$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.mft File: 5TfQw0j9fcSfX8OwBmoxxYT64as.mft (raw, json) Hash identifier: uZlktULYBRCX4iZ4w+AXmn2Yy3zyIA7Vrailx9tgC3k= Subject key identifier: 6C:13:C6:67:23:84:0B:30:FE:E7:11:59:E3:E8:A9:4A:F2:CD:26:C8 Authority key identifier: E5:37:D0:C3:48:FD:7D:C4:9F:5F:C3:B0:06:6A:31:C5:84:FA:E1:AB Certificate issuer: /CN=A91D4345/serialNumber=E537D0C348FD7DC49F5FC3B0066A31C584FAE1AB Certificate serial: 0D10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5TfQw0j9fcSfX8OwBmoxxYT64as.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.mft Manifest number: 0CFA Signing time: Thu 16 Apr 2026 18:10:29 +0000 Manifest this update: Thu 16 Apr 2026 18:10:29 +0000 Manifest next update: Thu 23 Apr 2026 18:10:29 +0000 Files and hashes: 1: 5TfQw0j9fcSfX8OwBmoxxYT64as.crl (hash: t3r+ok+ROMhAS1LIWT/3TF52jyd+1CJpCmPs2SDELo8=) 2: 974869042C2A11F19F1796939D833773.roa (hash: rqXxFyVtS5pdY2Q7Dfm2yuygEbjXNJOU0VtSShOm5Qo=) 3: 67C9F14233E711F181C0AE9FB8833773.roa (hash: zILE8027ieGIonPU8rgts1kI8TAERWrLFiTqKHa6P0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.crl rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5TfQw0j9fcSfX8OwBmoxxYT64as.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 18:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3344 (0xd10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4345, serialNumber=E537D0C348FD7DC49F5FC3B0066A31C584FAE1AB Validity Not Before: Apr 16 18:10:29 2026 GMT Not After : Apr 23 18:10:29 2026 GMT Subject: CN=69e12615-edac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:fa:fc:d1:66:1c:48:f9:33:17:16:ed:55:22: 80:ec:2f:43:f5:2e:ac:29:fc:4c:b0:3c:46:6b:20: ab:a0:79:a7:b8:cb:bd:87:39:dc:9d:a3:c3:d4:0c: 9c:12:bb:4b:a9:f0:72:45:95:a6:0e:e5:9b:c3:aa: 5c:20:41:df:26:a6:e6:8d:47:9e:47:3e:d1:dc:a8: 9d:4e:bf:ce:bc:69:59:da:82:f1:ce:e5:8a:ac:2a: 15:99:c6:1d:96:b5:c0:fa:d6:b9:cb:d0:3a:33:eb: c8:5b:ad:ec:de:ed:58:8c:8e:8d:bd:f0:02:b9:36: 36:9d:e5:df:11:f8:65:eb:74:1c:5b:cd:a4:14:72: bd:69:4f:eb:34:0a:fc:f5:d7:59:64:61:e7:99:7f: 13:fa:0c:2b:d3:29:24:80:36:98:41:39:6f:bf:00: 24:62:1a:7a:8c:81:26:a1:38:58:84:62:14:6a:48: 00:cf:c3:04:58:19:9f:aa:90:4a:8f:f8:10:ec:cd: 7a:61:1a:2b:2a:0e:07:2b:85:64:cb:6d:69:f4:16: ee:c6:70:96:cc:b5:5a:51:09:8c:c7:7d:89:97:b0: c6:6b:74:1e:e9:6a:7d:ad:62:7b:d9:53:79:b4:f8: bd:2c:e0:93:d0:41:31:48:a9:07:00:09:ee:14:07: c1:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:13:C6:67:23:84:0B:30:FE:E7:11:59:E3:E8:A9:4A:F2:CD:26:C8 X509v3 Authority Key Identifier: keyid:E5:37:D0:C3:48:FD:7D:C4:9F:5F:C3:B0:06:6A:31:C5:84:FA:E1:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5TfQw0j9fcSfX8OwBmoxxYT64as.