$ rpki-client -vvf rpki.apnic.net/member_repository/A912465F/5560CDAA064711F1B4BAFBC52D3D8C67/PnrrKf5aoynEr0n-NgOYf_HoWJg.mft File: PnrrKf5aoynEr0n-NgOYf_HoWJg.mft (raw, json) Hash identifier: 7PJQ3xWGXuQkYVUUecXeJspKEPvVYGj3rjph94xIVtw= Subject key identifier: 23:BA:71:EB:BB:3A:E5:BC:08:1D:FE:F9:28:64:44:6C:66:4B:59:9D Authority key identifier: 3E:7A:EB:29:FE:5A:A3:29:C4:AF:49:FE:36:03:98:7F:F1:E8:58:98 Certificate issuer: /CN=A912465F/serialNumber=3E7AEB29FE5AA329C4AF49FE3603987FF1E85898 Certificate serial: 1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnrrKf5aoynEr0n-NgOYf_HoWJg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912465F/5560CDAA064711F1B4BAFBC52D3D8C67/PnrrKf5aoynEr0n-NgOYf_HoWJg.mft Manifest number: 1A Signing time: Wed 25 Mar 2026 08:09:13 +0000 Manifest this update: Wed 25 Mar 2026 08:09:13 +0000 Manifest next update: Wed 01 Apr 2026 08:09:12 +0000 Files and hashes: 1: PnrrKf5aoynEr0n-NgOYf_HoWJg.crl (hash: LtyvYxYOZm7IW+UCK618sqYkDMdQIvSNJCD98iBJCrA=) 2: D693D3C2064711F1AE681DED2D3D8C67.roa (hash: R08xIozBjqOPEnc9ObPFb2XMyk15jqEtA+6f1tT4Fic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912465F/5560CDAA064711F1B4BAFBC52D3D8C67/PnrrKf5aoynEr0n-NgOYf_HoWJg.crl rsync://rpki.apnic.net/member_repository/A912465F/5560CDAA064711F1B4BAFBC52D3D8C67/PnrrKf5aoynEr0n-NgOYf_HoWJg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnrrKf5aoynEr0n-NgOYf_HoWJg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:09:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912465F, serialNumber=3E7AEB29FE5AA329C4AF49FE3603987FF1E85898 Validity Not Before: Mar 25 08:09:13 2026 GMT Not After : Apr 1 08:09:12 2026 GMT Subject: CN=69c39829-792b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:68:c1:d3:e4:10:44:65:23:10:e1:f1:d1:b6: b5:43:b2:64:92:54:b9:8a:8d:cf:13:76:db:a9:60: b0:c1:8c:6f:dd:56:ba:1e:91:6d:02:46:a3:17:4a: ba:94:a4:31:68:35:80:22:90:b8:94:6e:b6:f0:f3: ab:78:d8:a9:de:a3:aa:1a:f7:f7:49:ef:c2:d1:6b: d9:5c:5d:dc:57:d1:b7:f2:13:c8:98:87:2c:9e:15: 2d:69:9a:e5:65:07:4d:3b:8a:13:2d:31:21:97:61: 7e:40:05:a4:16:27:81:d0:5d:c7:1b:82:fd:ea:36: a0:b2:f9:07:19:6c:29:66:68:f2:52:7b:c6:52:36: ea:26:d2:f9:7a:d0:c2:65:e3:17:74:94:49:5e:98: 41:52:75:7e:82:26:2d:ef:6a:d5:fe:e8:c4:9b:d8: 67:48:29:01:82:3e:0e:0b:1e:f1:4b:db:5a:c2:46: 23:31:76:41:c7:53:d6:9e:ca:31:6d:9f:d0:29:af: 4f:af:fe:e6:83:ff:75:fd:5a:76:4b:4e:b1:3f:73: a0:62:1f:87:90:0d:b7:de:a7:8e:9a:96:70:f9:c8: 1e:1c:80:aa:5c:44:cc:f7:4b:42:2c:c3:10:0b:fb: f4:46:c3:e2:2b:d4:80:ea:f8:46:56:35:31:62:24: 94:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:BA:71:EB:BB:3A:E5:BC:08:1D:FE:F9:28:64:44:6C:66:4B:59:9D X509v3 Authority Key Identifier: keyid:3E:7A:EB:29:FE:5A:A3:29:C4:AF:49:FE:36:03:98:7F:F1:E8:58:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912465F/5560CDAA064711F1B4BAFBC52D3D8C67/PnrrKf5aoynEr0n-NgOYf_HoWJg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnrrKf5aoynEr0n-NgOYf_HoWJg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912465F/5560CDAA064711F1B4BAFBC52D3D8C67/PnrrKf5aoynEr0n-NgOYf_HoWJg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:0f:4d:0a:a7:9f:a6:89:9c:77:aa:f9:2c:1b:62:6c:90:37: 8a:10:6c:81:bc:99:9c:e2:8a:af:46:36:99:f0:ab:9f:a9:84: 53:61:55:b5:c8:da:74:75:00:95:64:4e:49:52:7e:06:4c:40: 07:37:37:df:f3:e0:39:73:8b:e8:c8:be:f9:12:46:57:66:57: e0:74:d2:98:dc:a9:26:c5:ce:ce:1d:14:91:7f:83:5c:40:18: bd:3f:ee:16:c7:6e:56:8f:92:fb:97:77:6d:28:56:b8:9c:66: 2d:08:78:7c:0a:2b:7c:0a:6f:6d:0d:40:cb:3c:63:55:ae:d4: e7:90:e9:ba:81:c4:c0:6a:e5:a1:a9:c6:d6:18:a2:ca:9a:d9: 19:11:12:6a:50:0b:2e:78:f0:cf:22:f0:7c:7c:05:3c:95:b6: 11:c1:62:37:8d:0f:52:cc:cb:73:3a:ac:bc:bf:a0:9d:6d:72: 20:59:6c:83:5f:e2:75:27:1f:d4:11:70:05:1d:90:cc:39:c6: c1:1c:76:55:52:0e:9b:c2:17:5f:47:60:75:8a:64:1b:08:5f: 4c:51:30:0e:9f:37:46:dc:72:40:82:e0:d7:91:e5:e0:4d:ab: 9d:47:0b:3d:36:74:44:e9:dc:6c:b0:46:fa:cd:ea:a3:27:92: 02:f2:70:d3 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NDY1RjExMC8GA1UEBRMoM0U3QUVCMjlGRTVBQTMyOUM0QUY0OUZFMzYwMzk4N0ZG MUU4NTg5ODAeFw0yNjAzMjUwODA5MTNaFw0yNjA0MDEwODA5MTJaMBgxFjAUBgNV BAMTDTY5YzM5ODI5LTc5MmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCraMHT5BBEZSMQ4fHRtrVDsmSSVLmKjc8TdtupYLDBjG/dVroekW0CRqMXSrqU pDFoNYAikLiUbrbw86t42Kneo6oa9/dJ78LRa9lcXdxX0bfyE8iYhyyeFS1pmuVl B007ihMtMSGXYX5ABaQWJ4HQXccbgv3qNqCy+QcZbClmaPJSe8ZSNuom0vl60MJl 4xd0lElemEFSdX6CJi3vatX+6MSb2GdIKQGCPg4LHvFL21rCRiMxdkHHU9aeyjFt n9Apr0+v/uaD/3X9WnZLTrE/c6BiH4eQDbfep46alnD5yB4cgKpcRMz3S0IswxAL +/RGw+Ir1IDq+EZWNTFiJJRbAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUI7px67s6 5bwIHf75KGREbGZLWZ0wHwYDVR0jBBgwFoAUPnrrKf5aoynEr0n+NgOYf/HoWJgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI0NjVGLzU1NjBDREFBMDY0 NzExRjFCNEJBRkJDNTJEM0Q4QzY3L1BucnJLZjVhb3luRXIwbi1OZ09ZZl9Ib1dK Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUG5ycktmNWFveW5FcjBuLU5nT1lmX0hvV0pnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI0 NjVGLzU1NjBDREFBMDY0NzExRjFCNEJBRkJDNTJEM0Q4QzY3L1BucnJLZjVhb3lu RXIwbi1OZ09ZZl9Ib1dKZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAhD00Kp5+miZx3qvksG2JskDeKEGyBvJmc4oqvRjaZ8KufqYRTYVW1yNp0dQCV ZE5JUn4GTEAHNzff8+A5c4voyL75EkZXZlfgdNKY3Kkmxc7OHRSRf4NcQBi9P+4W x25Wj5L7l3dtKFa4nGYtCHh8Cit8Cm9tDUDLPGNVrtTnkOm6gcTAauWhqcbWGKLK mtkZERJqUAsuePDPIvB8fAU8lbYRwWI3jQ9SzMtzOqy8v6CdbXIgWWyDX+J1Jx/U EXAFHZDMOcbBHHZVUg6bwhdfR2B1imQbCF9MUTAOnzdG3HJAguDXkeXgTaudRws9 NnRE6dxssEb6zeqjJ5IC8nDT -----END CERTIFICATE-----Generated at Thu Mar 26 00:27:40 2026 by rpki-client