$ rpki-client -vvf rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.mft File: c5h-zOd-ROs2ZR4JjTN1D6hk5nY.mft (raw, json) Hash identifier: E4LE3sBNVYZfpovC8Tk5q/FWHG6Tt6wG+zFnQnI7LYg= Subject key identifier: D0:88:26:16:2D:34:22:B4:89:67:ED:5F:6A:DA:99:30:FE:D5:F5:ED Authority key identifier: 73:98:7E:CC:E7:7E:44:EB:36:65:1E:09:8D:33:75:0F:A8:64:E6:76 Certificate issuer: /CN=A91316E5/serialNumber=73987ECCE77E44EB36651E098D33750FA864E676 Certificate serial: 01F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.mft Manifest number: 01F1 Signing time: Fri 17 Apr 2026 03:00:55 +0000 Manifest this update: Fri 17 Apr 2026 03:00:54 +0000 Manifest next update: Fri 24 Apr 2026 03:00:54 +0000 Files and hashes: 1: c5h-zOd-ROs2ZR4JjTN1D6hk5nY.crl (hash: Lw6WguE645oTyMVxgq+Doia4DWqWvbpSw4/8oX+iXjk=) 2: C1A8182646D011EE8BE5AE80C4F9AE02.roa (hash: GaiJN8sQVRxQhxF84N/8bkdFVJqBpd2e+8ULBvpRalM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.crl rsync://rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 03:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 503 (0x1f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91316E5, serialNumber=73987ECCE77E44EB36651E098D33750FA864E676 Validity Not Before: Apr 17 03:00:54 2026 GMT Not After : Apr 24 03:00:54 2026 GMT Subject: CN=69e1a267-c8f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:25:69:50:08:f6:95:14:ff:38:56:c9:0c:3b: 50:53:03:67:40:12:19:f7:2b:6d:7b:79:b4:a0:cc: fc:6d:25:7b:72:b3:fa:d1:42:fd:64:79:36:34:40: b5:95:cf:9b:b7:47:fb:dc:79:3a:52:ee:25:c1:8d: b5:3b:5d:be:e4:59:4a:47:1d:97:3e:d2:6c:41:5a: 89:d2:19:9f:21:6b:ed:6a:61:39:4f:72:92:8b:f5: 5f:a2:63:6b:7f:b8:67:e8:b0:ee:ca:39:f7:13:75: 6a:91:78:8c:5a:d1:78:12:f9:1a:96:35:36:86:83: ae:52:1c:59:9b:a1:fe:e0:9c:9f:1e:45:15:05:1c: e6:35:0c:ae:f0:bf:6e:0b:fd:6a:4b:04:5e:00:1a: dd:c1:5b:1d:e7:51:b5:1b:4f:4e:84:23:b6:23:4f: f6:b2:e3:bf:3d:6d:44:41:8b:5b:82:84:44:16:c3: 77:79:64:7d:a1:98:40:06:94:06:84:3c:67:47:48: e4:aa:ed:76:0e:3f:4f:c1:f5:eb:0b:29:e2:9c:ca: fa:14:5f:f1:77:2e:70:f5:c6:31:34:a3:bb:be:6b: da:d2:9b:0d:99:4f:de:bd:d5:40:42:5f:1a:d1:2c: da:24:67:cc:a0:1b:94:76:45:ca:b0:b0:1e:83:18: 2b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:88:26:16:2D:34:22:B4:89:67:ED:5F:6A:DA:99:30:FE:D5:F5:ED X509v3 Authority Key Identifier: keyid:73:98:7E:CC:E7:7E:44:EB:36:65:1E:09:8D:33:75:0F:A8:64:E6:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:7f:9b:08:5a:8c:92:59:fc:46:c9:d8:7b:23:2e:27:bf:6b: 