$ rpki-client -vvf rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.mft File: pStC19RpVfQoUSa7DcS-qnNKkr0.mft (raw, json) Hash identifier: BON0bPL9VUBtkRMkiCcKnljdMoLdal6XhpThEjHftKM= Subject key identifier: D2:52:A5:39:4C:E4:3F:79:93:39:DF:FC:2F:D0:87:90:7F:35:99:27 Authority key identifier: A5:2B:42:D7:D4:69:55:F4:28:51:26:BB:0D:C4:BE:AA:73:4A:92:BD Certificate issuer: /CN=A91E51AD/serialNumber=A52B42D7D46955F4285126BB0DC4BEAA734A92BD Certificate serial: 3529 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pStC19RpVfQoUSa7DcS-qnNKkr0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.mft Manifest number: 3529 Signing time: Sat 28 Mar 2026 14:36:09 +0000 Manifest this update: Sat 28 Mar 2026 14:36:09 +0000 Manifest next update: Sat 04 Apr 2026 14:36:09 +0000 Files and hashes: 1: pStC19RpVfQoUSa7DcS-qnNKkr0.crl (hash: v1EvvXm2F8pbmq6ywMQ0qjWNFXjjzTWOXZRzBvnvnEM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.crl rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pStC19RpVfQoUSa7DcS-qnNKkr0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 Apr 2026 14:36:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13609 (0x3529) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E51AD, serialNumber=A52B42D7D46955F4285126BB0DC4BEAA734A92BD Validity Not Before: Mar 28 14:36:09 2026 GMT Not After : Apr 4 14:36:09 2026 GMT Subject: CN=69c7e759-54ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d2:e3:d5:a3:96:ac:bc:aa:e9:12:5f:1c:13: 0f:17:99:cc:e8:33:5c:62:21:71:97:0c:54:c2:f1: ad:e3:74:f6:1a:76:0f:58:29:82:4a:52:f2:ea:8f: 0c:b0:1c:cd:1f:0a:f7:07:0f:38:a7:09:cf:d7:5c: 02:48:81:6f:56:21:ae:af:7b:ab:6b:59:53:68:5b: 4f:3e:16:ec:f4:14:aa:eb:af:3e:ba:02:ef:4b:f9: b3:9d:47:be:df:78:fa:d1:e4:ee:10:da:a9:a8:4a: ff:26:35:bf:30:bd:f6:8c:f4:ec:28:f2:08:47:df: 9b:10:35:a3:4f:5b:14:39:fe:0f:67:54:f5:36:8a: 4d:0a:c2:92:e1:dc:90:c7:25:57:e5:6c:2e:f7:eb: 43:5f:23:98:8b:12:09:d8:d3:8c:e3:06:2f:51:2d: 03:5a:4a:19:9d:e4:cf:5d:63:58:21:fd:d5:e1:31: 92:06:5e:5c:c0:3b:bb:69:33:05:2b:bd:1b:5c:d8: 38:fc:0e:79:92:0c:4b:c8:e5:f2:dc:00:a9:77:95: 0d:2e:9a:3a:be:94:b5:5f:66:82:7a:16:fe:26:65: 8a:d8:33:63:7b:d3:98:78:9d:91:6c:bd:55:3a:10: ce:47:78:85:93:b9:9c:12:9b:5e:7a:a5:f0:1c:74: 78:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:52:A5:39:4C:E4:3F:79:93:39:DF:FC:2F:D0:87:90:7F:35:99:27 X509v3 Authority Key Identifier: keyid:A5:2B:42:D7:D4:69:55:F4:28:51:26:BB:0D:C4:BE:AA:73:4A:92:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pStC19RpVfQoUSa7DcS-qnNKkr0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:4e:01:16:62:11:ae:2c:8e:c3:fd:6d:28:b6:a1:fd:21:56: 