$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.mft File: PV2GR6upu0BiXDxkPNg2fxUHgBo.mft (raw, json) Hash identifier: ouz23UNLUKygunYMI59ytvP0l4mhAxeVG9G7s7KgXuo= Subject key identifier: 04:68:B4:A4:E9:76:70:D6:FF:C5:EB:EE:D0:FB:4E:5C:2E:76:31:7C Authority key identifier: 3D:5D:86:47:AB:A9:BB:40:62:5C:3C:64:3C:D8:36:7F:15:07:80:1A Certificate issuer: /CN=A91E0EF2/serialNumber=3D5D8647ABA9BB40625C3C643CD8367F1507801A Certificate serial: 04DD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PV2GR6upu0BiXDxkPNg2fxUHgBo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.mft Manifest number: 04D5 Signing time: Tue 24 Mar 2026 23:31:57 +0000 Manifest this update: Tue 24 Mar 2026 23:31:56 +0000 Manifest next update: Tue 31 Mar 2026 23:31:56 +0000 Files and hashes: 1: PV2GR6upu0BiXDxkPNg2fxUHgBo.crl (hash: X5CVv05TRE/YTRxif03ctvhhMslajWx+ybMrzcYICN8=) 2: CA7DCCFE5EE511ECA6B8CA48C4F9AE02.roa (hash: MZAkwEcI/RhPtb0HLVaP6vZemaPmWHrryFBvzadhdrI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.crl rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PV2GR6upu0BiXDxkPNg2fxUHgBo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:31:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1245 (0x4dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0EF2, serialNumber=3D5D8647ABA9BB40625C3C643CD8367F1507801A Validity Not Before: Mar 24 23:31:56 2026 GMT Not After : Mar 31 23:31:56 2026 GMT Subject: CN=69c31eed-09f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b5:2e:77:7d:de:57:54:93:ae:62:59:70:50: 87:10:ac:a3:1e:30:ee:4b:5d:d4:f1:38:47:aa:cc: 1b:da:e9:d7:c8:7b:64:1a:3d:dd:87:64:53:59:0b: 00:b2:34:d9:65:e0:b5:11:5c:30:48:8c:cf:83:a5: ab:69:06:1b:38:e6:7e:37:a2:b3:24:79:52:3f:4b: 03:9c:2d:40:92:ae:4f:93:6f:7e:ba:2b:a2:82:9d: ba:72:bf:02:a6:86:81:ca:ea:5c:bd:ca:4f:37:b6: 79:21:c2:cf:73:af:0a:53:2b:d0:b9:94:d9:76:53: bd:dd:52:d3:fb:72:c1:89:5a:a9:f3:33:db:b5:8d: 51:47:64:78:37:21:0f:04:6a:f5:fd:b3:cd:14:00: 61:9e:de:56:46:37:f5:26:08:bb:03:c5:2c:c8:28: 17:4b:f0:6d:3e:2f:88:05:9d:30:36:2d:c9:38:a3: 53:95:2d:4f:17:e3:49:c3:17:9b:3c:c8:83:3a:46: ee:dd:a8:76:b0:40:c8:28:b5:c0:71:76:08:55:db: 5f:02:27:64:21:83:16:32:16:c2:46:19:0a:14:c4: 30:61:25:d4:89:b2:24:bb:3a:8d:57:72:4e:e0:a4: f1:55:ef:e7:39:b8:2c:71:a8:bc:33:b9:8e:66:ba: 49:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:68:B4:A4:E9:76:70:D6:FF:C5:EB:EE:D0:FB:4E:5C:2E:76:31:7C X509v3 Authority Key Identifier: keyid:3D:5D:86:47:AB:A9:BB:40:62:5C:3C:64:3C:D8:36:7F:15:07:80:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PV2GR6upu0BiXDxkPNg2fxUHgBo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:c6:39:05:3d:b5:10:82:99:37:4e:13:c3:14:7c:58:a0:02: 15:f5:75:a0:b6:9d:a1:8c:4e:81:e4:82:1c:a6:dd:6f:56:67: 50:83:18:f8:9f:6e:fe:29:e8:5c:ac:d5:57:f3:20:63:c0:ab: f8:73:27:44:29:19:f7:95:6f:d4:86:e6:ac:ab:eb:fd:c8:e8: 21:fc:c1:f4:59:a6:ad:d2:87:56:5d:c7:8b:a2:ed:fb:f9:d0: 6d:3c:02:82:57:4e:c1:73:60:19:09:ba:c3:7d:16:3e:f6:40: 8d:56:d5:ae:c4:d4:76:f2:68:ac:96:aa:2d:17:8e:03:78:e0: e0:f9:92:ec:d5:51:67:03:2d:27:c8:59:3e:16:60:fc:a5:cf: ad:86:b0:ff:63:da:97:40:27:d9:ef:cc:c6:89:77:7e:dc:ab: dc:f2:4a:bc:6d:82:88:90:18:8f:d4:c2:ee:7b:d1:e9:4d:b9: 35:3a:d3:ff:e6:46:f8:7f:65:f1:55:cb:66:c4:64:14:5d:5d: 4f:9c:ef:e6:8b:35:62:32:44:5e:f3:dd:e6:19:e4:56:1f:78: c4:19:27:b7:3f:d6:91:ad:f6:35:19:76:2a:dc:92:aa:1f:77: aa:cd:78:66:3c:0a:1d:37:77:04:c2:1e:c4:58:da:bb:c8:2e: 3d:1b:bb:94 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBFRjIxMTAvBgNVBAUTKDNENUQ4NjQ3QUJBOUJCNDA2MjVDM0M2NDNDRDgzNjdG MTUwNzgwMUEwHhcNMjYwMzI0MjMzMTU2WhcNMjYwMzMxMjMzMTU2WjAYMRYwFAYD VQQDEw02OWMzMWVlZC0wOWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs7Uud33eV1STrmJZcFCHEKyjHjDuS13U8ThHqswb2unXyHtkGj3dh2RTWQsA sjTZZeC1EVwwSIzPg6WraQYbOOZ+N6KzJHlSP0sDnC1Akq5Pk29+uiuigp26cr8C poaByupcvcpPN7Z5IcLPc68KUyvQuZTZdlO93VLT+3LBiVqp8zPbtY1RR2R4NyEP BGr1/bPNFABhnt5WRjf1Jgi7A8UsyCgXS/BtPi+IBZ0wNi3JOKNTlS1PF+NJwxeb PMiDOkbu3ah2sEDIKLXAcXYIVdtfAidkIYMWMhbCRhkKFMQwYSXUibIkuzqNV3JO 4KTxVe/nObgscai8M7mOZrpJpQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFARotKTp dnDW/8Xr7tD7TlwudjF8MB8GA1UdIwQYMBaAFD1dhkerqbtAYlw8ZDzYNn8VB4Aa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEVGMi9BQjZCMjdGNjVF RTIxMUVDQUZBNjRCNDRDNEY5QUUwMi9QVjJHUjZ1cHUwQmlYRHhrUE5nMmZ4VUhn Qm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1BWMkdSNnVwdTBCaVhEeGtQTmcyZnhVSGdCby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MEVGMi9BQjZCMjdGNjVFRTIxMUVDQUZBNjRCNDRDNEY5QUUwMi9QVjJHUjZ1cHUw QmlYRHhrUE5nMmZ4VUhnQm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVMY5BT21EIKZN04TwxR8WKACFfV1oLadoYxOgeSCHKbdb1ZnUIMY+J9u/ino XKzVV/MgY8Cr+HMnRCkZ95Vv1IbmrKvr/cjoIfzB9FmmrdKHVl3Hi6Lt+/nQbTwC gldOwXNgGQm6w30WPvZAjVbVrsTUdvJorJaqLReOA3jg4PmS7NVRZwMtJ8hZPhZg /KXPrYaw/2Pal0An2e/Mxol3ftyr3PJKvG2CiJAYj9TC7nvR6U25NTrT/+ZG+H9l 8VXLZsRkFF1dT5zv5os1YjJEXvPd5hnkVh94xBkntz/Wka32NRl2KtySqh93qs14 ZjwKHTd3BMIexFjau8guPRu7lA== -----END CERTIFICATE-----Generated at Thu Mar 26 18:55:48 2026 by rpki-client