$ rpki-client -vvf rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.mft File: pGM3j5KTiRbgseQTrw8MinPCH08.mft (raw, json) Hash identifier: dxxMhFTjy22lNn0I8GCCzi7xmcoV32sntiDXXvDHE30= Subject key identifier: E6:1E:69:1D:21:E9:39:FE:B5:DB:4C:10:89:AC:EC:A0:19:21:EE:DE Authority key identifier: A4:63:37:8F:92:93:89:16:E0:B1:E4:13:AF:0F:0C:8A:73:C2:1F:4F Certificate issuer: /CN=A917C3A7/serialNumber=A463378F92938916E0B1E413AF0F0C8A73C21F4F Certificate serial: 04F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGM3j5KTiRbgseQTrw8MinPCH08.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.mft Manifest number: 04F2 Signing time: Tue 24 Mar 2026 23:24:50 +0000 Manifest this update: Tue 24 Mar 2026 23:24:50 +0000 Manifest next update: Tue 31 Mar 2026 23:24:50 +0000 Files and hashes: 1: pGM3j5KTiRbgseQTrw8MinPCH08.crl (hash: IFdQGEXgIz/kQhw/kYlCA1NJu7sPaLxZkMEonPO1fog=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.crl rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGM3j5KTiRbgseQTrw8MinPCH08.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:24:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1266 (0x4f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C3A7, serialNumber=A463378F92938916E0B1E413AF0F0C8A73C21F4F Validity Not Before: Mar 24 23:24:50 2026 GMT Not After : Mar 31 23:24:50 2026 GMT Subject: CN=69c31d42-f548 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d7:7b:3f:12:e7:09:76:dd:39:48:19:eb:81: 3e:4c:ea:33:69:e9:45:7f:c0:5f:91:72:1d:b2:52: 51:9c:ab:89:3c:bd:88:ea:d8:dd:58:49:d2:93:f7: 7c:ba:ea:39:18:0c:90:5c:77:cd:f0:fa:04:76:65: ef:a0:48:eb:d9:19:44:ed:e5:bb:d7:33:24:ac:71: 5e:3f:f1:de:37:e7:ec:60:06:45:d4:ec:fd:3c:ca: c2:de:d9:44:e5:4c:fd:01:38:ba:46:42:47:62:cf: 03:63:11:2f:d2:30:62:ae:b3:fd:a5:58:84:cc:1c: 72:c1:5a:e4:0f:ff:e0:33:b2:ba:90:78:f5:d3:9b: 1c:6c:de:03:f1:88:6a:10:a2:cd:4b:13:fd:81:2b: 9c:96:2c:d3:ef:dc:f8:b6:ae:fb:f7:60:da:94:59: 69:53:a3:5b:98:a0:38:61:be:1a:97:b2:63:f7:0e: 3a:16:3f:ac:48:a3:fb:58:15:65:d3:99:00:cd:38: f8:ab:8e:46:f7:9d:df:0b:2b:d2:0a:be:2a:b1:6b: c6:7c:33:00:53:00:8c:af:f3:a2:c4:6b:0e:85:11: 04:0d:ea:a4:73:26:fd:dc:dc:bd:cd:4e:98:2b:2f: 09:23:3f:85:fd:84:57:8c:34:6a:ff:14:b5:69:ba: f9:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:1E:69:1D:21:E9:39:FE:B5:DB:4C:10:89:AC:EC:A0:19:21:EE:DE X509v3 Authority Key Identifier: keyid:A4:63:37:8F:92:93:89:16:E0:B1:E4:13:AF:0F:0C:8A:73:C2:1F:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGM3j5KTiRbgseQTrw8MinPCH08.