$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.mft File: 05fnjG3TxpaFEzQVMschiNd1Z68.mft (raw, json) Hash identifier: slZXPXM+B4433zzVPLWzzcZsgqWQr1V9tNppnTJvylU= Subject key identifier: 42:D4:A0:D7:85:31:67:59:D5:67:05:B2:32:E3:EC:2C:27:EF:6E:0B Authority key identifier: D3:97:E7:8C:6D:D3:C6:96:85:13:34:15:32:C7:21:88:D7:75:67:AF Certificate issuer: /CN=A91D3CA7/serialNumber=D397E78C6DD3C6968513341532C72188D77567AF Certificate serial: 0368 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05fnjG3TxpaFEzQVMschiNd1Z68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.mft Manifest number: 0361 Signing time: Fri 17 Apr 2026 00:48:09 +0000 Manifest this update: Fri 17 Apr 2026 00:48:09 +0000 Manifest next update: Fri 24 Apr 2026 00:48:09 +0000 Files and hashes: 1: 05fnjG3TxpaFEzQVMschiNd1Z68.crl (hash: dr81r3H8ckhv1EgjSzj3EbrUsvt5vgaOJai+tFks3Tw=) 2: DE183F1CF46611EC815F7283C4F9AE02.roa (hash: al8fBj0l9FNorWDDEmWTxJIA8uTe/zODnox5rpi44HU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.crl rsync://rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05fnjG3TxpaFEzQVMschiNd1Z68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 00:48:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 872 (0x368) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3CA7, serialNumber=D397E78C6DD3C6968513341532C72188D77567AF Validity Not Before: Apr 17 00:48:09 2026 GMT Not After : Apr 24 00:48:09 2026 GMT Subject: CN=69e18349-fbc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:7d:e8:74:61:10:f8:91:81:28:c9:59:33:27: 40:49:76:d5:c4:45:6b:8c:a9:6a:9e:74:d8:25:17: 25:4d:e5:16:07:f3:c8:96:19:b0:b5:00:4c:f8:c7: ff:ab:9a:9f:c5:dc:a6:be:9d:b0:a9:04:a0:e3:8b: 8b:04:0f:a2:72:0b:1e:47:be:52:5f:80:c1:8c:b6: 38:db:14:59:f4:2f:fd:ad:0b:8c:5d:f5:4f:3d:25: 7a:33:71:84:9e:dd:dd:80:58:62:c0:24:04:5c:0c: 63:df:f8:03:3e:5b:4a:7d:90:20:e1:11:9f:31:b7: ad:a9:b9:98:ab:67:f6:fe:62:44:29:97:32:1b:2d: 58:99:d6:7d:61:a3:fb:17:09:51:2d:10:a3:e8:7c: 62:36:1b:c6:2d:24:6d:0f:a1:48:9d:8a:1e:c9:cb: 44:c9:f1:94:fa:28:86:26:9d:6e:b6:27:21:7a:58: 5e:ac:67:54:0c:a8:b6:45:4b:01:46:98:6b:9f:4f: 0e:9c:fc:ae:6a:96:b2:af:26:8e:e5:94:d2:c5:cb: 4d:02:55:cf:31:ff:a7:47:98:d6:98:4c:e8:83:c9: 33:a3:af:b5:d1:69:6d:0a:f8:4b:ad:ab:c0:42:c6: 1b:75:76:73:1e:13:fa:4d:40:ba:a4:c1:88:67:d7: 7a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:D4:A0:D7:85:31:67:59:D5:67:05:B2:32:E3:EC:2C:27:EF:6E:0B X509v3 Authority Key Identifier: keyid:D3:97:E7:8C:6D:D3:C6:96:85:13:34:15:32:C7:21:88:D7:75:67:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05fnjG3TxpaFEzQVMschiNd1Z68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:9e:60:98:4d:73:67:f9:2b:b6:06:da:9a:92:a0:17:ba:50: f5:88:c5:59:19:b6:80:6c:2a:34:06:53:5d:93:ec:c2:b5:05: 11:da:ac:fa:bc:bf:92:3b:80:82:c0:7a:9a:32:dd:17:f6:b7: 27:26:31:2b:31:d2:7b:68:ed:90:4f:27:96:13:fb:9b:40:a1: ff:85:02:d7:ed:26:51:7a:f3:6f:48:59:fd:d8:a8:b6:62:75: d8:cc:aa:8d:09:9e:4a:93:72:de:a2:26:29:a3:cd:e9:23:50: f6:9a:bb:65:02:16:a1:43:87:c9:4c:40:8b:e7:c3:9d:f5:4f: 70:79:4a:19:4c:2e:21:12:e1:16:02:90:14:74:4e:87:3b:3b: 32:82:a8:e9:7a:a2:7f:65:89:75:74:3c:c5:c0:aa:0b:d0:20: 53:3b:99:ff:a7:ef:86:d7:bf:85:c6:a9:06:8d:37:5c:66:1c: b4:e7:08:fe:8c:4d:c0:53:28:3f:ed:e3:73:42:a1:60:27:fb: dc:c9:f8:d1:4f:07:a7:0c:5b:71:3f:12:3b:f2:bf:5f:8d:51: 8a:1b:9c:af:36:49:87:b8:56:0e:26:51:48:73:cd:8e:aa:11: 04:6d:48:40:23:e6:51:0f:e6:5e:63:2d:bd:0e:af:93:17:b3: 71:9d:b6:37 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA2gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNDQTcxMTAvBgNVBAUTKEQzOTdFNzhDNkREM0M2OTY4NTEzMzQxNTMyQzcyMTg4 RDc3NTY3QUYwHhcNMjYwNDE3MDA0ODA5WhcNMjYwNDI0MDA0ODA5WjAYMRYwFAYD VQQDEw02OWUxODM0OS1mYmM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArn3odGEQ+JGBKMlZMydASXbVxEVrjKlqnnTYJRclTeUWB/PIlhmwtQBM+Mf/ q5qfxdymvp2wqQSg44uLBA+icgseR75SX4DBjLY42xRZ9C/9rQuMXfVPPSV6M3GE nt3dgFhiwCQEXAxj3/gDPltKfZAg4RGfMbetqbmYq2f2/mJEKZcyGy1YmdZ9YaP7 FwlRLRCj6HxiNhvGLSRtD6FInYoeyctEyfGU+iiGJp1utichelherGdUDKi2RUsB Rphrn08OnPyuapayryaO5ZTSxctNAlXPMf+nR5jWmEzog8kzo6+10WltCvhLravA QsYbdXZzHhP6TUC6pMGIZ9d67QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFELUoNeF MWdZ1WcFsjLj7Cwn724LMB8GA1UdIwQYMBaAFNOX54xt08aWhRM0FTLHIYjXdWev MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0NBNy8zRjBFMEUwNkY0 NjExMUVDODIzQ0EwN0NDNEY5QUUwMi8wNWZuakczVHhwYUZFelFWTXNjaGlOZDFa NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA1Zm5qRzNUeHBhRkV6UVZNc2NoaU5kMVo2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE M0NBNy8zRjBFMEUwNkY0NjExMUVDODIzQ0EwN0NDNEY5QUUwMi8wNWZuakczVHhw YUZFelFWTXNjaGlOZDFaNjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAI55gmE1zZ/krtgbampKgF7pQ9YjFWRm2gGwqNAZTXZPswrUFEdqs+ry/kjuA gsB6mjLdF/a3JyYxKzHSe2jtkE8nlhP7m0Ch/4UC1+0mUXrzb0hZ/diotmJ12Myq jQmeSpNy3qImKaPN6SNQ9pq7ZQIWoUOHyUxAi+fDnfVPcHlKGUwuIRLhFgKQFHRO hzs7MoKo6Xqif2WJdXQ8xcCqC9AgUzuZ/6fvhte/hcapBo03XGYctOcI/oxNwFMo P+3jc0KhYCf73Mn40U8HpwxbcT8SO/K/X41RihucrzZJh7hWDiZRSHPNjqoRBG1I QCPmUQ/mXmMtvQ6vkxezcZ22Nw== -----END CERTIFICATE-----Generated at Fri Apr 17 11:13:45 2026 by rpki-client