$ rpki-client -vvf rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.mft File: PQqIwMyj7oZ3zRffPuht5x38ESk.mft (raw, json) Hash identifier: vWT8MFqpTxeFpAE/OBFamczA0uC4Y0nAG4PGRJAibeI= Subject key identifier: B7:98:D1:D2:D6:76:DC:9E:47:BE:73:E1:3B:95:09:07:73:C7:6A:AD Authority key identifier: 3D:0A:88:C0:CC:A3:EE:86:77:CD:17:DF:3E:E8:6D:E7:1D:FC:11:29 Certificate issuer: /CN=A91607DE/serialNumber=3D0A88C0CCA3EE8677CD17DF3EE86DE71DFC1129 Certificate serial: 03F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQqIwMyj7oZ3zRffPuht5x38ESk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.mft Manifest number: 03E9 Signing time: Sun 05 Apr 2026 00:17:30 +0000 Manifest this update: Sun 05 Apr 2026 00:17:30 +0000 Manifest next update: Sun 12 Apr 2026 00:17:30 +0000 Files and hashes: 1: PQqIwMyj7oZ3zRffPuht5x38ESk.crl (hash: GKyZTqmk3qbDOeIviMG9nf75aV3OK4lU0oq5y7e8pyo=) 2: FD398FA0BB5D11ECA62F8674C4F9AE02.roa (hash: lCNfDmCO6Vy6uu5QW43aJqJrNK0XuY+KKPY1oeY2SkM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.crl rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQqIwMyj7oZ3zRffPuht5x38ESk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 00:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1008 (0x3f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91607DE, serialNumber=3D0A88C0CCA3EE8677CD17DF3EE86DE71DFC1129 Validity Not Before: Apr 5 00:17:30 2026 GMT Not After : Apr 12 00:17:30 2026 GMT Subject: CN=69d1aa1a-ac4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:66:c4:1d:bf:3d:38:e4:db:f3:40:9b:ab:13: 59:73:5d:4c:e0:b6:5a:16:0a:76:15:23:da:26:f5: b2:0f:07:63:a3:79:6b:8c:62:11:02:a9:bd:a7:d1: d1:4f:33:8a:2b:09:53:9a:ad:7f:94:b4:91:23:40: 01:62:a5:16:74:7a:dc:56:a3:87:fd:6a:1e:17:3d: f9:0d:ae:58:fc:56:57:15:25:14:5c:86:7b:c5:fd: db:00:76:cc:a3:8a:b8:36:fc:94:d4:bc:84:3a:4c: 88:9f:af:81:5d:cd:fd:c8:72:b4:bb:f7:2d:23:91: 55:0f:f4:2b:8b:c1:8b:dc:59:61:5d:8f:ad:12:54: a5:11:a4:05:66:78:0b:6d:56:5b:0b:09:4d:2a:7e: 37:c8:01:a4:96:3c:ff:50:a4:99:bc:a7:54:b8:af: b3:79:e3:02:c1:b5:3e:2e:92:5d:2f:01:60:3f:f4: 81:fb:54:d6:22:3b:8f:e6:90:be:eb:78:4e:4d:33: 82:86:1b:c9:ea:c9:76:c8:9a:5c:67:06:17:50:4d: 5f:3d:5a:57:12:a2:8c:37:c6:14:bc:45:c5:5f:25: 79:fa:cd:b3:5a:88:70:73:50:0d:07:7e:e7:cd:25: 5d:34:4c:34:27:0e:e8:05:76:f9:b0:79:89:82:76: ae:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:98:D1:D2:D6:76:DC:9E:47:BE:73:E1:3B:95:09:07:73:C7:6A:AD X509v3 Authority Key Identifier: