLYzfZhLV3T1IotJ/iZtFzsPrmrk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 00:23:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1040 (0x410) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DA1D, serialNumber=E42142E3E5845762D0E8D68B02FB10E875BC6BF2 Validity Not Before: Apr 17 00:23:52 2026 GMT Not After : Apr 24 00:23:52 2026 GMT Subject: CN=69e17d98-1fb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:50:0d:95:62:a5:02:c8:40:79:67:b0:3c:2b: 68:6d:09:f4:b7:88:01:8c:52:7d:e4:5e:71:3c:a0: 91:ae:77:cb:ff:d2:da:09:d6:c2:1d:d7:1f:cc:28: b4:cc:0f:b1:5f:d0:f4:e6:ba:e8:ea:83:69:97:a5: 28:66:21:65:81:4c:47:36:4a:11:61:20:6a:9a:ba: c8:42:4e:34:1d:d4:5d:01:69:e2:fa:f6:65:96:93: 51:3c:81:1f:6d:c3:b2:a7:72:bf:89:5c:32:d0:3a: 6b:15:db:a6:55:52:4d:c0:1c:b8:e0:bb:91:d0:31: 16:c3:4a:55:98:29:3b:95:67:44:ba:54:60:d7:7c: 73:3e:40:9d:0c:50:d1:3e:87:e8:86:25:6f:53:82: 57:13:f9:4b:4d:91:60:c5:34:b7:ff:f8:f8:f7:62: b5:b1:f0:f4:f2:11:60:e1:16:47:46:2f:45:bd:f9: 27:9a:9a:a4:bf:be:1e:c3:10:cd:63:6f:36:08:39: 61:74:a5:9e:78:03:62:82:0f:82:4d:0a:5a:db:99: 62:93:7c:46:02:0b:75:fc:c5:35:80:1d:71:f5:e6: 69:52:14:cc:fe:dd:40:54:85:6f:fc:60:d5:18:21: ae:64:f0:ed:d7:21:5b:22:39:30:3d:e9:5a:5e:b2: 9c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:9F:D0:65:59:1E:A3:97:52:C7:78:09:48:E8:05:45:ED:84:36:94 X509v3 Authority Key Identifier: keyid:E4:21:42:E3:E5:84:57:62:D0:E8:D6:8B:02:FB:10:E8:75:BC:6B:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:a9:ef:25:2a:da:85:fa:9d:27:63:7c:96:4f:d5:97:47:40: 80:90:81:bf:7b:1a:63:e2:30:76:f1:99:34:6a:25:8e:e8:59: 54:d3:fc:11:a1:b3:c6:53:25:82:57:57:76:40:79:02:3d:12: f1:cf:35:ba:ff:6a:3c:c4:eb:15:6d:5b:17:b8:72:8a:d9:2a: 0c:c4:2b:e2:f8:9a:d5:7a:65:32:c4:37:0c:9f:f9:0a:e4:e8: fe:5d:0f:ac:e5:ef:45:5e:58:16:f1:da:08:9c:f8:b4:5f:83: 20:6f:23:9a:e7:64:95:31:35:fe:db:95:60:71:bc:d8:8d:24: c7:ed:9f:b2:8e:5c:94:41:a3:1c:c4:be:8f:e3:78:71:ba:eb: 1c:d1:b9:97:81:a0:77:b2:3b:5a:9a:4c:f7:65:62:bd:09:a2: 00:6f:da:69:28:03:dd:2a:b4:14:98:cf:c8:3e:ac:bf:69:25: 16:d7:6f:a2:1e:ae:f0:0e:09:7f:ed:2c:e5:70:d9:ac:7a:f2: c7:0b:97:1b:8b:78:ff:bd:6d:6b:26:b9:ad:e3:4d:6b:bc:7b: 5d:7e:12:87:25:6e:4a:e1:52:4e:52:70:6b:5b:e9:97:a4:a7: 67:1c:54:2b:a5:8a:28:5a:cc:56:c6:3c:4c:14:5b:aa:19:fc: f3:d9:56:8f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBBAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRBMUQxMTAvBgNVBAUTKEU0MjE0MkUzRTU4NDU3NjJEMEU4RDY4QjAyRkIxMEU4 NzVCQzZCRjIwHhcNMjYwNDE3MDAyMzUyWhcNMjYwNDI0MDAyMzUyWjAYMRYwFAYD VQQDEw02OWUxN2Q5OC0xZmI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuFANlWKlAshAeWewPCtobQn0t4gBjFJ95F5xPKCRrnfL/9LaCdbCHdcfzCi0 zA+xX9D05rro6oNpl6UoZiFlgUxHNkoRYSBqmrrIQk40HdRdAWni+vZllpNRPIEf bcOyp3K/iVwy0DprFdumVVJNwBy44LuR0DEWw0pVmCk7lWdEulRg13xzPkCdDFDR PofohiVvU4JXE/lLTZFgxTS3//j492K1sfD08hFg4RZHRi9Fvfknmpqkv74ewxDN Y282CDlhdKWeeANigg+CTQpa25lik3xGAgt1/MU1gB1x9eZpUhTM/t1AVIVv/GDV GCGuZPDt1yFbIjkwPelaXrKcOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMWf0GVZ HqOXUsd4CUjoBUXthDaUMB8GA1UdIwQYMBaAFOQhQuPlhFdi0OjWiwL7EOh1vGvy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREExRC9CNDZFNDJEQUJC MUIxMUVDQjBBQzBGMTRDNEY5QUUwMi81Q0ZDNC1XRVYyTFE2TmFMQXZzUTZIVzhh X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVDRkM0LVdFVjJMUTZOYUxBdnNRNkhXOGFfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REExRC9CNDZFNDJEQUJCMUIxMUVDQjBBQzBGMTRDNEY5QUUwMi81Q0ZDNC1XRVYy TFE2TmFMQXZzUTZIVzhhX0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdqnvJSrahfqdJ2N8lk/Vl0dAgJCBv3saY+IwdvGZNGoljuhZVNP8EaGzxlMl gldXdkB5Aj0S8c81uv9qPMTrFW1bF7hyitkqDMQr4via1XplMsQ3DJ/5CuTo/l0P rOXvRV5YFvHaCJz4tF+DIG8jmudklTE1/tuVYHG82I0kx+2fso5clEGjHMS+j+N4 cbrrHNG5l4Ggd7I7WppM92VivQmiAG/aaSgD3Sq0FJjPyD6sv2klFtdvoh6u8A4J f+0s5XDZrHryxwuXG4t4/71taya5reNNa7x7XX4ShyVuSuFSTlJwa1vpl6SnZxxU K6WKKFrMVsY8TBRbqhn889lWjw== -----END CERTIFICATE-----Generated at Fri Apr 17 04:08:41 2026 by rpki-client