$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.mft File: PVlGAD7uVIrZXXlssYi3UcV82sg.mft (raw, json) Hash identifier: ybjLuUeh+qKPSNmRkxoICjmeVhZFYZxbf10uzbtqZNs= Subject key identifier: 78:1A:E3:7C:EF:BD:10:A1:6D:A4:CB:EF:7B:CB:AE:C6:28:2F:CB:86 Authority key identifier: 3D:59:46:00:3E:EE:54:8A:D9:5D:79:6C:B1:88:B7:51:C5:7C:DA:C8 Certificate issuer: /CN=A91F9E0A/serialNumber=3D5946003EEE548AD95D796CB188B751C57CDAC8 Certificate serial: 015F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVlGAD7uVIrZXXlssYi3UcV82sg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.mft Manifest number: 0153 Signing time: Tue 07 Apr 2026 04:39:27 +0000 Manifest this update: Tue 07 Apr 2026 04:39:27 +0000 Manifest next update: Tue 14 Apr 2026 04:39:27 +0000 Files and hashes: 1: PVlGAD7uVIrZXXlssYi3UcV82sg.crl (hash: MBFS85NPnKLuFMwcaZvZ8n5gEOS1jfSU3G9bsIMJzWg=) 2: D0CDFEEA406E11EFA085272AC4F9AE02.roa (hash: tezFkMvINZIT10T6DSqOZvxH2uZ604PG/XeQKOGYnuw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.crl rsync://rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVlGAD7uVIrZXXlssYi3UcV82sg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 04:39:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 351 (0x15f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9E0A, serialNumber=3D5946003EEE548AD95D796CB188B751C57CDAC8 Validity Not Before: Apr 7 04:39:27 2026 GMT Not After : Apr 14 04:39:27 2026 GMT Subject: CN=69d48a7f-e5e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:48:49:d7:c2:b2:5d:80:ec:ad:38:08:3c:d2: d7:6c:98:7c:41:8b:fc:5b:0c:8e:55:e0:58:8b:2e: 48:d1:06:f1:ad:b4:b6:47:8e:21:59:72:ec:02:51: e5:0d:83:5a:ac:cb:1a:7c:51:75:91:52:e2:f8:fe: 24:18:50:cd:1a:e6:55:bb:52:76:93:d5:3e:c2:f9: 09:86:ec:b2:9b:b5:2a:fe:ef:bf:8e:8d:19:c7:01: a8:ce:a3:70:f6:13:91:ed:72:b9:1f:ac:dc:c6:51: 68:b0:69:b8:49:8f:71:c2:60:1a:a7:d1:35:ff:ab: d9:23:d8:8f:a1:40:10:44:91:75:1f:3f:45:50:1e: 20:f5:5f:d8:1b:c8:1d:06:80:8d:de:ba:e7:a3:48: ee:c9:f4:35:0b:b3:74:bc:65:41:22:2a:c5:13:de: c7:e6:4b:68:2b:d0:67:29:23:dd:ba:c4:56:0a:65: 0d:e3:5e:03:5d:34:62:23:cf:80:b2:cd:39:35:13: c0:b3:05:10:e2:b3:ac:40:df:a5:ad:ea:d1:a2:48: 1e:7a:44:cb:89:3f:d5:96:bc:14:7e:80:91:36:ff: f1:a3:2f:42:e2:a4:bc:e4:85:47:22:8d:f3:f0:12: b6:a9:1c:0e:51:19:0c:b4:0a:48:71:96:8c:a7:f8: 9d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:1A:E3:7C:EF:BD:10:A1:6D:A4:CB:EF:7B:CB:AE:C6:28:2F:CB:86 X509v3 Authority Key Identifier: keyid:3D:59:46:00:3E:EE:54:8A:D9:5D:79:6C:B1:88:B7:51:C5:7C:DA:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVlGAD7uVIrZXXlssYi3UcV82sg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:9f:af:f2:d8:00:73:86:f6:a8:9a:fa:8a:0a:32:b9:e9:1d: 76:12:c0:a7:46:a6:94:3a:d1:30:c2:b5:d8:4d:1d:27:4f:e4: 54:d8:14:97:6d:9d:9d:48:64:3c:fe:d9:09:e5:86:43:d1:1b: db:1e:28:42:54:22:15:21:73:ec:07:07:c0:cb:51:e7:9f:74: 1e:83:b7:0c:35:fb:ea:22:35:5c:69:4b:e9:ca:df:d4:6b:c5: 5f:e0:fb:ba:79:96:c6:a9:7b:81:e6:a5:12:70:3a:44:df:53: bc:87:3c:4d:5e:83:f7:64:4b:d9:ef:78:e9:71:e9:99:3b:47: 73:a1:8a:8e:60:e5:0f:6b:7b:20:cd:e5:74:b2:84:9c:3f:5f: 3b:ab:a1:20:18:43:b9:8d:01:47:47:b1:7e:97:93:c9:eb:c3: e6:28:b4:29:13:db:f0:2d:a5:1d:1c:03:05:58:5d:ad:36:59: a5:87:2d:e5:72:ee:04:3e:54:d2:80:6e:5e:71:98:4d:55:de: aa:a3:a2:fa:db:0f:0d:12:c7:db:f9:f9:3d:a3:36:9d:40:d9: 07:a2:27:28:af:a1:55:86:f7:42:de:88:8d:d4:ea:45:48:9c: de:8a:25:c3:bc:d4:b9:46:86:e6:96:fa:ce:fa:5a:d8:0a:5c: 22:32:58:ab -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlFMEExMTAvBgNVBAUTKDNENTk0NjAwM0VFRTU0OEFEOTVENzk2Q0IxODhCNzUx QzU3Q0RBQzgwHhcNMjYwNDA3MDQzOTI3WhcNMjYwNDE0MDQzOTI3WjAYMRYwFAYD VQQDEw02OWQ0OGE3Zi1lNWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoEhJ18KyXYDsrTgIPNLXbJh8QYv8WwyOVeBYiy5I0QbxrbS2R44hWXLsAlHl DYNarMsafFF1kVLi+P4kGFDNGuZVu1J2k9U+wvkJhuyym7Uq/u+/jo0ZxwGozqNw 9hOR7XK5H6zcxlFosGm4SY9xwmAap9E1/6vZI9iPoUAQRJF1Hz9FUB4g9V/YG8gd BoCN3rrno0juyfQ1C7N0vGVBIirFE97H5ktoK9BnKSPdusRWCmUN414DXTRiI8+A ss05NRPAswUQ4rOsQN+lrerRokgeekTLiT/VlrwUfoCRNv/xoy9C4qS85IVHIo3z 8BK2qRwOURkMtApIcZaMp/idwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHga43zv vRChbaTL73vLrsYoL8uGMB8GA1UdIwQYMBaAFD1ZRgA+7lSK2V15bLGIt1HFfNrI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUUwQS8wQkQ5ODVFODNF NjkxMUVGQTJDRTY3NkFDNEY5QUUwMi9QVmxHQUQ3dVZJclpYWGxzc1lpM1VjVjgy c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BWbEdBRDd1VklyWlhYbHNzWWkzVWNWODJzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUUwQS8wQkQ5ODVFODNFNjkxMUVGQTJDRTY3NkFDNEY5QUUwMi9QVmxHQUQ3dVZJ clpYWGxzc1lpM1VjVjgyc2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnZ+v8tgAc4b2qJr6igoyuekddhLAp0amlDrRMMK12E0dJ0/kVNgUl22dnUhk PP7ZCeWGQ9Eb2x4oQlQiFSFz7AcHwMtR5590HoO3DDX76iI1XGlL6crf1GvFX+D7 unmWxql7gealEnA6RN9TvIc8TV6D92RL2e946XHpmTtHc6GKjmDlD2t7IM3ldLKE nD9fO6uhIBhDuY0BR0exfpeTyevD5ii0KRPb8C2lHRwDBVhdrTZZpYct5XLuBD5U 0oBuXnGYTVXeqqOi+tsPDRLH2/n5PaM2nUDZB6InKK+hVYb3Qt6IjdTqRUic3ool w7zUuUaG5pb6zvpa2ApcIjJYqw== -----END CERTIFICATE-----Generated at Tue Apr 7 10:09:10 2026 by rpki-client