$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/Pgw5tVhKz65BgIE4j08KlNbajgY.mft File: Pgw5tVhKz65BgIE4j08KlNbajgY.mft (raw, json) Hash identifier: vbZWJ2fGsByXnNLb9Wnu9qddkTFYUgC1BYMxKwogF/k= Subject key identifier: BB:E0:C9:B1:A9:04:1F:BB:F1:BB:60:A3:DE:3A:51:52:06:DB:46:23 Authority key identifier: 3E:0C:39:B5:58:4A:CF:AE:41:80:81:38:8F:4F:0A:94:D6:DA:8E:06 Certificate issuer: /CN=A91BD7A3/serialNumber=3E0C39B5584ACFAE418081388F4F0A94D6DA8E06 Certificate serial: 44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pgw5tVhKz65BgIE4j08KlNbajgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/Pgw5tVhKz65BgIE4j08KlNbajgY.mft Manifest number: 42 Signing time: Wed 25 Mar 2026 07:34:11 +0000 Manifest this update: Wed 25 Mar 2026 07:34:10 +0000 Manifest next update: Wed 01 Apr 2026 07:34:10 +0000 Files and hashes: 1: Pgw5tVhKz65BgIE4j08KlNbajgY.crl (hash: +b5fJFqtkw7x1W2qtxo3fPTRmo0zJcVAk4PMkYaPgcs=) 2: 132F5C52C52511F0B4A6F21BC4F9AE02.roa (hash: +oT+l8AaeCiLhYsjOPIgCUOdYkL2JAeHR0qNvNkZXgc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/Pgw5tVhKz65BgIE4j08KlNbajgY.crl rsync://rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/Pgw5tVhKz65BgIE4j08KlNbajgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pgw5tVhKz65BgIE4j08KlNbajgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:34:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68 (0x44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD7A3, serialNumber=3E0C39B5584ACFAE418081388F4F0A94D6DA8E06 Validity Not Before: Mar 25 07:34:10 2026 GMT Not After : Apr 1 07:34:10 2026 GMT Subject: CN=69c38ff3-7b91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:07:df:d9:b3:91:39:68:b5:6a:52:5a:a8:ff: f4:7d:62:be:1f:74:a0:33:ab:6c:8f:55:db:21:fc: 02:9d:02:df:76:84:01:ac:89:7d:63:62:cb:d9:8b: e6:3b:ba:48:3a:a4:8a:1b:04:05:95:2d:d8:3f:83: 7b:06:38:ad:3f:a6:86:c2:20:e3:4e:c8:4c:7f:6e: 51:53:26:71:d5:26:76:7e:ad:3d:60:af:79:2c:ab: 5b:15:65:42:17:9e:8c:fd:0b:01:83:d7:ae:f7:17: 48:29:b5:98:a7:56:ca:dc:c0:52:30:ae:0d:b8:9a: 40:b1:a8:ee:26:12:d5:06:e0:e7:6f:3b:87:b3:16: 31:17:86:b5:bc:8e:84:76:69:b9:a7:85:d9:3b:b8: d5:45:f5:df:b3:77:aa:32:7b:58:82:0a:1a:cc:05: 24:99:07:54:a3:12:f3:2d:1c:cd:54:f9:76:da:37: 9a:73:b2:f9:a3:a9:38:22:8b:79:ec:68:b2:1d:5a: 41:33:e8:7d:3a:e4:f3:1f:24:0a:2c:d9:ef:04:3c: 5c:8b:cb:57:b3:84:3a:e0:58:6f:40:44:53:f4:0d: 9a:b0:b9:12:88:d4:e3:4a:a8:3d:c8:c8:7d:a3:0f: 5a:ca:34:f1:e3:b8:36:93:9b:31:9e:a3:be:e8:1b: 2b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:E0:C9:B1:A9:04:1F:BB:F1:BB:60:A3:DE:3A:51:52:06:DB:46:23 X509v3 Authority Key Identifier: keyid:3E:0C:39:B5:58:4A:CF:AE:41:80:81:38:8F:4F:0A:94:D6:DA:8E:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/Pgw5tVhKz65BgIE4j08KlNbajgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pgw5tVhKz65BgIE4j08KlNbajgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/Pgw5tVhKz65BgIE4j08KlNbajgY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:f3:42:a2:27:73:c7:12:c1:21:0c:d2:07:e0:34:4e:27:be: df:f6:14:d9:b4:b0:3e:80:30:ec:53:e4:60:12:dc:a5:f9:b0: 50:03:3e:54:54:0f:2e:d5:06:24:d9:14:dc:81:e4:ab:a6:e0: 8f:a0:6e:69:bb:73:c3:53:0e:39:00:8b:4c:b2:e2:40:3e:51: e4:9e:75:92:2c:c0:88:a4:97:3d:04:f0:37:2d:58:c1:20:a2: 7d:d7:f8:7b:e1:c5:62:00:1b:59:14:a0:d3:79:f2:f3:28:d1: 7e:29:6e:0d:dc:a9:5c:34:b2:bc:15:fd:51:9d:8f:b3:fd:6a: 2f:6d:ed:e1:e3:1f:09:cc:02:16:03:99:7f:62:c8:77:56:99: 30:42:1b:3c:c7:99:92:98:35:63:75:1b:ed:02:2f:8d:fc:2e: b3:aa:7d:52:92:46:3c:61:ff:38:b8:b3:69:ce:f9:20:eb:88: 47:f0:b3:5c:9b:54:ef:ed:af:2a:db:da:96:7b:e3:21:50:a6: 06:63:55:b9:20:47:e2:b6:69:a7:09:be:8c:cb:fc:c5:2e:fc: 9f:86:b3:99:b0:87:52:42:c3:a6:55:81:15:46:82:de:7f:7d: b0:71:f5:c1:1f:00:65:14:73:30:f8:13:71:91:82:79:f7:e2: 2b:4d:af:2c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBRDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RDdBMzExMC8GA1UEBRMoM0UwQzM5QjU1ODRBQ0ZBRTQxODA4MTM4OEY0RjBBOTRE NkRBOEUwNjAeFw0yNjAzMjUwNzM0MTBaFw0yNjA0MDEwNzM0MTBaMBgxFjAUBgNV BAMTDTY5YzM4ZmYzLTdiOTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCYB9/Zs5E5aLVqUlqo//R9Yr4fdKAzq2yPVdsh/AKdAt92hAGsiX1jYsvZi+Y7 ukg6pIobBAWVLdg/g3sGOK0/pobCIONOyEx/blFTJnHVJnZ+rT1gr3ksq1sVZUIX noz9CwGD1673F0gptZinVsrcwFIwrg24mkCxqO4mEtUG4OdvO4ezFjEXhrW8joR2 abmnhdk7uNVF9d+zd6oye1iCChrMBSSZB1SjEvMtHM1U+XbaN5pzsvmjqTgii3ns aLIdWkEz6H065PMfJAos2e8EPFyLy1ezhDrgWG9ARFP0DZqwuRKI1ONKqD3IyH2j D1rKNPHjuDaTmzGeo77oGyubAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUu+DJsakE H7vxu2Cj3jpRUgbbRiMwHwYDVR0jBBgwFoAUPgw5tVhKz65BgIE4j08KlNbajgYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJEN0EzLzhGMDYwMjVBQzUy NDExRjBBMkE0REQxQUM0RjlBRTAyL1BndzV0VmhLejY1QmdJRTRqMDhLbE5iYWpn WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUGd3NXRWaEt6NjVCZ0lFNGowOEtsTmJhamdZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJE N0EzLzhGMDYwMjVBQzUyNDExRjBBMkE0REQxQUM0RjlBRTAyL1BndzV0VmhLejY1 QmdJRTRqMDhLbE5iYWpnWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCu80KiJ3PHEsEhDNIH4DROJ77f9hTZtLA+gDDsU+RgEtyl+bBQAz5UVA8u1QYk 2RTcgeSrpuCPoG5pu3PDUw45AItMsuJAPlHknnWSLMCIpJc9BPA3LVjBIKJ91/h7 4cViABtZFKDTefLzKNF+KW4N3KlcNLK8Ff1RnY+z/Wovbe3h4x8JzAIWA5l/Ysh3 VpkwQhs8x5mSmDVjdRvtAi+N/C6zqn1SkkY8Yf84uLNpzvkg64hH8LNcm1Tv7a8q 29qWe+MhUKYGY1W5IEfitmmnCb6My/zFLvyfhrOZsIdSQsOmVYEVRoLef32wcfXB HwBlFHMw+BNxkYJ59+IrTa8s -----END CERTIFICATE-----Generated at Thu Mar 26 07:32:22 2026 by rpki-client