$ rpki-client -vvf rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.mft File: pGM3j5KTiRbgseQTrw8MinPCH08.mft (raw, json) Hash identifier: /p2OUI/1d0DTNIGzly/9VcEy5JuB/m65j1RFgIRvhKg= Subject key identifier: 2E:1C:39:7E:90:04:BB:DF:9C:3F:01:52:C8:80:C5:FE:3B:33:76:6F Authority key identifier: A4:63:37:8F:92:93:89:16:E0:B1:E4:13:AF:0F:0C:8A:73:C2:1F:4F Certificate issuer: /CN=A917C3A7/serialNumber=A463378F92938916E0B1E413AF0F0C8A73C21F4F Certificate serial: 04F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGM3j5KTiRbgseQTrw8MinPCH08.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.mft Manifest number: 04F8 Signing time: Sat 04 Apr 2026 23:29:42 +0000 Manifest this update: Sat 04 Apr 2026 23:29:41 +0000 Manifest next update: Sat 11 Apr 2026 23:29:41 +0000 Files and hashes: 1: pGM3j5KTiRbgseQTrw8MinPCH08.crl (hash: PtLRNONXrxrZuPhu3isf6nppvrPyGNQuwO5BreKUzaU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.crl rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGM3j5KTiRbgseQTrw8MinPCH08.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 23:29:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1272 (0x4f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C3A7, serialNumber=A463378F92938916E0B1E413AF0F0C8A73C21F4F Validity Not Before: Apr 4 23:29:41 2026 GMT Not After : Apr 11 23:29:41 2026 GMT Subject: CN=69d19ee5-4496 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d7:c3:3e:a2:69:56:ed:ae:78:c9:9b:b6:f8: a5:b0:10:8d:98:f4:6d:4f:d1:9f:62:b6:85:dc:88: f2:28:0c:5b:f9:75:3b:41:75:dc:c0:ca:1e:2a:24: cf:da:f8:d0:d8:2a:3c:2a:8a:c1:23:95:14:5b:1e: ee:f2:de:b2:d7:08:02:15:d0:a9:99:91:a4:10:11: d2:f7:75:a8:b2:87:5a:01:2e:2b:02:98:e6:3f:59: 2a:80:c2:33:a5:42:16:27:61:f8:1b:30:6b:03:06: 24:7b:ed:81:c5:a1:83:8a:af:23:db:7b:a2:25:3b: 11:92:cc:68:af:6f:5e:4f:d3:51:60:68:00:d5:74: 68:36:94:4b:8e:3f:08:5e:b1:15:b4:4f:20:d5:aa: 4c:bd:dc:94:d8:e3:04:54:f7:14:7f:5a:86:a1:9a: d0:a7:15:0d:90:00:15:87:f3:a4:e8:4b:41:00:d7: e5:43:28:7e:b6:7f:5c:e6:09:46:ac:a6:b8:a9:bb: 1d:0e:ae:97:66:72:0c:cf:18:58:ee:f1:08:02:b3: 64:27:ab:eb:39:cf:87:92:42:fe:87:57:f7:14:be: 96:50:eb:9e:3b:6c:36:e3:be:70:b2:9d:58:87:27: 90:8d:27:2e:66:54:c9:0c:2a:e6:5c:e2:46:53:15: 9c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:1C:39:7E:90:04:BB:DF:9C:3F:01:52:C8:80:C5:FE:3B:33:76:6F X509v3 Authority Key Identifier: keyid:A4:63:37:8F:92:93:89:16:E0:B1:E4:13:AF:0F:0C:8A:73:C2:1F:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGM3j5KTiRbgseQTrw8MinPCH08.