$ rpki-client -vvf rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.mft File: PQqIwMyj7oZ3zRffPuht5x38ESk.mft (raw, json) Hash identifier: wYQgsap5wb0YuNCeOS1L6Yd+dnnvOZAie2F4ehyKRgg= Subject key identifier: 6D:E3:D8:5E:53:E1:97:E1:C6:7C:96:9B:63:65:99:03:F8:46:EC:63 Authority key identifier: 3D:0A:88:C0:CC:A3:EE:86:77:CD:17:DF:3E:E8:6D:E7:1D:FC:11:29 Certificate issuer: /CN=A91607DE/serialNumber=3D0A88C0CCA3EE8677CD17DF3EE86DE71DFC1129 Certificate serial: 03EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQqIwMyj7oZ3zRffPuht5x38ESk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.mft Manifest number: 03E3 Signing time: Wed 25 Mar 2026 00:11:41 +0000 Manifest this update: Wed 25 Mar 2026 00:11:40 +0000 Manifest next update: Wed 01 Apr 2026 00:11:40 +0000 Files and hashes: 1: PQqIwMyj7oZ3zRffPuht5x38ESk.crl (hash: g7+I9nf9sDuuGQHFipgroHl0MvREbxNLi8Y9kTc2Gg8=) 2: FD398FA0BB5D11ECA62F8674C4F9AE02.roa (hash: lCNfDmCO6Vy6uu5QW43aJqJrNK0XuY+KKPY1oeY2SkM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.crl rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQqIwMyj7oZ3zRffPuht5x38ESk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:11:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1002 (0x3ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91607DE, serialNumber=3D0A88C0CCA3EE8677CD17DF3EE86DE71DFC1129 Validity Not Before: Mar 25 00:11:40 2026 GMT Not After : Apr 1 00:11:40 2026 GMT Subject: CN=69c3283d-6a5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:94:c1:3f:a2:25:6f:7a:9c:5c:ed:25:63:6d: 41:c6:03:66:b9:fa:1b:8c:31:e6:6b:19:b4:3c:9c: 01:a7:79:32:81:65:d1:64:f5:b8:61:9b:07:46:e8: b3:3c:de:3d:11:89:b3:6d:87:81:c8:6e:24:b6:49: dd:9d:2e:8d:0b:15:c3:30:10:7d:1e:72:71:a4:40: 48:7e:97:a3:86:dc:51:36:fa:ca:5a:44:8d:a3:cc: df:f4:ef:0c:5a:3e:92:05:2d:d6:6a:1c:18:ce:ab: 3a:70:67:18:5e:b3:c8:e8:46:8f:be:23:80:3d:b4: 08:e4:5b:48:58:55:b9:0a:7a:15:bd:95:4e:c4:a4: 23:75:f5:09:74:cc:e1:7e:4d:29:a3:68:30:77:68: d7:20:d7:27:7f:90:3e:18:f9:0c:b3:05:14:71:0c: 3d:4b:d8:3f:b6:05:1e:06:17:33:a2:6b:8e:7e:ae: ff:50:ce:5f:05:3f:42:21:d9:39:72:b3:80:0d:52: 29:23:b2:bc:a4:1d:d8:86:53:c2:7a:be:40:70:f7: 26:76:43:17:5a:42:82:e3:67:5a:74:a5:22:db:a4: ef:f3:5e:89:78:15:25:cb:11:27:71:02:65:0b:f6: 77:53:d2:c4:f9:f4:b6:a0:05:79:7a:b6:2b:14:56: 46:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:E3:D8:5E:53:E1:97:E1:C6:7C:96:9B:63:65:99:03:F8:46:EC:63 X509v3 Authority Key Identifier: keyid:3D:0A:88:C0:CC:A3:EE:86:77:CD:17:DF:3E:E8:6D:E7:1D:FC:11:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQqIwMyj7oZ3zRffPuht5x38ESk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:77:4f:c1:ed:41:25:aa:52:2c:52:3d:8d:4b:72:36:4a:10: 82:9d:3f:b4:c5:2d:3c:02:d6:54:1c:41:ed:d2:5e:70:dd:be: 04:37:b1:18:cc:38:16:7d:72:ce:3e:41:93:58:53:1f:4a:04: 6a:1e:ba:7c:76:a2:90:12:1e:81:12:62:08:1e:2b:a9:d2:e9: 61:01:22:53:9c:93:07:11:59:68:c9:45:2a:42:37:da:e9:8b: a5:e4:70:89:5c:a7:82:c4:43:0e:67:04:7f:0b:fb:76:0f:29: a5:c8:5f:16:a8:7e:d5:0e:fd:df:a4:e5:d1:d0:aa:e3:04:af: 63:7a:e2:ff:ca:1f:ed:4f:b5:6c:d7:38:14:8a:dd:0f:79:fa: 71:8d:21:b0:0e:ad:08:fb:be:aa:35:6a:80:f5:c7:7d:7f:1f: 74:6f:e2:ac:17:38:6b:eb:eb:ce:df:a1:73:9e:4b:f3:d4:f0: 09:b8:bc:06:77:47:9b:d8:46:ae:c4:57:e2:d1:59:cf:5d:89: 53:c3:7f:39:dd:73:48:11:6c:1b:66:8e:a6:71:55:8c:da:a0: 95:39:a2:62:63:e0:35:59:9f:25:d5:e3:1e:75:e6:9d:1b:40: 0d:d5:48:6b:47:df:f4:18:1b:0b:fe:90:b9:f1:b4:f1:30:ed: 20:c4:4d:f3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA+owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA3REUxMTAvBgNVBAUTKDNEMEE4OEMwQ0NBM0VFODY3N0NEMTdERjNFRTg2REU3 MURGQzExMjkwHhcNMjYwMzI1MDAxMTQwWhcNMjYwNDAxMDAxMTQwWjAYMRYwFAYD VQQDEw02OWMzMjgzZC02YTVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkZTBP6Ilb3qcXO0lY21BxgNmufobjDHmaxm0PJwBp3kygWXRZPW4YZsHRuiz PN49EYmzbYeByG4ktkndnS6NCxXDMBB9HnJxpEBIfpejhtxRNvrKWkSNo8zf9O8M Wj6SBS3WahwYzqs6cGcYXrPI6EaPviOAPbQI5FtIWFW5CnoVvZVOxKQjdfUJdMzh fk0po2gwd2jXINcnf5A+GPkMswUUcQw9S9g/tgUeBhczomuOfq7/UM5fBT9CIdk5 crOADVIpI7K8pB3YhlPCer5AcPcmdkMXWkKC42dadKUi26Tv816JeBUlyxEncQJl C/Z3U9LE+fS2oAV5erYrFFZGBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG3j2F5T 4ZfhxnyWm2NlmQP4RuxjMB8GA1UdIwQYMBaAFD0KiMDMo+6Gd80X3z7obecd/BEp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDdERS9DNzY4MTRDNkJC NUExMUVDOTA4QUM5NkVDNEY5QUUwMi9QUXFJd015ajdvWjN6UmZmUHVodDV4MzhF U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BRcUl3TXlqN29aM3pSZmZQdWh0NXgzOEVTay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDdERS9DNzY4MTRDNkJCNUExMUVDOTA4QUM5NkVDNEY5QUUwMi9QUXFJd015ajdv WjN6UmZmUHVodDV4MzhFU2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAM3dPwe1BJapSLFI9jUtyNkoQgp0/tMUtPALWVBxB7dJecN2+BDexGMw4Fn1y zj5Bk1hTH0oEah66fHaikBIegRJiCB4rqdLpYQEiU5yTBxFZaMlFKkI32umLpeRw iVyngsRDDmcEfwv7dg8ppchfFqh+1Q7936Tl0dCq4wSvY3ri/8of7U+1bNc4FIrd D3n6cY0hsA6tCPu+qjVqgPXHfX8fdG/irBc4a+vrzt+hc55L89TwCbi8BndHm9hG rsRX4tFZz12JU8N/Od1zSBFsG2aOpnFVjNqglTmiYmPgNVmfJdXjHnXmnRtADdVI a0ff9BgbC/6QufG08TDtIMRN8w== -----END CERTIFICATE-----Generated at Thu Mar 26 07:54:37 2026 by rpki-client