$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft File: PByHc0fugnKWNq8POjddORCQ-SE.mft (raw, json) Hash identifier: t9MqYMr03GFECq2YkPs8M24XO0f6IaJLjWTo60iqtGo= Subject key identifier: 96:9B:60:89:E6:2D:76:1D:DD:2C:BD:17:AF:2E:B3:50:9E:04:F5:0D Authority key identifier: 3C:1C:87:73:47:EE:82:72:96:36:AF:0F:3A:37:5D:39:10:90:F9:21 Certificate issuer: /CN=A91DA2D5/serialNumber=3C1C877347EE82729636AF0F3A375D391090F921 Certificate serial: 2DA3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft Manifest number: 2D59 Signing time: Sat 04 Apr 2026 15:28:21 +0000 Manifest this update: Sat 04 Apr 2026 15:28:21 +0000 Manifest next update: Sat 11 Apr 2026 15:28:21 +0000 Files and hashes: 1: PByHc0fugnKWNq8POjddORCQ-SE.crl (hash: 2U3NhVfDtNUbihefPy3SfrDFeui5kDAOgR6+EkzRrao=) 2: 14820EDE248611EEB600357DC4F9AE02.roa (hash: ILtVZce+EeOlerO/s4x6aPfHR6PK7/NY4qOIZJx05so=) 3: 5728551C6E9611EF8FEC9C1BC4F9AE02.roa (hash: aHD9k1CO/91sgZuODhSSCG/52z7yS492WmwyS5uktA4=) 4: DE61D0DC2A7311F08DDC6D17C4F9AE02.roa (hash: xXPAl2rdlXbRKGiZrQ383xk0pehWZEjj7jMTsKVw0eI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.crl rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 15:28:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11683 (0x2da3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA2D5, serialNumber=3C1C877347EE82729636AF0F3A375D391090F921 Validity Not Before: Apr 4 15:28:21 2026 GMT Not After : Apr 11 15:28:21 2026 GMT Subject: CN=69d12e15-d75a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ae:0e:e2:b4:fc:2f:c2:ba:55:3d:53:74:4c: 9d:98:a2:16:aa:30:be:b4:37:f5:b0:65:f3:85:22: 78:f4:85:58:43:57:e0:85:eb:11:16:37:5f:cb:c3: 7a:c3:84:13:16:87:9b:68:82:ea:62:1a:dc:cc:7e: 51:5e:65:f9:7e:9c:33:07:d9:88:14:71:67:67:b5: ea:01:77:c6:eb:07:31:09:b8:b0:b1:b7:ac:42:0b: 59:bd:20:1a:06:88:bc:ed:30:27:22:c4:70:05:f2: 9e:dc:88:8a:3a:64:d6:d6:cf:d9:ad:44:59:8f:58: 14:10:07:71:bc:b3:16:f4:0f:4e:a1:f6:81:86:33: 3f:43:79:18:8b:6e:7b:04:40:56:9b:68:51:97:88: 53:af:a5:15:8b:da:dc:b5:34:ba:7d:1d:da:7b:18: 9f:a8:99:ea:31:2d:53:a6:3d:f7:32:92:da:e3:b6: 69:33:79:75:ad:10:b6:5a:db:41:0c:e4:29:82:50: 44:44:37:f0:9f:bd:6e:cf:b7:36:6f:1b:bd:21:e9: ac:12:cd:f2:b2:7b:16:00:2d:53:04:78:5b:5a:41: 45:99:0e:fc:c2:40:b6:d3:28:d5:16:8f:33:af:08: 7c:23:20:75:33:0e:6a:0c:2a:e4:05:e4:ce:bd:e8: 29:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:9B:60:89:E6:2D:76:1D:DD:2C:BD:17:AF:2E:B3:50:9E:04:F5:0D X509v3 Authority Key Identifier: keyid:3C:1C:87:73:47:EE:82:72:96:36:AF:0F:3A:37:5D:39:10:90:F9:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:42:b0:0f:2d:64:de:45:bd:59:3a:f0:a9:7a:33:dd:e6:ff: 1d:f1:21:08:f7:88:4d:a9:77:fe:0f:b1:94:c7:84:f3:38:98: 01:80:24:17:1b:04:d8:81:a2:80:1e:12:92:9a:a4:f9:f9:f2: 83:37:6b:e0:8e:fa:71:23:ec:2e:87:3e:11:fe:cd:04:62:44: c8:93:7a:3f:41:a6:11:69:06:91:e3:48:fa:62:41:86:c4:e3: 21:b9:74:e0:51:5f:58:c0:f6:6f:59:b8:5d:a8:43:c2:e1:81: 5a:55:ea:68:a2:07:79:86:b2:1e:e3:cb:51:be:73:78:f8:c1: 7f:43:93:09:dc:cf:ca:74:76:25:6b:02:00:5b:23:bd:92:6b: 98:a3:20:53:16:21:4a:65:b4:56:fe:8a:57:d4:c2:94:4f:ca: 43:65:1d:10:d7:9e:57:16:f3:15:c9:46:04:eb:1c:f0:c2:c1: 57:84:80:00:65:13:d6:9b:64:e8:bc:15:55:ac:e5:7e:c5:37: 14:f8:2e:fb:7f:e5:09:7c:7b:ab:bc:58:7c:ca:86:56:a2:26: 24:83:9e:26:92:b6:42:a3:40:e5:73:15:61:4d:f3:59:9b:3d: 99:55:b6:5e:6d:21:fe:11:0f:33:94:5e:67:f4:07:e1:99:86: 94:fe:1f:02 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICLaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REEyRDUxMTAvBgNVBAUTKDNDMUM4NzczNDdFRTgyNzI5NjM2QUYwRjNBMzc1RDM5 MTA5MEY5MjEwHhcNMjYwNDA0MTUyODIxWhcNMjYwNDExMTUyODIxWjAYMRYwFAYD VQQDEw02OWQxMmUxNS1kNzVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAi64O4rT8L8K6VT1TdEydmKIWqjC+tDf1sGXzhSJ49IVYQ1fghesRFjdfy8N6 w4QTFoebaILqYhrczH5RXmX5fpwzB9mIFHFnZ7XqAXfG6wcxCbiwsbesQgtZvSAa Boi87TAnIsRwBfKe3IiKOmTW1s/ZrURZj1gUEAdxvLMW9A9OofaBhjM/Q3kYi257 BEBWm2hRl4hTr6UVi9rctTS6fR3aexifqJnqMS1Tpj33MpLa47ZpM3l1rRC2WttB DOQpglBERDfwn71uz7c2bxu9IemsEs3ysnsWAC1TBHhbWkFFmQ78wkC20yjVFo8z rwh8IyB1Mw5qDCrkBeTOvegpfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJabYInm LXYd3Sy9F68us1CeBPUNMB8GA1UdIwQYMBaAFDwch3NH7oJyljavDzo3XTkQkPkh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTJENS81Rjg2MUVFNkI4 OUExMUUzQjRBQzdFNzg1OTExRUEzMi9QQnlIYzBmdWduS1dOcThQT2pkZE9SQ1Et U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BCeUhjMGZ1Z25LV05xOFBPamRkT1JDUS1TRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTJENS81Rjg2MUVFNkI4OUExMUUzQjRBQzdFNzg1OTExRUEzMi9QQnlIYzBmdWdu S1dOcThQT2pkZE9SQ1EtU0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcEKwDy1k3kW9WTrwqXoz3eb/HfEhCPeITal3/g+xlMeE8ziYAYAkFxsE2IGi gB4Skpqk+fnygzdr4I76cSPsLoc+Ef7NBGJEyJN6P0GmEWkGkeNI+mJBhsTjIbl0 4FFfWMD2b1m4XahDwuGBWlXqaKIHeYayHuPLUb5zePjBf0OTCdzPynR2JWsCAFsj vZJrmKMgUxYhSmW0Vv6KV9TClE/KQ2UdENeeVxbzFclGBOsc8MLBV4SAAGUT1ptk 6LwVVazlfsU3FPgu+3/lCXx7q7xYfMqGVqImJIOeJpK2QqNA5XMVYU3zWZs9mVW2 Xm0h/hEPM5ReZ/QH4ZmGlP4fAg== -----END CERTIFICATE-----Generated at Sun Apr 5 19:42:36 2026 by rpki-client