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:d7:13:29:44:d3:3a:6e:9e:e1:42:b2:90:2a:69:b6:9b:c1: c0:d9:ad:14:43:f9:55:0e:2d:d8:c3:d9:01:01:6b:90:ed:09: 11:97:bf:7d:ef:9f:b9:1a:fe:c7:36:e8:e7:f1:d4:68:e1:8f: 7d:69:b5:e1:f2:09:ae:f3:a1:eb:e3:9e:01:58:81:b4:52:2b: 8f:e7:19:52:71:ed:ec:91:31:f7:5d:9a:27:bb:39:a1:9a:34: 16:15:f7:61:d0:b2:df:85:cf:76:14:af:40:93:61:16:2f:28: 57:da:e1:20:3c:cf:44:a7:e3:73:dd:01:3d:d8:1c:b7:31:db: 53:60:de:01:42:9f:21:17:35:5c:13:d2:05:0d:c9:c7:df:de: 27:43:ed:ab:e6:cf:28:7c:ff:20:e2:cf:f0:76:95:2c:3b:e6: 4c:38:20:7b:3c:64:26:98:38:f2:9b:0c:bd:42:91:19:2e:03: 14:88:73:79:85:7e:fc:cd:e0:29:b4:75:c0:13:4a:e2:66:a7: 5b:f1:74:e8:4b:db:65:b2:c3:14:c4:68:f7:ea:b9:1b:87:ba: c8:31:ed:b5:b9:f3:1a:78:16:b0:1f:e0:31:9f:55:a2:a2:e8: 9f:14:80:21:53:77:7f:07:21:d2:5a:f8:c9:42:da:f2:7a:5f: 66:51:0b:c8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MzQTcxMTAvBgNVBAUTKEE0NjMzNzhGOTI5Mzg5MTZFMEIxRTQxM0FGMEYwQzhB NzNDMjFGNEYwHhcNMjYwNDA0MjMyOTQxWhcNMjYwNDExMjMyOTQxWjAYMRYwFAYD VQQDEw02OWQxOWVlNS00NDk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAttfDPqJpVu2ueMmbtvilsBCNmPRtT9GfYraF3IjyKAxb+XU7QXXcwMoeKiTP 2vjQ2Co8KorBI5UUWx7u8t6y1wgCFdCpmZGkEBHS93WosodaAS4rApjmP1kqgMIz pUIWJ2H4GzBrAwYke+2BxaGDiq8j23uiJTsRksxor29eT9NRYGgA1XRoNpRLjj8I XrEVtE8g1apMvdyU2OMEVPcUf1qGoZrQpxUNkAAVh/Ok6EtBANflQyh+tn9c5glG rKa4qbsdDq6XZnIMzxhY7vEIArNkJ6vrOc+HkkL+h1f3FL6WUOueO2w2475wsp1Y hyeQjScuZlTJDCrmXOJGUxWcFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC4cOX6Q BLvfnD8BUsiAxf47M3ZvMB8GA1UdIwQYMBaAFKRjN4+Sk4kW4LHkE68PDIpzwh9P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzNBNy9FNDFGRjBBNjUz MjgxMUVDODM1MkQyNDVDNEY5QUUwMi9wR00zajVLVGlSYmdzZVFUcnc4TWluUENI MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BHTTNqNUtUaVJiZ3NlUVRydzhNaW5QQ0gwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzNBNy9FNDFGRjBBNjUzMjgxMUVDODM1MkQyNDVDNEY5QUUwMi9wR00zajVLVGlS YmdzZVFUcnc4TWluUENIMDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZtcTKUTTOm6e4UKykCpptpvBwNmtFEP5VQ4t2MPZAQFrkO0JEZe/fe+fuRr+ xzbo5/HUaOGPfWm14fIJrvOh6+OeAViBtFIrj+cZUnHt7JEx912aJ7s5oZo0FhX3 YdCy34XPdhSvQJNhFi8oV9rhIDzPRKfjc90BPdgctzHbU2DeAUKfIRc1XBPSBQ3J x9/eJ0Ptq+bPKHz/IOLP8HaVLDvmTDggezxkJpg48psMvUKRGS4DFIhzeYV+/M3g KbR1wBNK4manW/F06EvbZbLDFMRo9+q5G4e6yDHttbnzGngWsB/gMZ9VoqLonxSA IVN3fwch0lr4yULa8npfZlELyA== -----END CERTIFICATE-----Generated at Mon Apr 6 11:19:48 2026 by rpki-client