$ rpki-client -vvf rpki.apnic.net/member_repository/A914E3B7/9FAE84FA1DA411E2AC2BAF9A08B02CD2/5vEsD995brDfK2AuWsQsy4OyLhg.mft File: 5vEsD995brDfK2AuWsQsy4OyLhg.mft (raw, json) Hash identifier: 1Ool8S8cmv65NzLR97L25s0WgkRcfX1Pj614aEQu0Dc= Subject key identifier: EE:8B:A5:56:7C:75:68:02:91:CE:08:E0:17:E5:AF:4F:38:A5:D9:3E Authority key identifier: E6:F1:2C:0F:DF:79:6E:B0:DF:2B:60:2E:5A:C4:2C:CB:83:B2:2E:18 Certificate issuer: /CN=A914E3B7/serialNumber=E6F12C0FDF796EB0DF2B602E5AC42CCB83B22E18 Certificate serial: 352D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vEsD995brDfK2AuWsQsy4OyLhg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E3B7/9FAE84FA1DA411E2AC2BAF9A08B02CD2/5vEsD995brDfK2AuWsQsy4OyLhg.mft Manifest number: 352A Signing time: Thu 16 Apr 2026 15:07:25 +0000 Manifest this update: Thu 16 Apr 2026 15:07:25 +0000 Manifest next update: Thu 23 Apr 2026 15:07:25 +0000 Files and hashes: 1: 5vEsD995brDfK2AuWsQsy4OyLhg.crl (hash: gXDW9w/5FNNz04Q9TBoVP7Zwq9dgpQHaqT/vgCUiOyk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E3B7/9FAE84FA1DA411E2AC2BAF9A08B02CD2/5vEsD995brDfK2AuWsQsy4OyLhg.crl rsync://rpki.apnic.net/member_repository/A914E3B7/9FAE84FA1DA411E2AC2BAF9A08B02CD2/5vEsD995brDfK2AuWsQsy4OyLhg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vEsD995brDfK2AuWsQsy4OyLhg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 15:07:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13613 (0x352d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E3B7, serialNumber=E6F12C0FDF796EB0DF2B602E5AC42CCB83B22E18 Validity Not Before: Apr 16 15:07:25 2026 GMT Not After : Apr 23 15:07:25 2026 GMT Subject: CN=69e0fb2d-58d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a1:40:9a:32:95:03:fd:d2:d2:3d:44:e9:f6: e4:ea:52:c1:82:8f:25:c2:37:0a:8c:00:9b:13:33: 8d:7f:aa:3f:60:2d:4d:a8:c6:84:0f:4b:d9:50:4c: 06:ef:05:d6:e0:16:b8:13:44:00:6f:c1:45:b9:d0: 06:2f:f6:76:5d:a2:7a:21:86:30:c3:f0:88:09:6c: a2:14:9a:b8:c9:6d:75:6e:76:4f:80:83:9f:8d:99: fb:85:c4:8f:37:39:0c:7d:42:8b:75:57:09:b8:c7: a7:ec:b0:a0:66:37:14:67:2f:85:45:4d:5a:fa:55: df:b9:5d:c7:2c:38:3b:8e:66:c3:2b:67:19:c8:69: cb:41:4b:fd:46:fa:6d:95:7e:ae:dc:2f:2c:9a:0e: 9c:df:bb:8e:90:08:19:6e:b3:b9:4d:b2:63:78:d4: d6:6f:21:be:d1:b6:a5:7d:cc:19:5a:ed:34:6f:bc: 16:a6:24:a5:bf:51:11:f0:e6:94:07:1d:b2:37:2d: 70:a1:d9:d6:75:60:b4:0f:65:9c:ea:e1:f5:be:df: d8:38:91:31:1c:c1:b8:18:ec:19:6f:aa:af:f5:dd: 45:89:ae:04:9e:94:46:24:e8:17:d2:41:4b:b4:31: 31:e5:82:e8:4b:c1:0c:7c:df:2c:42:8f:d2:94:6e: 3e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:8B:A5:56:7C:75:68:02:91:CE:08:E0:17:E5:AF:4F:38:A5:D9:3E X509v3 Authority Key Identifier: