$ rpki-client -vvf rpki.apnic.net/member_repository/A91C66B2/C4F15472201611F0A8D74314C4F9AE02/PzH7XY70fa043ZLqGonoiHFAOjE.mft File: PzH7XY70fa043ZLqGonoiHFAOjE.mft (raw, json) Hash identifier: 5f3/4xqS+u8Pp58jrzqxeSVO0uCGvtcLXAs+UncEd9M= Subject key identifier: 20:8E:83:36:9D:26:03:D1:47:D5:9E:17:59:C6:7A:1B:5F:20:1D:44 Authority key identifier: 3F:31:FB:5D:8E:F4:7D:AD:38:DD:92:EA:1A:89:E8:88:71:40:3A:31 Certificate issuer: /CN=A91C66B2/serialNumber=3F31FB5D8EF47DAD38DD92EA1A89E88871403A31 Certificate serial: B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PzH7XY70fa043ZLqGonoiHFAOjE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C66B2/C4F15472201611F0A8D74314C4F9AE02/PzH7XY70fa043ZLqGonoiHFAOjE.mft Manifest number: B1 Signing time: Sun 05 Apr 2026 06:28:49 +0000 Manifest this update: Sun 05 Apr 2026 06:28:48 +0000 Manifest next update: Sun 12 Apr 2026 06:28:48 +0000 Files and hashes: 1: PzH7XY70fa043ZLqGonoiHFAOjE.crl (hash: X1v8C3vuIm+fwMBzvuJ8oOdpPQirdTow8aJivhQdbcI=) 2: F8C50B08201711F0A5D51F16C4F9AE02.roa (hash: 0V0IRbzifSTjNSAVOPWTTktiswJ9KarZ5qkmJcePTMA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C66B2/C4F15472201611F0A8D74314C4F9AE02/PzH7XY70fa043ZLqGonoiHFAOjE.crl rsync://rpki.apnic.net/member_repository/A91C66B2/C4F15472201611F0A8D74314C4F9AE02/PzH7XY70fa043ZLqGonoiHFAOjE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PzH7XY70fa043ZLqGonoiHFAOjE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 06:28:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 179 (0xb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C66B2, serialNumber=3F31FB5D8EF47DAD38DD92EA1A89E88871403A31 Validity Not Before: Apr 5 06:28:48 2026 GMT Not After : Apr 12 06:28:48 2026 GMT Subject: CN=69d20120-2b73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e3:aa:98:36:97:53:e4:fa:1d:91:f9:4b:d0: b6:70:c0:3b:ba:88:c5:e7:35:c8:97:e7:7e:d8:31: f7:d8:d2:71:62:cc:75:a7:54:e4:70:72:0d:17:6f: 25:4b:c9:14:8c:23:d4:35:75:02:bf:6f:c9:36:8c: 47:e8:bc:d8:c9:b4:4f:f6:29:0a:6a:45:34:4a:17: 1f:57:d5:bc:8a:8b:58:f1:bf:5a:91:7a:3c:ce:cf: 3d:25:9f:b9:9b:51:34:5a:5d:46:be:74:83:67:ae: 64:47:84:53:ed:bc:f8:dd:14:de:6f:0e:02:0f:e6: 01:a5:46:85:b6:b5:a0:39:5f:3d:16:25:e5:9e:0b: e4:5d:6a:5b:24:76:84:fe:64:bd:ae:be:c2:43:f5: 04:30:e2:97:c7:a4:12:9d:db:6f:a5:e6:58:3a:53: 4b:46:53:81:55:91:6d:4f:44:15:b0:07:8d:a4:3e: db:15:a2:6b:b2:65:3a:06:6f:18:76:88:0a:b8:d0: 99:bc:0b:58:f1:d8:af:57:6c:41:82:c7:5d:be:f4: e0:b9:9c:4b:9a:1a:45:73:6f:f4:9b:a5:ec:a3:a6: 41:45:e8:76:d0:87:c8:62:63:2d:34:5a:92:45:6b: 21:81:66:a8:a3:17:26:31:bf:cb:f8:df:fe:a3:7c: df:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:8E:83:36:9D:26:03:D1:47:D5:9E:17:59:C6:7A:1B:5F:20:1D:44 X509v3 Authority Key Identifier: keyid:3F:31:FB:5D:8E:F4:7D:AD:38:DD:92:EA:1A:89:E8:88:71:40:3A:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C66B2/C4F15472201611F0A8D74314C4F9AE02/PzH7XY70fa043ZLqGonoiHFAOjE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PzH7XY70fa043ZLqGonoiHFAOjE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C66B2/C4F15472201611F0A8D74314C4F9AE02/PzH7XY70fa043ZLqGonoiHFAOjE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:45:fb:6e:61:50:ee:0d:48:f6:05:ce:3c:a0:2d:5c:f7:f1: be:f5:1c:a9:65:06:01:07:8c:d9:98:21:81:ac:c4:e8:5d:92: d4:ea:43:dc:fc:d2:c2:90:35:dd:c9:00:19:9b:15:aa:0b:e3: ff:a4:08:d0:56:05:ce:39:41:c7:f8:b7:16:b2:d5:31:55:51: 66:bd:47:af:60:cf:94:e3:d6:6e:97:71:31:2b:8c:ba:7e:72: 1e:b0:e3:02:f7:b9:ea:b4:1a:56:74:95:22:f2:01:d0:44:68: e4:49:13:fb:e8:ec:a6:d3:d5:94:96:e2:73:8b:a7:7f:24:61: 14:a7:db:6b:9c:e7:96:3b:15:a4:83:62:b1:da:92:06:e1:dd: 82:3c:67:4b:7d:5c:39:ca:75:81:c6:92:fa:54:d8:a4:84:15: 0d:2e:7b:30:c5:27:29:4d:c3:9f:be:73:a5:04:f3:8c:e5:e1: 7f:ff:b7:94:4a:3c:7a:73:34:32:4d:39:44:c9:94:4e:5a:f5: c2:2e:29:0b:3e:52:2a:38:67:82:77:e0:e2:9a:55:46:93:19: af:cb:72:d8:73:18:db:7c:f7:1f:3f:0e:d1:db:98:e9:ee:c0: d6:f1:d6:7e:e1:f6:48:d5:b8:28:26:31:b1:c1:85:6e:24:8d: 37:18:7b:e2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICALMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY2QjIxMTAvBgNVBAUTKDNGMzFGQjVEOEVGNDdEQUQzOEREOTJFQTFBODlFODg4 NzE0MDNBMzEwHhcNMjYwNDA1MDYyODQ4WhcNMjYwNDEyMDYyODQ4WjAYMRYwFAYD VQQDEw02OWQyMDEyMC0yYjczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq+OqmDaXU+T6HZH5S9C2cMA7uojF5zXIl+d+2DH32NJxYsx1p1TkcHINF28l S8kUjCPUNXUCv2/JNoxH6LzYybRP9ikKakU0ShcfV9W8iotY8b9akXo8zs89JZ+5 m1E0Wl1GvnSDZ65kR4RT7bz43RTebw4CD+YBpUaFtrWgOV89FiXlngvkXWpbJHaE /mS9rr7CQ/UEMOKXx6QSndtvpeZYOlNLRlOBVZFtT0QVsAeNpD7bFaJrsmU6Bm8Y dogKuNCZvAtY8divV2xBgsddvvTguZxLmhpFc2/0m6Xso6ZBReh20IfIYmMtNFqS RWshgWaooxcmMb/L+N/+o3zf3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCCOgzad JgPRR9WeF1nGehtfIB1EMB8GA1UdIwQYMBaAFD8x+12O9H2tON2S6hqJ6IhxQDox MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjZCMi9DNEYxNTQ3MjIw MTYxMUYwQThENzQzMTRDNEY5QUUwMi9Qekg3WFk3MGZhMDQzWkxxR29ub2lIRkFP akUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1B6SDdYWTcwZmEwNDNaTHFHb25vaUhGQU9qRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjZCMi9DNEYxNTQ3MjIwMTYxMUYwQThENzQzMTRDNEY5QUUwMi9Qekg3WFk3MGZh MDQzWkxxR29ub2lIRkFPakUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUkX7bmFQ7g1I9gXOPKAtXPfxvvUcqWUGAQeM2ZghgazE6F2S1OpD3PzSwpA1 3ckAGZsVqgvj/6QI0FYFzjlBx/i3FrLVMVVRZr1Hr2DPlOPWbpdxMSuMun5yHrDj Ave56rQaVnSVIvIB0ERo5EkT++jsptPVlJbic4unfyRhFKfba5znljsVpINisdqS BuHdgjxnS31cOcp1gcaS+lTYpIQVDS57MMUnKU3Dn75zpQTzjOXhf/+3lEo8enM0 Mk05RMmUTlr1wi4pCz5SKjhngnfg4ppVRpMZr8ty2HMY23z3Hz8O0duY6e7A1vHW fuH2SNW4KCYxscGFbiSNNxh74g== -----END CERTIFICATE-----Generated at Sun Apr 5 19:58:14 2026 by rpki-client