$ rpki-client -vvf rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/PgP9FZgAmbW_UCHpC-H0p34Ax5w.mft File: PgP9FZgAmbW_UCHpC-H0p34Ax5w.mft (raw, json) Hash identifier: VXCHF0nWeD0r/OBzUc8/iwRfzLhE3GLYsT27JKYy5VQ= Subject key identifier: B8:DD:DE:86:D7:E0:58:9C:B3:85:C5:C9:7C:37:94:4E:BE:F9:0B:A2 Authority key identifier: 3E:03:FD:15:98:00:99:B5:BF:50:21:E9:0B:E1:F4:A7:7E:00:C7:9C Certificate issuer: /CN=A91538E7/serialNumber=3E03FD15980099B5BF5021E90BE1F4A77E00C79C Certificate serial: 84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgP9FZgAmbW_UCHpC-H0p34Ax5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/PgP9FZgAmbW_UCHpC-H0p34Ax5w.mft Manifest number: 08CC Signing time: Tue 24 Mar 2026 20:35:07 +0000 Manifest this update: Tue 24 Mar 2026 20:35:06 +0000 Manifest next update: Tue 31 Mar 2026 20:35:06 +0000 Files and hashes: 1: PgP9FZgAmbW_UCHpC-H0p34Ax5w.crl (hash: Qq1Jk/Z2cNMjDs/2epYbzJYlfdUXxq7HE6pLZMyq+yI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/PgP9FZgAmbW_UCHpC-H0p34Ax5w.crl rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/PgP9FZgAmbW_UCHpC-H0p34Ax5w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgP9FZgAmbW_UCHpC-H0p34Ax5w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:35:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 132 (0x84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91538E7, serialNumber=3E03FD15980099B5BF5021E90BE1F4A77E00C79C Validity Not Before: Mar 24 20:35:06 2026 GMT Not After : Mar 31 20:35:06 2026 GMT Subject: CN=69c2f57b-426d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:43:ae:1a:fa:b9:9a:e9:6c:20:32:2c:d7:b8: fc:f7:a6:c8:38:21:8a:e5:f2:04:a8:7e:20:65:75: 79:f9:02:ba:05:fd:74:75:bf:51:70:d2:e4:71:ff: 5a:e6:5d:09:bf:4d:21:86:89:52:81:93:94:33:23: 17:8c:08:86:7f:41:ed:8e:12:7a:9f:cb:5d:b8:80: e8:6f:9e:20:db:d6:3f:75:a1:b8:dd:c8:43:a3:5b: bb:c1:ba:a6:c4:fe:2b:b3:48:42:41:28:21:03:b4: cd:c1:59:c4:cd:fe:51:da:e5:51:b3:86:1a:3e:d9: 9b:59:2f:c3:8a:5a:9f:ad:c9:10:3c:0a:d0:14:15: 08:57:9f:de:a8:51:21:1c:14:b8:1a:54:1d:64:0c: b7:26:0f:61:35:62:50:a5:58:ee:f4:76:ab:c3:89: 88:2d:eb:9f:00:ac:4f:35:80:f8:d1:f5:78:63:55: b3:12:9e:b5:f6:c0:ca:a9:da:40:b6:b1:0c:80:69: ad:62:58:bd:56:2e:93:25:27:07:89:5e:8c:9a:78: da:d5:14:08:cc:99:42:1b:6e:7d:b6:da:03:5e:bc: 0b:c9:42:97:d2:3f:70:72:0b:f9:60:cd:23:d5:e1: ed:1a:6a:b2:5b:f6:0c:a2:a0:a4:6a:6b:72:77:61: ca:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:DD:DE:86:D7:E0:58:9C:B3:85:C5:C9:7C:37:94:4E:BE:F9:0B:A2 X509v3 Authority Key Identifier: keyid:3E:03:FD:15:98:00:99:B5:BF:50:21:E9:0B:E1:F4:A7:7E:00:C7:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/PgP9FZgAmbW_UCHpC-H0p34Ax5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgP9FZgAmbW_UCHpC-H0p34Ax5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/PgP9FZgAmbW_UCHpC-H0p34Ax5w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:a0:1f:61:a0:52:2c:80:de:78:c9:85:08:31:f5:fa:32:e3: 04:9e:ad:62:95:33:4f:d0:33:1e:7f:16:d8:55:ab:f7:5f:b9: 26:38:aa:0c:b6:b4:93:39:35:67:52:c6:ca:4c:e2:43:fa:76: 55:8b:63:71:e9:60:9d:47:b8:85:e9:42:d3:ae:4e:dd:5b:9b: 16:fd:3c:66:97:89:73:fc:da:0e:47:1f:1c:3c:91:84:67:5f: 1f:2d:49:8c:69:85:4a:e2:a4:a4:c1:1e:fb:f9:1c:7f:ad:f3: 18:f2:a1:8d:f0:d9:dd:1a:d0:ce:80:3f:75:5d:a4:32:21:41: d8:f0:9c:66:20:8b:b6:59:35:fc:20:b9:fb:32:7d:fa:11:b6: ed:2b:03:ee:56:60:3b:49:7d:3a:6f:76:a0:6c:e0:ca:0c:e2: 37:5b:bb:3b:d8:2b:f1:14:f9:fa:2e:0e:4c:67:82:5b:45:f2: a6:1f:03:e2:b6:3a:4a:a4:48:0a:22:6d:fe:90:cb:3c:53:98: 6c:f0:60:f5:c3:64:c1:d1:ce:05:18:79:4b:fb:fa:f8:be:59: 9c:aa:d5:c8:cb:16:b0:db:f4:3f:5f:62:14:39:f6:4d:9f:e9: d1:62:f0:8e:9c:f7:76:0f:c6:8e:50:ec:6c:bd:79:e4:96:95: 89:d5:a8:fe -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM4RTcxMTAvBgNVBAUTKDNFMDNGRDE1OTgwMDk5QjVCRjUwMjFFOTBCRTFGNEE3 N0UwMEM3OUMwHhcNMjYwMzI0MjAzNTA2WhcNMjYwMzMxMjAzNTA2WjAYMRYwFAYD VQQDEw02OWMyZjU3Yi00MjZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArUOuGvq5mulsIDIs17j896bIOCGK5fIEqH4gZXV5+QK6Bf10db9RcNLkcf9a 5l0Jv00hholSgZOUMyMXjAiGf0HtjhJ6n8tduIDob54g29Y/daG43chDo1u7wbqm xP4rs0hCQSghA7TNwVnEzf5R2uVRs4YaPtmbWS/DilqfrckQPArQFBUIV5/eqFEh HBS4GlQdZAy3Jg9hNWJQpVju9Harw4mILeufAKxPNYD40fV4Y1WzEp619sDKqdpA trEMgGmtYli9Vi6TJScHiV6Mmnja1RQIzJlCG259ttoDXrwLyUKX0j9wcgv5YM0j 1eHtGmqyW/YMoqCkamtyd2HKRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLjd3obX 4Fics4XFyXw3lE6++QuiMB8GA1UdIwQYMBaAFD4D/RWYAJm1v1Ah6Qvh9Kd+AMec MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzhFNy9CRjQwNEE1QTAy NjcxMUVCOEUxQzMwMUFDNEY5QUUwMi9QZ1A5RlpnQW1iV19VQ0hwQy1IMHAzNEF4 NXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BnUDlGWmdBbWJXX1VDSHBDLUgwcDM0QXg1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzhFNy9CRjQwNEE1QTAyNjcxMUVCOEUxQzMwMUFDNEY5QUUwMi9QZ1A5RlpnQW1i V19VQ0hwQy1IMHAzNEF4NXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWaAfYaBSLIDeeMmFCDH1+jLjBJ6tYpUzT9AzHn8W2FWr91+5JjiqDLa0kzk1 Z1LGykziQ/p2VYtjcelgnUe4helC065O3VubFv08ZpeJc/zaDkcfHDyRhGdfHy1J jGmFSuKkpMEe+/kcf63zGPKhjfDZ3RrQzoA/dV2kMiFB2PCcZiCLtlk1/CC5+zJ9 +hG27SsD7lZgO0l9Om92oGzgygziN1u7O9gr8RT5+i4OTGeCW0Xyph8D4rY6SqRI CiJt/pDLPFOYbPBg9cNkwdHOBRh5S/v6+L5ZnKrVyMsWsNv0P19iFDn2TZ/p0WLw jpz3dg/GjlDsbL155JaVidWo/g== -----END CERTIFICATE-----Generated at Thu Mar 26 00:53:04 2026 by rpki-client