$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft File: PByHc0fugnKWNq8POjddORCQ-SE.mft (raw, json) Hash identifier: WZCpKusNDIAwkjsgFg01c1z/p++rMX4PZSHcTiBkTvg= Subject key identifier: 6C:2F:D7:19:56:2D:85:70:A8:E6:FC:2E:7C:7A:00:D4:02:14:94:C7 Authority key identifier: 3C:1C:87:73:47:EE:82:72:96:36:AF:0F:3A:37:5D:39:10:90:F9:21 Certificate issuer: /CN=A91DA2D5/serialNumber=3C1C877347EE82729636AF0F3A375D391090F921 Certificate serial: 2D9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft Manifest number: 2D53 Signing time: Tue 24 Mar 2026 15:28:17 +0000 Manifest this update: Tue 24 Mar 2026 15:28:16 +0000 Manifest next update: Tue 31 Mar 2026 15:28:16 +0000 Files and hashes: 1: PByHc0fugnKWNq8POjddORCQ-SE.crl (hash: YwpNFI7eAnUh/xvs2Pgylp5b5+SmXo9F6he1mqe9OJ8=) 2: 14820EDE248611EEB600357DC4F9AE02.roa (hash: ILtVZce+EeOlerO/s4x6aPfHR6PK7/NY4qOIZJx05so=) 3: DE61D0DC2A7311F08DDC6D17C4F9AE02.roa (hash: xXPAl2rdlXbRKGiZrQ383xk0pehWZEjj7jMTsKVw0eI=) 4: 5728551C6E9611EF8FEC9C1BC4F9AE02.roa (hash: aHD9k1CO/91sgZuODhSSCG/52z7yS492WmwyS5uktA4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.crl rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11677 (0x2d9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA2D5, serialNumber=3C1C877347EE82729636AF0F3A375D391090F921 Validity Not Before: Mar 24 15:28:16 2026 GMT Not After : Mar 31 15:28:16 2026 GMT Subject: CN=69c2ad91-2c4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4b:c2:62:ed:ed:7a:0e:6f:59:db:9a:e8:99: 28:01:2a:c1:c7:92:d4:81:4c:41:f2:ac:36:47:c8: 65:79:ce:49:db:7e:75:37:3e:5d:e5:87:e9:7a:78: 0d:4b:ab:39:45:2b:8c:7b:a9:64:1c:f0:43:49:30: 6f:84:58:89:3d:f0:be:d5:8c:3e:6c:21:3a:bd:96: 55:a6:bf:3d:32:89:79:be:92:f1:1f:36:43:d9:dc: b8:a7:58:9e:73:0e:c4:dd:e4:af:9d:2d:32:26:a3: ad:66:76:af:12:55:2a:32:09:cf:cb:01:85:21:02: 7c:04:9a:22:5a:2c:35:33:bb:e1:c5:d5:d7:1c:93: fa:0f:03:39:fc:b9:07:6f:d5:cd:40:ca:03:58:c1: b5:81:f1:c5:a7:cd:88:2d:d5:12:aa:9c:6a:1f:3b: 76:95:24:06:21:26:9f:06:03:39:5e:27:b2:c7:9d: 22:cf:19:c6:8c:32:0d:e1:36:3b:ac:4d:e3:d3:45: 24:3a:9c:39:30:f3:aa:0e:34:ff:62:b2:89:ae:5e: ea:03:57:06:2c:80:a5:3c:50:2a:63:17:21:1a:81: 6c:de:c1:77:82:2f:5d:45:ea:39:43:68:40:dd:2a: 79:35:39:95:6c:d2:68:c6:ba:fe:62:38:da:fc:73: 21:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:2F:D7:19:56:2D:85:70:A8:E6:FC:2E:7C:7A:00:D4:02:14:94:C7 X509v3 Authority Key Identifier: keyid:3C:1C:87:73:47:EE:82:72:96:36:AF:0F:3A:37:5D:39:10:90:F9:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:31:0c:9c:ee:b0:30:47:02:fa:3b:74:2e:11:bd:07:d0:43: e2:b6:43:84:1f:ed:c5:fd:f7:e9:35:d3:2c:91:2d:78:8f:e4: 22:60:aa:28:83:89:49:a7:02:cb:7d:00:87:16:3a:1e:72:96: 37:0f:d6:a4:03:76:62:12:5c:0c:c5:47:18:aa:7d:46:a4:e3: 65:f3:84:86:9e:df:d2:59:58:b4:10:24:8f:f1:20:3d:c3:d8: e7:d3:d8:90:74:82:e4:31:bd:d2:0e:88:37:49:7f:55:0f:11: bf:fc:a3:91:ed:7f:c5:37:5b:0d:e5:c8:3d:eb:e9:64:67:cf: a9:6d:12:8d:17:81:f6:b4:63:f2:9d:08:e1:93:53:aa:86:08: 15:3e:8c:06:b0:48:7a:62:02:38:75:ff:79:53:d7:e7:86:90: 99:9d:a4:c8:97:47:a9:bf:0b:b0:ab:50:fc:93:a1:41:68:19: 8e:b7:f2:56:66:d7:9c:36:81:61:b3:83:ea:fa:fb:ea:fe:65: 0e:6b:85:24:3c:3e:8d:db:9e:3e:03:73:f8:cb:c5:29:19:db: 00:91:84:1c:03:33:92:55:fc:53:38:c7:e8:00:b1:41:be:e7: a4:61:cb:ce:69:e8:45:e7:db:dc:6a:88:82:f2:00:60:7a:cf: 37:42:65:af -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICLZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REEyRDUxMTAvBgNVBAUTKDNDMUM4NzczNDdFRTgyNzI5NjM2QUYwRjNBMzc1RDM5 MTA5MEY5MjEwHhcNMjYwMzI0MTUyODE2WhcNMjYwMzMxMTUyODE2WjAYMRYwFAYD VQQDEw02OWMyYWQ5MS0yYzRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvUvCYu3teg5vWdua6JkoASrBx5LUgUxB8qw2R8hlec5J2351Nz5d5YfpengN S6s5RSuMe6lkHPBDSTBvhFiJPfC+1Yw+bCE6vZZVpr89Mol5vpLxHzZD2dy4p1ie cw7E3eSvnS0yJqOtZnavElUqMgnPywGFIQJ8BJoiWiw1M7vhxdXXHJP6DwM5/LkH b9XNQMoDWMG1gfHFp82ILdUSqpxqHzt2lSQGISafBgM5Xieyx50izxnGjDIN4TY7 rE3j00UkOpw5MPOqDjT/YrKJrl7qA1cGLIClPFAqYxchGoFs3sF3gi9dReo5Q2hA 3Sp5NTmVbNJoxrr+Yjja/HMhCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGwv1xlW LYVwqOb8Lnx6ANQCFJTHMB8GA1UdIwQYMBaAFDwch3NH7oJyljavDzo3XTkQkPkh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTJENS81Rjg2MUVFNkI4 OUExMUUzQjRBQzdFNzg1OTExRUEzMi9QQnlIYzBmdWduS1dOcThQT2pkZE9SQ1Et U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BCeUhjMGZ1Z25LV05xOFBPamRkT1JDUS1TRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTJENS81Rjg2MUVFNkI4OUExMUUzQjRBQzdFNzg1OTExRUEzMi9QQnlIYzBmdWdu S1dOcThQT2pkZE9SQ1EtU0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMzEMnO6wMEcC+jt0LhG9B9BD4rZDhB/txf336TXTLJEteI/kImCqKIOJSacC y30AhxY6HnKWNw/WpAN2YhJcDMVHGKp9RqTjZfOEhp7f0llYtBAkj/EgPcPY59PY kHSC5DG90g6IN0l/VQ8Rv/yjke1/xTdbDeXIPevpZGfPqW0SjReB9rRj8p0I4ZNT qoYIFT6MBrBIemICOHX/eVPX54aQmZ2kyJdHqb8LsKtQ/JOhQWgZjrfyVmbXnDaB YbOD6vr76v5lDmuFJDw+jduePgNz+MvFKRnbAJGEHAMzklX8UzjH6ACxQb7npGHL zmnoRefb3GqIgvIAYHrPN0Jlrw== -----END CERTIFICATE-----Generated at Thu Mar 26 03:36:22 2026 by rpki-client