7e:0d:80:12:e3:bc:35:98:ba:1b:f0:43:9c:fb:dd:fe:8e:28: a3:97:40:8e:b1:77:27:79:16:46:86:ee:0f:02:b3:27:93:52: 34:a7:db:80:c9:cf:c0:af:b4:2f:9b:0a:c2:76:7e:95:a6:af: 1f:c9:0a:f3:66:25:3d:1b:af:b4:0a:50:15:bc:41:26:45:80: b3:94:27:7b:e3:8b:37:7a:a4:18:3c:ab:52:ac:a2:71:cf:44: 05:ca:99:02:e0:23:12:d8:ae:a2:f1:df:b6:e7:65:49:40:e5: c5:77:fd:0a:7f:fb:87:22:18:f6:27:e3:a5:91:d3:4b:52:e3: 12:b2:f2:fe:2e:05:44:9b:ce:b4:87:30:4b:5e:58:90:67:2d: 78:7b:7e:2c:33:c9:25:a7:22:63:a1:86:11:04:60:d6:90:5e: 8a:de:b4:cd:c8:16:a0:a7:02:41:1e:8f:05:50:9c:35:4c:4e: 51:72:a7:4e:36:2c:e3:f1:31:41:a3:d7:a2:60:30:a9:f3:a4: 62:8f:ff:cd:83:32:69:5c:47:47:73:8e:cc:b4:40:79:f4:b9: 32:33:90:1f:60:fe:a9:84:8d:2c:86:50:40:70:19:33:24:9d: 1f:da:73:7a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNSkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTUxQUQxMTAvBgNVBAUTKEE1MkI0MkQ3RDQ2OTU1RjQyODUxMjZCQjBEQzRCRUFB NzM0QTkyQkQwHhcNMjYwMzI4MTQzNjA5WhcNMjYwNDA0MTQzNjA5WjAYMRYwFAYD VQQDEw02OWM3ZTc1OS01NGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsNLj1aOWrLyq6RJfHBMPF5nM6DNcYiFxlwxUwvGt43T2GnYPWCmCSlLy6o8M sBzNHwr3Bw84pwnP11wCSIFvViGur3ura1lTaFtPPhbs9BSq668+ugLvS/mznUe+ 33j60eTuENqpqEr/JjW/ML32jPTsKPIIR9+bEDWjT1sUOf4PZ1T1NopNCsKS4dyQ xyVX5Wwu9+tDXyOYixIJ2NOM4wYvUS0DWkoZneTPXWNYIf3V4TGSBl5cwDu7aTMF K70bXNg4/A55kgxLyOXy3ACpd5UNLpo6vpS1X2aCehb+JmWK2DNje9OYeJ2RbL1V OhDOR3iFk7mcEpteeqXwHHR49wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNJSpTlM 5D95kznf/C/Qh5B/NZknMB8GA1UdIwQYMBaAFKUrQtfUaVX0KFEmuw3EvqpzSpK9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTFBRC8yMjk1ODFENDFE OEMxMUUyQjdCNDI4RTcwOEIwMkNEMi9wU3RDMTlScFZmUW9VU2E3RGNTLXFuTktr cjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BTdEMxOVJwVmZRb1VTYTdEY1MtcW5OS2tyMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTFBRC8yMjk1ODFENDFEOEMxMUUyQjdCNDI4RTcwOEIwMkNEMi9wU3RDMTlScFZm UW9VU2E3RGNTLXFuTktrcjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMU4BFmIRriyOw/1tKLah/SFWfg2AEuO8NZi6G/BDnPvd/o4oo5dAjrF3J3kW RobuDwKzJ5NSNKfbgMnPwK+0L5sKwnZ+laavH8kK82YlPRuvtApQFbxBJkWAs5Qn e+OLN3qkGDyrUqyicc9EBcqZAuAjEtiuovHftudlSUDlxXf9Cn/7hyIY9ifjpZHT S1LjErLy/i4FRJvOtIcwS15YkGcteHt+LDPJJaciY6GGEQRg1pBeit60zcgWoKcC QR6PBVCcNUxOUXKnTjYs4/ExQaPXomAwqfOkYo//zYMyaVxHR3OOzLRAefS5MjOQ H2D+qYSNLIZQQHAZMySdH9pzeg== -----END CERTIFICATE-----Generated at Mon Mar 30 10:39:45 2026 by rpki-client