$ rpki-client -vvf rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft File: PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft (raw, json) Hash identifier: 1+RL6Dt9AwBB/WNhGxQfSIAOO9wl1ZdESOZXF/0cAIo= Subject key identifier: 6E:22:B7:83:85:6F:42:93:05:9B:23:6B:8D:A4:17:D6:2E:76:34:8F Authority key identifier: 3E:93:58:DC:F2:C5:3F:66:21:05:2B:3A:A8:52:45:4E:2F:B3:1C:18 Certificate issuer: /CN=A9122B0D/serialNumber=3E9358DCF2C53F6621052B3AA852454E2FB31C18 Certificate serial: 0244 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PpNY3PLFP2YhBSs6qFJFTi-zHBg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft Manifest number: 0239 Signing time: Sun 05 Apr 2026 02:15:17 +0000 Manifest this update: Sun 05 Apr 2026 02:15:17 +0000 Manifest next update: Sun 12 Apr 2026 02:15:17 +0000 Files and hashes: 1: PpNY3PLFP2YhBSs6qFJFTi-zHBg.crl (hash: dw6sOFQHwUM7NljluYIRDN+zpSTfEYs7NxvVzB/tueQ=) 2: 650CB2EE081C11EFA47C4687C4F9AE02.roa (hash: X2aMm64FsY4q8DmmBZE3dU3676xL5JYnap6j4BLKEW4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.crl rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PpNY3PLFP2YhBSs6qFJFTi-zHBg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 02:15:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 580 (0x244) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122B0D, serialNumber=3E9358DCF2C53F6621052B3AA852454E2FB31C18 Validity Not Before: Apr 5 02:15:17 2026 GMT Not After : Apr 12 02:15:17 2026 GMT Subject: CN=69d1c5b5-02a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:96:84:86:76:fb:3e:b3:73:9d:b4:b2:91:1a: 5e:3a:04:47:c6:7d:ad:77:80:13:d2:29:2d:a4:9a: a4:a0:76:5d:59:64:93:a0:90:78:f6:c2:36:2f:b0: b4:af:65:70:6c:88:97:1b:a5:85:d0:b9:0a:85:c1: 61:9c:9d:c0:c1:05:b3:f3:34:20:22:b2:8f:af:69: 47:bc:e5:3a:ee:4b:76:01:36:c8:e4:f3:ab:c7:f2: 65:71:7e:dc:0c:4f:96:cb:35:92:c1:62:c1:87:9d: 7a:4a:8d:15:98:c5:fd:b8:79:39:12:af:f3:8f:61: db:fc:92:14:55:e8:3f:92:ce:89:54:2a:f6:88:ca: 76:fa:b3:13:94:42:c8:f9:55:5e:70:f4:d1:05:91: 2b:b1:0b:2f:a9:16:f8:0d:85:83:4d:64:e6:56:fb: dd:e6:92:1d:4c:c9:31:b8:0e:8d:bd:30:48:2f:d8: 73:66:2e:39:c7:ba:f3:d1:83:7b:f3:57:83:9f:e0: b6:22:53:9c:9f:3b:bb:77:31:35:d7:ad:a1:7b:0d: 33:36:5f:b7:29:f0:92:1c:f3:56:a6:0f:e8:2e:5a: e8:44:47:4e:f4:8b:15:7e:c8:ba:a7:4a:76:93:52: be:cf:a6:df:fb:2f:45:fb:13:02:bf:31:c0:d1:e4: 5c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:22:B7:83:85:6F:42:93:05:9B:23:6B:8D:A4:17:D6:2E:76:34:8F X509v3 Authority Key Identifier: keyid:3E:93:58:DC:F2:C5:3F:66:21:05:2B:3A:A8:52:45:4E:2F:B3:1C:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PpNY3PLFP2YhBSs6qFJFTi-zHBg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:07:74:ea:a2:80:55:2b:4f:fb:04:57:55:91:98:67:f1:c0: 66:26:06:97:c0:c8:13:eb:9c:93:77:a6:56:83:6f:dc:22:8d: 3e:32:21:bd:df:aa:2f:f2:14:48:f4:52:1b:b1:f0:65:83:28: d7:46:13:7d:e4:9c:a9:9a:d5:99:8f:5e:50:30:12:33:83:3d: ec:dc:8c:fa:3c:0b:ca:cd:52:19:aa:03:e0:c6:a7:b1:81:f4: 95:61:8f:c8:7c:41:d1:63:32:c4:40:95:32:3d:95:15:99:5e: b9:79:65:4f:fe:17:f1:a8:ec:a3:47:e1:92:a9:19:39:11:a3: 95:c3:92:25:7c:ff:b8:26:bb:a8:fb:1b:a1:eb:b7:bb:0c:48: 36:c8:0a:c0:1e:de:05:c5:34:49:5d:3a:b9:a6:f8:5b:f3:16: 88:4b:58:c9:95:f0:3a:70:89:15:22:8e:68:3f:e3:c5:fa:70: 1c:ab:ad:0d:c5:e6:d2:78:bd:d0:45:98:f3:97:1d:6f:d1:5e: 04:9e:da:b3:9c:7d:d5:d1:f1:95:29:cd:5b:2c:2e:7a:8e:1a: d3:37:44:04:14:9b:44:d0:c4:e0:5f:1e:31:8a:e8:d6:d7:7f: 30:5a:bd:61:e1:dc:21:8a:a4:79:72:4e:f2:a9:a3:a2:b1:c3: 66:4a:3a:eb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJCMEQxMTAvBgNVBAUTKDNFOTM1OERDRjJDNTNGNjYyMTA1MkIzQUE4NTI0NTRF MkZCMzFDMTgwHhcNMjYwNDA1MDIxNTE3WhcNMjYwNDEyMDIxNTE3WjAYMRYwFAYD VQQDEw02OWQxYzViNS0wMmExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA05aEhnb7PrNznbSykRpeOgRHxn2td4AT0iktpJqkoHZdWWSToJB49sI2L7C0 r2VwbIiXG6WF0LkKhcFhnJ3AwQWz8zQgIrKPr2lHvOU67kt2ATbI5POrx/JlcX7c DE+WyzWSwWLBh516So0VmMX9uHk5Eq/zj2Hb/JIUVeg/ks6JVCr2iMp2+rMTlELI +VVecPTRBZErsQsvqRb4DYWDTWTmVvvd5pIdTMkxuA6NvTBIL9hzZi45x7rz0YN7 81eDn+C2IlOcnzu7dzE1162hew0zNl+3KfCSHPNWpg/oLlroREdO9IsVfsi6p0p2 k1K+z6bf+y9F+xMCvzHA0eRc4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG4it4OF b0KTBZsja42kF9YudjSPMB8GA1UdIwQYMBaAFD6TWNzyxT9mIQUrOqhSRU4vsxwY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkIwRC85MDlCNzlGMEU1 MkIxMUVEQjJFQjY1ODVDNEY5QUUwMi9QcE5ZM1BMRlAyWWhCU3M2cUZKRlRpLXpI QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BwTlkzUExGUDJZaEJTczZxRkpGVGktekhCZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkIwRC85MDlCNzlGMEU1MkIxMUVEQjJFQjY1ODVDNEY5QUUwMi9QcE5ZM1BMRlAy WWhCU3M2cUZKRlRpLXpIQmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmQd06qKAVStP+wRXVZGYZ/HAZiYGl8DIE+uck3emVoNv3CKNPjIhvd+qL/IU SPRSG7HwZYMo10YTfeScqZrVmY9eUDASM4M97NyM+jwLys1SGaoD4MansYH0lWGP yHxB0WMyxECVMj2VFZleuXllT/4X8ajso0fhkqkZORGjlcOSJXz/uCa7qPsboeu3 uwxINsgKwB7eBcU0SV06uab4W/MWiEtYyZXwOnCJFSKOaD/jxfpwHKutDcXm0ni9 0EWY85cdb9FeBJ7as5x91dHxlSnNWywueo4a0zdEBBSbRNDE4F8eMYro1td/MFq9 YeHcIYqkeXJO8qmjorHDZko66w== -----END CERTIFICATE-----Generated at Mon Apr 6 08:31:49 2026 by rpki-client