$ rpki-client -vvf rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.mft File: PxScskgQcfFD-NFWCCear8cdEVw.mft (raw, json) Hash identifier: 3p2BtVu/LH0vEoDwgSxIcUpSCijpajGDSP2HlifE2+8= Subject key identifier: D4:68:0D:8B:DC:5E:31:D9:2C:F6:C9:86:EA:F0:10:D1:70:A3:E9:5E Authority key identifier: 3F:14:9C:B2:48:10:71:F1:43:F8:D1:56:08:27:9A:AF:C7:1D:11:5C Certificate issuer: /CN=A911C18F/serialNumber=3F149CB2481071F143F8D15608279AAFC71D115C Certificate serial: 1F92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxScskgQcfFD-NFWCCear8cdEVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.mft Manifest number: 1F82 Signing time: Tue 24 Mar 2026 15:55:46 +0000 Manifest this update: Tue 24 Mar 2026 15:55:45 +0000 Manifest next update: Tue 31 Mar 2026 15:55:45 +0000 Files and hashes: 1: PxScskgQcfFD-NFWCCear8cdEVw.crl (hash: 1rrOfrtz0JNmeHzpO+ZA+5/YU3JzCGObLjts2X8CaJE=) 2: A9FAE7FA5E1911E6B8CE9C5BC4F9AE02.roa (hash: 7bZVWDDzeJy/J7H2CBXO1GlKPPanYSksg2kAm3KALD0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.crl rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxScskgQcfFD-NFWCCear8cdEVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 15:55:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8082 (0x1f92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C18F, serialNumber=3F149CB2481071F143F8D15608279AAFC71D115C Validity Not Before: Mar 24 15:55:45 2026 GMT Not After : Mar 31 15:55:45 2026 GMT Subject: CN=69c2b402-c28e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2a:51:64:77:63:92:29:f5:42:40:33:db:28: eb:ea:6a:1d:53:15:86:8b:14:b8:37:ad:41:2c:7c: df:59:90:fa:5b:d5:39:9c:9e:63:b7:a0:5d:45:4b: bb:5b:7d:f5:95:08:04:5e:89:c8:76:6e:01:33:a6: 92:f4:ec:dd:56:57:a6:70:c3:ad:82:6e:e3:ee:8f: 8f:64:36:fb:77:18:19:1e:38:9c:26:34:dc:d2:65: 53:1f:80:51:63:ec:af:21:58:a4:40:7e:e0:b1:2f: db:f7:39:4b:09:be:8c:69:85:71:79:ef:e9:11:4b: f8:8c:cb:22:49:ae:96:f4:37:e2:d7:6b:d5:99:3e: 69:9f:24:ed:43:93:63:9d:46:78:e0:8c:e5:2e:b8: 52:f0:06:e0:8a:a8:58:cd:85:12:ee:c0:e9:d4:b7: 39:21:6a:b7:3d:1d:df:33:39:23:b4:72:cc:f1:90: 8a:cb:27:90:23:d3:64:9e:e9:a1:5f:9a:b2:ae:97: f8:4b:38:f4:90:19:76:6f:64:a7:9f:63:d0:ea:85: 93:30:d6:91:df:6b:b9:f5:40:12:64:a5:e0:1f:ec: 72:3d:e2:86:4f:ed:b0:1c:fb:28:c2:bb:45:b0:24: 25:04:ef:ea:a6:cd:56:45:19:66:aa:c5:f2:8c:83: 3c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:68:0D:8B:DC:5E:31:D9:2C:F6:C9:86:EA:F0:10:D1:70:A3:E9:5E X509v3 Authority Key Identifier: