$ rpki-client -vvf rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft File: Psg0IE1rqvmRQMA712IRRcB7umI.mft (raw, json) Hash identifier: F3Q+NlupAfTWAek0uhAmv3GLOngDb1r4bmm96bJ3+Ns= Subject key identifier: A4:46:22:65:EE:C9:AE:84:80:C6:E3:CB:C8:8E:9A:5E:A4:D5:E8:2E Authority key identifier: 3E:C8:34:20:4D:6B:AA:F9:91:40:C0:3B:D7:62:11:45:C0:7B:BA:62 Certificate issuer: /CN=A9196D24/serialNumber=3EC834204D6BAAF99140C03BD7621145C07BBA62 Certificate serial: 3547 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft Manifest number: 3532 Signing time: Sat 04 Apr 2026 15:06:10 +0000 Manifest this update: Sat 04 Apr 2026 15:06:10 +0000 Manifest next update: Sat 11 Apr 2026 15:06:10 +0000 Files and hashes: 1: Psg0IE1rqvmRQMA712IRRcB7umI.crl (hash: Q+owYPZKBuJmLhzzKcqbJF1Y9LJB/yr2fJ5maPqTegY=) 2: E73006AA682811EB8D635520C4F9AE02.roa (hash: bpfhYxtir2ry1hugzglFDH+ZPqZEnnOPHqDserf2jPs=) 3: BC3EBE062E5B11F1A895088A9B833773.roa (hash: 7hRmAxI1zCBqDLioBHVfEw+Ax2fyJalt+hg/8ZM+HUQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.crl rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 15:06:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13639 (0x3547) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196D24, serialNumber=3EC834204D6BAAF99140C03BD7621145C07BBA62 Validity Not Before: Apr 4 15:06:10 2026 GMT Not After : Apr 11 15:06:10 2026 GMT Subject: CN=69d128e2-ded0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c0:6c:ae:e1:7a:78:e4:47:d9:cf:b2:a7:8f: 0f:37:24:a6:5a:e7:e5:ad:32:23:1e:34:7c:11:02: 01:51:bf:94:c8:32:6e:51:06:8a:3a:a3:8e:ae:ef: 72:4f:43:88:97:3d:9d:24:dc:c4:a8:49:4c:20:a6: 09:ce:89:03:5b:04:d8:16:0c:7e:0d:c2:ce:b1:01: 49:e2:c3:c4:1b:e1:05:f8:54:ee:fc:9e:52:d3:e5: a0:66:46:da:56:1e:d5:83:f5:a6:2c:b7:51:f6:00: a9:14:25:cc:30:d3:6d:41:b9:11:db:69:3f:fc:af: 40:b0:10:27:e5:db:6e:d9:95:9f:66:a9:ad:f7:4e: 09:75:64:88:b6:f5:71:b2:94:d6:68:4f:fa:a6:60: d8:07:e5:dd:11:d4:3e:b5:a2:98:b1:d3:90:4c:99: 14:06:fb:47:96:d1:14:cc:4c:da:46:66:55:b3:76: 67:f0:e2:61:79:e1:06:6f:73:1a:bb:10:2e:d5:58: e1:1d:60:09:da:b5:16:b5:dd:fe:4e:4c:12:99:c5: a8:39:90:be:18:b6:68:f0:29:09:0a:c5:5c:8b:ad: 2a:b0:ce:9d:1b:21:44:0c:44:d3:33:82:42:51:7f: b6:b8:a8:69:66:2d:31:af:0d:1d:e3:6a:a1:20:f7: 65:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:46:22:65:EE:C9:AE:84:80:C6:E3:CB:C8:8E:9A:5E:A4:D5:E8:2E X509v3 Authority Key Identifier: keyid:3E:C8:34:20:4D:6B:AA:F9:91:40:C0:3B:D7:62:11:45:C0:7B:BA:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:ce:1e:ee:95:41:ab:09:0e:bd:e4:49:0c:56:e6:d0:62:bd: a2:98:e0:71:e1:ab:10:78:fd:04:8a:21:29:c0:3b:66:66:80: bc:65:fa:96:01:e0:7d:41:07:52:6e:58:7b:59:66:e4:d1:45: 30:67:f3:85:b3:74:1a:b4:ca:87:9b:63:80:d0:a1:dc:ec:e3: af:01:1e:81:b2:79:f0:db:04:33:e0:98:8c:17:2c:3c:17:58: 69:37:79:50:3b:ab:2a:b1:b0:25:15:05:a2:35:2d:0a:06:7c: 1c:7a:be:c1:7a:a1:9f:48:ff:e5:47:ea:be:c2:9b:5f:70:b6: 38:e2:f8:1a:1f:9d:1a:ef:a9:c5:80:4f:34:b9:7d:71:c0:78: b0:33:fc:c3:e2:ca:c7:2b:26:5b:d4:6c:ea:38:79:21:cf:55: a5:ce:de:c2:86:17:e5:e8:4a:e7:0c:13:67:d9:03:87:9a:f6: 9a:a0:32:d0:10:d7:4b:a3:42:da:21:07:68:8c:af:a4:54:3d: 7f:67:bd:b5:88:28:70:75:f2:5a:98:77:dc:e7:bc:f9:9a:c1: 78:1b:b6:68:77:88:8f:23:a9:e6:7b:c3:77:91:69:6c:33:9a: 76:95:7e:bc:43:8d:bd:63:87:1a:36:43:15:2e:ef:86:ad:f2: fc:ab:8a:6b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZEMjQxMTAvBgNVBAUTKDNFQzgzNDIwNEQ2QkFBRjk5MTQwQzAzQkQ3NjIxMTQ1 QzA3QkJBNjIwHhcNMjYwNDA0MTUwNjEwWhcNMjYwNDExMTUwNjEwWjAYMRYwFAYD VQQDEw02OWQxMjhlMi1kZWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxcBsruF6eORH2c+yp48PNySmWuflrTIjHjR8EQIBUb+UyDJuUQaKOqOOru9y T0OIlz2dJNzEqElMIKYJzokDWwTYFgx+DcLOsQFJ4sPEG+EF+FTu/J5S0+WgZkba Vh7Vg/WmLLdR9gCpFCXMMNNtQbkR22k//K9AsBAn5dtu2ZWfZqmt904JdWSItvVx spTWaE/6pmDYB+XdEdQ+taKYsdOQTJkUBvtHltEUzEzaRmZVs3Zn8OJheeEGb3Ma uxAu1VjhHWAJ2rUWtd3+TkwSmcWoOZC+GLZo8CkJCsVci60qsM6dGyFEDETTM4JC UX+2uKhpZi0xrw0d42qhIPdloQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKRGImXu ya6EgMbjy8iOml6k1eguMB8GA1UdIwQYMBaAFD7INCBNa6r5kUDAO9diEUXAe7pi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkQyNC81NTBFMjdGMjFE QTQxMUUyOEM1MzNCOUEwOEIwMkNEMi9Qc2cwSUUxcnF2bVJRTUE3MTJJUlJjQjd1 bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BzZzBJRTFycXZtUlFNQTcxMklSUmNCN3VtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkQyNC81NTBFMjdGMjFEQTQxMUUyOEM1MzNCOUEwOEIwMkNEMi9Qc2cwSUUxcnF2 bVJRTUE3MTJJUlJjQjd1bUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoc4e7pVBqwkOveRJDFbm0GK9opjgceGrEHj9BIohKcA7ZmaAvGX6lgHgfUEH Um5Ye1lm5NFFMGfzhbN0GrTKh5tjgNCh3OzjrwEegbJ58NsEM+CYjBcsPBdYaTd5 UDurKrGwJRUFojUtCgZ8HHq+wXqhn0j/5UfqvsKbX3C2OOL4Gh+dGu+pxYBPNLl9 ccB4sDP8w+LKxysmW9Rs6jh5Ic9Vpc7ewoYX5ehK5wwTZ9kDh5r2mqAy0BDXS6NC 2iEHaIyvpFQ9f2e9tYgocHXyWph33Oe8+ZrBeBu2aHeIjyOp5nvDd5FpbDOadpV+ vEONvWOHGjZDFS7vhq3y/KuKaw== -----END CERTIFICATE-----Generated at Sun Apr 5 19:59:20 2026 by rpki-client