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:81:ad:a4:e1:36:7f:9b:1a:33:5a:1f:05:96:6e:46:e9:93: 0a:2f:82:fb:78:8d:5c:95:6e:6f:c4:96:4d:35:48:10:ec:df: 76:81:71:88:1b:32:06:cc:43:be:98:61:e4:5b:7d:1a:e7:75: c5:2f:2f:18:82:c4:fc:1b:1d:10:e0:a1:90:27:a2:a8:63:39: e7:b8:06:f5:18:5c:86:b3:c2:bc:38:e6:c9:6f:81:e8:e8:37: 87:05:fd:a2:18:7f:d1:93:a2:19:b8:22:18:31:21:a2:9f:52: 8c:59:b3:64:08:20:2d:de:c5:fe:3b:6f:f4:2d:dd:38:f1:48: 12:9f:12:fe:0c:79:14:bd:da:1c:71:c0:af:ad:96:2c:33:60: f0:4e:5f:9c:b6:9f:ba:4e:d4:d8:75:8a:96:63:b6:0b:9b:9b: 4c:78:fd:3f:24:aa:2d:bd:ed:39:f5:18:3e:c6:b1:8b:d8:f9: 50:9a:7f:7d:68:3c:ef:32:4d:c4:37:bb:c6:24:61:db:4e:d4: 70:b4:b6:8d:ed:e7:6e:6c:95:cc:40:80:16:c9:94:b9:77:ff: af:5c:f2:fa:6d:36:5f:cc:f0:0b:f0:ac:74:55:88:3c:5d:9c: 9e:db:ef:64:62:fd:a1:7b:e1:59:ea:cb:09:53:95:ee:bf:d2: dd:51:12:6a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDRAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQzNDUxMTAvBgNVBAUTKEU1MzdEMEMzNDhGRDdEQzQ5RjVGQzNCMDA2NkEzMUM1 ODRGQUUxQUIwHhcNMjYwNDE2MTgxMDI5WhcNMjYwNDIzMTgxMDI5WjAYMRYwFAYD VQQDEw02OWUxMjYxNS1lZGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyvr80WYcSPkzFxbtVSKA7C9D9S6sKfxMsDxGayCroHmnuMu9hzncnaPD1Ayc ErtLqfByRZWmDuWbw6pcIEHfJqbmjUeeRz7R3KidTr/OvGlZ2oLxzuWKrCoVmcYd lrXA+ta5y9A6M+vIW63s3u1YjI6NvfACuTY2neXfEfhl63QcW82kFHK9aU/rNAr8 9ddZZGHnmX8T+gwr0ykkgDaYQTlvvwAkYhp6jIEmoThYhGIUakgAz8MEWBmfqpBK j/gQ7M16YRorKg4HK4Vky21p9BbuxnCWzLVaUQmMx32Jl7DGa3Qe6Wp9rWJ72VN5 tPi9LOCT0EExSKkHAAnuFAfB7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGwTxmcj hAsw/ucRWePoqUryzSbIMB8GA1UdIwQYMBaAFOU30MNI/X3En1/DsAZqMcWE+uGr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDM0NS9FQzc4Q0REQTA1 MzgxMUVBQjU4OTc2NjhDNEY5QUUwMi81VGZRdzBqOWZjU2ZYOE93Qm1veHhZVDY0 YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVUZlF3MGo5ZmNTZlg4T3dCbW94eFlUNjRhcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDM0NS9FQzc4Q0REQTA1MzgxMUVBQjU4OTc2NjhDNEY5QUUwMi81VGZRdzBqOWZj U2ZYOE93Qm1veHhZVDY0YXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYIGtpOE2f5saM1ofBZZuRumTCi+C+3iNXJVub8SWTTVIEOzfdoFxiBsyBsxD vphh5Ft9Gud1xS8vGILE/BsdEOChkCeiqGM557gG9RhchrPCvDjmyW+B6Og3hwX9 ohh/0ZOiGbgiGDEhop9SjFmzZAggLd7F/jtv9C3dOPFIEp8S/gx5FL3aHHHAr62W LDNg8E5fnLafuk7U2HWKlmO2C5ubTHj9PySqLb3tOfUYPsaxi9j5UJp/fWg87zJN xDe7xiRh207UcLS2je3nbmyVzECAFsmUuXf/r1zy+m02X8zwC/CsdFWIPF2cntvv ZGL9oXvhWerLCVOV7r/S3VESag== -----END CERTIFICATE-----Generated at Fri Apr 17 12:46:49 2026 by rpki-client