$ rpki-client -vvf rpki.apnic.net/member_repository/A91210E0/3EB10C9A6D9811EEAA2AA36AC4F9AE02/PyDCnh1-UV3z49hapE51H4Fycxo.mft File: PyDCnh1-UV3z49hapE51H4Fycxo.mft (raw, json) Hash identifier: NZkn6OckXv+7ria2EByq0KJIkZWn63ZwPTSk+oSgK04= Subject key identifier: AC:5E:B2:E8:07:C5:46:EA:C7:60:8B:69:26:D2:BE:43:5C:5C:1C:BE Authority key identifier: 3F:20:C2:9E:1D:7E:51:5D:F3:E3:D8:5A:A4:4E:75:1F:81:72:73:1A Certificate issuer: /CN=A91210E0/serialNumber=3F20C29E1D7E515DF3E3D85AA44E751F8172731A Certificate serial: 01DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PyDCnh1-UV3z49hapE51H4Fycxo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91210E0/3EB10C9A6D9811EEAA2AA36AC4F9AE02/PyDCnh1-UV3z49hapE51H4Fycxo.mft Manifest number: 01D4 Signing time: Sun 05 Apr 2026 03:08:52 +0000 Manifest this update: Sun 05 Apr 2026 03:08:51 +0000 Manifest next update: Sun 12 Apr 2026 03:08:51 +0000 Files and hashes: 1: PyDCnh1-UV3z49hapE51H4Fycxo.crl (hash: WkQLbz+j1yUHHjzdsZrRI4CWLyp4e/hmRFo44DTZ0fY=) 2: 503E43126E5E11EEB39D9E48C4F9AE02.roa (hash: 0Pp/jipwHz+dDFZW3SdujQfWz5D9Ej7JkD74IDbQ7uI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91210E0/3EB10C9A6D9811EEAA2AA36AC4F9AE02/PyDCnh1-UV3z49hapE51H4Fycxo.crl rsync://rpki.apnic.net/member_repository/A91210E0/3EB10C9A6D9811EEAA2AA36AC4F9AE02/PyDCnh1-UV3z49hapE51H4Fycxo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PyDCnh1-UV3z49hapE51H4Fycxo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 03:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 476 (0x1dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91210E0, serialNumber=3F20C29E1D7E515DF3E3D85AA44E751F8172731A Validity Not Before: Apr 5 03:08:51 2026 GMT Not After : Apr 12 03:08:51 2026 GMT Subject: CN=69d1d243-3bc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:57:65:89:a2:38:97:2e:80:d6:6b:cd:94:7a: 28:5e:85:aa:5b:13:c8:70:b3:0c:cc:39:0b:9b:2a: d9:e2:11:da:37:45:92:d9:9a:fb:95:3f:60:be:bd: 9e:b5:e6:83:db:e6:a8:8b:ee:74:ea:4a:30:7b:9c: 0e:1c:de:18:6c:5e:60:e1:ff:94:86:70:b8:61:3c: dd:ef:42:80:0a:5e:45:d8:e6:83:fc:52:b5:2b:ab: 27:68:0f:65:b3:6b:e3:cc:9e:8a:07:39:da:5c:99: 7e:5b:da:b9:41:fd:99:91:87:e0:fa:b9:ed:69:78: b7:d9:8f:db:1e:61:2a:4f:a9:55:f9:01:03:27:a6: 86:bb:e7:3c:38:88:64:25:21:f3:5e:32:76:96:b8: 5b:9c:0d:8c:c0:01:ce:5d:e6:51:fd:37:ab:3e:93: 4f:c1:0c:8f:7c:d0:93:25:bf:98:29:a7:e5:89:b0: f9:bb:ca:98:4a:12:fa:9d:94:72:4a:2c:0d:eb:86: 8e:1e:44:a9:86:7d:c2:54:af:68:f0:43:db:2b:cd: 3c:b3:24:13:d2:d3:bd:a1:01:60:33:9a:2b:02:02: f8:48:a2:15:22:92:e3:ca:1e:11:b7:4b:20:ac:d9: 09:23:f0:5a:bc:b5:f2:81:36:ff:0f:39:cd:bc:78: fd:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:5E:B2:E8:07:C5:46:EA:C7:60:8B:69:26:D2:BE:43:5C:5C:1C:BE X509v3 Authority Key Identifier: keyid:3F:20:C2:9E:1D:7E:51:5D:F3:E3:D8:5A:A4:4E:75:1F:81:72:73:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91210E0/3EB10C9A6D9811EEAA2AA36AC4F9AE02/PyDCnh1-UV3z49hapE51H4Fycxo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PyDCnh1-UV3z49hapE51H4Fycxo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91210E0/3EB10C9A6D9811EEAA2AA36AC4F9AE02/PyDCnh1-UV3z49hapE51H4Fycxo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:34:cb:f0:35:71:a1:d3:f8:f7:60:34:77:ae:d1:b7:fc:9b: 87:8d:a4:49:0e:a4:07:56:28:36:57:2c:a8:f9:99:b4:45:96: 77:5a:bc:ab:3e:35:65:43:02:64:f7:97:1f:78:79:77:50:3d: 1e:f3:d0:0c:48:07:01:d8:1d:6a:c4:50:11:9c:03:34:47:99: e2:f1:69:08:75:d0:48:14:e2:5a:24:62:ca:21:a9:22:13:cf: cc:3c:7e:a1:52:06:0c:23:57:65:1f:3d:1a:07:c4:92:6d:48: 03:b9:3c:ca:d7:25:bc:25:2a:65:06:82:05:2c:5b:53:0c:19: 5b:c8:6e:f0:ae:18:76:aa:f0:57:8b:46:cd:71:dd:2f:cc:da: a8:1d:c5:45:d4:4c:66:3f:a3:d7:4e:a6:95:23:76:e1:c1:8c: 7e:b8:b4:d9:70:f1:d6:5f:64:ab:91:71:27:0c:5f:87:6a:01: 78:4e:76:2a:e7:f9:c5:a3:c7:7b:cd:d4:ce:4d:8e:d2:2e:bb: 24:c2:6b:a7:cd:68:06:d2:46:a4:1b:1d:e8:04:05:c1:54:75: 4a:66:51:69:27:e0:d1:e2:24:a2:76:07:bd:f2:19:96:db:ae: 6f:ce:c5:dd:d2:f4:d9:ca:0f:be:72:ab:06:c2:36:ed:a6:54: 14:c3:98:45 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjEwRTAxMTAvBgNVBAUTKDNGMjBDMjlFMUQ3RTUxNURGM0UzRDg1QUE0NEU3NTFG ODE3MjczMUEwHhcNMjYwNDA1MDMwODUxWhcNMjYwNDEyMDMwODUxWjAYMRYwFAYD VQQDEw02OWQxZDI0My0zYmM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArldliaI4ly6A1mvNlHooXoWqWxPIcLMMzDkLmyrZ4hHaN0WS2Zr7lT9gvr2e teaD2+aoi+506kowe5wOHN4YbF5g4f+UhnC4YTzd70KACl5F2OaD/FK1K6snaA9l s2vjzJ6KBznaXJl+W9q5Qf2ZkYfg+rntaXi32Y/bHmEqT6lV+QEDJ6aGu+c8OIhk JSHzXjJ2lrhbnA2MwAHOXeZR/TerPpNPwQyPfNCTJb+YKaflibD5u8qYShL6nZRy SiwN64aOHkSphn3CVK9o8EPbK808syQT0tO9oQFgM5orAgL4SKIVIpLjyh4Rt0sg rNkJI/BavLXygTb/DznNvHj96wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKxesugH xUbqx2CLaSbSvkNcXBy+MB8GA1UdIwQYMBaAFD8gwp4dflFd8+PYWqROdR+BcnMa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTBFMC8zRUIxMEM5QTZE OTgxMUVFQUEyQUEzNkFDNEY5QUUwMi9QeURDbmgxLVVWM3o0OWhhcEU1MUg0Rnlj eG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1B5RENuaDEtVVYzejQ5aGFwRTUxSDRGeWN4by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTBFMC8zRUIxMEM5QTZEOTgxMUVFQUEyQUEzNkFDNEY5QUUwMi9QeURDbmgxLVVW M3o0OWhhcEU1MUg0RnljeG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnjTL8DVxodP492A0d67Rt/ybh42kSQ6kB1YoNlcsqPmZtEWWd1q8qz41ZUMC ZPeXH3h5d1A9HvPQDEgHAdgdasRQEZwDNEeZ4vFpCHXQSBTiWiRiyiGpIhPPzDx+ oVIGDCNXZR89GgfEkm1IA7k8ytclvCUqZQaCBSxbUwwZW8hu8K4YdqrwV4tGzXHd L8zaqB3FRdRMZj+j106mlSN24cGMfri02XDx1l9kq5FxJwxfh2oBeE52Kuf5xaPH e83Uzk2O0i67JMJrp81oBtJGpBsd6AQFwVR1SmZRaSfg0eIkonYHvfIZltuub87F 3dL02coPvnKrBsI27aZUFMOYRQ== -----END CERTIFICATE-----Generated at Mon Apr 6 08:49:36 2026 by rpki-client