$ rpki-client -vvf rpki.apnic.net/member_repository/A918BB6D/880D6CACE91B11F0A7541612736F56BC/PNmBJcGXpVFDEgG3kG1QS7iySt4.mft File: PNmBJcGXpVFDEgG3kG1QS7iySt4.mft (raw, json) Hash identifier: PnlC5kjk4a2v/zbAkrrjIzrkiUOregrUhqO/2DYOqIk= Subject key identifier: 57:C6:07:58:68:59:8E:22:D3:94:93:45:42:48:C1:46:12:85:D0:EC Authority key identifier: 3C:D9:81:25:C1:97:A5:51:43:12:01:B7:90:6D:50:4B:B8:B2:4A:DE Certificate issuer: /CN=A918BB6D/serialNumber=3CD98125C197A551431201B7906D504BB8B24ADE Certificate serial: 48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNmBJcGXpVFDEgG3kG1QS7iySt4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BB6D/880D6CACE91B11F0A7541612736F56BC/PNmBJcGXpVFDEgG3kG1QS7iySt4.mft Manifest number: 48 Signing time: Wed 13 May 2026 08:31:26 +0000 Manifest this update: Wed 13 May 2026 08:31:26 +0000 Manifest next update: Wed 20 May 2026 08:31:26 +0000 Files and hashes: 1: PNmBJcGXpVFDEgG3kG1QS7iySt4.crl (hash: Csj7RJkiLLKc+1FABP0G6gmLwvTMg8sNjwFzEGjMv6U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BB6D/880D6CACE91B11F0A7541612736F56BC/PNmBJcGXpVFDEgG3kG1QS7iySt4.crl rsync://rpki.apnic.net/member_repository/A918BB6D/880D6CACE91B11F0A7541612736F56BC/PNmBJcGXpVFDEgG3kG1QS7iySt4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNmBJcGXpVFDEgG3kG1QS7iySt4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 08:09:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BB6D, serialNumber=3CD98125C197A551431201B7906D504BB8B24ADE Validity Not Before: May 13 08:31:26 2026 GMT Not After : May 20 08:31:26 2026 GMT Subject: CN=6a0436de-81dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:af:c8:2d:13:27:d7:ae:f4:18:fb:c9:18:b3: 68:93:0c:69:b8:3d:a9:9b:81:35:34:d5:69:37:b9: 03:d0:70:fc:04:c2:9a:80:b8:c7:5e:8a:c5:8b:8e: fc:f9:8c:dc:31:70:de:b1:b8:95:ec:62:2b:4b:00: 85:ce:61:35:c5:43:52:dc:e9:ac:ea:d6:78:82:60: f8:34:6e:6d:f2:ec:e3:19:e9:4b:63:5d:5d:e7:73: 25:c5:89:ad:20:9b:ec:b2:65:7e:52:43:13:05:8b: 9e:18:d7:1e:9b:8a:13:09:6c:51:7d:1a:56:dd:1d: e0:f2:8b:ed:8f:82:97:fb:66:37:14:29:b9:90:7d: 2a:0d:32:93:f5:af:c1:24:a6:cf:10:12:08:f0:0f: c3:ed:5a:95:36:59:17:15:45:f3:ce:8d:c0:52:05: c7:13:76:b9:14:38:f4:23:ff:66:90:64:97:50:4b: 14:3d:ec:9b:2e:48:c2:cd:1d:e1:24:ba:5a:a4:0c: 04:2e:ed:24:28:a4:fe:e1:6f:3d:89:ef:ac:bb:af: b1:8c:09:86:c6:bf:59:23:24:d7:3e:9c:4c:72:f0: 53:62:28:b6:f4:59:85:9b:e4:66:12:93:09:f9:e1: 1e:9b:d1:f4:52:12:0d:15:5a:83:e8:61:9a:79:58: be:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:C6:07:58:68:59:8E:22:D3:94:93:45:42:48:C1:46:12:85:D0:EC X509v3 Authority Key Identifier: keyid:3C:D9:81:25:C1:97:A5:51:43:12:01:B7:90:6D:50:4B:B8:B2:4A:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BB6D/880D6CACE91B11F0A7541612736F56BC/PNmBJcGXpVFDEgG3kG1QS7iySt4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNmBJcGXpVFDEgG3kG1QS7iySt4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BB6D/880D6CACE91B11F0A7541612736F56BC/PNmBJcGXpVFDEgG3kG1QS7iySt4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:e0:78:30:34:ba:5f:bc:90:dd:ee:40:6b:77:f4:04:c7:f5: 43:1d:10:8b:ea:38:1e:01:a1:89:5f:da:97:41:16:b5:e0:3b: 5f:34:1d:e9:6a:aa:fa:3f:29:a5:11:57:cb:d7:68:96:36:d2: 38:5c:bf:09:c7:be:9f:a4:a8:a6:fa:c0:c4:e5:0d:33:dc:82: 55:4a:85:2c:07:91:38:a8:17:f4:07:52:00:29:2c:95:4f:ae: 79:89:05:be:04:6c:90:36:69:db:bc:55:ce:cb:c6:23:50:28: b9:7b:48:ba:97:a0:d1:e1:17:7c:02:a7:dd:43:1a:ab:83:22: de:d6:6e:26:76:ae:48:4d:81:29:6c:2d:c3:29:78:83:b1:43: 8d:8b:a4:29:e2:fc:db:ff:56:01:87:4a:35:2c:15:8b:e5:0e: d2:dd:80:56:4c:20:8c:d2:35:ad:56:8a:a6:0d:f4:d2:ae:6a: 1d:bf:8e:5a:c6:f1:fa:91:b9:1b:1c:67:2e:2b:83:e1:f5:2b: 12:10:3a:2e:3c:e6:1f:53:a5:89:79:38:58:af:27:78:8f:15: 74:2a:94:d6:ac:f3:5f:66:82:0a:42:d6:2b:17:3f:dc:71:0e: 9e:e0:55:ed:36:e8:e4:77:0a:1d:c3:30:f5:c0:0b:10:9f:4f: 0d:14:a6:40 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 QkI2RDExMC8GA1UEBRMoM0NEOTgxMjVDMTk3QTU1MTQzMTIwMUI3OTA2RDUwNEJC OEIyNEFERTAeFw0yNjA1MTMwODMxMjZaFw0yNjA1MjAwODMxMjZaMBgxFjAUBgNV BAMTDTZhMDQzNmRlLTgxZGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCer8gtEyfXrvQY+8kYs2iTDGm4PambgTU01Wk3uQPQcPwEwpqAuMdeisWLjvz5 jNwxcN6xuJXsYitLAIXOYTXFQ1Lc6azq1niCYPg0bm3y7OMZ6UtjXV3ncyXFia0g m+yyZX5SQxMFi54Y1x6bihMJbFF9GlbdHeDyi+2Pgpf7ZjcUKbmQfSoNMpP1r8Ek ps8QEgjwD8PtWpU2WRcVRfPOjcBSBccTdrkUOPQj/2aQZJdQSxQ97JsuSMLNHeEk ulqkDAQu7SQopP7hbz2J76y7r7GMCYbGv1kjJNc+nExy8FNiKLb0WYWb5GYSkwn5 4R6b0fRSEg0VWoPoYZp5WL4zAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUV8YHWGhZ jiLTlJNFQkjBRhKF0OwwHwYDVR0jBBgwFoAUPNmBJcGXpVFDEgG3kG1QS7iySt4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThCQjZELzg4MEQ2Q0FDRTkx QjExRjBBNzU0MTYxMjczNkY1NkJDL1BObUJKY0dYcFZGREVnRzNrRzFRUzdpeVN0 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUE5tQkpjR1hwVkZERWdHM2tHMVFTN2l5U3Q0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThC QjZELzg4MEQ2Q0FDRTkxQjExRjBBNzU0MTYxMjczNkY1NkJDL1BObUJKY0dYcFZG REVnRzNrRzFRUzdpeVN0NC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBt4HgwNLpfvJDd7kBrd/QEx/VDHRCL6jgeAaGJX9qXQRa14DtfNB3paqr6Pyml EVfL12iWNtI4XL8Jx76fpKim+sDE5Q0z3IJVSoUsB5E4qBf0B1IAKSyVT655iQW+ BGyQNmnbvFXOy8YjUCi5e0i6l6DR4Rd8AqfdQxqrgyLe1m4mdq5ITYEpbC3DKXiD sUONi6Qp4vzb/1YBh0o1LBWL5Q7S3YBWTCCM0jWtVoqmDfTSrmodv45axvH6kbkb HGcuK4Ph9SsSEDouPOYfU6WJeThYryd4jxV0KpTWrPNfZoIKQtYrFz/ccQ6e4FXt NujkdwodwzD1wAsQn08NFKZA -----END CERTIFICATE-----Generated at Wed May 13 12:44:40 2026 by rpki-client