$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.mft File: PQVW0ZO8kqIep0f5WMaXqX7F1dY.mft (raw, json) Hash identifier: bpaS0X2PBv4R2kdtvoAmlBzI+p958aSORxk89lXrnfk= Subject key identifier: 57:D8:DF:0E:B3:D9:04:7B:70:47:49:CD:BD:C5:99:83:E0:C8:30:C9 Authority key identifier: 3D:05:56:D1:93:BC:92:A2:1E:A7:47:F9:58:C6:97:A9:7E:C5:D5:D6 Certificate issuer: /CN=A91E4668/serialNumber=3D0556D193BC92A21EA747F958C697A97EC5D5D6 Certificate serial: 0F20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQVW0ZO8kqIep0f5WMaXqX7F1dY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.mft Manifest number: 0F11 Signing time: Tue 24 Mar 2026 17:28:15 +0000 Manifest this update: Tue 24 Mar 2026 17:28:15 +0000 Manifest next update: Tue 31 Mar 2026 17:28:15 +0000 Files and hashes: 1: PQVW0ZO8kqIep0f5WMaXqX7F1dY.crl (hash: KwOGu7yXpIX5rRt9CoX1UzW2xpTxk/4ZaT/8MAq+qtE=) 2: A5B7D874091F11EFA6EDE141C4F9AE02.roa (hash: nwEIy7xPw+1tR+gqF3l6cQwTi+bhxEm67T3G2uPpLSc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.crl rsync://rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQVW0ZO8kqIep0f5WMaXqX7F1dY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:28:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3872 (0xf20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4668, serialNumber=3D0556D193BC92A21EA747F958C697A97EC5D5D6 Validity Not Before: Mar 24 17:28:15 2026 GMT Not After : Mar 31 17:28:15 2026 GMT Subject: CN=69c2c9af-9c4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:64:d6:df:ef:52:df:37:6d:cd:eb:41:03:71: 9b:55:c8:39:ee:93:a2:d6:fe:6d:69:f3:c6:5d:17: 66:0f:d9:ca:c4:3e:b5:4c:37:79:37:08:88:46:cb: e9:52:c4:07:54:45:ae:f5:d7:31:15:b3:bd:d4:87: a1:fc:70:38:1b:2b:f2:d9:35:15:d2:bd:1d:60:9d: c8:12:4a:16:6b:00:7c:1f:fa:f4:2d:e8:2f:11:df: ad:46:eb:a2:0e:22:9e:03:dd:c4:a7:7e:e9:58:b8: c8:30:13:a9:12:e2:fa:cc:38:a4:a2:1f:9a:4b:7d: fc:6b:98:ee:64:08:44:ee:da:9a:a7:bd:fd:ea:cc: c1:5b:46:fb:97:0c:b6:67:c5:ce:37:12:fa:d0:ec: a5:b0:2b:42:35:93:34:73:e0:67:7e:57:7a:f6:93: 10:1b:3f:ad:6a:9e:71:4d:2c:6f:ce:25:64:11:31: 1e:51:9b:82:53:46:91:4c:f5:b0:d8:e9:1c:4e:41: 6c:ad:93:5e:08:f3:e7:5a:92:46:69:c5:4e:cd:e9: 0d:66:f6:68:03:31:c3:c0:0d:c9:80:76:50:ce:bb: a7:23:1a:6a:2f:c3:49:f7:d8:72:9d:1a:21:a4:07: 2e:de:38:c4:c4:c0:da:89:70:ca:f6:2a:39:4b:e7: 51:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:D8:DF:0E:B3:D9:04:7B:70:47:49:CD:BD:C5:99:83:E0:C8:30:C9 X509v3 Authority Key Identifier: