$ rpki-client -vvf rpki.apnic.net/member_repository/A917D82E/E73132280B2011F1A2EFC93F3E3D8C67/_5Lsi9gN-r3TbmPJr0ynqG3ealc.mft File: _5Lsi9gN-r3TbmPJr0ynqG3ealc.mft (raw, json) Hash identifier: O4sZSEsQk07uMcK9+5Cm6Ftu7y6PzDbwDzioHnrYz3w= Subject key identifier: 60:20:57:7D:D0:C9:32:13:DE:7C:00:CB:C8:05:3A:A2:79:C9:CB:F6 Authority key identifier: FF:92:EC:8B:D8:0D:FA:BD:D3:6E:63:C9:AF:4C:A7:A8:6D:DE:6A:57 Certificate issuer: /CN=A917D82E/serialNumber=FF92EC8BD80DFABDD36E63C9AF4CA7A86DDE6A57 Certificate serial: 2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5Lsi9gN-r3TbmPJr0ynqG3ealc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D82E/E73132280B2011F1A2EFC93F3E3D8C67/_5Lsi9gN-r3TbmPJr0ynqG3ealc.mft Manifest number: 28 Signing time: Wed 15 Apr 2026 08:26:32 +0000 Manifest this update: Wed 15 Apr 2026 08:26:31 +0000 Manifest next update: Wed 22 Apr 2026 08:26:31 +0000 Files and hashes: 1: _5Lsi9gN-r3TbmPJr0ynqG3ealc.crl (hash: Fup+JFZ95De19ljPpGAbfsfcLq6/ZFYIitPZRkknVxM=) 2: 472DDE380B2111F19BE0F4953F3D8C67.roa (hash: sCTj5r8qqEXu3bvLoN64PVkesO/DVMq2io4GoK3oYbs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D82E/E73132280B2011F1A2EFC93F3E3D8C67/_5Lsi9gN-r3TbmPJr0ynqG3ealc.crl rsync://rpki.apnic.net/member_repository/A917D82E/E73132280B2011F1A2EFC93F3E3D8C67/_5Lsi9gN-r3TbmPJr0ynqG3ealc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5Lsi9gN-r3TbmPJr0ynqG3ealc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 08:26:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44 (0x2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D82E, serialNumber=FF92EC8BD80DFABDD36E63C9AF4CA7A86DDE6A57 Validity Not Before: Apr 15 08:26:31 2026 GMT Not After : Apr 22 08:26:31 2026 GMT Subject: CN=69df4bb7-10b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3f:b8:cc:7d:72:1d:39:95:84:e7:4d:7a:62: fd:91:98:7f:f5:99:8a:66:9a:82:fb:2e:86:73:2b: 39:72:a6:bd:db:db:78:82:36:6a:86:99:40:47:22: 70:cb:1c:f2:51:b7:09:32:9f:36:df:36:ec:d9:2d: 7b:cc:6d:63:08:c3:35:ca:65:75:96:2e:b7:4c:e0: 8b:8b:25:17:99:a9:6e:0d:53:e7:3c:ee:b1:d4:94: 8d:96:fc:e5:44:9f:00:04:ba:19:1e:99:56:4f:5a: d6:57:66:f2:7d:62:9e:98:c2:10:70:70:19:e0:45: fa:65:18:ab:42:6f:2e:d5:ef:c4:4e:0e:6a:35:50: b0:c7:c8:10:27:c1:e8:98:29:18:f4:17:8a:9f:db: 2a:71:d4:f1:ef:71:25:5d:31:05:e4:b5:81:23:f5: fa:0c:a8:04:bb:76:74:a1:f3:1a:61:36:a6:21:b3: 7d:d7:01:83:22:bb:69:b3:45:72:c8:a1:98:17:fa: b6:03:6d:9e:40:5b:7d:96:40:5b:94:0c:ec:82:92: 0d:ee:b8:b1:69:48:47:37:3d:6d:02:eb:42:fa:90: 31:3b:f5:6c:a4:d4:21:92:7a:29:57:ea:10:94:cf: d0:f0:5a:f4:31:12:84:54:16:75:ea:1f:51:68:7a: 59:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:20:57:7D:D0:C9:32:13:DE:7C:00:CB:C8:05:3A:A2:79:C9:CB:F6 X509v3 Authority Key Identifier: