$ rpki-client -vvf rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.mft File: PXdT_euyLwk6cQIag9ZYZlXpJKA.mft (raw, json) Hash identifier: qES8q2G3SNhcVPohEtz3+0GEjrVsyMfL+Td0ezo8wu4= Subject key identifier: AE:94:FF:64:85:22:0C:88:63:83:18:A3:47:79:D8:7B:3D:82:21:D5 Authority key identifier: 3D:77:53:FD:EB:B2:2F:09:3A:71:02:1A:83:D6:58:66:55:E9:24:A0 Certificate issuer: /CN=A911D857/serialNumber=3D7753FDEBB22F093A71021A83D6586655E924A0 Certificate serial: 0933 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXdT_euyLwk6cQIag9ZYZlXpJKA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.mft Manifest number: 0925 Signing time: Tue 24 Mar 2026 20:00:49 +0000 Manifest this update: Tue 24 Mar 2026 20:00:48 +0000 Manifest next update: Tue 31 Mar 2026 20:00:48 +0000 Files and hashes: 1: PXdT_euyLwk6cQIag9ZYZlXpJKA.crl (hash: kjSiJTvy7digeTh+mVJWE4iJU+D/7hfOslnIYgAqdIE=) 2: 162EA00C442411EB911D086BC4F9AE02.roa (hash: Ueqo75gSThRYndYi3ug7/v3xrjnUfwH9KTMtXQ0mSlo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.crl rsync://rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXdT_euyLwk6cQIag9ZYZlXpJKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2355 (0x933) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D857, serialNumber=3D7753FDEBB22F093A71021A83D6586655E924A0 Validity Not Before: Mar 24 20:00:48 2026 GMT Not After : Mar 31 20:00:48 2026 GMT Subject: CN=69c2ed71-c3c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:92:23:7f:c8:6e:90:da:a1:8b:03:de:47:d4: 58:04:32:94:69:1f:b2:47:45:e2:01:57:7a:5b:00: ef:24:c1:81:23:d9:5c:c8:51:d3:12:76:13:c7:04: 04:b2:94:9d:9a:b4:c7:ce:f6:84:61:cd:c6:74:77: 3c:4d:ed:9e:36:20:e0:55:8e:49:a3:09:b5:e1:9a: 43:df:ed:a1:98:ee:69:1e:11:eb:7a:5e:5c:1c:ac: cd:06:fe:ef:d9:e5:2b:f5:e5:70:7b:31:5d:9d:84: 9f:bf:17:b6:a1:bf:1c:de:32:08:74:1e:d1:4d:35: 28:b4:b0:35:53:65:bf:56:00:9c:12:17:53:dd:a8: 52:5a:4e:2f:7c:61:45:e7:c7:eb:7e:44:59:61:87: 0e:4d:20:b2:dc:13:5a:2c:89:00:79:df:ed:a8:4c: f7:fc:e5:29:c4:2b:8f:e6:0c:d0:83:d3:38:6b:0f: da:b1:74:d7:b6:a5:0c:05:58:e8:82:08:05:a1:cf: fa:35:43:55:7e:45:1a:f0:ed:54:61:1d:ae:c1:5d: e6:ae:a1:c1:f4:47:07:54:f5:9a:d1:20:eb:ab:22: e3:c4:c4:ea:20:ed:2f:22:a2:05:f7:27:67:ff:18: 7d:c3:51:d3:e1:be:2a:10:f0:be:d0:fe:53:4f:db: 7b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:94:FF:64:85:22:0C:88:63:83:18:A3:47:79:D8:7B:3D:82:21:D5 X509v3 Authority Key Identifier: keyid:3D:77:53:FD:EB:B2:2F:09:3A:71:02:1A:83:D6:58:66:55:E9:24:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXdT_euyLwk6cQIag9ZYZlXpJKA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:fc:80:01:2e:e6:43:a3:a4:71:c1:9c:9f:85:51:99:81:1f: 38:0c:ef:2b:45:9b:86:5d:a6:59:ca:24:35:af:85:c9:69:8a: ec:55:b0:e5:63:cf:37:3d:90:5f:d0:d2:f4:40:ac:17:97:15: ae:c4:0e:73:2a:49:65:2f:7f:40:ba:9b:5a:5d:de:d0:14:36: b2:de:26:4d:17:da:3a:d3:0e:04:4a:9d:b2:2d:fb:a1:ea:ba: 49:b3:e6:11:dc:96:aa:52:a4:39:5e:58:19:35:54:85:1d:36: 87:af:2c:fc:87:42:65:78:1a:44:7c:e5:9c:51:99:d3:db:d0: 2d:8d:f1:5c:bc:29:01:16:f2:e2:c7:14:a7:05:a3:6f:0e:c6: 67:98:40:d5:2d:cc:e2:86:06:45:58:17:c4:c8:13:d8:22:95: cc:bb:a1:ef:18:83:14:af:db:0e:fb:dc:8e:24:d2:72:2a:80: a0:60:e0:82:b5:1f:98:aa:a6:22:e6:39:ef:a4:64:8e:e6:97: 93:c9:2c:b8:7f:f7:d4:6b:f3:7c:f3:75:1a:2f:36:80:e7:25: 7e:07:6e:5e:19:17:28:69:15:1e:f4:f6:ee:4a:8b:44:1c:74: 7b:58:49:65:96:04:0b:64:21:d7:64:2f:5c:c6:48:33:13:90: 3b:48:c1:71 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCTMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ4NTcxMTAvBgNVBAUTKDNENzc1M0ZERUJCMjJGMDkzQTcxMDIxQTgzRDY1ODY2 NTVFOTI0QTAwHhcNMjYwMzI0MjAwMDQ4WhcNMjYwMzMxMjAwMDQ4WjAYMRYwFAYD VQQDEw02OWMyZWQ3MS1jM2MxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqpIjf8hukNqhiwPeR9RYBDKUaR+yR0XiAVd6WwDvJMGBI9lcyFHTEnYTxwQE spSdmrTHzvaEYc3GdHc8Te2eNiDgVY5Jowm14ZpD3+2hmO5pHhHrel5cHKzNBv7v 2eUr9eVwezFdnYSfvxe2ob8c3jIIdB7RTTUotLA1U2W/VgCcEhdT3ahSWk4vfGFF 58frfkRZYYcOTSCy3BNaLIkAed/tqEz3/OUpxCuP5gzQg9M4aw/asXTXtqUMBVjo gggFoc/6NUNVfkUa8O1UYR2uwV3mrqHB9EcHVPWa0SDrqyLjxMTqIO0vIqIF9ydn /xh9w1HT4b4qEPC+0P5TT9t71QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK6U/2SF IgyIY4MYo0d52Hs9giHVMB8GA1UdIwQYMBaAFD13U/3rsi8JOnECGoPWWGZV6SSg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDg1Ny81MzgwRUY2Q0JG N0UxMUVBQjZGQTM3NUZDNEY5QUUwMi9QWGRUX2V1eUx3azZjUUlhZzlaWVpsWHBK S0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BYZFRfZXV5THdrNmNRSWFnOVpZWmxYcEpLQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDg1Ny81MzgwRUY2Q0JGN0UxMUVBQjZGQTM3NUZDNEY5QUUwMi9QWGRUX2V1eUx3 azZjUUlhZzlaWVpsWHBKS0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnvyAAS7mQ6OkccGcn4VRmYEfOAzvK0Wbhl2mWcokNa+FyWmK7FWw5WPPNz2Q X9DS9ECsF5cVrsQOcypJZS9/QLqbWl3e0BQ2st4mTRfaOtMOBEqdsi37oeq6SbPm EdyWqlKkOV5YGTVUhR02h68s/IdCZXgaRHzlnFGZ09vQLY3xXLwpARby4scUpwWj bw7GZ5hA1S3M4oYGRVgXxMgT2CKVzLuh7xiDFK/bDvvcjiTSciqAoGDggrUfmKqm IuY576RkjuaXk8ksuH/31GvzfPN1Gi82gOclfgduXhkXKGkVHvT27kqLRBx0e1hJ ZZYEC2Qh12QvXMZIMxOQO0jBcQ== -----END CERTIFICATE-----Generated at Thu Mar 26 09:23:31 2026 by rpki-client