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:3c:46:41:2a:c1:2c:e2:2c:71:d3:68:8d:07:45:f9:60:7b: 72:42:7f:89:64:99:57:68:cc:7d:c8:a4:16:31:63:b9:f1:07: d0:35:2c:ca:3e:3d:b1:dc:80:1c:e2:1b:07:e2:a1:76:f9:a4: 79:1c:ca:69:1e:d3:e7:c2:eb:06:89:d6:de:d7:a3:95:d3:7b: ab:b4:37:8f:b1:f0:37:8a:1f:ba:3b:5c:41:49:f6:2c:e8:69: 56:a5:e0:b3:af:0f:1b:f7:85:c0:cc:d5:df:3b:92:87:a4:11: d7:a1:69:10:cb:b3:0b:be:06:e9:8c:f9:78:7e:3f:e7:fa:12: 30:4d:4d:e9:4d:54:3b:70:51:64:78:68:9e:c5:5b:50:c4:ce: 83:d6:48:bf:bc:88:6a:89:42:e8:bd:cd:10:c0:3d:9d:73:d7: 60:cb:84:58:11:75:98:94:59:57:f8:f0:d4:ab:a7:e0:8f:cc: c4:57:fd:49:05:58:30:e1:3d:65:86:69:06:ea:a4:30:ef:0b: e1:24:5e:80:17:d1:58:b1:d1:bc:8f:34:ae:b8:a9:93:8d:cc: 5a:7c:b1:17:39:ab:44:31:3f:1e:d5:68:0e:5f:f1:23:f4:f7: d1:79:dd:6a:a6:42:a9:d0:82:16:00:8a:e9:61:58:f2:52:18: 44:48:03:ab -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MzQTcxMTAvBgNVBAUTKEE0NjMzNzhGOTI5Mzg5MTZFMEIxRTQxM0FGMEYwQzhB NzNDMjFGNEYwHhcNMjYwMzI0MjMyNDUwWhcNMjYwMzMxMjMyNDUwWjAYMRYwFAYD VQQDEw02OWMzMWQ0Mi1mNTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr9d7PxLnCXbdOUgZ64E+TOozaelFf8BfkXIdslJRnKuJPL2I6tjdWEnSk/d8 uuo5GAyQXHfN8PoEdmXvoEjr2RlE7eW71zMkrHFeP/HeN+fsYAZF1Oz9PMrC3tlE 5Uz9ATi6RkJHYs8DYxEv0jBirrP9pViEzBxywVrkD//gM7K6kHj105scbN4D8Yhq EKLNSxP9gSuclizT79z4tq7792DalFlpU6NbmKA4Yb4al7Jj9w46Fj+sSKP7WBVl 05kAzTj4q45G953fCyvSCr4qsWvGfDMAUwCMr/OixGsOhREEDeqkcyb93Ny9zU6Y Ky8JIz+F/YRXjDRq/xS1abr59QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOYeaR0h 6Tn+tdtMEIms7KAZIe7eMB8GA1UdIwQYMBaAFKRjN4+Sk4kW4LHkE68PDIpzwh9P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzNBNy9FNDFGRjBBNjUz MjgxMUVDODM1MkQyNDVDNEY5QUUwMi9wR00zajVLVGlSYmdzZVFUcnc4TWluUENI MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BHTTNqNUtUaVJiZ3NlUVRydzhNaW5QQ0gwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzNBNy9FNDFGRjBBNjUzMjgxMUVDODM1MkQyNDVDNEY5QUUwMi9wR00zajVLVGlS YmdzZVFUcnc4TWluUENIMDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjzxGQSrBLOIscdNojQdF+WB7ckJ/iWSZV2jMfcikFjFjufEH0DUsyj49sdyA HOIbB+KhdvmkeRzKaR7T58LrBonW3tejldN7q7Q3j7HwN4ofujtcQUn2LOhpVqXg s68PG/eFwMzV3zuSh6QR16FpEMuzC74G6Yz5eH4/5/oSME1N6U1UO3BRZHhonsVb UMTOg9ZIv7yIaolC6L3NEMA9nXPXYMuEWBF1mJRZV/jw1Kun4I/MxFf9SQVYMOE9 ZYZpBuqkMO8L4SRegBfRWLHRvI80rripk43MWnyxFzmrRDE/HtVoDl/xI/T30Xnd aqZCqdCCFgCK6WFY8lIYREgDqw== -----END CERTIFICATE-----Generated at Thu Mar 26 02:33:15 2026 by rpki-client