$ rpki-client -vvf rpki.apnic.net/member_repository/A918BB6D/880D6CACE91B11F0A7541612736F56BC/PNmBJcGXpVFDEgG3kG1QS7iySt4.mft File: PNmBJcGXpVFDEgG3kG1QS7iySt4.mft (raw, json) Hash identifier: +eeWp5BWScQHqXg6AStP+JgOvtNRlXTIBnif1oKeAHA= Subject key identifier: EC:5B:76:10:DD:61:9F:BD:49:D7:59:54:D3:46:31:EE:4A:C5:AA:EA Authority key identifier: 3C:D9:81:25:C1:97:A5:51:43:12:01:B7:90:6D:50:4B:B8:B2:4A:DE Certificate issuer: /CN=A918BB6D/serialNumber=3CD98125C197A551431201B7906D504BB8B24ADE Certificate serial: 2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNmBJcGXpVFDEgG3kG1QS7iySt4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BB6D/880D6CACE91B11F0A7541612736F56BC/PNmBJcGXpVFDEgG3kG1QS7iySt4.mft Manifest number: 2F Signing time: Wed 25 Mar 2026 07:53:05 +0000 Manifest this update: Wed 25 Mar 2026 07:53:04 +0000 Manifest next update: Wed 01 Apr 2026 07:53:04 +0000 Files and hashes: 1: PNmBJcGXpVFDEgG3kG1QS7iySt4.crl (hash: KYt8EbtGO6c+4tnxa3x9ZV+E8lMTDFYElO27ZCJIjqQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BB6D/880D6CACE91B11F0A7541612736F56BC/PNmBJcGXpVFDEgG3kG1QS7iySt4.crl rsync://rpki.apnic.net/member_repository/A918BB6D/880D6CACE91B11F0A7541612736F56BC/PNmBJcGXpVFDEgG3kG1QS7iySt4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNmBJcGXpVFDEgG3kG1QS7iySt4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:53:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BB6D, serialNumber=3CD98125C197A551431201B7906D504BB8B24ADE Validity Not Before: Mar 25 07:53:04 2026 GMT Not After : Apr 1 07:53:04 2026 GMT Subject: CN=69c39461-4ce9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8f:66:9b:0e:75:ad:11:cd:80:38:3b:33:7e: a9:33:72:97:fa:59:de:74:00:c1:1e:3d:c5:c7:2f: 5a:cd:9e:ea:09:da:a4:32:3a:fb:e0:b6:43:3e:ea: 87:8d:9a:97:89:70:46:18:15:50:8c:d0:b5:a6:f7: 30:62:d2:ec:d0:08:27:29:38:1f:55:9b:d0:d1:1a: e3:47:6e:af:5c:ea:9a:85:54:46:9a:08:5d:11:7d: 06:38:20:f6:bd:15:ce:91:ea:ba:1c:a9:46:71:06: 1b:31:51:9d:5d:da:7b:1e:4c:61:33:7e:56:c1:4b: a9:53:3b:2b:f5:6b:65:cc:78:66:71:db:12:a0:83: 88:df:65:56:37:7c:fb:e2:17:59:b3:2f:9c:55:96: 8f:e0:6f:e0:57:36:48:03:5f:cd:2c:c7:9d:fd:94: ab:d1:6d:59:27:39:9e:e4:35:ae:1d:9c:71:36:f3: d6:62:07:55:cb:58:54:8d:4a:66:c7:59:a8:39:6c: 1a:f0:88:8f:2a:7a:6f:b9:82:79:f0:42:4f:09:bc: 69:41:03:79:28:8e:6e:ff:d1:19:c5:63:05:69:5b: 15:cd:f1:ec:38:4b:dd:4d:c6:96:93:4a:da:28:03: 80:3e:d4:02:bf:57:b5:73:2a:80:11:69:13:e8:0c: 16:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:5B:76:10:DD:61:9F:BD:49:D7:59:54:D3:46:31:EE:4A:C5:AA:EA X509v3 Authority Key Identifier: keyid:3C:D9:81:25:C1:97:A5:51:43:12:01:B7:90:6D:50:4B:B8:B2:4A:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BB6D/880D6CACE91B11F0A7541612736F56BC/PNmBJcGXpVFDEgG3kG1QS7iySt4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNmBJcGXpVFDEgG3kG1QS7iySt4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BB6D/880D6CACE91B11F0A7541612736F56BC/PNmBJcGXpVFDEgG3kG1QS7iySt4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:b2:ff:3e:e0:cf:49:d2:3c:cd:81:b5:2b:fa:37:6c:d7:8b: ba:a0:c7:84:e5:c9:09:9f:9b:50:cd:42:06:d4:de:f0:fc:61: b1:52:18:bc:f1:86:1b:7d:ac:c9:9a:63:31:6b:a0:7f:26:ec: 8c:ae:06:d2:8e:b6:2b:ab:c5:ec:a3:b0:e2:28:0f:af:da:5a: 9b:b0:7d:8e:63:52:6d:c9:02:5f:22:94:39:2c:99:0f:e9:e8: f7:eb:1f:0c:f0:5d:62:91:07:cc:3c:0c:33:7c:1c:e0:f8:ec: f2:27:54:b8:cb:37:a9:f3:59:03:dd:a0:f9:97:a2:f2:d8:a4: 45:d2:1d:3f:45:f9:c8:0a:56:ec:04:f4:11:7d:99:4e:b8:58: 3d:a5:76:e6:5b:c5:a9:e8:e6:49:24:22:64:3c:ac:24:85:cf: 24:66:78:89:cb:40:ac:e7:20:10:03:8c:f9:0a:ec:68:95:81: 52:ff:15:64:4c:13:e2:a2:40:74:9c:31:46:cd:96:bf:8c:ba: 79:b6:da:f9:4f:83:9c:70:a4:18:3e:80:f2:9f:de:ea:ba:00: f5:87:1c:22:7e:e5:3e:e4:e3:46:71:b6:c8:91:48:f2:8d:56: 3b:65:cc:88:b4:2f:f0:e9:82:0d:9a:87:28:d9:d1:39:99:fe: f0:41:67:ca -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 QkI2RDExMC8GA1UEBRMoM0NEOTgxMjVDMTk3QTU1MTQzMTIwMUI3OTA2RDUwNEJC OEIyNEFERTAeFw0yNjAzMjUwNzUzMDRaFw0yNjA0MDEwNzUzMDRaMBgxFjAUBgNV BAMTDTY5YzM5NDYxLTRjZTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwj2abDnWtEc2AODszfqkzcpf6Wd50AMEePcXHL1rNnuoJ2qQyOvvgtkM+6oeN mpeJcEYYFVCM0LWm9zBi0uzQCCcpOB9Vm9DRGuNHbq9c6pqFVEaaCF0RfQY4IPa9 Fc6R6rocqUZxBhsxUZ1d2nseTGEzflbBS6lTOyv1a2XMeGZx2xKgg4jfZVY3fPvi F1mzL5xVlo/gb+BXNkgDX80sx539lKvRbVknOZ7kNa4dnHE289ZiB1XLWFSNSmbH Wag5bBrwiI8qem+5gnnwQk8JvGlBA3kojm7/0RnFYwVpWxXN8ew4S91NxpaTStoo A4A+1AK/V7VzKoARaRPoDBatAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU7Ft2EN1h n71J11lU00Yx7krFquowHwYDVR0jBBgwFoAUPNmBJcGXpVFDEgG3kG1QS7iySt4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThCQjZELzg4MEQ2Q0FDRTkx QjExRjBBNzU0MTYxMjczNkY1NkJDL1BObUJKY0dYcFZGREVnRzNrRzFRUzdpeVN0 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUE5tQkpjR1hwVkZERWdHM2tHMVFTN2l5U3Q0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThC QjZELzg4MEQ2Q0FDRTkxQjExRjBBNzU0MTYxMjczNkY1NkJDL1BObUJKY0dYcFZG REVnRzNrRzFRUzdpeVN0NC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBusv8+4M9J0jzNgbUr+jds14u6oMeE5ckJn5tQzUIG1N7w/GGxUhi88YYbfazJ mmMxa6B/JuyMrgbSjrYrq8Xso7DiKA+v2lqbsH2OY1JtyQJfIpQ5LJkP6ej36x8M 8F1ikQfMPAwzfBzg+OzyJ1S4yzep81kD3aD5l6Ly2KRF0h0/RfnIClbsBPQRfZlO uFg9pXbmW8Wp6OZJJCJkPKwkhc8kZniJy0Cs5yAQA4z5CuxolYFS/xVkTBPiokB0 nDFGzZa/jLp5ttr5T4OccKQYPoDyn97qugD1hxwifuU+5ONGcbbIkUjyjVY7ZcyI tC/w6YINmoco2dE5mf7wQWfK -----END CERTIFICATE-----Generated at Thu Mar 26 02:42:17 2026 by rpki-client