keyid:3F:14:9C:B2:48:10:71:F1:43:F8:D1:56:08:27:9A:AF:C7:1D:11:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxScskgQcfFD-NFWCCear8cdEVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:6d:5e:2d:01:6f:6d:9f:df:ca:7b:1e:ac:5f:9e:dc:b0:11: d4:1a:8d:c8:9f:5c:b8:45:13:7e:a5:51:38:74:29:f7:96:5b: 78:02:e2:67:15:ca:30:17:42:6b:ee:42:03:12:77:b9:cf:ed: 1a:d2:c6:27:5e:9b:ea:7c:b8:d3:e3:63:c9:ff:3c:6c:04:44: c8:e0:3f:99:86:65:a8:fa:06:80:99:77:d8:12:89:42:af:37: 7a:ae:a1:6f:93:d9:e0:ad:d8:1c:bb:6a:03:13:07:a6:1c:b8: a8:12:2f:ce:51:6b:80:f7:1f:30:42:86:2c:6d:b2:7b:eb:c3: 78:36:d4:6b:a8:27:d1:87:f9:36:6e:9a:08:7b:d7:03:dd:72: 77:23:c8:45:2d:15:59:51:08:ad:8c:f5:60:20:07:4c:e3:d3: cb:bb:8e:5d:0d:03:59:31:7d:e7:3b:e8:e3:07:10:76:ec:0b: 8c:be:2f:c0:31:38:0c:f0:2f:91:e0:2c:35:ee:01:d0:e8:ae: 9f:88:d7:a0:5c:10:55:7a:7d:b3:e8:3c:f0:19:6f:93:19:55: d7:f1:9f:3e:2d:a4:c3:e5:60:27:ef:28:9c:b6:2a:6c:db:67: 33:16:7a:a4:aa:6a:87:cb:da:54:f4:f5:c6:6f:b6:6f:cb:49: 16:3b:37:51 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICH5IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMxOEYxMTAvBgNVBAUTKDNGMTQ5Q0IyNDgxMDcxRjE0M0Y4RDE1NjA4Mjc5QUFG QzcxRDExNUMwHhcNMjYwMzI0MTU1NTQ1WhcNMjYwMzMxMTU1NTQ1WjAYMRYwFAYD VQQDEw02OWMyYjQwMi1jMjhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuSpRZHdjkin1QkAz2yjr6modUxWGixS4N61BLHzfWZD6W9U5nJ5jt6BdRUu7 W331lQgEXonIdm4BM6aS9OzdVlemcMOtgm7j7o+PZDb7dxgZHjicJjTc0mVTH4BR Y+yvIVikQH7gsS/b9zlLCb6MaYVxee/pEUv4jMsiSa6W9Dfi12vVmT5pnyTtQ5Nj nUZ44IzlLrhS8AbgiqhYzYUS7sDp1Lc5IWq3PR3fMzkjtHLM8ZCKyyeQI9Nknumh X5qyrpf4Szj0kBl2b2Snn2PQ6oWTMNaR32u59UASZKXgH+xyPeKGT+2wHPsowrtF sCQlBO/qps1WRRlmqsXyjIM8YQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNRoDYvc XjHZLPbJhurwENFwo+leMB8GA1UdIwQYMBaAFD8UnLJIEHHxQ/jRVggnmq/HHRFc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzE4Ri84RTdBOUJBQzVF MTgxMUU2QUM2NkM1NTlDNEY5QUUwMi9QeFNjc2tnUWNmRkQtTkZXQ0NlYXI4Y2RF VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1B4U2Nza2dRY2ZGRC1ORldDQ2VhcjhjZEVWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzE4Ri84RTdBOUJBQzVFMTgxMUU2QUM2NkM1NTlDNEY5QUUwMi9QeFNjc2tnUWNm RkQtTkZXQ0NlYXI4Y2RFVncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASm1eLQFvbZ/fynserF+e3LAR1BqNyJ9cuEUTfqVROHQp95ZbeALiZxXKMBdC a+5CAxJ3uc/tGtLGJ16b6ny40+Njyf88bAREyOA/mYZlqPoGgJl32BKJQq83eq6h b5PZ4K3YHLtqAxMHphy4qBIvzlFrgPcfMEKGLG2ye+vDeDbUa6gn0Yf5Nm6aCHvX A91ydyPIRS0VWVEIrYz1YCAHTOPTy7uOXQ0DWTF95zvo4wcQduwLjL4vwDE4DPAv keAsNe4B0Oiun4jXoFwQVXp9s+g88BlvkxlV1/GfPi2kw+VgJ+8onLYqbNtnMxZ6 pKpqh8vaVPT1xm+2b8tJFjs3UQ== -----END CERTIFICATE-----Generated at Thu Mar 26 11:11:54 2026 by rpki-client