$ rpki-client -vvf rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.mft File: PXe1hqP2gsVjtkJlJiiR1NpGp6g.mft (raw, json) Hash identifier: Z+jNvzUCLxOYzo6rnMOGTrX/4JkoIvja1rlLQ3nV90s= Subject key identifier: CE:D1:18:8F:2E:64:9F:69:FE:C6:99:F8:1A:CA:02:32:22:D5:96:34 Authority key identifier: 3D:77:B5:86:A3:F6:82:C5:63:B6:42:65:26:28:91:D4:DA:46:A7:A8 Certificate issuer: /CN=A91B10B9/serialNumber=3D77B586A3F682C563B64265262891D4DA46A7A8 Certificate serial: 0433 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXe1hqP2gsVjtkJlJiiR1NpGp6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.mft Manifest number: 042B Signing time: Wed 25 Mar 2026 00:01:39 +0000 Manifest this update: Wed 25 Mar 2026 00:01:38 +0000 Manifest next update: Wed 01 Apr 2026 00:01:38 +0000 Files and hashes: 1: PXe1hqP2gsVjtkJlJiiR1NpGp6g.crl (hash: 8cqrqSMf7vemzR6gvZxXmH5yuGYrnGMUfUGyAl5NEww=) 2: BCD0F6B0A0FF11EC924D4461C4F9AE02.roa (hash: RLT4OavkIPlkhOt4yNgRmjMZlXgnd7ZiolTVU7K89ho=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.crl rsync://rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXe1hqP2gsVjtkJlJiiR1NpGp6g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1075 (0x433) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B10B9, serialNumber=3D77B586A3F682C563B64265262891D4DA46A7A8 Validity Not Before: Mar 25 00:01:38 2026 GMT Not After : Apr 1 00:01:38 2026 GMT Subject: CN=69c325e3-d4fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:97:71:70:91:13:4b:82:48:83:bf:22:c9:d8: 31:50:3c:e5:59:a5:87:eb:7b:70:b0:da:d3:a7:6a: 79:67:f9:82:4a:23:92:d5:c2:53:34:0a:05:90:69: 78:9b:5a:9f:9b:30:35:67:e8:7c:9e:e4:6e:c2:5c: e1:4e:2a:25:28:77:6a:d7:41:36:61:57:bc:64:6d: e6:98:6a:52:0e:b3:fb:b4:e2:a0:93:2a:1f:ee:74: d0:12:6e:fe:b8:01:fa:14:6d:e3:e8:b7:62:32:32: cc:11:b5:b2:fc:c7:f7:81:7c:83:d8:1d:45:fe:53: d5:76:2e:6c:04:b3:7b:f6:a2:8c:07:a6:99:e0:a8: dc:21:21:1b:95:d1:bb:34:0d:93:06:fd:6a:7f:57: 22:63:d0:9e:5d:f0:01:d9:95:63:a2:18:2f:b3:d9: 3f:af:09:b4:95:6f:cf:b1:72:f1:39:ed:c5:d2:2b: c1:f7:10:95:fb:86:7f:29:19:80:c1:81:de:12:f0: cf:3d:38:61:76:ff:f4:eb:5d:b4:f8:45:68:86:66: 33:ff:75:f3:52:b5:58:30:ca:31:4f:ad:84:58:f5: 6c:16:11:5c:ef:ca:37:37:01:91:3b:cc:b1:81:df: 67:96:4d:17:68:d0:6f:b0:f0:f9:7a:3f:29:4d:b6: 20:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:D1:18:8F:2E:64:9F:69:FE:C6:99:F8:1A:CA:02:32:22:D5:96:34 X509v3 Authority Key Identifier: