$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft File: PfG7945KTnVEGahIyf0My9LmpFg.mft (raw, json) Hash identifier: qqUELzPHdMPRjEjPyKPUtXSSKYH7uJa2BORWlpR/DSA= Subject key identifier: 0D:7A:B2:25:C1:6A:14:8E:36:32:19:F8:B9:3D:A2:C6:18:AE:C2:C5 Authority key identifier: 3D:F1:BB:F7:8E:4A:4E:75:44:19:A8:48:C9:FD:0C:CB:D2:E6:A4:58 Certificate issuer: /CN=A91C1052/serialNumber=3DF1BBF78E4A4E754419A848C9FD0CCBD2E6A458 Certificate serial: 0292 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfG7945KTnVEGahIyf0My9LmpFg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft Manifest number: 0285 Signing time: Wed 13 May 2026 01:55:43 +0000 Manifest this update: Wed 13 May 2026 01:55:43 +0000 Manifest next update: Wed 20 May 2026 01:55:43 +0000 Files and hashes: 1: PfG7945KTnVEGahIyf0My9LmpFg.crl (hash: 1L4/Epmp6SmFiFvF/y87sxqD3X3NIVRf0dTk2Ssoofs=) 2: 74A3C1988E8311ED903ADA1CC4F9AE02.roa (hash: +nejaKv7xuZCKQJRBEYk2kIxhLSRjN7BLyKcA9G8qXE=) 3: D6E2AAC0772911ED95084884C4F9AE02.roa (hash: 9uMRdpoWckw3Fu7tp6GE6C4ygIb26UeNoRv4LKPo7V0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.crl rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfG7945KTnVEGahIyf0My9LmpFg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 01:22:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 658 (0x292) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1052, serialNumber=3DF1BBF78E4A4E754419A848C9FD0CCBD2E6A458 Validity Not Before: May 13 01:55:43 2026 GMT Not After : May 20 01:55:43 2026 GMT Subject: CN=6a03da1f-1145 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:97:7d:cc:2a:00:94:14:7f:04:76:72:fb:78: ed:11:c9:6f:d5:69:96:b2:28:57:8a:3e:d3:d7:c0: 1e:aa:b7:3e:fa:97:2d:fb:9e:7c:b5:65:64:e8:da: ca:fc:e5:ab:48:c6:3a:e9:4d:d0:7e:07:db:13:6b: 87:b0:69:5e:9a:17:8b:58:80:2d:4f:e5:18:1d:f9: 31:84:b5:49:f5:5a:fd:d3:46:bd:de:50:7e:30:3d: 63:3a:58:83:42:69:b8:62:e8:5b:1d:e8:58:26:e1: cc:1c:a7:af:d7:aa:1e:20:5b:65:f6:37:d5:8a:45: 3a:6a:d9:db:23:d9:34:c3:37:6f:25:e8:7b:7b:51: fc:41:ef:e5:2d:c9:13:5c:5b:dd:f3:16:51:f8:41: f6:e3:5c:44:db:fd:25:43:fe:1c:8a:f1:c7:cf:49: 3a:5b:3b:ad:7d:b9:a1:65:90:13:c1:e6:de:df:5e: 9c:68:a5:ee:72:6f:a1:3f:cc:65:7e:78:1b:af:85: 06:a5:40:52:b2:f9:4e:5d:57:2b:99:ac:11:c0:28: ab:3a:10:3a:f2:37:32:2a:d7:4a:fa:48:ad:4b:7c: ba:87:ce:2f:14:ce:83:03:fa:66:3e:5e:96:f1:a0: 7a:73:f9:ce:b2:de:31:2a:d2:47:55:b3:d8:63:f4: 53:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:7A:B2:25:C1:6A:14:8E:36:32:19:F8:B9:3D:A2:C6:18:AE:C2:C5 X509v3 Authority Key Identifier: