$ rpki-client -vvf rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.mft File: PuJvukvjWd6uUAeS6_940ArLdgw.mft (raw, json) Hash identifier: 00KSK5PZiU6wsXgdIzis9vtF0uKGHwA6tehNMeF0c/0= Subject key identifier: AD:AD:42:21:77:48:2E:01:C4:A3:12:64:F9:AA:4B:29:B5:3A:6D:3C Authority key identifier: 3E:E2:6F:BA:4B:E3:59:DE:AE:50:07:92:EB:FF:78:D0:0A:CB:76:0C Certificate issuer: /CN=A91596C4/serialNumber=3EE26FBA4BE359DEAE500792EBFF78D00ACB760C Certificate serial: 049C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PuJvukvjWd6uUAeS6_940ArLdgw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.mft Manifest number: 0478 Signing time: Tue 24 Mar 2026 23:45:36 +0000 Manifest this update: Tue 24 Mar 2026 23:45:36 +0000 Manifest next update: Tue 31 Mar 2026 23:45:36 +0000 Files and hashes: 1: PuJvukvjWd6uUAeS6_940ArLdgw.crl (hash: htK6oPWRQeiFK0mezafXLKODaS/wVjfRSVUy7CiNt5U=) 2: 0AE155E6833411ECBB74C786C4F9AE02.roa (hash: DF2zCDZzOfwV2Fb/7F4G0pHecJjvgJOAWTH8TiFGmoc=) 3: 09B62A48833411ECBB74C786C4F9AE02.roa (hash: 5CjAVhZ4H7jUaLeVyY5rhBjjQSwZO+qN9rQG5F9axLY=) 4: 0A4D6250833411ECBB74C786C4F9AE02.roa (hash: LGn5w+iTJlicKdWA6qyGgWwj55jd6LVvyCEcKfnAtIs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.crl rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PuJvukvjWd6uUAeS6_940ArLdgw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:45:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1180 (0x49c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91596C4, serialNumber=3EE26FBA4BE359DEAE500792EBFF78D00ACB760C Validity Not Before: Mar 24 23:45:36 2026 GMT Not After : Mar 31 23:45:36 2026 GMT Subject: CN=69c32220-d6d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b5:64:35:f0:89:9a:b9:46:2a:b1:18:37:fe: 5d:eb:e9:d5:71:ec:3b:a1:ec:21:ea:74:b7:32:3d: 0c:bf:d9:fb:1f:60:40:52:14:49:9d:17:e6:1f:ca: cc:7b:e8:3c:e4:a0:1a:66:aa:9f:11:9e:ae:6b:21: 3e:22:ce:60:9c:60:87:4c:d4:88:d2:57:50:d9:04: b2:3d:9c:81:5f:6f:28:92:bc:b7:38:e6:7d:90:fd: 89:68:5b:b8:ae:37:38:9d:a5:bd:6f:59:4d:de:28: 65:02:18:52:60:bc:3b:31:ba:10:4d:62:64:69:19: 44:e8:3e:79:f8:ac:6a:b9:98:a6:a4:c5:05:50:43: e1:d2:79:df:52:c2:ee:8c:09:c0:34:d1:4d:7b:77: 61:a8:ff:d3:25:16:df:50:1c:06:83:ba:78:69:ef: e4:1c:5e:64:09:59:4d:c3:5d:13:47:f8:63:9c:d6: d1:cc:4c:1f:3d:f6:70:38:95:cd:0e:2f:4a:96:19: 39:c1:87:51:ea:e2:6b:96:8b:bc:c5:dd:e7:6d:4f: 30:d3:59:b5:cb:f7:20:e7:12:5a:7c:3a:71:28:be: 09:98:8e:e6:d5:35:3b:67:fd:29:1d:ef:f7:f5:8d: 64:77:5b:5f:66:d0:e1:68:17:2d:23:b9:ec:b5:24: b6:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:AD:42:21:77:48:2E:01:C4:A3:12:64:F9:AA:4B:29:B5:3A:6D:3C