keyid:E6:F1:2C:0F:DF:79:6E:B0:DF:2B:60:2E:5A:C4:2C:CB:83:B2:2E:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E3B7/9FAE84FA1DA411E2AC2BAF9A08B02CD2/5vEsD995brDfK2AuWsQsy4OyLhg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vEsD995brDfK2AuWsQsy4OyLhg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E3B7/9FAE84FA1DA411E2AC2BAF9A08B02CD2/5vEsD995brDfK2AuWsQsy4OyLhg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d8:54:85:53:33:24:16:d3:1f:dd:a0:b9:29:44:c2:c7:58:13: e1:79:33:ae:96:4a:74:90:8a:ad:3b:81:be:fd:63:5c:ba:a1: 5c:1f:2a:8a:c0:4b:50:68:24:e7:a0:df:fa:1d:61:9d:53:76: ac:af:88:0a:97:bf:3b:e7:e7:19:f7:4d:1f:e1:50:4c:05:c1: 66:d6:fa:12:a8:d2:9d:ab:cf:6d:68:d0:cb:cf:20:73:7b:e7: a8:e5:c5:c2:7b:e2:79:16:a3:bc:ce:8d:c6:01:97:21:7f:11: 8c:cb:b4:3a:1a:97:48:16:e7:8d:bd:ee:85:18:3c:a8:ab:bc: 87:01:af:81:b0:60:c9:07:15:31:2e:ae:2e:bd:c8:5a:c8:1f: 89:1b:e0:aa:cd:8a:13:cd:4f:c8:95:bd:3e:94:82:2c:db:ea: fe:da:98:15:98:22:3a:31:fd:b9:51:41:36:ac:56:1b:61:81: cb:56:db:dd:2e:ec:1a:e0:24:39:17:61:a6:bc:cc:b0:42:0a: 70:b5:2c:32:be:c0:09:52:fb:49:60:33:41:ae:92:ea:2f:59: 94:c9:60:dc:e6:c8:31:c2:60:34:94:5d:54:b9:2d:f5:81:60: 4b:92:f3:2e:4d:9e:c5:07:66:e4:70:ee:3e:07:67:eb:df:5b: ea:cd:72:f1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUzQjcxMTAvBgNVBAUTKEU2RjEyQzBGREY3OTZFQjBERjJCNjAyRTVBQzQyQ0NC ODNCMjJFMTgwHhcNMjYwNDE2MTUwNzI1WhcNMjYwNDIzMTUwNzI1WjAYMRYwFAYD VQQDEw02OWUwZmIyZC01OGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvqFAmjKVA/3S0j1E6fbk6lLBgo8lwjcKjACbEzONf6o/YC1NqMaED0vZUEwG 7wXW4Ba4E0QAb8FFudAGL/Z2XaJ6IYYww/CICWyiFJq4yW11bnZPgIOfjZn7hcSP NzkMfUKLdVcJuMen7LCgZjcUZy+FRU1a+lXfuV3HLDg7jmbDK2cZyGnLQUv9Rvpt lX6u3C8smg6c37uOkAgZbrO5TbJjeNTWbyG+0balfcwZWu00b7wWpiSlv1ER8OaU Bx2yNy1wodnWdWC0D2Wc6uH1vt/YOJExHMG4GOwZb6qv9d1Fia4EnpRGJOgX0kFL tDEx5YLoS8EMfN8sQo/SlG4+/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO6LpVZ8 dWgCkc4I4Bflr084pdk+MB8GA1UdIwQYMBaAFObxLA/feW6w3ytgLlrELMuDsi4Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTNCNy85RkFFODRGQTFE QTQxMUUyQUMyQkFGOUEwOEIwMkNEMi81dkVzRDk5NWJyRGZLMkF1V3NRc3k0T3lM aGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV2RXNEOTk1YnJEZksyQXVXc1FzeTRPeUxoZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTNCNy85RkFFODRGQTFEQTQxMUUyQUMyQkFGOUEwOEIwMkNEMi81dkVzRDk5NWJy RGZLMkF1V3NRc3k0T3lMaGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA2FSFUzMkFtMf3aC5KUTCx1gT4XkzrpZKdJCKrTuBvv1jXLqhXB8qisBLUGgk 56Df+h1hnVN2rK+ICpe/O+fnGfdNH+FQTAXBZtb6EqjSnavPbWjQy88gc3vnqOXF wnvieRajvM6NxgGXIX8RjMu0OhqXSBbnjb3uhRg8qKu8hwGvgbBgyQcVMS6uLr3I WsgfiRvgqs2KE81PyJW9PpSCLNvq/tqYFZgiOjH9uVFBNqxWG2GBy1bb3S7sGuAk ORdhprzMsEIKcLUsMr7ACVL7SWAzQa6S6i9ZlMlg3ObIMcJgNJRdVLkt9YFgS5Lz Lk2exQdm5HDuPgdn699b6s1y8Q== -----END CERTIFICATE-----Generated at Fri Apr 17 15:28:47 2026 by rpki-client