$ rpki-client -vvf rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft File: 5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft (raw, json) Hash identifier: HwHxoWt/iSVHVIz+3wlwZFX1CHL+YJMIjvcpse6Kqes= Subject key identifier: 90:61:C1:5C:CA:37:4C:B4:48:7A:65:50:F8:92:FE:E7:05:36:70:F7 Authority key identifier: E5:67:2B:BF:18:C4:CF:EB:D3:F4:72:D1:3B:48:77:13:72:D3:4E:DF Certificate issuer: /CN=A9187313/serialNumber=E5672BBF18C4CFEBD3F472D13B48771372D34EDF Certificate serial: 1A22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5WcrvxjEz-vT9HLRO0h3E3LTTt8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft Manifest number: 19D9 Signing time: Sun 01 Mar 2026 23:25:33 +0000 Manifest this update: Sun 01 Mar 2026 23:25:31 +0000 Manifest next update: Sun 08 Mar 2026 23:25:31 +0000 Files and hashes: 1: 5WcrvxjEz-vT9HLRO0h3E3LTTt8.crl (hash: pSy4XXEbwEkKPMBmAZCYDrMJy0J8wYtJ952U26laNNk=) 2: 97F31854777011E7BF7EED10C4F9AE02.roa (hash: Wd4rBcM0mcUifRZjeb+M+pWdEt0Llf8DYmpimdfROaY=) 3: 98E572FC777011E7BF7EED10C4F9AE02.roa (hash: gVSnHShwz59opQBJkITRpu77QjUYZ8DGZFbkSlC/Xbc=) 4: 9787989A777011E7BF7EED10C4F9AE02.roa (hash: BbyRDcT77p3q2ErpzV46wHQZyta5NK09aWr+VhHJd24=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.crl rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5WcrvxjEz-vT9HLRO0h3E3LTTt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:25:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6690 (0x1a22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187313, serialNumber=E5672BBF18C4CFEBD3F472D13B48771372D34EDF Validity Not Before: Mar 1 23:25:31 2026 GMT Not After : Mar 8 23:25:31 2026 GMT Subject: CN=69a4caec-f15c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fe:de:f9:a9:9f:e3:be:01:03:a3:9c:bc:95: be:13:0d:3e:2f:b0:24:09:b5:3c:c1:16:2e:6a:f3: d3:8c:3c:dd:cf:f2:06:40:ea:31:46:60:0c:fc:97: 49:e8:89:ee:0d:f5:37:d1:bf:8b:8d:b4:e4:70:82: fd:e3:8f:27:ec:c1:78:dc:89:3b:7c:03:06:b6:6b: 75:b3:21:92:00:de:13:a9:df:2f:b5:de:68:bd:17: 8b:dd:5d:a7:d5:54:db:65:9c:4f:d4:ae:d6:27:c1: 1c:c8:ec:59:4e:31:66:c2:f8:31:94:bf:53:3e:23: 52:9d:2f:46:bf:39:b4:ef:55:78:44:b0:33:59:86: 5a:9a:0c:30:c1:2a:bb:19:84:26:48:bb:30:70:0d: 9a:ca:e8:44:73:ad:9b:ab:ac:96:2b:49:63:69:8f: a8:70:e1:7c:07:f9:9f:9d:b0:e8:41:2f:73:22:28: 61:7a:a1:ff:37:bf:57:dc:f6:d7:bd:a5:6f:74:db: ec:2c:d8:eb:be:2b:57:d6:7f:ec:6d:ce:1e:6f:df: 13:5d:2d:8e:78:b2:d2:80:32:e9:db:da:ee:ca:d8: 76:4c:66:24:48:3f:ab:07:b9:0d:ba:f9:09:b6:78: 7d:ab:55:53:5d:ea:42:9f:8b:54:34:7d:f2:13:98: c7:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:61:C1:5C:CA:37:4C:B4:48:7A:65:50:F8:92:FE:E7:05:36:70:F7 X509v3 Authority