X509v3 Authority Key Identifier: keyid:3E:E2:6F:BA:4B:E3:59:DE:AE:50:07:92:EB:FF:78:D0:0A:CB:76:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PuJvukvjWd6uUAeS6_940ArLdgw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:f5:45:df:b0:79:7c:41:6e:f7:31:f6:13:c5:fe:97:24:28: 8c:a3:e5:7c:9b:6e:08:23:ef:c2:2d:ba:b6:45:92:fa:1d:87: 1b:75:82:75:18:68:f5:ef:8f:8b:9a:ed:55:30:af:05:47:af: 89:e9:0e:e7:1e:24:b9:20:83:28:c9:59:8c:eb:50:23:d6:15: 49:43:62:62:78:91:5f:01:8d:71:a3:d7:7c:f6:3a:67:2f:ad: 02:98:f5:6a:c9:cf:03:f6:c9:c3:14:d1:1e:10:f5:cd:36:f5: b2:b0:cd:11:f7:3b:45:8b:34:85:25:52:fb:36:bc:c8:1b:ea: d9:a8:8f:e3:2f:f9:10:fb:bf:8d:72:a2:33:3b:5b:5c:4b:b6: b9:3c:06:2b:c2:5b:97:4a:6d:c9:03:a0:a4:eb:78:23:a4:c0: 9a:76:d0:f4:48:3c:58:a5:49:96:8d:87:ec:a0:92:88:e8:11: b6:f3:de:77:7b:d1:97:dc:09:34:82:3d:da:87:cb:55:c8:72: bd:fa:33:5f:77:00:27:03:00:8e:8e:b1:c6:5d:95:71:18:4c: 0d:24:72:e1:cf:aa:9e:47:f6:b8:99:dc:06:7b:35:57:43:34: e0:11:db:cd:23:0e:17:23:45:55:13:9b:13:9f:19:03:ca:d3: 5f:94:69:d5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTk2QzQxMTAvBgNVBAUTKDNFRTI2RkJBNEJFMzU5REVBRTUwMDc5MkVCRkY3OEQw MEFDQjc2MEMwHhcNMjYwMzI0MjM0NTM2WhcNMjYwMzMxMjM0NTM2WjAYMRYwFAYD VQQDEw02OWMzMjIyMC1kNmQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm7VkNfCJmrlGKrEYN/5d6+nVcew7oewh6nS3Mj0Mv9n7H2BAUhRJnRfmH8rM e+g85KAaZqqfEZ6uayE+Is5gnGCHTNSI0ldQ2QSyPZyBX28okry3OOZ9kP2JaFu4 rjc4naW9b1lN3ihlAhhSYLw7MboQTWJkaRlE6D55+KxquZimpMUFUEPh0nnfUsLu jAnANNFNe3dhqP/TJRbfUBwGg7p4ae/kHF5kCVlNw10TR/hjnNbRzEwfPfZwOJXN Di9Klhk5wYdR6uJrlou8xd3nbU8w01m1y/cg5xJafDpxKL4JmI7m1TU7Z/0pHe/3 9Y1kd1tfZtDhaBctI7nstSS2TwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK2tQiF3 SC4BxKMSZPmqSym1Om08MB8GA1UdIwQYMBaAFD7ib7pL41nerlAHkuv/eNAKy3YM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTZDNC9GM0RERUVERTgz MzAxMUVDOEZGMzkzODNDNEY5QUUwMi9QdUp2dWt2aldkNnVVQWVTNl85NDBBckxk Z3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1B1SnZ1a3ZqV2Q2dVVBZVM2Xzk0MEFyTGRndy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTZDNC9GM0RERUVERTgzMzAxMUVDOEZGMzkzODNDNEY5QUUwMi9QdUp2dWt2aldk NnVVQWVTNl85NDBBckxkZ3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIPVF37B5fEFu9zH2E8X+lyQojKPlfJtuCCPvwi26tkWS+h2HG3WCdRho9e+P i5rtVTCvBUeviekO5x4kuSCDKMlZjOtQI9YVSUNiYniRXwGNcaPXfPY6Zy+tApj1 asnPA/bJwxTRHhD1zTb1srDNEfc7RYs0hSVS+za8yBvq2aiP4y/5EPu/jXKiMztb XEu2uTwGK8Jbl0ptyQOgpOt4I6TAmnbQ9Eg8WKVJlo2H7KCSiOgRtvPed3vRl9wJ NII92ofLVchyvfozX3cAJwMAjo6xxl2VcRhMDSRy4c+qnkf2uJncBns1V0M04BHb zSMOFyNFVRObE58ZA8rTX5Rp1Q== -----END CERTIFICATE-----Generated at Thu Mar 26 14:13:53 2026 by rpki-client