$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft File: 5CANRK2dbstocvZTqVhD-yfYR6Q.mft (raw, json) Hash identifier: fKWQ9Y59h7f9rIjnbSKe+ZoMLuVC+x/hyFZ6jxK3Ucg= Subject key identifier: 38:44:32:C4:55:A5:67:4F:C6:E9:D6:60:A3:CD:CB:5A:16:1E:E5:CD Authority key identifier: E4:20:0D:44:AD:9D:6E:CB:68:72:F6:53:A9:58:43:FB:27:D8:47:A4 Certificate issuer: /CN=A91C0D37/serialNumber=E4200D44AD9D6ECB6872F653A95843FB27D847A4 Certificate serial: 01F5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft Manifest number: 01EA Signing time: Fri 17 Apr 2026 03:06:58 +0000 Manifest this update: Fri 17 Apr 2026 03:06:57 +0000 Manifest next update: Fri 24 Apr 2026 03:06:57 +0000 Files and hashes: 1: 5CANRK2dbstocvZTqVhD-yfYR6Q.crl (hash: N/fiE4g3j+DunRU3KKVEdJX8VaI85xiRSQuL9YfXQBo=) 2: C7C45DD643F611EF84151D6FC4F9AE02.roa (hash: eCz90crmLyyT4eJR0NDAlMlvL0AfXIIanbDH55qxfQE=) 3: 0099AE56536911EE8594503BC4F9AE02.roa (hash: A3g1MvapK720MR4guCb5ZHynm0vdBJ498DzGR8wq4fU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.crl rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 501 (0x1f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0D37, serialNumber=E4200D44AD9D6ECB6872F653A95843FB27D847A4 Validity Not Before: Apr 17 03:06:57 2026 GMT Not After : Apr 24 03:06:57 2026 GMT Subject: CN=69e1a3d1-7f41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0c:98:e4:4d:b7:d9:90:ac:88:0a:f6:14:24: f0:46:89:15:33:98:0d:c2:f1:e7:4f:64:bc:f5:60: a8:3e:30:98:7c:78:b7:e3:4e:32:14:e1:1b:2e:c6: cf:2b:4c:00:bc:87:21:f1:ae:8b:db:19:9b:ec:e1: f1:ce:35:15:41:3f:05:1c:ce:f6:d8:92:f9:cd:78: d7:7a:70:6e:e3:08:11:b6:a9:e0:1d:ee:9e:5b:63: 7c:ac:83:b5:a8:be:3a:82:f9:a0:69:d9:14:83:c4: 3d:86:25:5f:7e:b5:80:88:f0:34:2a:00:64:8e:6b: 1b:59:e7:c9:f5:7d:7a:74:3c:8f:69:5b:b0:cd:54: de:87:d4:bf:09:a9:54:69:5b:c9:f6:64:63:9f:a8: 4c:47:70:39:a0:67:ee:79:6b:f6:ed:a6:46:47:90: 6b:f1:db:8d:c6:e4:22:0c:7a:d1:5c:06:7e:3b:85: 25:b8:96:58:e6:7c:ee:30:c8:25:7b:89:73:ae:26: 83:a7:f5:26:f1:9c:cc:d4:6c:a0:e2:77:79:32:fb: 02:32:71:ec:5d:e2:57:e1:70:a4:cf:fa:17:61:8c: b8:5f:2a:17:50:10:07:37:55:c8:c0:b8:fe:70:0e: 6e:94:46:f3:0a:a6:e9:67:d8:cc:45:bf:f2:a6:00: db:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:44:32:C4:55:A5:67:4F:C6:E9:D6:60:A3:CD:CB:5A:16:1E:E5:CD X509v3 Authority Key Identifier: keyid:E4:20:0D:44:AD:9D:6E:CB:68:72:F6:53:A9:58:43:FB:27:D8:47:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:ee:e8:45:dd:27:bf:98:5a:86:e1:9f:0f:92:5c:2b:4b:53: 