$ rpki-client -vvf rpki.apnic.net/member_repository/A91B681A/C34F16FC0BE011F19A1863A5313D8C67/5dNtVjx7PUXNnF98WB6d59bsNDE.mft File: 5dNtVjx7PUXNnF98WB6d59bsNDE.mft (raw, json) Hash identifier: jdXA+AvI9nebJt1t0RR3TfVCwhQeU7MSAWAwNdTzE3c= Subject key identifier: F2:FC:65:1D:90:AC:38:C6:D8:38:CA:F5:F5:58:0E:2F:E2:55:1B:4A Authority key identifier: E5:D3:6D:56:3C:7B:3D:45:CD:9C:5F:7C:58:1E:9D:E7:D6:EC:34:31 Certificate issuer: /CN=A91B681A/serialNumber=E5D36D563C7B3D45CD9C5F7C581E9DE7D6EC3431 Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5dNtVjx7PUXNnF98WB6d59bsNDE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B681A/C34F16FC0BE011F19A1863A5313D8C67/5dNtVjx7PUXNnF98WB6d59bsNDE.mft Manifest number: 23 Signing time: Fri 17 Apr 2026 08:34:00 +0000 Manifest this update: Fri 17 Apr 2026 08:34:00 +0000 Manifest next update: Fri 24 Apr 2026 08:34:00 +0000 Files and hashes: 1: 5dNtVjx7PUXNnF98WB6d59bsNDE.crl (hash: dFnAv//LdUPywjKCyh1eWBO7kAWDtH3Ldf9JxFhJa8I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B681A/C34F16FC0BE011F19A1863A5313D8C67/5dNtVjx7PUXNnF98WB6d59bsNDE.crl rsync://rpki.apnic.net/member_repository/A91B681A/C34F16FC0BE011F19A1863A5313D8C67/5dNtVjx7PUXNnF98WB6d59bsNDE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5dNtVjx7PUXNnF98WB6d59bsNDE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 08:33:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B681A, serialNumber=E5D36D563C7B3D45CD9C5F7C581E9DE7D6EC3431 Validity Not Before: Apr 17 08:34:00 2026 GMT Not After : Apr 24 08:34:00 2026 GMT Subject: CN=69e1f078-99a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:af:8a:86:e2:b9:a3:ef:7b:74:29:5c:0c:45: 80:62:bf:0a:8d:22:01:d3:e7:83:a7:33:16:0d:34: 66:ce:62:7c:61:39:00:ea:c0:f8:e8:de:0d:43:84: a1:44:a7:01:72:3c:2b:8d:fa:b7:43:ef:76:87:7b: 8d:8c:8c:a1:2b:84:95:a2:77:da:b6:bf:45:2f:3e: 6d:84:85:43:45:66:b1:1f:bd:7b:28:10:59:27:34: 72:10:36:38:11:a3:6a:ab:4e:dd:30:29:01:2e:eb: cc:96:bf:da:9b:44:bf:99:7c:eb:c2:a4:db:a6:2a: 54:1a:af:99:36:59:7d:4e:b8:ee:fa:33:e8:92:41: af:68:b1:6e:2d:30:87:13:7d:79:19:55:2a:7c:79: 26:5b:e5:8f:14:69:2c:61:6f:96:7c:4a:fe:76:89: 4a:b7:f6:db:22:50:d5:17:8c:8a:c7:ad:c7:bd:42: 4f:35:06:68:63:b0:34:d0:71:06:7e:e2:23:71:b2: bc:67:3a:4c:c9:dd:e7:87:a4:d4:2c:2c:73:77:ef: 35:43:95:40:25:13:63:0a:48:e0:8c:c3:44:0b:25: f3:95:9e:45:71:9e:ef:98:6c:69:48:57:9e:cd:1c: 36:ac:64:27:ae:9d:be:93:70:c7:25:2e:48:27:e5: e3:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:FC:65:1D:90:AC:38:C6:D8:38:CA:F5:F5:58:0E:2F:E2:55:1B:4A X509v3 Authority Key Identifier: keyid:E5:D3:6D:56:3C:7B:3D:45:CD:9C:5F:7C:58:1E:9D:E7:D6:EC:34:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B681A/C34F16FC0BE011F19A1863A5313D8C67/5dNtVjx7PUXNnF98WB6d59bsNDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5dNtVjx7PUXNnF98WB6d59bsNDE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B681A/C34F16FC0BE011F19A1863A5313D8C67/5dNtVjx7PUXNnF98WB6d59bsNDE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:88:ef:79:1f:a5:f1:b0:2b:3b:9a:e7:63:30:cb:35:c2:b9: c8:8b:50:2a:d5:48:f4:b9:f7:70:8c:2f:19:f7:db:2c:a6:e7: 80:4a:bb:9b:55:23:ee:7a:aa:b0:66:36:38:f6:ce:af:ff:f9: 1b:66:06:85:4d:0b:0d:ee:44:20:c2:e1:d5:ad:42:c0:13:df: 71:c1:2a:03:4e:7e:b8:93:de:94:00:7e:a8:1e:48:d4:2a:aa: 0d:8f:70:2b:f9:4a:44:fd:90:73:bc:67:bc:80:c5:62:c7:ee: ee:2a:4b:9a:17:59:f8:c0:cc:3f:94:1b:df:c2:70:22:97:c6: 0a:b6:ad:50:39:81:18:ce:d1:d5:8e:27:66:d3:1e:81:08:c5: e0:02:2b:5c:9e:3e:ea:cc:0f:c5:ec:22:68:56:f4:c0:41:0e: 8d:b3:ca:90:93:b9:c2:27:b1:6f:c2:b4:69:fe:f6:fd:24:ac: 9f:84:8b:fd:5c:82:87:3c:13:5b:43:36:50:9f:09:d0:42:59: 90:62:53:c6:6a:72:e9:65:0f:93:47:f8:cc:3a:8b:d1:00:73: 24:c7:f2:62:fa:65:ac:00:1a:55:1c:79:8b:61:ef:2c:69:d4: e7:66:86:73:6a:07:56:2d:e8:0e:56:69:2f:f3:68:91:2f:a3: a9:3b:af:0d -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NjgxQTExMC8GA1UEBRMoRTVEMzZENTYzQzdCM0Q0NUNEOUM1RjdDNTgxRTlERTdE NkVDMzQzMTAeFw0yNjA0MTcwODM0MDBaFw0yNjA0MjQwODM0MDBaMBgxFjAUBgNV BAMTDTY5ZTFmMDc4LTk5YTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDqr4qG4rmj73t0KVwMRYBivwqNIgHT54OnMxYNNGbOYnxhOQDqwPjo3g1DhKFE pwFyPCuN+rdD73aHe42MjKErhJWid9q2v0UvPm2EhUNFZrEfvXsoEFknNHIQNjgR o2qrTt0wKQEu68yWv9qbRL+ZfOvCpNumKlQar5k2WX1OuO76M+iSQa9osW4tMIcT fXkZVSp8eSZb5Y8UaSxhb5Z8Sv52iUq39tsiUNUXjIrHrce9Qk81BmhjsDTQcQZ+ 4iNxsrxnOkzJ3eeHpNQsLHN37zVDlUAlE2MKSOCMw0QLJfOVnkVxnu+YbGlIV57N HDasZCeunb6TcMclLkgn5eNvAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU8vxlHZCs OMbYOMr19VgOL+JVG0owHwYDVR0jBBgwFoAU5dNtVjx7PUXNnF98WB6d59bsNDEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2ODFBL0MzNEYxNkZDMEJF MDExRjE5QTE4NjNBNTMxM0Q4QzY3LzVkTnRWang3UFVYTm5GOThXQjZkNTlic05E RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNWROdFZqeDdQVVhObkY5OFdCNmQ1OWJzTkRFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2 ODFBL0MzNEYxNkZDMEJFMDExRjE5QTE4NjNBNTMxM0Q4QzY3LzVkTnRWang3UFVY Tm5GOThXQjZkNTlic05ERS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCviO95H6XxsCs7mudjMMs1wrnIi1Aq1Uj0ufdwjC8Z99sspueASrubVSPueqqw ZjY49s6v//kbZgaFTQsN7kQgwuHVrULAE99xwSoDTn64k96UAH6oHkjUKqoNj3Ar +UpE/ZBzvGe8gMVix+7uKkuaF1n4wMw/lBvfwnAil8YKtq1QOYEYztHVjidm0x6B CMXgAitcnj7qzA/F7CJoVvTAQQ6Ns8qQk7nCJ7FvwrRp/vb9JKyfhIv9XIKHPBNb QzZQnwnQQlmQYlPGanLpZQ+TR/jMOovRAHMkx/Ji+mWsABpVHHmLYe8sadTnZoZz agdWLegOVmkv82iRL6OpO68N -----END CERTIFICATE-----Generated at Fri Apr 17 20:43:05 2026 by rpki-client