$ rpki-client -vvf rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft File: 5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft (raw, json) Hash identifier: hEp8ToUZH2Z20EAwTDQm8KvdUNhvp0XDMit9moIPJHg= Subject key identifier: 7B:00:44:02:18:12:88:D2:EF:3E:9C:34:5C:9B:F4:41:0E:82:EA:EA Authority key identifier: E6:75:8B:9A:37:59:82:C2:C4:D1:C7:64:9A:31:E4:CF:27:D5:A6:80 Certificate issuer: /CN=A91E554A/serialNumber=E6758B9A375982C2C4D1C7649A31E4CF27D5A680 Certificate serial: 0123 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nWLmjdZgsLE0cdkmjHkzyfVpoA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft Manifest number: 011D Signing time: Sun 19 Apr 2026 05:29:32 +0000 Manifest this update: Sun 19 Apr 2026 05:29:31 +0000 Manifest next update: Sun 26 Apr 2026 05:29:31 +0000 Files and hashes: 1: 5nWLmjdZgsLE0cdkmjHkzyfVpoA.crl (hash: otJOChzc8bgdZXuBTcCHmvxq3SIgxPTGnMUr8s8Uqr0=) 2: 388A91E0985A11EFA6912B0EC4F9AE02.roa (hash: uSJSVKQ2eb5T6Rs3qb48PEQhXusBNfHf9wMlJhiue14=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.crl rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nWLmjdZgsLE0cdkmjHkzyfVpoA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 04:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 291 (0x123) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E554A, serialNumber=E6758B9A375982C2C4D1C7649A31E4CF27D5A680 Validity Not Before: Apr 19 05:29:31 2026 GMT Not After : Apr 26 05:29:31 2026 GMT Subject: CN=69e4683c-c62a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5c:d3:f3:a1:34:b4:57:2f:a8:ee:99:d7:a1: a6:bf:4f:fd:55:d4:a2:a8:92:b4:a8:7f:d7:59:2a: 9f:67:3b:19:6c:81:16:22:6a:4f:74:a5:5b:99:fe: 0c:04:e5:94:78:fe:2d:10:2a:ac:85:7f:a0:aa:8c: e2:8d:ad:c2:0d:40:0b:53:50:b1:b6:1c:4a:8b:b6: 90:d1:37:83:ea:73:e6:f8:f0:30:7d:36:c9:8a:6a: dd:10:ef:46:4d:13:0f:3c:4d:92:59:cf:ad:e7:2d: a9:8a:e3:b7:79:92:c9:0d:de:57:99:1d:c3:44:72: 34:d1:54:5a:7c:78:7f:19:f7:d4:11:40:72:b7:37: 66:90:ce:77:c1:47:1f:73:7b:f7:2e:26:29:0f:de: 05:e0:92:fc:96:54:20:91:f4:6b:d6:17:fc:0c:f6: ec:f6:d9:bc:b2:4a:e6:b4:8a:c3:5c:0d:15:fb:70: ed:01:66:3b:ef:9a:1c:5f:e8:9b:42:e0:1c:37:92: 9e:6e:b6:15:5b:91:82:05:cb:c9:97:90:db:cf:f9: 7a:fd:41:bc:ab:1d:2f:6d:91:e0:6e:5a:bf:2a:6e: 8b:04:a0:8d:67:64:eb:7d:23:ee:9d:11:9e:c4:45: 36:7e:6f:dc:59:34:48:c9:99:e6:17:cb:ae:5b:1a: 52:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:00:44:02:18:12:88:D2:EF:3E:9C:34:5C:9B:F4:41:0E:82:EA:EA X509v3 Authority Key Identifier: keyid:E6:75:8B:9A:37:59:82:C2:C4:D1:C7:64:9A:31:E4:CF:27:D5:A6:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nWLmjdZgsLE0cdkmjHkzyfVpoA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:af:65:eb:94:0e:01:57:76:35:54:a3:1c:a9:27:e5:95:db: 84:5e:cb:2d:cd:d9:20:a3:65:b7:e7:e0:10:4c:27:84:8c:ca: a4:27:10:7b:3b:ea:0e:6d:d5:85:36:23:47:c6:ed:c6:c4:ca: e4:e4:11:d1:27:63:b3:cc:14:cd:0e:4d:bf:7d:35:63:59:66: 54:77:3a:c6:55:56:bd:f6:29:51:d6:69:84:ab:5a:16:fe:31: f8:f3:a8:8e:32:dd:f6:95:2c:1f:36:82:4c:3c:13:e3:75:03: 27:76:eb:ac:ca:62:41:34:61:72:ac:a5:ce:92:a6:f5:42:a7: 1a:a1:b9:ba:da:87:de:ea:0a:9b:d4:0d:04:d0:e7:d9:45:88: b5:b4:ce:39:9f:26:7f:15:9c:da:8d:1c:d6:b0:18:fe:48:54: ee:67:60:79:a5:91:fa:c7:b6:49:2f:de:d5:dd:94:6a:af:1a: f8:b4:2e:4c:d4:0b:cc:ae:34:c3:62:28:77:dc:81:ae:7d:93: eb:f2:93:f8:06:5d:53:9a:91:3e:e5:64:5f:e1:73:0d:34:03: 50:67:ca:f0:99:20:a7:c7:f1:cd:5a:98:bf:15:8b:f8:47:e6: 15:5f:59:04:c8:e4:23:73:dc:5b:c1:1f:14:a0:49:57:f1:a3: 98:df:27:3a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU1NEExMTAvBgNVBAUTKEU2NzU4QjlBMzc1OTgyQzJDNEQxQzc2NDlBMzFFNENG MjdENUE2ODAwHhcNMjYwNDE5MDUyOTMxWhcNMjYwNDI2MDUyOTMxWjAYMRYwFAYD VQQDEw02OWU0NjgzYy1jNjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwFzT86E0tFcvqO6Z16Gmv0/9VdSiqJK0qH/XWSqfZzsZbIEWImpPdKVbmf4M BOWUeP4tECqshX+gqozija3CDUALU1CxthxKi7aQ0TeD6nPm+PAwfTbJimrdEO9G TRMPPE2SWc+t5y2piuO3eZLJDd5XmR3DRHI00VRafHh/GffUEUBytzdmkM53wUcf c3v3LiYpD94F4JL8llQgkfRr1hf8DPbs9tm8skrmtIrDXA0V+3DtAWY775ocX+ib QuAcN5KebrYVW5GCBcvJl5Dbz/l6/UG8qx0vbZHgblq/Km6LBKCNZ2TrfSPunRGe xEU2fm/cWTRIyZnmF8uuWxpS2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHsARAIY EojS7z6cNFyb9EEOgurqMB8GA1UdIwQYMBaAFOZ1i5o3WYLCxNHHZJox5M8n1aaA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTU0QS84MjJGQzIyMDkx RjcxMUVGQURFMTEyNjZDNEY5QUUwMi81bldMbWpkWmdzTEUwY2RrbWpIa3p5ZlZw b0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVuV0xtamRaZ3NMRTBjZGttakhrenlmVnBvQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTU0QS84MjJGQzIyMDkxRjcxMUVGQURFMTEyNjZDNEY5QUUwMi81bldMbWpkWmdz TEUwY2RrbWpIa3p5ZlZwb0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVK9l65QOAVd2NVSjHKkn5ZXbhF7LLc3ZIKNlt+fgEEwnhIzKpCcQezvqDm3V hTYjR8btxsTK5OQR0Sdjs8wUzQ5Nv301Y1lmVHc6xlVWvfYpUdZphKtaFv4x+POo jjLd9pUsHzaCTDwT43UDJ3brrMpiQTRhcqylzpKm9UKnGqG5utqH3uoKm9QNBNDn 2UWItbTOOZ8mfxWc2o0c1rAY/khU7mdgeaWR+se2SS/e1d2Uaq8a+LQuTNQLzK40 w2Iod9yBrn2T6/KT+AZdU5qRPuVkX+FzDTQDUGfK8Jkgp8fxzVqYvxWL+EfmFV9Z BMjkI3PcW8EfFKBJV/GjmN8nOg== -----END CERTIFICATE-----Generated at Sun Apr 19 11:22:53 2026 by rpki-client