79:2a:f2:ad:6a:fe:46:b3:a1:1c:ff:6e:8f:c2:ff:9d:0c:40: d7:c1:5d:d6:25:aa:a0:39:a6:58:2a:14:da:61:39:1e:32:ab: 29:7a:b7:ea:67:05:56:08:d9:2d:57:54:de:18:34:85:a9:fb: 35:2e:42:cc:13:37:ba:f8:6a:52:de:00:da:d7:58:f8:73:d6: de:be:f6:ec:d1:35:86:78:22:99:6a:52:ca:fd:43:4e:83:9c: a3:35:ec:bb:89:d6:42:05:3c:d1:bc:ac:a0:15:c4:dd:eb:d6: b4:1b:9c:47:3c:b3:79:49:a6:50:84:1d:e1:2a:2e:0d:a8:7e: 2a:a9:20:45:58:3f:1f:7d:54:5b:90:2b:7e:79:51:23:e6:a6: f4:4c:3e:0a:b9:81:f3:e8:b5:30:f6:ac:95:6b:07:3b:92:ee: 6a:00:1e:03:e7:e1:e6:65:ef:ed:c6:17:e6:3f:b7:28:1a:a1: 82:33:86:f3:bc:c8:db:27:14:4f:63:1b:f1:bd:98:af:93:4d: 6e:aa:9e:de:80:6a:4e:7b:2a:08:39:1a:20:b0:31:b0:91:aa: 81:a4:20:b2:c5:44:14:65:b4:c3:86:18:eb:71:bb:ba:47:84: 7b:f8:75:ae -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBEMzcxMTAvBgNVBAUTKEU0MjAwRDQ0QUQ5RDZFQ0I2ODcyRjY1M0E5NTg0M0ZC MjdEODQ3QTQwHhcNMjYwNDE3MDMwNjU3WhcNMjYwNDI0MDMwNjU3WjAYMRYwFAYD VQQDEw02OWUxYTNkMS03ZjQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuwyY5E232ZCsiAr2FCTwRokVM5gNwvHnT2S89WCoPjCYfHi3404yFOEbLsbP K0wAvIch8a6L2xmb7OHxzjUVQT8FHM722JL5zXjXenBu4wgRtqngHe6eW2N8rIO1 qL46gvmgadkUg8Q9hiVffrWAiPA0KgBkjmsbWefJ9X16dDyPaVuwzVTeh9S/CalU aVvJ9mRjn6hMR3A5oGfueWv27aZGR5Br8duNxuQiDHrRXAZ+O4UluJZY5nzuMMgl e4lzriaDp/Um8ZzM1Gyg4nd5MvsCMnHsXeJX4XCkz/oXYYy4XyoXUBAHN1XIwLj+ cA5ulEbzCqbpZ9jMRb/ypgDbXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDhEMsRV pWdPxunWYKPNy1oWHuXNMB8GA1UdIwQYMBaAFOQgDUStnW7LaHL2U6lYQ/sn2Eek MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEQzNy8wNUVFQ0Q4NjUz NUIxMUVFOUJGMjBBNkJDNEY5QUUwMi81Q0FOUksyZGJzdG9jdlpUcVZoRC15ZllS NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzVDQU5SSzJkYnN0b2N2WlRxVmhELXlmWVI2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEQzNy8wNUVFQ0Q4NjUzNUIxMUVFOUJGMjBBNkJDNEY5QUUwMi81Q0FOUksyZGJz dG9jdlpUcVZoRC15ZllSNlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbe7oRd0nv5hahuGfD5JcK0tTeSryrWr+RrOhHP9uj8L/nQxA18Fd1iWqoDmm WCoU2mE5HjKrKXq36mcFVgjZLVdU3hg0han7NS5CzBM3uvhqUt4A2tdY+HPW3r72 7NE1hngimWpSyv1DToOcozXsu4nWQgU80bysoBXE3evWtBucRzyzeUmmUIQd4Sou Dah+KqkgRVg/H31UW5ArfnlRI+am9Ew+CrmB8+i1MPaslWsHO5LuagAeA+fh5mXv 7cYX5j+3KBqhgjOG87zI2ycUT2Mb8b2Yr5NNbqqe3oBqTnsqCDkaILAxsJGqgaQg ssVEFGW0w4YY63G7ukeEe/h1rg== -----END CERTIFICATE-----Generated at Fri Apr 17 07:22:37 2026 by rpki-client