keyid:3D:F1:BB:F7:8E:4A:4E:75:44:19:A8:48:C9:FD:0C:CB:D2:E6:A4:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfG7945KTnVEGahIyf0My9LmpFg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:50:0b:04:cd:0f:25:97:7d:26:80:60:1f:06:57:f9:d5:58: 6f:ca:b1:f9:11:2a:aa:33:0a:c6:be:44:60:04:8b:21:24:8e: 08:b5:44:7d:eb:86:18:29:72:b9:48:57:a3:a4:c8:6e:b6:92: d4:84:57:9d:50:e8:29:42:8a:9a:fc:b3:c7:0b:66:7d:cb:a9: f9:bc:dc:f7:31:ac:8f:1c:ea:d9:b4:7f:a3:00:cc:00:5c:d6: b2:ac:f0:c2:03:61:c6:c0:91:98:9d:34:cb:41:de:03:97:07: 91:14:26:90:b6:29:ab:c9:49:54:f7:2e:73:7f:8f:30:31:c7: eb:11:54:19:5b:ee:f2:cd:bc:a7:ac:3d:5a:93:2a:6a:d5:f3: 5a:27:e4:95:12:21:49:a5:96:8e:86:17:b5:75:22:0f:6e:19: c7:81:49:f0:ff:ee:e6:46:e3:6a:46:e7:30:31:52:5d:a0:67: 9a:48:75:54:c0:60:c9:c4:b3:cc:6d:23:cc:34:f6:ec:06:0e: 33:0d:eb:cf:2a:c1:69:e1:c6:b5:26:9c:05:dd:02:7d:62:27: cd:1a:df:49:e7:a8:29:3f:94:af:d6:c3:1a:9a:64:ff:e3:12: a4:2a:bb:e9:23:82:0e:a5:47:53:55:24:bb:bd:05:58:40:68: ae:1c:7b:5b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzEwNTIxMTAvBgNVBAUTKDNERjFCQkY3OEU0QTRFNzU0NDE5QTg0OEM5RkQwQ0NC RDJFNkE0NTgwHhcNMjYwNTEzMDE1NTQzWhcNMjYwNTIwMDE1NTQzWjAYMRYwFAYD VQQDEw02YTAzZGExZi0xMTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp5d9zCoAlBR/BHZy+3jtEclv1WmWsihXij7T18Aeqrc++pct+558tWVk6NrK /OWrSMY66U3QfgfbE2uHsGlemheLWIAtT+UYHfkxhLVJ9Vr900a93lB+MD1jOliD Qmm4YuhbHehYJuHMHKev16oeIFtl9jfVikU6atnbI9k0wzdvJeh7e1H8Qe/lLckT XFvd8xZR+EH241xE2/0lQ/4civHHz0k6WzutfbmhZZATwebe316caKXucm+hP8xl fngbr4UGpUBSsvlOXVcrmawRwCirOhA68jcyKtdK+kitS3y6h84vFM6DA/pmPl6W 8aB6c/nOst4xKtJHVbPYY/RT6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA16siXB ahSONjIZ+Lk9osYYrsLFMB8GA1UdIwQYMBaAFD3xu/eOSk51RBmoSMn9DMvS5qRY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTA1Mi84MDZGQjI3Njc3 MjYxMUVEODZEMDk2ODBDNEY5QUUwMi9QZkc3OTQ1S1RuVkVHYWhJeWYwTXk5TG1w RmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BmRzc5NDVLVG5WRUdhaEl5ZjBNeTlMbXBGZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTA1Mi84MDZGQjI3Njc3MjYxMUVEODZEMDk2ODBDNEY5QUUwMi9QZkc3OTQ1S1Ru VkVHYWhJeWYwTXk5TG1wRmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgVALBM0PJZd9JoBgHwZX+dVYb8qx+REqqjMKxr5EYASLISSOCLVEfeuGGCly uUhXo6TIbraS1IRXnVDoKUKKmvyzxwtmfcup+bzc9zGsjxzq2bR/owDMAFzWsqzw wgNhxsCRmJ00y0HeA5cHkRQmkLYpq8lJVPcuc3+PMDHH6xFUGVvu8s28p6w9WpMq atXzWifklRIhSaWWjoYXtXUiD24Zx4FJ8P/u5kbjakbnMDFSXaBnmkh1VMBgycSz zG0jzDT27AYOMw3rzyrBaeHGtSacBd0CfWInzRrfSeeoKT+Ur9bDGppk/+MSpCq7 6SOCDqVHU1Uku70FWEBorhx7Ww== -----END CERTIFICATE-----Generated at Wed May 13 04:49:50 2026 by rpki-client