$ rpki-client -vvf rpki.apnic.net/member_repository/A91A08FD/9F42EAD8C8AB11E9829D282FC4F9AE02/PB_di6MB3OPbPwvMJchpTOG83H0.mft File: PB_di6MB3OPbPwvMJchpTOG83H0.mft (raw, json) Hash identifier: FiH0rLaL5eTmizlhG0f0tk5BjMbTc2xXSGkglBm2Gvo= Subject key identifier: F7:B8:9E:3A:3D:0D:95:F0:5E:91:6F:85:4C:1F:92:E8:F2:64:83:26 Authority key identifier: 3C:1F:DD:8B:A3:01:DC:E3:DB:3F:0B:CC:25:C8:69:4C:E1:BC:DC:7D Certificate issuer: /CN=A91A08FD/serialNumber=3C1FDD8BA301DCE3DB3F0BCC25C8694CE1BCDC7D Certificate serial: 0E38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PB_di6MB3OPbPwvMJchpTOG83H0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A08FD/9F42EAD8C8AB11E9829D282FC4F9AE02/PB_di6MB3OPbPwvMJchpTOG83H0.mft Manifest number: 0E2C Signing time: Tue 12 May 2026 17:50:01 +0000 Manifest this update: Tue 12 May 2026 17:50:01 +0000 Manifest next update: Tue 19 May 2026 17:50:01 +0000 Files and hashes: 1: PB_di6MB3OPbPwvMJchpTOG83H0.crl (hash: KHoNaQQvI8G7qC0n/E9KSq3+5zEHT+3HQiMPe83wMLE=) 2: 3802A98EC8AC11E9877DCE2FC4F9AE02.roa (hash: yYvSgR/d3pmtKa3loQQjhww8sMlH1QWIAa+l4ZsuXaI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A08FD/9F42EAD8C8AB11E9829D282FC4F9AE02/PB_di6MB3OPbPwvMJchpTOG83H0.crl rsync://rpki.apnic.net/member_repository/A91A08FD/9F42EAD8C8AB11E9829D282FC4F9AE02/PB_di6MB3OPbPwvMJchpTOG83H0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PB_di6MB3OPbPwvMJchpTOG83H0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 17:50:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3640 (0xe38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A08FD, serialNumber=3C1FDD8BA301DCE3DB3F0BCC25C8694CE1BCDC7D Validity Not Before: May 12 17:50:01 2026 GMT Not After : May 19 17:50:01 2026 GMT Subject: CN=6a036849-1e0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:88:47:b6:8c:7e:83:ca:a7:a1:f5:d4:be:f6: 0d:71:c0:e3:61:0c:2d:88:7d:01:51:eb:95:19:1d: c1:ca:92:66:90:57:a8:41:f0:a1:4d:01:eb:76:cb: fb:d9:87:76:c4:0a:7f:5c:07:12:cb:55:db:b5:6a: e8:72:99:4c:72:0f:11:37:cf:a1:ca:74:16:a2:40: c4:13:7b:3a:4f:31:c5:79:ec:60:cb:0b:f3:94:50: a0:e3:7a:cb:55:fa:0c:5c:64:d6:eb:4b:bd:4c:e7: db:dc:fb:dd:4d:ea:cd:5e:5d:82:63:7f:cc:73:e4: 50:ad:7e:17:b8:09:9b:ab:ee:5a:40:f6:95:2b:be: 15:53:a2:ed:6c:fa:0c:26:6f:31:d2:10:43:e0:95: 15:e6:6f:d3:c3:85:f6:eb:d7:dc:23:a1:90:b2:df: 8e:67:e2:b3:e6:31:a5:b4:67:3b:2f:00:59:ab:44: d0:e1:10:f7:15:3a:ff:03:09:3a:4e:9a:86:b9:0a: 01:a3:58:b5:e0:7e:d3:a3:3a:7c:4c:ee:0c:8a:db: e6:86:24:54:97:9f:fa:62:41:eb:37:b9:2a:6b:64: bb:c5:86:b3:f9:d7:d8:f2:1e:63:45:c9:6c:65:34: e0:50:4a:72:02:24:97:39:45:41:34:be:09:3f:84: 6c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:B8:9E:3A:3D:0D:95:F0:5E:91:6F:85:4C:1F:92:E8:F2:64:83:26 X509v3 Authority Key Identifier: keyid:3C:1F:DD:8B:A3:01:DC:E3:DB:3F:0B:CC:25:C8:69:4C:E1:BC:DC:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A08FD/9F42EAD8C8AB11E9829D282FC4F9AE02/PB_di6MB3OPbPwvMJchpTOG83H0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PB_di6MB3OPbPwvMJchpTOG83H0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A08FD/9F42EAD8C8AB11E9829D282FC4F9AE02/PB_di6MB3OPbPwvMJchpTOG83H0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:57:79:3b:26:ea:d0:48:d0:e9:2e:dd:05:e7:04:70:4a:27: c8:83:ce:47:9a:b8:15:4e:83:da:d4:f7:69:b9:54:1a:0b:43: 2e:e7:3d:b4:9e:71:64:16:c1:29:6d:79:e7:af:f1:19:ba:3d: 1f:dc:37:41:80:17:31:a3:ea:fa:1e:00:a3:55:7e:12:fe:09: 26:02:bf:f0:b1:14:b4:0a:0a:51:a3:db:bf:ad:06:81:5f:8c: b7:35:3d:7f:45:25:21:bd:ee:ae:33:4b:5a:0e:a8:e6:76:18: 36:3b:02:7d:5f:5f:50:f9:6d:26:53:51:0e:fe:67:b1:00:f8: 13:ad:c9:fc:bc:a5:f9:c2:8b:0e:a5:4e:ea:b8:d2:e0:11:92: 0b:6a:71:fa:1b:1c:96:63:80:a5:f0:c9:63:99:e2:c1:c7:59: 39:f4:f8:6b:15:2a:27:14:41:84:be:6a:a0:8d:40:3a:e6:93: 49:cb:38:a1:a2:9c:f6:b3:92:12:7f:9b:d0:fa:7f:97:33:53: 0b:c2:35:6f:ec:bc:31:df:b5:b0:16:45:b4:4c:f2:e0:af:63: ad:d6:ec:ff:f8:28:ab:99:af:2a:a5:a9:99:b0:32:db:7a:52: d9:ce:24:85:e8:4a:4b:30:ae:d3:84:87:95:32:8d:bf:55:b1: ec:81:2f:8c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDjgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA4RkQxMTAvBgNVBAUTKDNDMUZERDhCQTMwMURDRTNEQjNGMEJDQzI1Qzg2OTRD RTFCQ0RDN0QwHhcNMjYwNTEyMTc1MDAxWhcNMjYwNTE5MTc1MDAxWjAYMRYwFAYD VQQDEw02YTAzNjg0OS0xZTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvYhHtox+g8qnofXUvvYNccDjYQwtiH0BUeuVGR3BypJmkFeoQfChTQHrdsv7 2Yd2xAp/XAcSy1XbtWrocplMcg8RN8+hynQWokDEE3s6TzHFeexgywvzlFCg43rL VfoMXGTW60u9TOfb3PvdTerNXl2CY3/Mc+RQrX4XuAmbq+5aQPaVK74VU6LtbPoM Jm8x0hBD4JUV5m/Tw4X269fcI6GQst+OZ+Kz5jGltGc7LwBZq0TQ4RD3FTr/Awk6 TpqGuQoBo1i14H7Tozp8TO4MitvmhiRUl5/6YkHrN7kqa2S7xYaz+dfY8h5jRcls ZTTgUEpyAiSXOUVBNL4JP4Rs+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPe4njo9 DZXwXpFvhUwfkujyZIMmMB8GA1UdIwQYMBaAFDwf3YujAdzj2z8LzCXIaUzhvNx9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDhGRC85RjQyRUFEOEM4 QUIxMUU5ODI5RDI4MkZDNEY5QUUwMi9QQl9kaTZNQjNPUGJQd3ZNSmNocFRPRzgz SDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BCX2RpNk1CM09QYlB3dk1KY2hwVE9HODNIMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDhGRC85RjQyRUFEOEM4QUIxMUU5ODI5RDI4MkZDNEY5QUUwMi9QQl9kaTZNQjNP UGJQd3ZNSmNocFRPRzgzSDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQ1d5Oybq0EjQ6S7dBecEcEonyIPOR5q4FU6D2tT3ablUGgtDLuc9tJ5xZBbB KW1556/xGbo9H9w3QYAXMaPq+h4Ao1V+Ev4JJgK/8LEUtAoKUaPbv60GgV+MtzU9 f0UlIb3urjNLWg6o5nYYNjsCfV9fUPltJlNRDv5nsQD4E63J/Lyl+cKLDqVO6rjS 4BGSC2px+hsclmOApfDJY5niwcdZOfT4axUqJxRBhL5qoI1AOuaTScs4oaKc9rOS En+b0Pp/lzNTC8I1b+y8Md+1sBZFtEzy4K9jrdbs//goq5mvKqWpmbAy23pS2c4k hehKSzCu04SHlTKNv1Wx7IEvjA== -----END CERTIFICATE-----Generated at Wed May 13 04:44:13 2026 by rpki-client