$ rpki-client -vvf rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.mft File: pfBl_MntoR3KTQ38bXyZB1KY1_8.mft (raw, json) Hash identifier: Bhw3ERf0POe4lijHh4u5t5z4LR+hNmDFYUEAx9OhkFU= Subject key identifier: 24:0D:AD:BD:36:65:13:62:41:1F:33:A4:67:71:A2:EC:F1:F6:CC:8B Authority key identifier: A5:F0:65:FC:C9:ED:A1:1D:CA:4D:0D:FC:6D:7C:99:07:52:98:D7:FF Certificate issuer: /CN=A9174685/serialNumber=A5F065FCC9EDA11DCA4D0DFC6D7C99075298D7FF Certificate serial: 09BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfBl_MntoR3KTQ38bXyZB1KY1_8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.mft Manifest number: 09A3 Signing time: Tue 24 Mar 2026 19:45:52 +0000 Manifest this update: Tue 24 Mar 2026 19:45:52 +0000 Manifest next update: Tue 31 Mar 2026 19:45:52 +0000 Files and hashes: 1: pfBl_MntoR3KTQ38bXyZB1KY1_8.crl (hash: iXDg1CrNFeaqlpZhl9KuA1Xp5aAtj6J1stZ19Vdl9PU=) 2: 8BBD25F4EAE311EF95C23D4DC4F9AE02.roa (hash: KwmNhu5rUPuchUZhsnJbF0ZKPoHrpjaspO6PL7DH0vg=) 3: 31B2B528217811EEBACF3324C4F9AE02.roa (hash: qLy4AZHFx48xq926slKC0PfzqLtUGu6fqle6PCgJuik=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.crl rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfBl_MntoR3KTQ38bXyZB1KY1_8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:45:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2493 (0x9bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174685, serialNumber=A5F065FCC9EDA11DCA4D0DFC6D7C99075298D7FF Validity Not Before: Mar 24 19:45:52 2026 GMT Not After : Mar 31 19:45:52 2026 GMT Subject: CN=69c2e9f0-2f33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6e:be:90:34:9b:fc:55:79:13:ba:69:1e:1f: 63:df:c5:9d:b2:36:51:37:86:65:a6:8d:5f:86:e8: 1f:6d:b5:58:d9:ad:70:57:df:5f:0d:4c:7e:94:8b: 3c:ab:37:11:8d:fa:65:1e:1b:eb:4b:c7:d9:64:a2: 0f:d4:85:eb:45:9b:e0:7b:51:50:03:85:45:66:f4: a2:7d:e0:8d:ea:c3:9e:af:98:d1:a1:9d:83:e4:71: ae:c1:e5:cc:ed:4d:41:69:01:85:1d:72:aa:31:c1: 82:73:5f:be:92:23:68:e9:e7:94:2b:98:2f:22:a9: 84:b0:6a:e8:0f:7c:b2:f5:5c:a8:f5:97:40:b2:ad: f3:9f:ab:6a:7b:12:fb:34:99:29:98:0c:d4:7f:d1: c2:31:f0:20:1e:1e:bf:4b:3c:48:2c:a6:e5:b5:64: 8d:82:ea:d3:cb:49:83:e5:90:d5:ec:78:d7:60:82: eb:c3:78:c8:d7:44:66:59:fc:7c:72:ac:13:9d:6c: 2c:b9:50:8f:d7:1f:f6:4a:1e:cb:ab:3c:97:32:11: da:24:cd:cf:c0:bc:9b:4e:17:c7:0c:2c:d0:0e:1f: 30:b5:e1:73:6a:04:4a:c6:4f:c6:cd:6a:7e:38:6c: 2c:37:e1:89:ae:9e:3a:64:da:33:16:12:2b:70:3e: a6:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:0D:AD:BD:36:65:13:62:41:1F:33:A4:67:71:A2:EC:F1:F6:CC:8B X509v3 Authority Key Identifier: keyid:A5:F0:65:FC:C9:ED:A1:1D:CA:4D:0D:FC:6D:7C:99:07:52:98:D7:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfBl_MntoR3KTQ38bXyZB1KY1_8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:d3:89:7d:9d:d8:f7:4e:7c:8f:e6:00:a9:e2:ab:f7:ed:d2: f0:0a:21:d0:c3:15:41:17:7e:bd:52:e0:df:7f:39:06:d8:37: 6c:e2:53:1d:1e:26:bc:ea:42:60:3f:5b:9b:93:f3:17:3e:8b: f6:f6:4b:cb:01:9a:ab:24:5c:86:5d:e9:69:a6:b9:a9:cb:1d: 5a:66:89:68:66:77:3a:4c:df:8b:e8:2d:31:79:c4:08:e4:7c: 94:97:0a:54:d4:93:b5:23:84:a5:63:68:2c:eb:d6:f4:68:0f: f0:d2:a7:96:53:ec:75:7b:ad:47:83:f5:05:15:b2:a2:31:ed: 49:0b:e0:1f:82:2a:d6:67:d3:1a:2b:ae:05:01:82:93:6c:62: d3:a4:04:0e:29:3f:a2:73:d0:0d:c7:34:91:f9:7f:d6:e6:0e: e9:79:84:88:26:51:46:34:3c:a7:cd:3b:61:63:8c:0a:e4:b7: e0:1b:84:f9:f0:20:55:94:98:47:fb:7e:18:e4:30:32:e6:d7: 08:b6:ed:f8:7d:2c:4f:21:74:05:9e:7f:fc:89:c9:cc:4e:04: 6a:06:6a:a7:03:25:af:85:f4:c3:67:aa:f0:2b:7e:77:26:95: c3:78:92:4a:c4:fd:a1:ac:d6:6e:e1:94:74:56:45:65:a4:78: dd:da:82:bc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQ2ODUxMTAvBgNVBAUTKEE1RjA2NUZDQzlFREExMURDQTREMERGQzZEN0M5OTA3 NTI5OEQ3RkYwHhcNMjYwMzI0MTk0NTUyWhcNMjYwMzMxMTk0NTUyWjAYMRYwFAYD VQQDEw02OWMyZTlmMC0yZjMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvm6+kDSb/FV5E7ppHh9j38WdsjZRN4Zlpo1fhugfbbVY2a1wV99fDUx+lIs8 qzcRjfplHhvrS8fZZKIP1IXrRZvge1FQA4VFZvSifeCN6sOer5jRoZ2D5HGuweXM 7U1BaQGFHXKqMcGCc1++kiNo6eeUK5gvIqmEsGroD3yy9Vyo9ZdAsq3zn6tqexL7 NJkpmAzUf9HCMfAgHh6/SzxILKbltWSNgurTy0mD5ZDV7HjXYILrw3jI10RmWfx8 cqwTnWwsuVCP1x/2Sh7LqzyXMhHaJM3PwLybThfHDCzQDh8wteFzagRKxk/GzWp+ OGwsN+GJrp46ZNozFhIrcD6mxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCQNrb02 ZRNiQR8zpGdxouzx9syLMB8GA1UdIwQYMBaAFKXwZfzJ7aEdyk0N/G18mQdSmNf/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDY4NS8yRDE1OTE4MkE5 NzMxMUVBOUFBQkU5MjNDNEY5QUUwMi9wZkJsX01udG9SM0tUUTM4Ylh5WkIxS1kx XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BmQmxfTW50b1IzS1RRMzhiWHlaQjFLWTFfOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDY4NS8yRDE1OTE4MkE5NzMxMUVBOUFBQkU5MjNDNEY5QUUwMi9wZkJsX01udG9S M0tUUTM4Ylh5WkIxS1kxXzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADdOJfZ3Y9058j+YAqeKr9+3S8Aoh0MMVQRd+vVLg3385Btg3bOJTHR4mvOpC YD9bm5PzFz6L9vZLywGaqyRchl3paaa5qcsdWmaJaGZ3Okzfi+gtMXnECOR8lJcK VNSTtSOEpWNoLOvW9GgP8NKnllPsdXutR4P1BRWyojHtSQvgH4Iq1mfTGiuuBQGC k2xi06QEDik/onPQDcc0kfl/1uYO6XmEiCZRRjQ8p807YWOMCuS34BuE+fAgVZSY R/t+GOQwMubXCLbt+H0sTyF0BZ5//InJzE4EagZqpwMlr4X0w2eq8Ct+dyaVw3iS SsT9oazWbuGUdFZFZaR43dqCvA== -----END CERTIFICATE-----Generated at Thu Mar 26 19:26:23 2026 by rpki-client