$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.mft File: Pxd5CYkXL0CSZ-D_50TuSLAXkec.mft (raw, json) Hash identifier: Q3eBoV2ca2dO6HofLsKb2M6Eh5A+e2N/3iAtEdjxruQ= Subject key identifier: EE:1D:5A:CA:1B:36:26:9C:FD:8B:C7:F1:90:CE:52:E3:07:90:5F:CB Authority key identifier: 3F:17:79:09:89:17:2F:40:92:67:E0:FF:E7:44:EE:48:B0:17:91:E7 Certificate issuer: /CN=A91F1303/serialNumber=3F17790989172F409267E0FFE744EE48B01791E7 Certificate serial: 9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pxd5CYkXL0CSZ-D_50TuSLAXkec.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.mft Manifest number: 9D Signing time: Sun 05 Apr 2026 06:44:58 +0000 Manifest this update: Sun 05 Apr 2026 06:44:58 +0000 Manifest next update: Sun 12 Apr 2026 06:44:58 +0000 Files and hashes: 1: Pxd5CYkXL0CSZ-D_50TuSLAXkec.crl (hash: Ds563yC+WBiXvwALr1pwnvp1B9NUV1e3nAkY3rGU+yA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.crl rsync://rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pxd5CYkXL0CSZ-D_50TuSLAXkec.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 06:44:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 157 (0x9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1303, serialNumber=3F17790989172F409267E0FFE744EE48B01791E7 Validity Not Before: Apr 5 06:44:58 2026 GMT Not After : Apr 12 06:44:58 2026 GMT Subject: CN=69d204ea-4403 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f3:a5:7b:a1:86:ad:47:e6:14:f6:74:f1:f1: c7:58:c9:6a:1c:c2:9d:51:a7:d0:8e:72:d5:33:f2: b2:15:49:c2:69:4e:c0:e0:3a:59:03:98:03:ce:c7: b8:68:6f:5c:3c:53:26:9c:d6:a2:93:49:17:4d:f7: 0b:be:24:40:73:0a:25:9c:1c:c8:e2:e7:05:0a:56: c8:5e:91:db:b4:e1:5e:22:b7:c7:b4:6e:67:d2:2e: b7:03:75:1f:58:24:c0:ee:c3:eb:61:27:0f:9f:04: 2a:6f:8c:2b:0c:5c:db:76:f5:e5:f7:38:20:f9:47: e2:89:2c:77:e7:71:6d:5d:8c:2e:f2:f8:86:5e:ea: 91:a6:31:73:31:e1:18:8b:eb:55:95:53:8b:fb:47: 94:e8:c7:d4:ca:29:22:db:90:09:02:02:fb:ba:f3: a5:58:b9:4e:19:c2:75:d7:ba:78:71:d2:f2:bd:e0: 3c:7f:e4:a9:e5:b8:cb:9f:fc:24:00:27:51:32:d0: 89:46:77:92:34:a0:5c:c8:d9:25:a2:c2:c5:cb:1e: 83:b7:e4:a2:2a:de:5e:f8:7b:ea:b4:c2:ad:e1:27: be:89:e9:9a:03:e4:b0:3e:e8:c3:9f:a7:07:2c:9d: 6e:76:a2:0c:9b:f3:f9:58:de:d3:f2:03:d9:42:8d: 49:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:1D:5A:CA:1B:36:26:9C:FD:8B:C7:F1:90:CE:52:E3:07:90:5F:CB X509v3 Authority Key Identifier: keyid:3F:17:79:09:89:17:2F:40:92:67:E0:FF:E7:44:EE:48:B0:17:91:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pxd5CYkXL0CSZ-D_50TuSLAXkec.