keyid:3D:77:B5:86:A3:F6:82:C5:63:B6:42:65:26:28:91:D4:DA:46:A7:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXe1hqP2gsVjtkJlJiiR1NpGp6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:fd:51:b2:ae:05:9f:6a:4d:79:40:66:4a:71:9b:d8:bd:e3: b1:27:27:dc:15:17:2a:29:4b:36:d5:da:cb:9c:d8:88:ec:10: 86:c0:07:01:f7:22:33:0c:1f:a7:ee:e6:00:82:5e:9b:59:43: b3:07:4a:e3:73:f2:4b:99:33:d6:a8:58:94:f5:08:3a:3d:10: 33:e3:ed:c1:38:0f:15:21:20:ca:94:be:89:61:bc:aa:92:68: 75:80:1b:c3:d1:f0:48:8e:17:d3:ac:29:c8:bd:0e:30:5d:93: 87:b4:4d:32:2c:f1:49:36:1d:6f:f8:aa:37:40:c2:c6:6f:8e: 24:05:b6:e9:4b:fe:aa:ec:15:2e:c9:19:57:98:39:2e:be:48: 27:b5:16:7b:a9:7c:f2:2e:dc:80:b8:ab:3c:50:5a:5b:ed:42: 70:8e:cd:83:1d:3a:c7:72:ec:e0:14:98:19:ec:e6:b9:ff:3f: 9c:b7:2b:3a:d6:0e:ec:cd:a3:64:ea:a7:56:62:3e:0b:58:1f: 3c:37:2e:1b:d6:86:90:38:2b:c4:2f:c7:aa:cf:8c:01:63:42: 3f:14:02:b3:28:90:0f:ca:43:c6:12:ce:25:7b:4d:e7:74:ad: 8f:22:fd:ba:d8:e6:de:a5:69:c1:c9:d7:b8:42:50:3f:e5:89: ab:3d:23:46 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBDMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjEwQjkxMTAvBgNVBAUTKDNENzdCNTg2QTNGNjgyQzU2M0I2NDI2NTI2Mjg5MUQ0 REE0NkE3QTgwHhcNMjYwMzI1MDAwMTM4WhcNMjYwNDAxMDAwMTM4WjAYMRYwFAYD VQQDEw02OWMzMjVlMy1kNGZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkJdxcJETS4JIg78iydgxUDzlWaWH63twsNrTp2p5Z/mCSiOS1cJTNAoFkGl4 m1qfmzA1Z+h8nuRuwlzhTiolKHdq10E2YVe8ZG3mmGpSDrP7tOKgkyof7nTQEm7+ uAH6FG3j6LdiMjLMEbWy/Mf3gXyD2B1F/lPVdi5sBLN79qKMB6aZ4KjcISEbldG7 NA2TBv1qf1ciY9CeXfAB2ZVjohgvs9k/rwm0lW/PsXLxOe3F0ivB9xCV+4Z/KRmA wYHeEvDPPThhdv/06120+EVohmYz/3XzUrVYMMoxT62EWPVsFhFc78o3NwGRO8yx gd9nlk0XaNBvsPD5ej8pTbYgKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM7RGI8u ZJ9p/saZ+BrKAjIi1ZY0MB8GA1UdIwQYMBaAFD13tYaj9oLFY7ZCZSYokdTaRqeo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTBCOS9EMTNCRUFBQUEw RkIxMUVDQTVEMURGNUJDNEY5QUUwMi9QWGUxaHFQMmdzVmp0a0psSmlpUjFOcEdw NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BYZTFocVAyZ3NWanRrSmxKaWlSMU5wR3A2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTBCOS9EMTNCRUFBQUEwRkIxMUVDQTVEMURGNUJDNEY5QUUwMi9QWGUxaHFQMmdz Vmp0a0psSmlpUjFOcEdwNmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAxv1Rsq4Fn2pNeUBmSnGb2L3jsScn3BUXKilLNtXay5zYiOwQhsAHAfciMwwf p+7mAIJem1lDswdK43PyS5kz1qhYlPUIOj0QM+PtwTgPFSEgypS+iWG8qpJodYAb w9HwSI4X06wpyL0OMF2Th7RNMizxSTYdb/iqN0DCxm+OJAW26Uv+quwVLskZV5g5 Lr5IJ7UWe6l88i7cgLirPFBaW+1CcI7Ngx06x3Ls4BSYGezmuf8/nLcrOtYO7M2j ZOqnVmI+C1gfPDcuG9aGkDgrxC/Hqs+MAWNCPxQCsyiQD8pDxhLOJXtN53StjyL9 utjm3qVpwcnXuEJQP+WJqz0jRg== -----END CERTIFICATE-----Generated at Thu Mar 26 18:18:05 2026 by rpki-client