$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft File: PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft (raw, json) Hash identifier: Ud8C9OR9WFBDHA9STieYXvyZb1KGHyomoaGfa4fJBi8= Subject key identifier: A4:D6:EA:46:10:8B:87:7E:56:D8:92:31:4A:2D:AF:57:32:88:24:40 Authority key identifier: 3C:69:B9:B6:01:D2:C9:F2:A3:91:5A:6F:FB:CA:3D:AD:62:E9:92:45 Certificate issuer: /CN=A91EE09C/serialNumber=3C69B9B601D2C9F2A3915A6FFBCA3DAD62E99245 Certificate serial: 020D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft Manifest number: 01DF Signing time: Wed 25 Mar 2026 03:16:16 +0000 Manifest this update: Wed 25 Mar 2026 03:16:16 +0000 Manifest next update: Wed 01 Apr 2026 03:16:16 +0000 Files and hashes: 1: PGm5tgHSyfKjkVpv-8o9rWLpkkU.crl (hash: CDYQ2syoeq4Izt/O5xW9HnOOCyzHCMqtBUC84iugPzA=) 2: 23D4183024D711EF932FC941C4F9AE02.roa (hash: yjfhbglGwJSFqMN6zxG/h3PTnwzIZZTxeRkuErtplaI=) 3: 1D98617687B311EFB4972044C4F9AE02.roa (hash: xYBSN0t6jgjQfq0Vs3mLR1yw03FEouHpBcT56A28m1A=) 4: A3E08ED6825711EFB7585B6FC4F9AE02.roa (hash: 2slykkHCwPvbeGF4Zx3D9JQfzEnRWOMcVvw7gilVFqk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.crl rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:16:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 525 (0x20d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE09C, serialNumber=3C69B9B601D2C9F2A3915A6FFBCA3DAD62E99245 Validity Not Before: Mar 25 03:16:16 2026 GMT Not After : Apr 1 03:16:16 2026 GMT Subject: CN=69c35380-7917 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:31:90:d8:f2:96:8c:46:ae:11:55:b9:df:9d: b6:cb:d5:b2:3b:61:de:db:27:c5:de:52:74:93:b0: c7:89:31:a6:05:d7:2d:44:80:42:f7:34:e6:f6:2f: d6:5f:65:8b:ef:e9:0f:74:84:64:2e:9a:49:e7:18: 37:c1:d6:1f:8a:5a:c8:9c:20:fe:ee:88:9e:a0:f0: 90:3d:40:65:f4:5e:f0:cb:65:d9:7b:f0:5f:99:2b: 5d:21:44:84:2f:f7:37:b4:f9:60:e9:b3:02:8c:18: fd:97:c5:23:b5:e6:cb:33:6f:c8:d1:1a:a3:bc:80: 13:6e:e4:4a:f1:44:51:9e:3e:75:b5:5e:c6:20:8a: 9e:2e:19:97:76:bf:fe:d2:37:58:22:cb:c1:98:51: 36:e2:31:1d:13:79:ae:e2:1a:74:67:57:4a:e4:f7: 88:95:f6:2c:3d:d8:b6:a0:3c:d4:41:b4:75:78:f7: f0:81:fd:64:84:c2:90:5b:e1:1d:83:40:70:cf:a3: 06:b0:98:a4:f9:62:e3:c4:11:4f:88:39:2e:0b:f1: 7d:c8:b2:63:ea:80:ce:d4:e0:41:a3:85:0c:7a:9b: 1b:e6:76:29:cd:d8:19:bd:4b:7a:70:38:d6:3e:cc: 3f:80:a2:f4:24:6b:61:49:7b:fd:2b:51:fb:f0:1c: 15:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:D6:EA:46:10:8B:87:7E:56:D8:92:31:4A:2D:AF:57:32:88:24:40 X509v3 Authority Key Identifier: keyid:3C:69:B9:B6:01:D2:C9:F2:A3:91:5A:6F:FB:CA:3D:AD:62:E9:92:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:16:9f:94:b1:b7:2e:1c:80:03:f9:4e:42:7a:14:2f:5f:8a: 56:95:25:1e:c0:f2:d1:bc:39:99:c7:1d:cf:ea:21:53:3d:05: ca:95:19:f7:52:d8:3c:6e:88:bd:1e:e7:c8:7d:d7:e4:56:fa: 27:cb:5c:28:de:e7:be:37:0d:4e:3d:dc:2d:6a:3f:cb:a1:f5: 58:95:7c:69:94:07:c6:d0:00:b7:f1:80:bd:87:e0:26:57:38: 9b:60:3d:51:92:cc:3d:38:53:a5:7f:62:ad:6a:ba:50:53:31: 29:a1:e2:88:ef:a3:4b:ed:5e:c6:b7:de:5c:d7:19:f7:87:d3: 32:57:3d:9c:70:68:78:ff:6d:c1:2d:7e:09:d2:07:7a:21:79: fd:ed:0d:29:8e:69:0f:2d:60:06:ed:af:82:58:93:79:60:0b: c6:c7:b1:07:bd:b3:5d:d0:cc:5a:16:43:4f:58:50:94:0e:fa: 99:06:c9:1d:8a:34:fb:e1:ab:66:03:fc:7c:5c:62:30:82:24: 20:1f:b9:56:c9:fb:37:7d:10:db:17:ec:5a:21:9a:fa:ec:52: c4:64:e1:de:a6:41:c5:bc:55:9a:4f:97:2f:16:b8:89:94:ac: c5:98:32:0e:10:13:46:81:64:13:fc:8a:09:e4:d5:1f:40:08: 0c:f2:d7:70 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUUwOUMxMTAvBgNVBAUTKDNDNjlCOUI2MDFEMkM5RjJBMzkxNUE2RkZCQ0EzREFE NjJFOTkyNDUwHhcNMjYwMzI1MDMxNjE2WhcNMjYwNDAxMDMxNjE2WjAYMRYwFAYD VQQDEw02OWMzNTM4MC03OTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtzGQ2PKWjEauEVW53522y9WyO2He2yfF3lJ0k7DHiTGmBdctRIBC9zTm9i/W X2WL7+kPdIRkLppJ5xg3wdYfilrInCD+7oieoPCQPUBl9F7wy2XZe/BfmStdIUSE L/c3tPlg6bMCjBj9l8UjtebLM2/I0RqjvIATbuRK8URRnj51tV7GIIqeLhmXdr/+ 0jdYIsvBmFE24jEdE3mu4hp0Z1dK5PeIlfYsPdi2oDzUQbR1ePfwgf1khMKQW+Ed g0Bwz6MGsJik+WLjxBFPiDkuC/F9yLJj6oDO1OBBo4UMepsb5nYpzdgZvUt6cDjW Psw/gKL0JGthSXv9K1H78BwVuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKTW6kYQ i4d+VtiSMUotr1cyiCRAMB8GA1UdIwQYMBaAFDxpubYB0snyo5Fab/vKPa1i6ZJF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTA5Qy9FRUY3NjJDMDkw NzUxMUVFODdEMjY2ODBDNEY5QUUwMi9QR201dGdIU3lmS2prVnB2LThvOXJXTHBr a1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BHbTV0Z0hTeWZLamtWcHYtOG85cldMcGtrVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RTA5Qy9FRUY3NjJDMDkwNzUxMUVFODdEMjY2ODBDNEY5QUUwMi9QR201dGdIU3lm S2prVnB2LThvOXJXTHBra1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIhaflLG3LhyAA/lOQnoUL1+KVpUlHsDy0bw5mccdz+ohUz0FypUZ91LYPG6I vR7nyH3X5Fb6J8tcKN7nvjcNTj3cLWo/y6H1WJV8aZQHxtAAt/GAvYfgJlc4m2A9 UZLMPThTpX9irWq6UFMxKaHiiO+jS+1exrfeXNcZ94fTMlc9nHBoeP9twS1+CdIH eiF5/e0NKY5pDy1gBu2vgliTeWALxsexB72zXdDMWhZDT1hQlA76mQbJHYo0++Gr ZgP8fFxiMIIkIB+5Vsn7N30Q2xfsWiGa+uxSxGTh3qZBxbxVmk+XLxa4iZSsxZgy DhATRoFkE/yKCeTVH0AIDPLXcA== -----END CERTIFICATE-----Generated at Thu Mar 26 15:24:00 2026 by rpki-client