keyid:3D:0A:88:C0:CC:A3:EE:86:77:CD:17:DF:3E:E8:6D:E7:1D:FC:11:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQqIwMyj7oZ3zRffPuht5x38ESk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d2:91:8a:ed:d9:7c:30:fb:30:b0:0d:f7:2d:7c:5b:e5:d9:53: 44:be:6b:f3:77:6b:be:6b:6e:f4:a0:de:9d:4a:87:f3:64:2f: d1:bc:4f:4b:9a:df:84:f6:49:af:99:40:a9:32:0a:72:5d:d8: 5a:5b:bc:f0:56:4e:13:02:e8:48:56:32:09:74:b3:a9:f9:0e: e9:ac:12:11:24:63:76:b5:2d:ed:25:a1:81:1b:60:2f:64:5e: 7a:f7:7f:ff:f1:17:d1:78:ee:57:f2:e7:83:62:6b:28:fe:e5: 22:b3:25:8a:6c:8d:05:a1:bf:40:6c:35:c4:db:9b:27:3f:33: 96:2e:2f:6e:9c:8c:47:94:4f:ed:5a:2a:1f:f8:89:0e:04:76: 1d:68:48:aa:26:fc:42:8b:00:ab:39:45:c6:91:97:c3:3a:10: d3:ed:ab:09:1c:62:3f:21:b7:6c:df:1b:15:c6:53:b7:39:56: c2:2c:d0:83:78:ef:e0:4f:1e:4a:51:71:26:09:4e:71:6f:ae: b8:26:41:23:95:04:59:da:7b:1b:d6:e9:f3:b6:dc:06:69:df: 37:ee:33:0c:c7:7c:7d:03:65:33:9e:db:a9:ac:86:31:3c:e6: 06:fa:55:0e:71:78:95:84:4e:5e:21:6d:e1:f3:9f:96:41:eb: c9:51:a5:27 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA/AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA3REUxMTAvBgNVBAUTKDNEMEE4OEMwQ0NBM0VFODY3N0NEMTdERjNFRTg2REU3 MURGQzExMjkwHhcNMjYwNDA1MDAxNzMwWhcNMjYwNDEyMDAxNzMwWjAYMRYwFAYD VQQDEw02OWQxYWExYS1hYzRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0GbEHb89OOTb80CbqxNZc11M4LZaFgp2FSPaJvWyDwdjo3lrjGIRAqm9p9HR TzOKKwlTmq1/lLSRI0ABYqUWdHrcVqOH/WoeFz35Da5Y/FZXFSUUXIZ7xf3bAHbM o4q4NvyU1LyEOkyIn6+BXc39yHK0u/ctI5FVD/Qri8GL3FlhXY+tElSlEaQFZngL bVZbCwlNKn43yAGkljz/UKSZvKdUuK+zeeMCwbU+LpJdLwFgP/SB+1TWIjuP5pC+ 63hOTTOChhvJ6sl2yJpcZwYXUE1fPVpXEqKMN8YUvEXFXyV5+s2zWohwc1ANB37n zSVdNEw0Jw7oBXb5sHmJgnau7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLeY0dLW dtyeR75z4TuVCQdzx2qtMB8GA1UdIwQYMBaAFD0KiMDMo+6Gd80X3z7obecd/BEp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDdERS9DNzY4MTRDNkJC NUExMUVDOTA4QUM5NkVDNEY5QUUwMi9QUXFJd015ajdvWjN6UmZmUHVodDV4MzhF U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BRcUl3TXlqN29aM3pSZmZQdWh0NXgzOEVTay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDdERS9DNzY4MTRDNkJCNUExMUVDOTA4QUM5NkVDNEY5QUUwMi9QUXFJd015ajdv WjN6UmZmUHVodDV4MzhFU2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA0pGK7dl8MPswsA33LXxb5dlTRL5r83drvmtu9KDenUqH82Qv0bxPS5rfhPZJ r5lAqTIKcl3YWlu88FZOEwLoSFYyCXSzqfkO6awSESRjdrUt7SWhgRtgL2Reevd/ //EX0XjuV/Lng2JrKP7lIrMlimyNBaG/QGw1xNubJz8zli4vbpyMR5RP7VoqH/iJ DgR2HWhIqib8QosAqzlFxpGXwzoQ0+2rCRxiPyG3bN8bFcZTtzlWwizQg3jv4E8e SlFxJglOcW+uuCZBI5UEWdp7G9bp87bcBmnfN+4zDMd8fQNlM57bqayGMTzmBvpV DnF4lYROXiFt4fOflkHryVGlJw== -----END CERTIFICATE-----Generated at Mon Apr 6 14:54:04 2026 by rpki-client