keyid:3D:05:56:D1:93:BC:92:A2:1E:A7:47:F9:58:C6:97:A9:7E:C5:D5:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQVW0ZO8kqIep0f5WMaXqX7F1dY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:c8:38:6f:83:77:12:3e:fb:09:53:d9:36:70:30:22:9f:f9: 93:db:c9:b1:9d:8a:f0:36:ce:c0:50:e9:f5:d5:54:e4:b0:41: fb:ce:ce:60:f4:82:b7:28:40:ec:16:69:f6:ef:88:e9:58:54: 38:fb:7b:4e:bb:b9:6e:99:8a:ab:f0:61:8c:9d:75:b2:e9:f2: dc:7e:74:c7:81:00:d6:c1:8c:d9:07:2b:c8:47:b4:3d:fe:4e: a9:ae:85:61:1f:56:99:cf:9c:3e:79:51:87:fe:55:87:f7:e8: 9b:c8:1d:96:29:1e:bf:f3:c9:e8:8b:f8:dc:1f:44:b5:42:a7: 6f:97:e0:e7:4a:93:49:b6:5f:38:ee:ae:f7:3d:bb:12:d0:e2: bb:d9:0e:0f:23:48:28:4f:81:69:c5:64:22:b4:3d:25:23:40: 6e:ac:b2:fa:2f:62:7e:21:de:c1:06:91:a3:b0:f9:1f:a7:99: 73:e4:79:01:c1:08:de:69:2b:6b:bd:08:12:f8:c6:05:e9:f8: a9:f7:a8:81:d9:3b:8b:c9:0b:9b:7d:f9:39:5e:d2:66:59:1d: 8d:82:2a:79:07:b1:52:36:e8:36:68:86:b4:e9:85:20:3e:14: d1:e1:b3:1f:ee:0d:68:0e:5f:06:ef:a8:2b:05:fb:1f:d9:61: 4a:7f:1e:31 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDyAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ2NjgxMTAvBgNVBAUTKDNEMDU1NkQxOTNCQzkyQTIxRUE3NDdGOTU4QzY5N0E5 N0VDNUQ1RDYwHhcNMjYwMzI0MTcyODE1WhcNMjYwMzMxMTcyODE1WjAYMRYwFAYD VQQDEw02OWMyYzlhZi05YzRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu2TW3+9S3zdtzetBA3GbVcg57pOi1v5tafPGXRdmD9nKxD61TDd5NwiIRsvp UsQHVEWu9dcxFbO91Ieh/HA4Gyvy2TUV0r0dYJ3IEkoWawB8H/r0LegvEd+tRuui DiKeA93Ep37pWLjIMBOpEuL6zDikoh+aS338a5juZAhE7tqap7396szBW0b7lwy2 Z8XONxL60OylsCtCNZM0c+Bnfld69pMQGz+tap5xTSxvziVkETEeUZuCU0aRTPWw 2OkcTkFsrZNeCPPnWpJGacVOzekNZvZoAzHDwA3JgHZQzrunIxpqL8NJ99hynRoh pAcu3jjExMDaiXDK9io5S+dRFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFfY3w6z 2QR7cEdJzb3FmYPgyDDJMB8GA1UdIwQYMBaAFD0FVtGTvJKiHqdH+VjGl6l+xdXW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDY2OC83QzkwMDlBQzk3 RjExMUU5QTJFNTE5ODFDNEY5QUUwMi9QUVZXMFpPOGtxSWVwMGY1V01hWHFYN0Yx ZFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BRVlcwWk84a3FJZXAwZjVXTWFYcVg3RjFkWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDY2OC83QzkwMDlBQzk3RjExMUU5QTJFNTE5ODFDNEY5QUUwMi9QUVZXMFpPOGtx SWVwMGY1V01hWHFYN0YxZFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGMg4b4N3Ej77CVPZNnAwIp/5k9vJsZ2K8DbOwFDp9dVU5LBB+87OYPSCtyhA 7BZp9u+I6VhUOPt7Tru5bpmKq/BhjJ11suny3H50x4EA1sGM2QcryEe0Pf5Oqa6F YR9Wmc+cPnlRh/5Vh/fom8gdlikev/PJ6Iv43B9EtUKnb5fg50qTSbZfOO6u9z27 EtDiu9kODyNIKE+BacVkIrQ9JSNAbqyy+i9ifiHewQaRo7D5H6eZc+R5AcEI3mkr a70IEvjGBen4qfeogdk7i8kLm335OV7SZlkdjYIqeQexUjboNmiGtOmFID4U0eGz H+4NaA5fBu+oKwX7H9lhSn8eMQ== -----END CERTIFICATE-----Generated at Thu Mar 26 13:32:37 2026 by rpki-client