8b:e0:50:52:62:37:ea:dc:65:a5:33:89:e9:27:db:90:67:31: 45:4f:7a:61:12:89:5f:67:5f:1f:a9:90:b5:41:a4:26:9a:4c: 20:bd:f5:de:5b:fc:42:dc:bd:7b:c0:88:f6:6d:88:78:fe:34: 45:7d:8e:f9:f8:46:a1:02:03:8e:26:f8:0b:65:d5:28:09:f3: e8:f3:72:aa:77:b1:28:7a:88:87:bb:d7:3c:c3:3b:bc:7a:05: de:85:9c:68:6e:69:81:0f:51:b3:8b:3d:16:6a:af:b8:5a:15: 77:4b:1c:87:85:b6:cd:0d:47:83:74:7e:ff:e8:c9:e3:37:89: e8:78:4e:39:87:dc:f7:06:da:d3:da:7d:f5:2c:32:c9:b1:ef: 03:fe:b8:15:46:43:87:11:5b:fd:30:33:91:00:1a:8a:3c:9a: 50:6f:f9:f7:02:88:c5:11:44:01:72:aa:d6:b3:21:96:16:b2: f7:14:45:f0:7e:1d:ed:62:c4:12:ff:3f:98:8e:a6:b4:2d:e2: bc:54:a6:7c:23:40:ee:be:82:50:f9:44:d2:f5:f9:92:46:fa: b8:5e:fa:99:c6:75:04:ca:0f:71:53:dc:21:1a:b9:21:8f:f0: cb:ef:9e:1d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE2RTUxMTAvBgNVBAUTKDczOTg3RUNDRTc3RTQ0RUIzNjY1MUUwOThEMzM3NTBG QTg2NEU2NzYwHhcNMjYwNDE3MDMwMDU0WhcNMjYwNDI0MDMwMDU0WjAYMRYwFAYD VQQDEw02OWUxYTI2Ny1jOGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAryVpUAj2lRT/OFbJDDtQUwNnQBIZ9ytte3m0oMz8bSV7crP60UL9ZHk2NEC1 lc+bt0f73Hk6Uu4lwY21O12+5FlKRx2XPtJsQVqJ0hmfIWvtamE5T3KSi/VfomNr f7hn6LDuyjn3E3VqkXiMWtF4EvkaljU2hoOuUhxZm6H+4JyfHkUVBRzmNQyu8L9u C/1qSwReABrdwVsd51G1G09OhCO2I0/2suO/PW1EQYtbgoREFsN3eWR9oZhABpQG hDxnR0jkqu12Dj9PwfXrCyninMr6FF/xdy5w9cYxNKO7vmva0psNmU/evdVAQl8a 0SzaJGfMoBuUdkXKsLAegxgrZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNCIJhYt NCK0iWftX2ramTD+1fXtMB8GA1UdIwQYMBaAFHOYfsznfkTrNmUeCY0zdQ+oZOZ2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTZFNS81MUY5ODM1QzQ2 RDAxMUVFODFGMjA3M0ZDNEY5QUUwMi9jNWgtek9kLVJPczJaUjRKalROMUQ2aGs1 blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M1aC16T2QtUk9zMlpSNEpqVE4xRDZoazVuWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTZFNS81MUY5ODM1QzQ2RDAxMUVFODFGMjA3M0ZDNEY5QUUwMi9jNWgtek9kLVJP czJaUjRKalROMUQ2aGs1blkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHn+bCFqMkln8RsnYeyMuJ79ri+BQUmI36txlpTOJ6SfbkGcxRU96YRKJX2df H6mQtUGkJppMIL313lv8Qty9e8CI9m2IeP40RX2O+fhGoQIDjib4C2XVKAnz6PNy qnexKHqIh7vXPMM7vHoF3oWcaG5pgQ9Rs4s9FmqvuFoVd0sch4W2zQ1Hg3R+/+jJ 4zeJ6HhOOYfc9wba09p99SwyybHvA/64FUZDhxFb/TAzkQAaijyaUG/59wKIxRFE AXKq1rMhlhay9xRF8H4d7WLEEv8/mI6mtC3ivFSmfCNA7r6CUPlE0vX5kkb6uF76 mcZ1BMoPcVPcIRq5IY/wy++eHQ== -----END CERTIFICATE-----Generated at Fri Apr 17 22:47:27 2026 by rpki-client