$ rpki-client -vvf rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft File: C5sr_BxrLAlndq91fTrxRUfkPnI.mft (raw, json) Hash identifier: nrLm1jR3mXsKo+oeGaPifcZQ7PpVWhtrup+kiNcL8yw= Subject key identifier: 0A:8E:5D:AD:02:01:35:86:2D:20:3A:C4:D5:2B:ED:08:E0:00:F5:BC Authority key identifier: 0B:9B:2B:FC:1C:6B:2C:09:67:76:AF:75:7D:3A:F1:45:47:E4:3E:72 Certificate issuer: /CN=A918F646/serialNumber=0B9B2BFC1C6B2C096776AF757D3AF14547E43E72 Certificate serial: 125E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C5sr_BxrLAlndq91fTrxRUfkPnI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft Manifest number: 1248 Signing time: Mon 02 Mar 2026 00:38:59 +0000 Manifest this update: Mon 02 Mar 2026 00:38:59 +0000 Manifest next update: Mon 09 Mar 2026 00:38:59 +0000 Files and hashes: 1: C5sr_BxrLAlndq91fTrxRUfkPnI.crl (hash: 7zhgCBxysmQdir/q29xndsB26XSKJBg9x80ZDw4qBxQ=) 2: 60FCDED2F48F11E89651151FC4F9AE02.roa (hash: HiXdPqv/fSehw4/CzQGtfDzX1ZWWwH3g/pTixbzkqlM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.crl rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C5sr_BxrLAlndq91fTrxRUfkPnI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:38:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4702 (0x125e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F646, serialNumber=0B9B2BFC1C6B2C096776AF757D3AF14547E43E72 Validity Not Before: Mar 2 00:38:59 2026 GMT Not After : Mar 9 00:38:59 2026 GMT Subject: CN=69a4dc23-aa36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:d2:9a:8a:5a:72:d7:58:5c:01:ad:53:b4:c2: e1:9d:d2:de:38:b3:54:54:ff:ac:b3:20:9a:6f:a2: 32:9b:96:4b:c2:7c:00:b7:77:9e:a4:28:cb:86:82: 6c:e2:38:82:f9:ea:dc:59:be:aa:5a:0b:91:ed:c2: 66:61:ce:81:91:be:7b:c7:9f:9a:19:b9:a5:5b:81: 24:45:20:bd:30:89:b4:c9:c6:03:1b:5a:60:a9:c7: d3:45:2f:bc:20:3c:c6:74:31:f7:fb:b2:66:9a:14: dd:b8:65:02:3b:31:ba:0f:cf:d0:95:fd:3d:80:49: 90:9e:ef:e7:4f:f2:a7:fa:80:e1:4a:db:bb:43:13: 0f:c6:0b:68:d8:2b:1b:e2:3f:06:b3:28:16:61:bf: 7b:e6:5b:c3:ad:88:87:9a:ba:9e:3d:d1:94:62:a1: 71:e7:ea:cb:62:63:88:a7:db:5d:e1:2e:87:68:38: c7:99:59:43:44:a1:a7:24:23:db:c3:94:4f:20:20: 33:d0:93:c2:07:e5:a5:d7:11:22:32:94:9e:6d:16: 20:0d:92:fd:41:7d:78:c6:ff:80:7b:eb:bb:57:86: 57:92:89:be:16:a5:b5:bf:59:a8:b2:26:f6:d6:aa: f3:f6:c0:12:c8:dd:cf:c1:f6:ae:6c:ca:70:b4:1b: b2:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:8E:5D:AD:02:01:35:86:2D:20:3A:C4:D5:2B:ED:08:E0:00:F5:BC X509v3 Authority Key Identifier: keyid:0B:9B:2B:FC:1C:6B:2C:09:67:76:AF:75:7D:3A:F1:45:47:E4:3E:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C5sr_BxrLAlndq91fTrxRUfkPnI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:6e:ad:8c:6d:13:0a:18:a2:34:40:ba:dd:35:7e:37:21:8a: 5e:ab:6d:16:1e:2f:fd:67:25:b4:74:cf:39:2e:d1:f9:20:8c: 05:84:60:35:b8:62:bc:33:24:ca:12:0e:34:22:15:96:8e:82: 17:31:d3:6d:ef:e9:3d:ec:38:a0:77:89:0d:52:21:60:d7:6b: d0:8f:f5:50:ff:40:d8:e0:5d:7a:48:33:29:12:48:fe:64:83: 08:39:97:4a:4d:6a:12:8a:a4:1a:6d:ca:0d:40:8d:f8:15:59: 9f:b6:dd:ae:b7:32:f2:a2:c3:72:a7:b5:64:84:e9:20:a9:c2: 49:50:ba:41:1e:b9:5b:11:1e:00:8b:b5:41:74:67:41:a4:1d: d4:84:16:15:f4:a3:c6:cf:b5:a9:20:e9:3e:61:b9:a7:b7:a9: 59:e8:6e:49:98:bc:8c:42:87:63:cf:7e:00:7d:8a:80:0f:0d: 7e:c4:71:c6:8f:4d:01:28:8b:2c:f0:6c:9e:d9:ec:f3:4d:39: 4a:27:5f:0b:1d:63:2c:6e:97:a9:58:2a:8f:39:58:29:54:80: 9c:89:3e:61:ee:2f:73:9b:3a:ba:a6:4c:b6:76:12:83:d7:fb: 9c:dc:7d:cd:d8:0b:b5:32:1c:e4:cb:63:84:16:02:09:30:67: c4:1a:57:6d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEl4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY2NDYxMTAvBgNVBAUTKDBCOUIyQkZDMUM2QjJDMDk2Nzc2QUY3NTdEM0FGMTQ1 NDdFNDNFNzIwHhcNMjYwMzAyMDAzODU5WhcNMjYwMzA5MDAzODU5WjAYMRYwFAYD VQQDEw02OWE0ZGMyMy1hYTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4NKailpy11hcAa1TtMLhndLeOLNUVP+ssyCab6Iym5ZLwnwAt3eepCjLhoJs 4jiC+ercWb6qWguR7cJmYc6Bkb57x5+aGbmlW4EkRSC9MIm0ycYDG1pgqcfTRS+8 IDzGdDH3+7JmmhTduGUCOzG6D8/Qlf09gEmQnu/nT/Kn+oDhStu7QxMPxgto2Csb 4j8GsygWYb975lvDrYiHmrqePdGUYqFx5+rLYmOIp9td4S6HaDjHmVlDRKGnJCPb w5RPICAz0JPCB+Wl1xEiMpSebRYgDZL9QX14xv+Ae+u7V4ZXkom+FqW1v1mosib2 1qrz9sASyN3PwfaubMpwtBuyqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAqOXa0C ATWGLSA6xNUr7QjgAPW8MB8GA1UdIwQYMBaAFAubK/wcaywJZ3avdX068UVH5D5y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjY0Ni9DRUNFOEM5QUY0 OEUxMUU4QjE0QTM0MUVDNEY5QUUwMi9DNXNyX0J4ckxBbG5kcTkxZlRyeFJVZmtQ bkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0M1c3JfQnhyTEFsbmRxOTFmVHJ4UlVma1BuSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjY0Ni9DRUNFOEM5QUY0OEUxMUU4QjE0QTM0MUVDNEY5QUUwMi9DNXNyX0J4ckxB bG5kcTkxZlRyeFJVZmtQbkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFW6tjG0TChiiNEC63TV+NyGKXqttFh4v/WcltHTPOS7R+SCMBYRgNbhivDMk yhIONCIVlo6CFzHTbe/pPew4oHeJDVIhYNdr0I/1UP9A2OBdekgzKRJI/mSDCDmX Sk1qEoqkGm3KDUCN+BVZn7bdrrcy8qLDcqe1ZITpIKnCSVC6QR65WxEeAIu1QXRn QaQd1IQWFfSjxs+1qSDpPmG5p7epWehuSZi8jEKHY89+AH2KgA8NfsRxxo9NASiL LPBsntns8005SidfCx1jLG6XqVgqjzlYKVSAnIk+Ye4vc5s6uqZMtnYSg9f7nNx9 zdgLtTIc5MtjhBYCCTBnxBpXbQ== -----END CERTIFICATE-----Generated at Mon Mar 2 15:50:59 2026 by rpki-client