$ rpki-client -vvf rpki.apnic.net/member_repository/A91B681A/C34F16FC0BE011F19A1863A5313D8C67/5dNtVjx7PUXNnF98WB6d59bsNDE.mft File: 5dNtVjx7PUXNnF98WB6d59bsNDE.mft (raw, json) Hash identifier: bB+lyuAMTHv0l+gCCGRiIR0mUyBjkbKDtfVXRv+UKto= Subject key identifier: 9A:04:8F:7B:E6:DA:4B:CA:A9:5A:72:96:3F:A2:83:50:FB:A4:A1:1F Authority key identifier: E5:D3:6D:56:3C:7B:3D:45:CD:9C:5F:7C:58:1E:9D:E7:D6:EC:34:31 Certificate issuer: /CN=A91B681A/serialNumber=E5D36D563C7B3D45CD9C5F7C581E9DE7D6EC3431 Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5dNtVjx7PUXNnF98WB6d59bsNDE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B681A/C34F16FC0BE011F19A1863A5313D8C67/5dNtVjx7PUXNnF98WB6d59bsNDE.mft Manifest number: 0B Signing time: Sun 01 Mar 2026 10:39:59 +0000 Manifest this update: Sun 01 Mar 2026 10:39:59 +0000 Manifest next update: Sun 08 Mar 2026 10:39:59 +0000 Files and hashes: 1: 5dNtVjx7PUXNnF98WB6d59bsNDE.crl (hash: oMChkKczOTIPIG+9KZqfKBNEuXk9Nppw0MVq8cIzAhg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B681A/C34F16FC0BE011F19A1863A5313D8C67/5dNtVjx7PUXNnF98WB6d59bsNDE.crl rsync://rpki.apnic.net/member_repository/A91B681A/C34F16FC0BE011F19A1863A5313D8C67/5dNtVjx7PUXNnF98WB6d59bsNDE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5dNtVjx7PUXNnF98WB6d59bsNDE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B681A, serialNumber=E5D36D563C7B3D45CD9C5F7C581E9DE7D6EC3431 Validity Not Before: Mar 1 10:39:59 2026 GMT Not After : Mar 8 10:39:59 2026 GMT Subject: CN=69a4177f-7b07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f1:f8:71:e6:ca:96:90:e5:f1:10:3c:63:a8: 63:e4:c1:7e:ef:29:78:b9:a0:fd:6c:ee:19:ef:8f: 79:3f:02:46:a5:eb:e0:b4:9e:85:70:b1:21:4d:3c: c2:fc:13:82:18:93:71:c0:2d:ba:62:7e:ac:31:da: 94:33:cb:9b:02:e4:31:47:af:44:6b:f0:c3:13:ef: 36:ef:9f:50:90:bb:0e:3e:d5:36:9b:14:05:3e:f6: 46:fe:dc:eb:c9:46:f3:44:24:20:fd:d6:41:be:96: e9:ed:d1:bc:87:64:02:9f:e8:0d:e0:e2:fb:71:1e: 40:88:0a:d0:37:2c:8d:5f:04:90:09:51:5c:86:0a: d2:f3:da:23:4b:2b:9a:76:13:7c:79:7c:1d:1d:18: 37:6c:e1:30:03:ec:fb:f4:56:58:8d:2e:70:ea:3b: 7a:d8:64:da:2a:c2:2c:ee:41:42:68:3e:db:e0:f3: b6:ed:c2:4a:19:91:30:08:e0:92:fd:ef:96:ab:3f: 2f:ed:83:14:e4:f4:e2:c3:0f:19:47:be:49:e8:9c: 4f:eb:55:9c:3e:a5:a7:23:78:4c:9b:33:67:09:db: ee:fa:34:98:3e:d6:e7:dd:f4:a1:d3:cb:83:a4:d8: cc:6b:80:28:69:21:b3:1f:a6:4a:5c:a7:4c:d4:c7: 74:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:04:8F:7B:E6:DA:4B:CA:A9:5A:72:96:3F:A2:83:50:FB:A4:A1:1F X509v3 Authority Key Identifier: keyid:E5:D3:6D:56:3C:7B:3D:45:CD:9C:5F:7C:58:1E:9D:E7:D6:EC:34:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B681A/C34F16FC0BE011F19A1863A5313D8C67/5dNtVjx7PUXNnF98WB6d59bsNDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5dNtVjx7PUXNnF98WB6d59bsNDE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B681A/C34F16FC0BE011F19A1863A5313D8C67/5dNtVjx7PUXNnF98WB6d59bsNDE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:ff:56:a1:a8:d5:16:aa:20:0c:c2:8c:72:21:47:90:fd:61: d0:8e:b5:29:34:2a:cc:b3:52:3e:fd:29:e0:3d:c0:d7:66:f1: db:ab:30:f4:d3:9c:11:1f:c0:e7:1d:6c:89:ee:df:ae:8e:30: 4d:d0:55:67:f3:e7:e8:ca:0c:27:cd:c3:b9:e1:0c:bd:67:2c: 53:02:be:0a:08:98:19:91:e0:87:13:53:b4:34:a9:0b:2f:75: 8e:4a:ad:f6:fa:50:36:b7:50:47:66:93:b1:e6:d6:3b:76:e6: 4a:9a:61:b2:1d:98:19:de:f3:76:3b:22:09:53:ef:7c:aa:bc: b5:0f:1b:e2:47:cd:b7:73:63:a5:54:a0:17:9f:69:9d:bc:00: 02:c4:b8:b3:6b:77:bf:ee:ae:ed:af:c4:43:ad:28:a8:9d:a8: ee:1c:dd:e4:ba:6b:92:a1:1e:1b:19:bb:b8:73:f3:d9:a1:91: 65:bc:b0:08:2e:e5:99:27:1b:88:6b:6d:dd:17:09:01:3e:08: d8:1b:5b:a6:bf:c7:89:27:a6:e1:4f:d3:62:76:0a:ad:3b:5d: e4:29:d4:7b:8f:c9:68:aa:78:f1:0a:a9:ef:b8:55:d6:6b:55: 64:eb:f9:d9:1e:b8:53:59:cb:03:d8:12:f3:78:b4:27:be:c6: 08:d7:e5:5d -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NjgxQTExMC8GA1UEBRMoRTVEMzZENTYzQzdCM0Q0NUNEOUM1RjdDNTgxRTlERTdE NkVDMzQzMTAeFw0yNjAzMDExMDM5NTlaFw0yNjAzMDgxMDM5NTlaMBgxFjAUBgNV BAMTDTY5YTQxNzdmLTdiMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCp8fhx5sqWkOXxEDxjqGPkwX7vKXi5oP1s7hnvj3k/Akal6+C0noVwsSFNPML8 E4IYk3HALbpifqwx2pQzy5sC5DFHr0Rr8MMT7zbvn1CQuw4+1TabFAU+9kb+3OvJ RvNEJCD91kG+lunt0byHZAKf6A3g4vtxHkCICtA3LI1fBJAJUVyGCtLz2iNLK5p2 E3x5fB0dGDds4TAD7Pv0VliNLnDqO3rYZNoqwizuQUJoPtvg87btwkoZkTAI4JL9 75arPy/tgxTk9OLDDxlHvknonE/rVZw+pacjeEybM2cJ2+76NJg+1ufd9KHTy4Ok 2MxrgChpIbMfpkpcp0zUx3ShAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUmgSPe+ba S8qpWnKWP6KDUPukoR8wHwYDVR0jBBgwFoAU5dNtVjx7PUXNnF98WB6d59bsNDEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2ODFBL0MzNEYxNkZDMEJF MDExRjE5QTE4NjNBNTMxM0Q4QzY3LzVkTnRWang3UFVYTm5GOThXQjZkNTlic05E RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNWROdFZqeDdQVVhObkY5OFdCNmQ1OWJzTkRFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2 ODFBL0MzNEYxNkZDMEJFMDExRjE5QTE4NjNBNTMxM0Q4QzY3LzVkTnRWang3UFVY Tm5GOThXQjZkNTlic05ERS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA8/1ahqNUWqiAMwoxyIUeQ/WHQjrUpNCrMs1I+/SngPcDXZvHbqzD005wRH8Dn HWyJ7t+ujjBN0FVn8+foygwnzcO54Qy9ZyxTAr4KCJgZkeCHE1O0NKkLL3WOSq32 +lA2t1BHZpOx5tY7duZKmmGyHZgZ3vN2OyIJU+98qry1DxviR823c2OlVKAXn2md vAACxLiza3e/7q7tr8RDrSionajuHN3kumuSoR4bGbu4c/PZoZFlvLAILuWZJxuI a23dFwkBPgjYG1umv8eJJ6bhT9NidgqtO13kKdR7j8loqnjxCqnvuFXWa1Vk6/nZ HrhTWcsD2BLzeLQnvsYI1+Vd -----END CERTIFICATE-----Generated at Mon Mar 2 16:27:42 2026 by rpki-client