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:ac:ea:0b:c1:fa:e8:85:28:63:d5:d5:c9:53:af:76:14:d6: 2a:90:9b:4e:a1:16:da:2e:75:ef:9b:c2:88:f6:58:a6:a2:3a: 5f:53:05:50:71:f5:e7:37:d1:03:a2:f1:c4:4c:13:8c:ef:dd: e4:d3:73:22:f3:5f:5f:5b:f3:24:63:6b:7b:74:eb:2b:b1:e3: 63:bd:35:57:c5:73:40:d3:c1:33:2e:b0:d2:8a:20:94:68:8b: 31:0c:86:38:0e:ac:d7:06:0d:ac:c6:f7:9d:cd:18:07:29:3e: e4:fd:b0:e4:54:f4:5f:ab:a0:cd:0a:08:c9:9c:4f:e9:14:bc: ce:82:56:1d:2f:e7:a0:b8:c7:85:57:ef:34:b1:07:e5:bc:7c: 30:9f:1c:36:4e:ce:e5:bd:af:07:7e:0f:fb:c1:8c:76:d3:7e: 66:1e:8b:a3:57:95:2a:24:00:8b:34:af:b3:f2:34:d4:c0:a8: 8f:95:37:d6:b9:41:01:cd:f3:9d:8e:ac:0f:fc:00:89:dc:ee: 44:15:2e:89:24:17:48:9e:9d:a0:20:5e:10:2b:72:bb:bf:80: 6f:25:b6:d3:23:58:1c:5c:67:24:9c:4a:b1:d1:4d:c3:ff:ba: be:6f:b1:41:f9:1f:5f:26:b3:c2:ce:c5:ad:0b:93:81:8c:33: c2:f4:d7:82 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjEzMDMxMTAvBgNVBAUTKDNGMTc3OTA5ODkxNzJGNDA5MjY3RTBGRkU3NDRFRTQ4 QjAxNzkxRTcwHhcNMjYwNDA1MDY0NDU4WhcNMjYwNDEyMDY0NDU4WjAYMRYwFAYD VQQDEw02OWQyMDRlYS00NDAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm/Ole6GGrUfmFPZ08fHHWMlqHMKdUafQjnLVM/KyFUnCaU7A4DpZA5gDzse4 aG9cPFMmnNaik0kXTfcLviRAcwolnBzI4ucFClbIXpHbtOFeIrfHtG5n0i63A3Uf WCTA7sPrYScPnwQqb4wrDFzbdvXl9zgg+UfiiSx353FtXYwu8viGXuqRpjFzMeEY i+tVlVOL+0eU6MfUyiki25AJAgL7uvOlWLlOGcJ117p4cdLyveA8f+Sp5bjLn/wk ACdRMtCJRneSNKBcyNklosLFyx6Dt+SiKt5e+HvqtMKt4Se+iemaA+SwPujDn6cH LJ1udqIMm/P5WN7T8gPZQo1J6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO4dWsob Niac/YvH8ZDOUuMHkF/LMB8GA1UdIwQYMBaAFD8XeQmJFy9Akmfg/+dE7kiwF5Hn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTMwMy85QjQyNEQzMDQ2 ODUxMUYwQTg4MTg4M0VDNEY5QUUwMi9QeGQ1Q1lrWEwwQ1NaLURfNTBUdVNMQVhr ZWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1B4ZDVDWWtYTDBDU1otRF81MFR1U0xBWGtlYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTMwMy85QjQyNEQzMDQ2ODUxMUYwQTg4MTg4M0VDNEY5QUUwMi9QeGQ1Q1lrWEww Q1NaLURfNTBUdVNMQVhrZWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiazqC8H66IUoY9XVyVOvdhTWKpCbTqEW2i5175vCiPZYpqI6X1MFUHH15zfR A6LxxEwTjO/d5NNzIvNfX1vzJGNre3TrK7HjY701V8VzQNPBMy6w0ooglGiLMQyG OA6s1wYNrMb3nc0YByk+5P2w5FT0X6ugzQoIyZxP6RS8zoJWHS/noLjHhVfvNLEH 5bx8MJ8cNk7O5b2vB34P+8GMdtN+Zh6Lo1eVKiQAizSvs/I01MCoj5U31rlBAc3z nY6sD/wAidzuRBUuiSQXSJ6doCBeECtyu7+AbyW20yNYHFxnJJxKsdFNw/+6vm+x QfkfXyazws7FrQuTgYwzwvTXgg== -----END CERTIFICATE-----Generated at Sun Apr 5 19:41:18 2026 by rpki-client