Key Identifier: keyid:E5:67:2B:BF:18:C4:CF:EB:D3:F4:72:D1:3B:48:77:13:72:D3:4E:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5WcrvxjEz-vT9HLRO0h3E3LTTt8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:fe:f8:54:25:8a:1e:8c:10:d9:7a:fe:fb:a4:e5:40:e3:89: 79:76:39:00:e3:27:98:0d:42:11:dc:0a:02:f4:5a:45:5f:83: 41:e8:eb:ce:3e:61:11:6f:4f:7d:01:a1:be:a1:49:b3:72:7b: da:bb:08:e6:1d:50:59:9a:c7:90:8e:09:0d:57:37:53:3d:17: e4:1c:e5:9c:50:b0:cd:1f:3d:53:37:bf:be:d4:10:ca:23:87: 25:be:c3:b6:75:4c:16:92:35:70:5a:a3:db:c1:60:02:34:97: 03:7e:f7:fc:6e:74:23:38:12:5b:eb:fe:34:08:e3:5e:f5:94: 1e:96:59:73:ab:5f:05:73:9b:52:71:dc:3e:dd:22:f0:c7:c0: 73:a8:ba:2a:d3:26:65:1f:b3:6b:10:e1:e8:63:94:13:b9:25: 12:a1:cb:49:48:36:bb:96:ba:35:c6:1b:1b:e6:88:dd:85:75: a1:ab:67:c4:53:ae:2c:b4:4d:fe:58:cb:f6:32:d9:27:f3:cd: 52:c3:03:f5:6b:80:ec:89:b9:b4:ac:42:97:f9:2d:fe:10:b0: 1f:11:61:1e:7d:63:f0:9e:0a:74:5e:ab:23:63:6a:4a:81:25: e9:83:df:9e:40:ef:0e:06:3f:1a:87:dc:b3:cb:eb:ed:60:bd: b5:5c:9c:58 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGiIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODczMTMxMTAvBgNVBAUTKEU1NjcyQkJGMThDNENGRUJEM0Y0NzJEMTNCNDg3NzEz NzJEMzRFREYwHhcNMjYwMzAxMjMyNTMxWhcNMjYwMzA4MjMyNTMxWjAYMRYwFAYD VQQDEw02OWE0Y2FlYy1mMTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuv7e+amf474BA6OcvJW+Ew0+L7AkCbU8wRYuavPTjDzdz/IGQOoxRmAM/JdJ 6InuDfU30b+LjbTkcIL9448n7MF43Ik7fAMGtmt1syGSAN4Tqd8vtd5ovReL3V2n 1VTbZZxP1K7WJ8EcyOxZTjFmwvgxlL9TPiNSnS9Gvzm071V4RLAzWYZamgwwwSq7 GYQmSLswcA2ayuhEc62bq6yWK0ljaY+ocOF8B/mfnbDoQS9zIihheqH/N79X3PbX vaVvdNvsLNjrvitX1n/sbc4eb98TXS2OeLLSgDLp29ruyth2TGYkSD+rB7kNuvkJ tnh9q1VTXepCn4tUNH3yE5jHPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJBhwVzK N0y0SHplUPiS/ucFNnD3MB8GA1UdIwQYMBaAFOVnK78YxM/r0/Ry0TtIdxNy007f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzMxMy8zQzM0RUMwQTc3 NkYxMUU3ODJBRDZEMEVDNEY5QUUwMi81V2NydnhqRXotdlQ5SExSTzBoM0UzTFRU dDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVXY3J2eGpFei12VDlITFJPMGgzRTNMVFR0OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzMxMy8zQzM0RUMwQTc3NkYxMUU3ODJBRDZEMEVDNEY5QUUwMi81V2NydnhqRXot dlQ5SExSTzBoM0UzTFRUdDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWv74VCWKHowQ2Xr++6TlQOOJeXY5AOMnmA1CEdwKAvRaRV+DQejrzj5hEW9P fQGhvqFJs3J72rsI5h1QWZrHkI4JDVc3Uz0X5BzlnFCwzR89Uze/vtQQyiOHJb7D tnVMFpI1cFqj28FgAjSXA373/G50IzgSW+v+NAjjXvWUHpZZc6tfBXObUnHcPt0i 8MfAc6i6KtMmZR+zaxDh6GOUE7klEqHLSUg2u5a6NcYbG+aI3YV1oatnxFOuLLRN /ljL9jLZJ/PNUsMD9WuA7Im5tKxCl/kt/hCwHxFhHn1j8J4KdF6rI2NqSoEl6YPf nkDvDgY/Gofcs8vr7WC9tVycWA== -----END CERTIFICATE-----Generated at Mon Mar 2 12:27:48 2026 by rpki-client