$ rpki-client -vvf rpki.apnic.net/member_repository/A919D109/DAC666C05CE011EEB6C1B513C4F9AE02/Pq60tRb3A-pY8W4I2opmdwP7XK4.mft File: Pq60tRb3A-pY8W4I2opmdwP7XK4.mft (raw, json) Hash identifier: ShycaoBBvV8E7xZSu68gTdur5DnbjL7F1UjRbOYScZA= Subject key identifier: 07:F2:E0:8F:28:2A:BD:E2:1F:A4:6B:50:BC:22:E2:C8:F2:BF:4C:1A Authority key identifier: 3E:AE:B4:B5:16:F7:03:EA:58:F1:6E:08:DA:8A:66:77:03:FB:5C:AE Certificate issuer: /CN=A919D109/serialNumber=3EAEB4B516F703EA58F16E08DA8A667703FB5CAE Certificate serial: 01E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pq60tRb3A-pY8W4I2opmdwP7XK4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D109/DAC666C05CE011EEB6C1B513C4F9AE02/Pq60tRb3A-pY8W4I2opmdwP7XK4.mft Manifest number: 01DD Signing time: Wed 25 Mar 2026 02:54:32 +0000 Manifest this update: Wed 25 Mar 2026 02:54:31 +0000 Manifest next update: Wed 01 Apr 2026 02:54:31 +0000 Files and hashes: 1: Pq60tRb3A-pY8W4I2opmdwP7XK4.crl (hash: nUVXJIHceylAI+NsF4k/YrwOov9r575T/hYBj4HxK1Y=) 2: B67DC27A60E311EEB04BEA49C4F9AE02.roa (hash: Ammp8qF05nah6v/McxV23VKxzM9VW/7aLFZmanvDnyE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D109/DAC666C05CE011EEB6C1B513C4F9AE02/Pq60tRb3A-pY8W4I2opmdwP7XK4.crl rsync://rpki.apnic.net/member_repository/A919D109/DAC666C05CE011EEB6C1B513C4F9AE02/Pq60tRb3A-pY8W4I2opmdwP7XK4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pq60tRb3A-pY8W4I2opmdwP7XK4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:54:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 488 (0x1e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D109, serialNumber=3EAEB4B516F703EA58F16E08DA8A667703FB5CAE Validity Not Before: Mar 25 02:54:31 2026 GMT Not After : Apr 1 02:54:31 2026 GMT Subject: CN=69c34e68-2246 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:d3:a7:e6:0d:fd:a0:b3:ab:55:04:8b:cd:b6: b3:e5:e1:97:46:41:e3:f3:4f:26:3c:9d:a7:93:11: 8f:24:bf:ee:53:00:de:89:f6:df:72:2b:8c:41:9b: a8:10:b6:91:6b:c2:80:31:78:16:de:39:d9:82:83: d5:77:40:2f:1f:00:a7:81:19:c3:58:db:34:f7:19: 17:56:e0:a6:f4:ec:26:7b:6c:61:4b:12:77:03:09: 15:b5:2c:75:96:bc:c9:d2:ba:12:3c:0d:9a:c0:6d: e4:0c:0a:14:2e:5e:e2:4c:d1:66:86:51:02:5b:25: 8b:21:3e:bf:ce:68:8d:20:c4:19:7c:44:ba:09:a7: 4b:cc:8c:86:9a:1f:85:99:68:b5:3f:c1:58:32:58: 1d:1b:5e:55:55:73:67:d7:db:31:bc:7a:2f:4c:56: a4:a5:14:5a:4f:ef:f4:0e:8e:88:d1:d2:58:fb:2a: 02:bd:5a:46:1c:20:50:83:a2:f1:2c:7b:9c:19:a8: c3:7e:6f:b7:6f:e1:eb:4c:51:6a:60:d9:c4:6e:fc: f7:48:5f:0f:cb:e9:f7:bb:88:ba:d4:11:28:bc:39: 56:93:fc:a2:02:4e:8b:e0:05:8b:03:d5:a1:13:56: e8:9b:9f:ca:b3:42:f7:e8:24:30:b1:1c:38:d4:5a: 0e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:F2:E0:8F:28:2A:BD:E2:1F:A4:6B:50:BC:22:E2:C8:F2:BF:4C:1A X509v3 Authority Key Identifier: keyid:3E:AE:B4:B5:16:F7:03:EA:58:F1:6E:08:DA:8A:66:77:03:FB:5C:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D109/DAC666C05CE011EEB6C1B513C4F9AE02/Pq60tRb3A-pY8W4I2opmdwP7XK4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pq60tRb3A-pY8W4I2opmdwP7XK4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D109/DAC666C05CE011EEB6C1B513C4F9AE02/Pq60tRb3A-pY8W4I2opmdwP7XK4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:28:58:ab:05:f3:ff:9f:88:47:eb:37:f5:6a:a3:f2:ed:52: a6:41:63:d7:21:84:33:03:41:78:3e:0f:6e:3d:7a:59:e9:2c: 05:ff:1a:70:d1:50:b4:7a:4b:1c:81:32:6f:92:71:12:19:2d: 0e:cd:8d:58:b3:7a:3a:08:3d:a2:85:f5:e1:d0:a5:04:df:c8: 1f:39:ca:89:3c:d7:4d:e2:13:2c:3c:b3:86:04:d9:6f:31:a7: 70:64:43:37:5d:3a:7d:d4:53:a0:7f:01:66:a2:aa:c0:52:19: d1:9d:1b:7f:f1:76:af:0e:63:f0:be:30:d7:02:45:49:2d:93: ce:f7:34:16:5f:c8:c8:ef:f3:4a:ce:24:24:ff:67:26:fb:cb: 9e:cb:e6:71:f8:1d:11:97:2b:80:c9:bc:ee:fc:77:db:d2:6b: d3:15:05:a2:69:05:78:a5:8c:0c:f7:31:4f:6d:6b:0c:9b:c6: 4b:bb:da:70:3e:e9:2e:3a:2c:45:1a:18:22:79:4e:ed:4b:a7: 40:d1:93:3c:1c:30:17:a0:37:95:64:2d:f2:4f:78:b8:f7:b5: 8e:a5:94:3a:c4:e2:15:0c:ae:39:3a:44:15:83:ff:24:23:4b: 6e:63:fc:94:82:bc:08:74:26:0d:e9:f0:a4:2d:a0:5e:7e:d8: b6:60:17:19 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAegwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQxMDkxMTAvBgNVBAUTKDNFQUVCNEI1MTZGNzAzRUE1OEYxNkUwOERBOEE2Njc3 MDNGQjVDQUUwHhcNMjYwMzI1MDI1NDMxWhcNMjYwNDAxMDI1NDMxWjAYMRYwFAYD VQQDEw02OWMzNGU2OC0yMjQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhtOn5g39oLOrVQSLzbaz5eGXRkHj808mPJ2nkxGPJL/uUwDeifbfciuMQZuo ELaRa8KAMXgW3jnZgoPVd0AvHwCngRnDWNs09xkXVuCm9Owme2xhSxJ3AwkVtSx1 lrzJ0roSPA2awG3kDAoULl7iTNFmhlECWyWLIT6/zmiNIMQZfES6CadLzIyGmh+F mWi1P8FYMlgdG15VVXNn19sxvHovTFakpRRaT+/0Do6I0dJY+yoCvVpGHCBQg6Lx LHucGajDfm+3b+HrTFFqYNnEbvz3SF8Py+n3u4i61BEovDlWk/yiAk6L4AWLA9Wh E1bom5/Ks0L36CQwsRw41FoOxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAfy4I8o Kr3iH6RrULwi4sjyv0waMB8GA1UdIwQYMBaAFD6utLUW9wPqWPFuCNqKZncD+1yu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDEwOS9EQUM2NjZDMDVD RTAxMUVFQjZDMUI1MTNDNEY5QUUwMi9QcTYwdFJiM0EtcFk4VzRJMm9wbWR3UDdY SzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BxNjB0UmIzQS1wWThXNEkyb3BtZHdQN1hLNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDEwOS9EQUM2NjZDMDVDRTAxMUVFQjZDMUI1MTNDNEY5QUUwMi9QcTYwdFJiM0Et cFk4VzRJMm9wbWR3UDdYSzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASShYqwXz/5+IR+s39Wqj8u1SpkFj1yGEMwNBeD4Pbj16WeksBf8acNFQtHpL HIEyb5JxEhktDs2NWLN6Ogg9ooX14dClBN/IHznKiTzXTeITLDyzhgTZbzGncGRD N106fdRToH8BZqKqwFIZ0Z0bf/F2rw5j8L4w1wJFSS2Tzvc0Fl/IyO/zSs4kJP9n JvvLnsvmcfgdEZcrgMm87vx329Jr0xUFomkFeKWMDPcxT21rDJvGS7vacD7pLjos RRoYInlO7UunQNGTPBwwF6A3lWQt8k94uPe1jqWUOsTiFQyuOTpEFYP/JCNLbmP8 lIK8CHQmDenwpC2gXn7YtmAXGQ== -----END CERTIFICATE-----Generated at Thu Mar 26 00:53:42 2026 by rpki-client