$ rpki-client -vvf rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.mft File: 5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.mft (raw, json) Hash identifier: XpgmVWEsKpdcIlWynGItyHDDtH6kgqUy81fsXixEVZ8= Subject key identifier: 73:09:E7:53:EF:8A:82:29:DB:4B:F1:53:EC:60:75:97:43:9C:59:1F Authority key identifier: E4:7B:F7:02:54:53:26:97:D2:0D:0D:31:10:F6:25:37:0D:65:FA:83 Certificate issuer: /CN=A91B59E5/serialNumber=E47BF70254532697D20D0D3110F625370D65FA83 Certificate serial: 0273 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.mft Manifest number: 0243 Signing time: Fri 17 Apr 2026 02:57:00 +0000 Manifest this update: Fri 17 Apr 2026 02:57:00 +0000 Manifest next update: Fri 24 Apr 2026 02:57:00 +0000 Files and hashes: 1: 5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.crl (hash: K7pp/mQ6uX1n5ETG/whzp96kevosAym01SyAhx2kGEA=) 2: 9EEE3C44D94F11EF916BCF23C4F9AE02.roa (hash: /zrcL4nSpe3zdFYdi/0iqkSLzijJlxJzGF9A4BLkUeg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.crl rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 627 (0x273) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B59E5, serialNumber=E47BF70254532697D20D0D3110F625370D65FA83 Validity Not Before: Apr 17 02:57:00 2026 GMT Not After : Apr 24 02:57:00 2026 GMT Subject: CN=69e1a17c-1b74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:78:cf:9b:23:f1:69:10:b1:de:0c:70:cf:4b: 11:6c:ef:38:76:92:cd:06:05:ac:21:82:57:2f:fc: ea:08:fa:42:8e:95:25:de:70:33:a7:1d:16:a3:93: 97:41:4f:15:98:ee:7f:e9:95:c6:2f:1b:f2:97:08: a0:48:6c:3e:45:ba:cb:bb:42:1b:0d:35:3a:3c:e3: e5:96:d6:35:4a:d6:30:3a:ce:22:dd:9e:ad:b2:88: 90:62:4c:58:3f:50:32:23:7c:62:03:8b:91:60:a3: 68:31:f9:be:88:28:8a:20:63:d0:e1:04:c4:9b:ef: a7:d6:c8:e7:cc:66:b3:f9:40:b4:1d:ea:84:fb:a9: 2c:61:6f:86:c4:9e:42:17:44:b2:f3:4a:de:62:65: 46:09:ce:f8:6f:e1:3c:e1:6f:2e:eb:99:b4:06:b9: e8:90:a4:9f:30:27:15:87:21:ff:02:82:66:72:d0: 16:ac:14:dd:86:6f:8a:1e:fd:20:0b:11:de:55:d2: fb:80:86:10:8c:6e:6e:c5:d1:7a:68:2a:1c:c8:83: b4:26:c6:8d:06:a3:09:fc:be:9d:9c:5b:11:0c:d8: 55:92:75:68:4f:8c:5e:c3:63:5d:c3:62:53:92:a0: 4f:fd:24:5f:16:95:40:e1:78:ad:21:98:08:e7:64: 2a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:09:E7:53:EF:8A:82:29:DB:4B:F1:53:EC:60:75:97:43:9C:59:1F X509v3 Authority Key Identifier: keyid:E4:7B:F7:02:54:53:26:97:D2:0D:0D:31:10:F6:25:37:0D:65:FA:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:50:e3:f5:2e:75:68:d8:cd:ed:86:1e:e0:0d:67:2c:f0:37: 