keyid:FF:92:EC:8B:D8:0D:FA:BD:D3:6E:63:C9:AF:4C:A7:A8:6D:DE:6A:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D82E/E73132280B2011F1A2EFC93F3E3D8C67/_5Lsi9gN-r3TbmPJr0ynqG3ealc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5Lsi9gN-r3TbmPJr0ynqG3ealc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D82E/E73132280B2011F1A2EFC93F3E3D8C67/_5Lsi9gN-r3TbmPJr0ynqG3ealc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:f2:e0:fe:a4:13:95:22:ba:32:24:fe:4f:41:c4:04:91:87: 99:c0:62:af:c3:7b:5a:55:b0:bc:10:13:7e:5a:f7:94:c8:e3: da:fd:f1:c8:a9:7f:87:8f:19:b8:a7:f0:70:bb:0c:99:61:12: 7c:43:ab:ed:97:e4:1d:d1:22:91:5f:13:f4:ea:59:fe:04:fa: e3:2b:d2:eb:a9:0f:ec:a5:50:ff:9a:77:4b:e8:f2:d9:71:c6: d8:4e:21:9b:bb:6b:71:8b:c3:73:83:0e:23:74:f6:d1:d3:8f: 9c:c9:2b:44:8d:be:d4:b5:06:6f:84:6f:4e:42:b6:ca:96:91: af:e8:c5:b3:09:47:0e:a4:56:3c:d7:e8:87:1c:40:fb:48:f3: 8f:8c:95:02:4b:1a:59:91:f1:14:ae:f1:5e:39:0e:f7:2c:28: b7:b4:ae:d0:03:53:c1:0f:0c:72:2a:1a:16:21:fa:5c:07:e0: 21:2b:d4:b7:09:91:02:8a:19:96:ee:09:d5:58:07:64:e8:30: c6:8a:80:ad:3b:cc:ef:01:35:17:6b:f7:40:3b:cb:0e:b3:3f: 94:9c:57:f4:99:cb:e0:7f:e7:0a:fb:93:92:01:98:bf:f0:41: 77:30:93:0d:68:5b:5e:b7:8b:84:ac:f4:43:65:84:ca:1e:52: 8b:0d:38:ef -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RDgyRTExMC8GA1UEBRMoRkY5MkVDOEJEODBERkFCREQzNkU2M0M5QUY0Q0E3QTg2 RERFNkE1NzAeFw0yNjA0MTUwODI2MzFaFw0yNjA0MjIwODI2MzFaMBgxFjAUBgNV BAMTDTY5ZGY0YmI3LTEwYjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0P7jMfXIdOZWE5016Yv2RmH/1mYpmmoL7LoZzKzlypr3b23iCNmqGmUBHInDL HPJRtwkynzbfNuzZLXvMbWMIwzXKZXWWLrdM4IuLJReZqW4NU+c87rHUlI2W/OVE nwAEuhkemVZPWtZXZvJ9Yp6YwhBwcBngRfplGKtCby7V78RODmo1ULDHyBAnweiY KRj0F4qf2ypx1PHvcSVdMQXktYEj9foMqAS7dnSh8xphNqYhs33XAYMiu2mzRXLI oZgX+rYDbZ5AW32WQFuUDOyCkg3uuLFpSEc3PW0C60L6kDE79Wyk1CGSeilX6hCU z9DwWvQxEoRUFnXqH1FoelkLAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUYCBXfdDJ MhPefADLyAU6onnJy/YwHwYDVR0jBBgwFoAU/5Lsi9gN+r3TbmPJr0ynqG3ealcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdEODJFL0U3MzEzMjI4MEIy MDExRjFBMkVGQzkzRjNFM0Q4QzY3L181THNpOWdOLXIzVGJtUEpyMHlucUczZWFs Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvXzVMc2k5Z04tcjNUYm1QSnIweW5xRzNlYWxjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdE ODJFL0U3MzEzMjI4MEIyMDExRjFBMkVGQzkzRjNFM0Q4QzY3L181THNpOWdOLXIz VGJtUEpyMHlucUczZWFsYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBw8uD+pBOVIroyJP5PQcQEkYeZwGKvw3taVbC8EBN+WveUyOPa/fHIqX+Hjxm4 p/BwuwyZYRJ8Q6vtl+Qd0SKRXxP06ln+BPrjK9LrqQ/spVD/mndL6PLZccbYTiGb u2txi8Nzgw4jdPbR04+cyStEjb7UtQZvhG9OQrbKlpGv6MWzCUcOpFY81+iHHED7 SPOPjJUCSxpZkfEUrvFeOQ73LCi3tK7QA1PBDwxyKhoWIfpcB+AhK9S3CZECihmW 7gnVWAdk6DDGioCtO8zvATUXa/dAO8sOsz+UnFf0mcvgf+cK+5OSAZi/8EF3MJMN aFtet4uErPRDZYTKHlKLDTjv -----END CERTIFICATE-----Generated at Fri Apr 17 07:21:28 2026 by rpki-client