$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4A13/BB6C9B54B98011EDA37B1B65C4F9AE02/pfsx1NUSX3yarlADNaSA_HeQjxU.mft File: pfsx1NUSX3yarlADNaSA_HeQjxU.mft (raw, json) Hash identifier: XliWX6Fl5SUJnny4mgtePWZ0aOz/dWy6sZBKcYi0VwI= Subject key identifier: 2D:72:97:20:9C:16:6C:11:9B:E1:F2:A5:F7:80:22:B1:03:F9:09:BB Authority key identifier: A5:FB:31:D4:D5:12:5F:7C:9A:AE:50:03:35:A4:80:FC:77:90:8F:15 Certificate issuer: /CN=A91A4A13/serialNumber=A5FB31D4D5125F7C9AAE500335A480FC77908F15 Certificate serial: 024B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfsx1NUSX3yarlADNaSA_HeQjxU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4A13/BB6C9B54B98011EDA37B1B65C4F9AE02/pfsx1NUSX3yarlADNaSA_HeQjxU.mft Manifest number: 0243 Signing time: Wed 25 Mar 2026 01:52:07 +0000 Manifest this update: Wed 25 Mar 2026 01:52:07 +0000 Manifest next update: Wed 01 Apr 2026 01:52:07 +0000 Files and hashes: 1: pfsx1NUSX3yarlADNaSA_HeQjxU.crl (hash: 8h3HtuyeredPixjOzo3lIAcmx2XgO7nya5Tu19J6B1o=) 2: A8D327E4BBC711ED8DF23C40C4F9AE02.roa (hash: BbJgy4+r5xqumD47JYCsm8jlMt7XgJ8HLQRHYGqlUlQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4A13/BB6C9B54B98011EDA37B1B65C4F9AE02/pfsx1NUSX3yarlADNaSA_HeQjxU.crl rsync://rpki.apnic.net/member_repository/A91A4A13/BB6C9B54B98011EDA37B1B65C4F9AE02/pfsx1NUSX3yarlADNaSA_HeQjxU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfsx1NUSX3yarlADNaSA_HeQjxU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:52:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 587 (0x24b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4A13, serialNumber=A5FB31D4D5125F7C9AAE500335A480FC77908F15 Validity Not Before: Mar 25 01:52:07 2026 GMT Not After : Apr 1 01:52:07 2026 GMT Subject: CN=69c33fc7-afd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e6:52:ed:11:3d:c8:c2:e6:1c:35:c1:86:22: eb:64:70:eb:e9:2e:f5:fc:b5:a6:72:dc:2b:6d:82: 22:65:5c:73:29:d2:52:bd:f5:b0:29:88:b5:0b:5d: 86:a5:e8:0b:ed:cf:c6:09:29:06:83:c3:31:a3:c7: e2:2b:62:cf:35:2e:f3:42:3c:41:cd:49:d2:92:8d: c2:5a:17:bd:5e:83:71:fc:85:3a:11:ea:98:1f:3f: ad:a4:db:23:8d:d6:e8:de:2b:de:13:51:44:d6:a2: 87:5f:5d:43:ef:a6:62:77:78:ab:45:d2:71:ad:c7: 58:b6:a6:38:c4:2d:c2:c2:be:34:b8:8d:90:3a:14: a6:99:f2:10:c7:81:bf:67:51:40:0f:cd:ba:8d:a9: bf:cc:05:df:9f:84:52:b8:e9:32:17:22:56:89:2d: b4:75:af:4f:09:f7:4e:44:45:09:e8:0a:41:b7:13: 97:a1:e2:96:3a:ce:b9:6f:37:69:fc:f6:78:91:a2: 3f:c6:51:56:7c:9c:04:fc:91:5f:9d:77:82:ec:3e: 0c:a6:1c:d3:10:a1:de:71:e3:16:74:d4:55:9f:fc: dd:49:d1:47:66:17:cf:2a:25:94:9b:53:01:91:3f: a6:4e:18:f8:92:b6:cf:56:05:8d:99:16:09:93:27: 30:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:72:97:20:9C:16:6C:11:9B:E1:F2:A5:F7:80:22:B1:03:F9:09:BB X509v3 Authority Key Identifier: keyid:A5:FB:31:D4:D5:12:5F:7C:9A:AE:50:03:35:A4:80:FC:77:90:8F:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4A13/BB6C9B54B98011EDA37B1B65C4F9AE02/pfsx1NUSX3yarlADNaSA_HeQjxU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfsx1NUSX3yarlADNaSA_HeQjxU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4A13/BB6C9B54B98011EDA37B1B65C4F9AE02/pfsx1NUSX3yarlADNaSA_HeQjxU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:91:81:4b:1a:c4:34:d5:e2:f0:9e:6e:12:09:b5:9b:81:36: 6d:13:a4:a6:82:a8:4d:de:d3:90:bd:f9:b3:cb:bd:cd:a6:bc: 43:f7:33:a7:09:69:60:0e:57:42:13:1f:d6:b6:49:aa:d6:69: 9e:d7:2c:b5:d5:79:17:49:4e:99:cb:3c:97:b0:ce:f9:f8:a0: 86:42:fb:ac:19:c2:4b:6f:5f:9b:7b:ab:f4:ac:fd:d6:27:a0: aa:fe:dd:7e:20:73:ae:44:60:1b:c6:ca:ba:23:84:e0:a2:f8: 2e:ba:a2:5d:81:84:24:da:0c:d1:3e:ad:97:e6:19:d0:9a:80: 63:e2:ac:4b:2e:f7:aa:32:91:a5:56:a2:1b:50:38:31:d9:e8: 22:26:1e:ff:e6:60:64:2d:74:a4:67:80:c0:4a:09:79:ce:4d: 93:39:9f:0b:e9:f9:31:c2:64:79:7f:3e:53:ef:a4:8a:55:25: 8f:70:7e:cf:07:3b:c8:38:26:84:0c:c6:05:29:e1:24:67:3a: a0:cf:de:9d:85:d8:4c:ff:be:ed:02:33:89:95:97:65:9a:76: 1e:5e:7e:63:3b:21:86:ca:46:dc:14:d8:b9:46:3f:4f:4b:56: f6:30:79:2c:95:db:55:4d:fe:47:3f:21:bf:f9:ae:3d:49:bd: 9d:d6:30:00 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRBMTMxMTAvBgNVBAUTKEE1RkIzMUQ0RDUxMjVGN0M5QUFFNTAwMzM1QTQ4MEZD Nzc5MDhGMTUwHhcNMjYwMzI1MDE1MjA3WhcNMjYwNDAxMDE1MjA3WjAYMRYwFAYD VQQDEw02OWMzM2ZjNy1hZmQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAleZS7RE9yMLmHDXBhiLrZHDr6S71/LWmctwrbYIiZVxzKdJSvfWwKYi1C12G pegL7c/GCSkGg8Mxo8fiK2LPNS7zQjxBzUnSko3CWhe9XoNx/IU6EeqYHz+tpNsj jdbo3iveE1FE1qKHX11D76Zid3irRdJxrcdYtqY4xC3Cwr40uI2QOhSmmfIQx4G/ Z1FAD826jam/zAXfn4RSuOkyFyJWiS20da9PCfdOREUJ6ApBtxOXoeKWOs65bzdp /PZ4kaI/xlFWfJwE/JFfnXeC7D4MphzTEKHeceMWdNRVn/zdSdFHZhfPKiWUm1MB kT+mThj4krbPVgWNmRYJkycw8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC1ylyCc FmwRm+HypfeAIrED+Qm7MB8GA1UdIwQYMBaAFKX7MdTVEl98mq5QAzWkgPx3kI8V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEExMy9CQjZDOUI1NEI5 ODAxMUVEQTM3QjFCNjVDNEY5QUUwMi9wZnN4MU5VU1gzeWFybEFETmFTQV9IZVFq eFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Bmc3gxTlVTWDN5YXJsQUROYVNBX0hlUWp4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEExMy9CQjZDOUI1NEI5ODAxMUVEQTM3QjFCNjVDNEY5QUUwMi9wZnN4MU5VU1gz eWFybEFETmFTQV9IZVFqeFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAd5GBSxrENNXi8J5uEgm1m4E2bROkpoKoTd7TkL35s8u9zaa8Q/czpwlpYA5X QhMf1rZJqtZpntcstdV5F0lOmcs8l7DO+fighkL7rBnCS29fm3ur9Kz91iegqv7d fiBzrkRgG8bKuiOE4KL4LrqiXYGEJNoM0T6tl+YZ0JqAY+KsSy73qjKRpVaiG1A4 MdnoIiYe/+ZgZC10pGeAwEoJec5NkzmfC+n5McJkeX8+U++kilUlj3B+zwc7yDgm hAzGBSnhJGc6oM/enYXYTP++7QIziZWXZZp2Hl5+YzshhspG3BTYuUY/T0tW9jB5 LJXbVU3+Rz8hv/muPUm9ndYwAA== -----END CERTIFICATE-----Generated at Thu Mar 26 04:44:49 2026 by rpki-client