59:e2:9e:43:aa:eb:b4:b7:b9:60:09:3a:0c:8a:af:d1:7b:58: b6:0a:21:6e:8e:cc:84:4a:c5:17:e0:26:fa:c2:55:df:be:3c: e3:4a:52:74:1e:19:f6:77:af:98:fb:5a:b3:51:2e:dc:e2:1a: b9:c6:43:43:0b:6e:e8:f4:38:e9:63:47:59:c8:74:1b:04:dc: b0:6c:dd:5f:26:02:8c:f6:8e:db:d8:34:19:b5:0a:1d:3e:09: f3:38:f5:75:85:12:dd:8d:70:5e:42:fc:ba:38:8d:66:3f:01: f8:7e:24:59:49:bc:d2:dc:9b:3d:e2:09:dc:63:55:fa:3d:b5: 45:11:7e:0a:d4:e9:26:4d:6d:5c:aa:a2:9c:c6:33:e2:23:af: f4:0e:f1:be:30:5f:16:23:72:56:c5:c5:11:7f:59:02:03:bb: df:b3:4d:22:97:7d:ab:2a:7e:ef:65:b2:be:fd:8f:c9:fc:b1: f9:58:a2:9d:c5:90:a0:e4:d5:11:8a:c6:d5:e2:9c:8e:f4:c4: 3a:fc:07:da:9f:aa:8d:55:46:f1:0c:2c:12:cc:a8:22:24:ff: 0b:d6:f3:be:dd:b2:96:04:a5:fb:f5:f9:69:73:90:53:79:d2: 6c:0f:d9:4f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAnMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU5RTUxMTAvBgNVBAUTKEU0N0JGNzAyNTQ1MzI2OTdEMjBEMEQzMTEwRjYyNTM3 MEQ2NUZBODMwHhcNMjYwNDE3MDI1NzAwWhcNMjYwNDI0MDI1NzAwWjAYMRYwFAYD VQQDEw02OWUxYTE3Yy0xYjc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo3jPmyPxaRCx3gxwz0sRbO84dpLNBgWsIYJXL/zqCPpCjpUl3nAzpx0Wo5OX QU8VmO5/6ZXGLxvylwigSGw+RbrLu0IbDTU6POPlltY1StYwOs4i3Z6tsoiQYkxY P1AyI3xiA4uRYKNoMfm+iCiKIGPQ4QTEm++n1sjnzGaz+UC0HeqE+6ksYW+GxJ5C F0Sy80reYmVGCc74b+E84W8u65m0BrnokKSfMCcVhyH/AoJmctAWrBTdhm+KHv0g CxHeVdL7gIYQjG5uxdF6aCocyIO0JsaNBqMJ/L6dnFsRDNhVknVoT4xew2Ndw2JT kqBP/SRfFpVA4XitIZgI52QqiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHMJ51Pv ioIp20vxU+xgdZdDnFkfMB8GA1UdIwQYMBaAFOR79wJUUyaX0g0NMRD2JTcNZfqD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTlFNS9ERDlGMUY3QzND MDExMUVFOTFDQkUxNTdDNEY5QUUwMi81SHYzQWxSVEpwZlNEUTB4RVBZbE53MWwt b00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVIdjNBbFJUSnBmU0RRMHhFUFlsTncxbC1vTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTlFNS9ERDlGMUY3QzNDMDExMUVFOTFDQkUxNTdDNEY5QUUwMi81SHYzQWxSVEpw ZlNEUTB4RVBZbE53MWwtb00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJ1Dj9S51aNjN7YYe4A1nLPA3WeKeQ6rrtLe5YAk6DIqv0XtYtgohbo7MhErF F+Am+sJV374840pSdB4Z9nevmPtas1Eu3OIaucZDQwtu6PQ46WNHWch0GwTcsGzd XyYCjPaO29g0GbUKHT4J8zj1dYUS3Y1wXkL8ujiNZj8B+H4kWUm80tybPeIJ3GNV +j21RRF+CtTpJk1tXKqinMYz4iOv9A7xvjBfFiNyVsXFEX9ZAgO737NNIpd9qyp+ 72Wyvv2Pyfyx+ViincWQoOTVEYrG1eKcjvTEOvwH2p+qjVVG8QwsEsyoIiT/C9bz vt2ylgSl+/X5aXOQU3nSbA/ZTw== -----END CERTIFICATE-----Generated at Fri Apr 17 12:35:17 2026 by rpki-client