$ rpki-client -vvf rpki.apnic.net/member_repository/A917C422/A2C738681D8511E287036ADC08B02CD2/PgyjPXanW6ZPDdawakQr5pWGRBo.mft File: PgyjPXanW6ZPDdawakQr5pWGRBo.mft (raw, json) Hash identifier: Hu1LoWZ+93rvumz13XxDlFWczFdwt/wbMnHikHR5znA= Subject key identifier: C2:9A:98:91:64:02:83:61:E6:5E:08:C1:40:39:DB:EA:1E:5F:24:01 Authority key identifier: 3E:0C:A3:3D:76:A7:5B:A6:4F:0D:D6:B0:6A:44:2B:E6:95:86:44:1A Certificate issuer: /CN=A917C422/serialNumber=3E0CA33D76A75BA64F0DD6B06A442BE69586441A Certificate serial: 3557 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgyjPXanW6ZPDdawakQr5pWGRBo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C422/A2C738681D8511E287036ADC08B02CD2/PgyjPXanW6ZPDdawakQr5pWGRBo.mft Manifest number: 3545 Signing time: Tue 12 May 2026 14:26:30 +0000 Manifest this update: Tue 12 May 2026 14:26:29 +0000 Manifest next update: Tue 19 May 2026 14:26:29 +0000 Files and hashes: 1: PgyjPXanW6ZPDdawakQr5pWGRBo.crl (hash: JbAwSQEe1dqob1dCwOzDQd21Ja81nC6PYuFdmI2gfjw=) 2: D69F6688CD8511EBB5252063C4F9AE02.roa (hash: TYTool8z77Qm0uVA+1XtSBmD4W/ew0FLlQD2j6h3SPU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C422/A2C738681D8511E287036ADC08B02CD2/PgyjPXanW6ZPDdawakQr5pWGRBo.crl rsync://rpki.apnic.net/member_repository/A917C422/A2C738681D8511E287036ADC08B02CD2/PgyjPXanW6ZPDdawakQr5pWGRBo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgyjPXanW6ZPDdawakQr5pWGRBo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 14:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13655 (0x3557) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C422, serialNumber=3E0CA33D76A75BA64F0DD6B06A442BE69586441A Validity Not Before: May 12 14:26:29 2026 GMT Not After : May 19 14:26:29 2026 GMT Subject: CN=6a033896-6924 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:aa:1e:f9:c7:12:4e:a0:00:5e:0a:84:bd:72: 6d:2e:c8:05:91:34:cf:6c:85:77:7d:70:cf:a2:78: bb:fa:2b:70:93:fc:30:c7:91:7b:d5:03:74:c3:16: bf:e0:24:12:f9:a0:8e:c1:2b:0c:f7:3d:ae:6b:e6: 9a:9c:e4:c3:99:3f:16:3c:ac:c8:6b:51:27:5b:38: 49:ac:1c:88:d3:4f:04:15:d8:e8:13:f6:26:4d:4f: 70:32:e1:ec:15:b9:66:b8:4b:03:88:1b:e0:3e:b2: bf:51:f1:af:de:b9:36:27:c2:d5:28:1e:e6:7a:32: 4f:0e:a8:6c:75:6f:29:87:40:09:75:d3:3b:05:a8: 07:53:9c:2d:2a:50:2e:14:62:d4:2b:9c:41:c1:4b: 8a:e4:da:ec:2b:2b:e3:3a:46:1b:e1:42:85:ee:22: c1:25:c4:51:51:38:55:8a:64:72:95:0d:35:82:d4: 6f:09:00:d4:cc:bc:0e:a4:fe:1f:03:fd:e7:76:4e: 98:bb:03:3c:d8:af:e4:69:8b:78:5e:91:9e:b1:52: 89:c1:64:2a:8a:ed:31:94:49:be:6e:77:19:75:2e: 40:7d:28:ad:8c:14:f4:23:ec:20:e3:ba:e1:54:cc: 29:59:f3:94:b5:83:53:29:6b:b6:5f:04:00:a6:31: e5:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:9A:98:91:64:02:83:61:E6:5E:08:C1:40:39:DB:EA:1E:5F:24:01 X509v3 Authority Key Identifier: keyid:3E:0C:A3:3D:76:A7:5B:A6:4F:0D:D6:B0:6A:44:2B:E6:95:86:44:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C422/A2C738681D8511E287036ADC08B02CD2/PgyjPXanW6ZPDdawakQr5pWGRBo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgyjPXanW6ZPDdawakQr5pWGRBo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C422/A2C738681D8511E287036ADC08B02CD2/PgyjPXanW6ZPDdawakQr5pWGRBo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:aa:58:2c:cf:46:43:34:79:94:ea:8a:91:76:94:a6:a3:47: a0:bf:64:b3:a7:5c:8a:f8:b4:98:3b:54:6d:0a:8d:ca:97:b3: a3:8e:74:70:8c:f1:56:29:57:7c:2d:e1:a5:41:f6:b7:b4:af: 27:23:f1:ef:d1:bb:b2:de:b6:ff:86:88:a3:c4:82:94:0d:ba: 22:2f:5c:bd:1b:39:8d:5c:26:d4:d6:c4:20:ac:0a:d5:00:e8: bc:f9:fe:85:21:9f:28:ca:b4:fd:82:2f:2c:11:83:7d:2a:68: 58:9a:2f:8d:82:0e:20:f3:89:0f:f2:d5:aa:81:a8:9b:4a:cd: 18:b6:65:e5:b0:bc:4f:4e:d0:89:f9:0c:3b:01:ef:77:57:37: 34:71:4a:f5:ce:0b:fd:00:d0:0c:20:20:d0:ed:7f:d6:fa:f7: 2a:34:0a:19:23:62:1a:28:62:9e:0a:48:eb:18:1c:ed:28:7d: 06:89:0c:fd:46:5f:3a:15:67:ec:36:ee:96:c4:38:5c:a4:64: 58:3e:a3:e6:cb:80:3a:fd:36:eb:f2:3c:9f:b2:26:80:80:b2: 12:d3:40:4d:ef:8c:ae:f5:a7:a0:70:cd:89:16:91:5c:6f:37: 8f:e6:e2:ce:eb:4a:9a:c5:fd:2e:a7:b6:43:67:34:34:22:b0: 93:f1:54:d3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M0MjIxMTAvBgNVBAUTKDNFMENBMzNENzZBNzVCQTY0RjBERDZCMDZBNDQyQkU2 OTU4NjQ0MUEwHhcNMjYwNTEyMTQyNjI5WhcNMjYwNTE5MTQyNjI5WjAYMRYwFAYD VQQDEw02YTAzMzg5Ni02OTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmaoe+ccSTqAAXgqEvXJtLsgFkTTPbIV3fXDPoni7+itwk/wwx5F71QN0wxa/ 4CQS+aCOwSsM9z2ua+aanOTDmT8WPKzIa1EnWzhJrByI008EFdjoE/YmTU9wMuHs FblmuEsDiBvgPrK/UfGv3rk2J8LVKB7mejJPDqhsdW8ph0AJddM7BagHU5wtKlAu FGLUK5xBwUuK5NrsKyvjOkYb4UKF7iLBJcRRUThVimRylQ01gtRvCQDUzLwOpP4f A/3ndk6YuwM82K/kaYt4XpGesVKJwWQqiu0xlEm+bncZdS5AfSitjBT0I+wg47rh VMwpWfOUtYNTKWu2XwQApjHlewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMKamJFk AoNh5l4IwUA52+oeXyQBMB8GA1UdIwQYMBaAFD4Moz12p1umTw3WsGpEK+aVhkQa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzQyMi9BMkM3Mzg2ODFE ODUxMUUyODcwMzZBREMwOEIwMkNEMi9QZ3lqUFhhblc2WlBEZGF3YWtRcjVwV0dS Qm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BneWpQWGFuVzZaUERkYXdha1FyNXBXR1JCby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzQyMi9BMkM3Mzg2ODFEODUxMUUyODcwMzZBREMwOEIwMkNEMi9QZ3lqUFhhblc2 WlBEZGF3YWtRcjVwV0dSQm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoqpYLM9GQzR5lOqKkXaUpqNHoL9ks6dcivi0mDtUbQqNypezo450cIzxVilX fC3hpUH2t7SvJyPx79G7st62/4aIo8SClA26Ii9cvRs5jVwm1NbEIKwK1QDovPn+ hSGfKMq0/YIvLBGDfSpoWJovjYIOIPOJD/LVqoGom0rNGLZl5bC8T07QifkMOwHv d1c3NHFK9c4L/QDQDCAg0O1/1vr3KjQKGSNiGihingpI6xgc7Sh9BokM/UZfOhVn 7DbulsQ4XKRkWD6j5suAOv026/I8n7ImgICyEtNATe+MrvWnoHDNiRaRXG83j+bi zutKmsX9Lqe2Q2c0NCKwk/FU0w== -----END CERTIFICATE-----Generated at Wed May 13 07:02:27 2026 by rpki-client