$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA736/5A6D8B5C732711F0B152646FC4F9AE02/pa-pCJC_kpGBwDHwuO2xlOPhaeM.mft File: pa-pCJC_kpGBwDHwuO2xlOPhaeM.mft (raw, json) Hash identifier: KTIvyH17qiEmiCTR1oX1bpgJawOi0lsOfqiHhs7A1Gs= Subject key identifier: EA:FA:17:62:CD:BC:4A:01:F3:25:F0:3C:23:B8:BF:B4:BA:4D:B0:B6 Authority key identifier: A5:AF:A9:08:90:BF:92:91:81:C0:31:F0:B8:ED:B1:94:E3:E1:69:E3 Certificate issuer: /CN=A91DA736/serialNumber=A5AFA90890BF929181C031F0B8EDB194E3E169E3 Certificate serial: 79 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pa-pCJC_kpGBwDHwuO2xlOPhaeM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA736/5A6D8B5C732711F0B152646FC4F9AE02/pa-pCJC_kpGBwDHwuO2xlOPhaeM.mft Manifest number: 77 Signing time: Wed 25 Mar 2026 07:00:04 +0000 Manifest this update: Wed 25 Mar 2026 07:00:03 +0000 Manifest next update: Wed 01 Apr 2026 07:00:03 +0000 Files and hashes: 1: pa-pCJC_kpGBwDHwuO2xlOPhaeM.crl (hash: 9AA8x744qQk+TZSj6XnGFNrdFCIJXk8IfE0m15BIqoI=) 2: 065E09BC732F11F09E8D4450C4F9AE02.roa (hash: lPETiWe8GHpbSTMrlHOlT/Ey7B1kvBXtUjo0VwOql0I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA736/5A6D8B5C732711F0B152646FC4F9AE02/pa-pCJC_kpGBwDHwuO2xlOPhaeM.crl rsync://rpki.apnic.net/member_repository/A91DA736/5A6D8B5C732711F0B152646FC4F9AE02/pa-pCJC_kpGBwDHwuO2xlOPhaeM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pa-pCJC_kpGBwDHwuO2xlOPhaeM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 121 (0x79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA736, serialNumber=A5AFA90890BF929181C031F0B8EDB194E3E169E3 Validity Not Before: Mar 25 07:00:03 2026 GMT Not After : Apr 1 07:00:03 2026 GMT Subject: CN=69c387f4-76f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f0:4e:a0:3d:62:39:0f:99:ab:55:31:b1:e6: d8:c5:1d:2a:65:23:8c:3b:55:61:4c:f7:ae:1d:de: 1d:e7:38:1f:a2:32:fa:1b:bf:bc:66:f0:f0:63:4a: aa:98:0a:ba:99:20:58:74:e5:f5:92:8d:4f:d9:b4: 0a:8c:67:45:05:a0:3a:3f:d8:4d:da:50:1e:96:50: f0:37:10:94:c1:7a:92:88:47:f7:1d:d0:c6:99:34: 39:88:73:8d:ec:b6:9e:28:26:e5:89:73:6e:a6:81: 4f:a2:55:58:b3:6b:00:07:90:99:7d:bc:d7:40:50: ba:e2:e2:b2:dc:5a:69:e3:29:a7:f4:5e:c4:46:77: f8:f0:2b:51:19:f1:85:0b:36:f0:2b:7f:08:f4:1c: 4c:86:b9:38:18:ae:fd:e3:04:ae:07:77:06:16:9e: 0d:96:84:7e:ed:56:09:ad:16:5a:35:ad:30:bb:fa: ca:c1:be:6f:aa:8d:3c:2b:2e:f6:da:50:f4:04:6c: ef:13:48:d4:eb:03:5d:1b:fa:d4:a9:36:11:1a:98: d3:41:0d:a7:e7:6f:4a:a1:ae:40:0d:69:82:26:af: a5:1c:b9:19:eb:37:b1:dd:1c:e6:db:ba:3e:60:c4: 91:f6:be:17:9e:7f:81:f0:d6:a2:b2:b4:82:ba:20: fc:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:FA:17:62:CD:BC:4A:01:F3:25:F0:3C:23:B8:BF:B4:BA:4D:B0:B6 X509v3 Authority Key Identifier: keyid:A5:AF:A9:08:90:BF:92:91:81:C0:31:F0:B8:ED:B1:94:E3:E1:69:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA736/5A6D8B5C732711F0B152646FC4F9AE02/pa-pCJC_kpGBwDHwuO2xlOPhaeM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pa-pCJC_kpGBwDHwuO2xlOPhaeM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA736/5A6D8B5C732711F0B152646FC4F9AE02/pa-pCJC_kpGBwDHwuO2xlOPhaeM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:9b:1c:be:ef:44:a8:c0:cb:03:18:b2:77:b2:e0:17:78:42: 30:85:d2:be:4a:d2:53:d1:8b:2b:22:39:e9:3f:be:29:d6:ac: a8:0b:ab:ad:14:01:45:67:53:a0:4f:68:7d:80:a1:c8:97:3f: 88:fe:f4:bd:f4:7f:cd:b9:ab:2e:1c:e4:c3:3a:d1:e8:29:79: 4b:41:0e:bb:a0:ee:a5:0d:92:60:8d:1d:85:88:9c:de:38:1b: 93:e0:19:3c:3e:d6:fd:8f:63:30:61:b7:5b:7c:1e:5a:2f:a7: 50:0d:69:ca:93:47:47:0b:f4:9e:57:95:6e:20:f4:ff:3c:7e: 00:2a:42:b2:a7:8d:4f:31:65:a3:28:6b:1b:56:96:70:d8:29: 2a:fc:9a:71:8a:55:cb:62:6b:cb:37:58:6a:d1:96:22:60:f3: 81:2d:0e:8f:17:7f:34:70:e8:99:aa:8b:97:3e:e6:68:e3:6c: 13:60:17:6e:fe:3d:db:54:b1:72:5d:78:e8:22:65:8a:39:6a: 55:f0:a2:49:06:75:a9:d2:56:25:4d:1c:19:82:05:8d:cd:8c: 0f:85:5c:0d:d6:06:4e:28:88:bd:0f:ff:a7:e6:9a:73:08:64: 59:70:d3:d4:ac:de:7a:cd:af:e1:e8:35:9e:82:c1:90:50:63: f2:97:da:0d -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBeTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QTczNjExMC8GA1UEBRMoQTVBRkE5MDg5MEJGOTI5MTgxQzAzMUYwQjhFREIxOTRF M0UxNjlFMzAeFw0yNjAzMjUwNzAwMDNaFw0yNjA0MDEwNzAwMDNaMBgxFjAUBgNV BAMTDTY5YzM4N2Y0LTc2ZjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC08E6gPWI5D5mrVTGx5tjFHSplI4w7VWFM964d3h3nOB+iMvobv7xm8PBjSqqY CrqZIFh05fWSjU/ZtAqMZ0UFoDo/2E3aUB6WUPA3EJTBepKIR/cd0MaZNDmIc43s tp4oJuWJc26mgU+iVVizawAHkJl9vNdAULri4rLcWmnjKaf0XsRGd/jwK1EZ8YUL NvArfwj0HEyGuTgYrv3jBK4HdwYWng2WhH7tVgmtFlo1rTC7+srBvm+qjTwrLvba UPQEbO8TSNTrA10b+tSpNhEamNNBDafnb0qhrkANaYImr6UcuRnrN7HdHObbuj5g xJH2vheef4Hw1qKytIK6IPxlAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU6voXYs28 SgHzJfA8I7i/tLpNsLYwHwYDVR0jBBgwFoAUpa+pCJC/kpGBwDHwuO2xlOPhaeMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURBNzM2LzVBNkQ4QjVDNzMy NzExRjBCMTUyNjQ2RkM0RjlBRTAyL3BhLXBDSkNfa3BHQndESHd1TzJ4bE9QaGFl TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcGEtcENKQ19rcEdCd0RId3VPMnhsT1BoYWVNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURB NzM2LzVBNkQ4QjVDNzMyNzExRjBCMTUyNjQ2RkM0RjlBRTAyL3BhLXBDSkNfa3BH QndESHd1TzJ4bE9QaGFlTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQADmxy+70SowMsDGLJ3suAXeEIwhdK+StJT0YsrIjnpP74p1qyoC6utFAFFZ1Og T2h9gKHIlz+I/vS99H/NuasuHOTDOtHoKXlLQQ67oO6lDZJgjR2FiJzeOBuT4Bk8 Ptb9j2MwYbdbfB5aL6dQDWnKk0dHC/SeV5VuIPT/PH4AKkKyp41PMWWjKGsbVpZw 2Ckq/JpxilXLYmvLN1hq0ZYiYPOBLQ6PF380cOiZqouXPuZo42wTYBdu/j3bVLFy XXjoImWKOWpV8KJJBnWp0lYlTRwZggWNzYwPhVwN1gZOKIi9D/+n5ppzCGRZcNPU rN56za/h6DWegsGQUGPyl9oN -----END CERTIFICATE-----Generated at Thu Mar 26 21:51:02 2026 by rpki-client