$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3680/D4991862C5C811EB890C0D0BC4F9AE02/PudBKv6HPx1FurYUcUoyAeNilpE.mft File: PudBKv6HPx1FurYUcUoyAeNilpE.mft (raw, json) Hash identifier: 32P1C/MNlYDQCb1r4yP6U6RVde6Pn2nzk1Twe1yNJoA= Subject key identifier: B0:F1:B1:14:76:3A:87:17:FA:93:74:04:FF:1B:AC:7C:EC:10:C7:DC Authority key identifier: 3E:E7:41:2A:FE:87:3F:1D:45:BA:B6:14:71:4A:32:01:E3:62:96:91 Certificate issuer: /CN=A91E3680/serialNumber=3EE7412AFE873F1D45BAB614714A3201E3629691 Certificate serial: 065C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PudBKv6HPx1FurYUcUoyAeNilpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3680/D4991862C5C811EB890C0D0BC4F9AE02/PudBKv6HPx1FurYUcUoyAeNilpE.mft Manifest number: 0654 Signing time: Thu 26 Mar 2026 22:30:06 +0000 Manifest this update: Thu 26 Mar 2026 22:30:05 +0000 Manifest next update: Thu 02 Apr 2026 22:30:05 +0000 Files and hashes: 1: PudBKv6HPx1FurYUcUoyAeNilpE.crl (hash: xC2/JUEA6mDqrBI1A036wWvFFBBJ4J8QWgJ8Vh1b9Tc=) 2: B46FE2D0C5CA11EBB86D320BC4F9AE02.roa (hash: S0c2o7KMzmsLJSq7WEijvJcgm48ilZbzQCrGUzU4mvY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3680/D4991862C5C811EB890C0D0BC4F9AE02/PudBKv6HPx1FurYUcUoyAeNilpE.crl rsync://rpki.apnic.net/member_repository/A91E3680/D4991862C5C811EB890C0D0BC4F9AE02/PudBKv6HPx1FurYUcUoyAeNilpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PudBKv6HPx1FurYUcUoyAeNilpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 22:30:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1628 (0x65c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3680, serialNumber=3EE7412AFE873F1D45BAB614714A3201E3629691 Validity Not Before: Mar 26 22:30:05 2026 GMT Not After : Apr 2 22:30:05 2026 GMT Subject: CN=69c5b36e-3f64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e6:27:02:2b:42:4f:f1:ff:07:a6:3e:80:48: 1a:f8:89:e9:e9:ec:51:d8:d9:c1:19:c7:52:9e:71: 31:1b:7c:dc:9e:98:88:88:a4:97:fa:6c:c3:15:a9: 92:73:ab:81:ca:3d:48:63:91:2c:de:9f:3e:32:aa: 3a:9e:9a:01:fb:b3:fb:bf:e4:1b:c6:79:41:7b:b1: cb:98:29:d0:ef:8a:82:fd:61:2d:5a:bd:2d:d7:17: df:b0:6f:ae:c9:6a:81:00:ff:08:2d:fc:8d:f9:4d: 4c:4a:8c:80:2c:ed:cb:16:00:ec:7c:18:26:fc:ed: 0b:21:54:86:8a:12:b5:82:85:45:a5:23:e9:22:7b: 67:42:6a:d7:b7:27:1a:9f:c7:b4:7f:6b:ff:4e:63: 8c:4d:04:2f:5b:43:1d:8d:fa:64:a8:a7:70:f9:ef: 4d:16:29:8f:4a:13:5a:5a:ba:56:cb:97:ca:61:a9: 1d:80:ae:cf:1b:27:60:49:2b:fd:e8:d5:e4:d7:91: 2b:9c:5c:81:25:9a:46:b0:04:c7:a2:5f:55:4d:23: c8:db:e9:63:2c:01:bb:32:4b:95:e7:cc:61:c2:0c: 51:61:3d:88:4e:c2:38:2e:bd:9a:22:80:6e:a9:86: 05:0a:67:30:88:4d:07:3d:25:e9:c9:37:13:a3:f1: 51:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:F1:B1:14:76:3A:87:17:FA:93:74:04:FF:1B:AC:7C:EC:10:C7:DC X509v3 Authority Key Identifier: keyid:3E:E7:41:2A:FE:87:3F:1D:45:BA:B6:14:71:4A:32:01:E3:62:96:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3680/D4991862C5C811EB890C0D0BC4F9AE02/PudBKv6HPx1FurYUcUoyAeNilpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PudBKv6HPx1FurYUcUoyAeNilpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3680/D4991862C5C811EB890C0D0BC4F9AE02/PudBKv6HPx1FurYUcUoyAeNilpE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:a5:6f:ff:cf:94:f6:1f:e7:c7:5a:e7:b9:e4:91:1b:99:35: a4:ce:15:4b:14:c7:1e:18:a2:54:89:9c:3d:d0:98:4c:d7:c7: 11:5a:cd:2e:6e:a4:3b:39:40:0a:65:53:bf:95:f7:5c:81:1b: 75:86:a1:cc:bd:34:9e:39:b1:4d:86:d3:c6:dc:b8:c4:83:26: db:50:50:8a:c2:b2:12:2a:01:b1:39:2f:24:57:7c:7a:47:a7: 7b:73:bf:90:02:04:b3:a6:3d:6d:12:1f:40:08:fd:63:99:bb: 41:7a:f2:e1:90:1b:89:60:59:be:09:84:4d:83:e5:08:c5:98: 81:0c:73:07:dc:49:42:31:dc:29:4f:4b:ad:f8:f3:1d:ac:63: 63:52:d4:d5:8f:82:a4:e4:d2:6c:47:6a:ae:48:d2:b4:22:85: c6:09:88:71:89:6e:f8:0a:99:8c:3d:bc:84:7f:dd:79:47:99: 2c:f5:03:39:6e:75:b9:e7:bb:90:55:1e:a1:26:dc:df:85:09: bf:a8:4a:c2:17:fa:c8:48:f9:6e:5f:1b:a3:cd:8b:62:ec:7d: 2a:68:09:57:de:b6:75:b7:3e:33:13:31:b8:5d:b9:fb:5a:cf: b5:5b:7c:99:b3:52:58:98:94:3c:89:3d:0c:c7:3d:01:f8:a9: 5b:89:2b:8d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBlwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM2ODAxMTAvBgNVBAUTKDNFRTc0MTJBRkU4NzNGMUQ0NUJBQjYxNDcxNEEzMjAx RTM2Mjk2OTEwHhcNMjYwMzI2MjIzMDA1WhcNMjYwNDAyMjIzMDA1WjAYMRYwFAYD VQQDEw02OWM1YjM2ZS0zZjY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAveYnAitCT/H/B6Y+gEga+Inp6exR2NnBGcdSnnExG3zcnpiIiKSX+mzDFamS c6uByj1IY5Es3p8+Mqo6npoB+7P7v+QbxnlBe7HLmCnQ74qC/WEtWr0t1xffsG+u yWqBAP8ILfyN+U1MSoyALO3LFgDsfBgm/O0LIVSGihK1goVFpSPpIntnQmrXtyca n8e0f2v/TmOMTQQvW0MdjfpkqKdw+e9NFimPShNaWrpWy5fKYakdgK7PGydgSSv9 6NXk15ErnFyBJZpGsATHol9VTSPI2+ljLAG7MkuV58xhwgxRYT2ITsI4Lr2aIoBu qYYFCmcwiE0HPSXpyTcTo/FRnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLDxsRR2 OocX+pN0BP8brHzsEMfcMB8GA1UdIwQYMBaAFD7nQSr+hz8dRbq2FHFKMgHjYpaR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzY4MC9ENDk5MTg2MkM1 QzgxMUVCODkwQzBEMEJDNEY5QUUwMi9QdWRCS3Y2SFB4MUZ1cllVY1VveUFlTmls cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1B1ZEJLdjZIUHgxRnVyWVVjVW95QWVOaWxwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzY4MC9ENDk5MTg2MkM1QzgxMUVCODkwQzBEMEJDNEY5QUUwMi9QdWRCS3Y2SFB4 MUZ1cllVY1VveUFlTmlscEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAE6Vv/8+U9h/nx1rnueSRG5k1pM4VSxTHHhiiVImcPdCYTNfHEVrNLm6kOzlA CmVTv5X3XIEbdYahzL00njmxTYbTxty4xIMm21BQisKyEioBsTkvJFd8ekene3O/ kAIEs6Y9bRIfQAj9Y5m7QXry4ZAbiWBZvgmETYPlCMWYgQxzB9xJQjHcKU9Lrfjz HaxjY1LU1Y+CpOTSbEdqrkjStCKFxgmIcYlu+AqZjD28hH/deUeZLPUDOW51uee7 kFUeoSbc34UJv6hKwhf6yEj5bl8bo82LYux9KmgJV962dbc+MxMxuF25+1rPtVt8 mbNSWJiUPIk9DMc9AfipW4krjQ== -----END CERTIFICATE-----Generated at Sat Mar 28 12:17:40 2026 by rpki-client