$ rpki-client -vvf rpki.apnic.net/member_repository/A917E65B/7F4BE9A226F411F084F59772C4F9AE02/PgYolveWFAxkBV5H1FMISCOnCCQ.mft File: PgYolveWFAxkBV5H1FMISCOnCCQ.mft (raw, json) Hash identifier: 75M2us7NO1TQnxfSKLXhxfq4k9Ai5wSUHw5Tnld9VLI= Subject key identifier: 99:D7:27:5E:82:22:8F:82:EF:1E:17:EC:F0:7C:C1:B8:A8:5E:76:45 Authority key identifier: 3E:06:28:96:F7:96:14:0C:64:05:5E:47:D4:53:08:48:23:A7:08:24 Certificate issuer: /CN=A917E65B/serialNumber=3E062896F796140C64055E47D453084823A70824 Certificate serial: BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgYolveWFAxkBV5H1FMISCOnCCQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E65B/7F4BE9A226F411F084F59772C4F9AE02/PgYolveWFAxkBV5H1FMISCOnCCQ.mft Manifest number: B2 Signing time: Sun 05 Apr 2026 06:31:02 +0000 Manifest this update: Sun 05 Apr 2026 06:31:02 +0000 Manifest next update: Sun 12 Apr 2026 06:31:02 +0000 Files and hashes: 1: PgYolveWFAxkBV5H1FMISCOnCCQ.crl (hash: xIegwYaif/dQ0gctuk8EsVtSOIrdgX/w8LnowxDDMYE=) 2: B7498170318011F0A5A76C39C4F9AE02.roa (hash: UbYb0P8FE3F+HvemibXz0dMD4w6gFMZ7kKT3m10twQc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E65B/7F4BE9A226F411F084F59772C4F9AE02/PgYolveWFAxkBV5H1FMISCOnCCQ.crl rsync://rpki.apnic.net/member_repository/A917E65B/7F4BE9A226F411F084F59772C4F9AE02/PgYolveWFAxkBV5H1FMISCOnCCQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgYolveWFAxkBV5H1FMISCOnCCQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 06:31:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 186 (0xba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E65B, serialNumber=3E062896F796140C64055E47D453084823A70824 Validity Not Before: Apr 5 06:31:02 2026 GMT Not After : Apr 12 06:31:02 2026 GMT Subject: CN=69d201a6-85dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ca:97:ce:16:2a:ce:be:05:26:71:f4:ba:93: 97:30:d7:f9:23:39:ef:b5:7b:91:97:fb:ab:37:a2: 2e:b1:83:40:aa:0d:71:28:62:4e:1d:2a:5f:d0:e5: 58:6e:65:77:01:2b:95:d6:81:9a:5f:c6:f8:0e:06: 86:4a:a8:2e:1e:7b:f0:88:c7:09:6a:e7:5f:16:47: f4:d9:47:fb:54:3d:b3:a8:bf:b0:1d:a5:e3:6c:10: af:f2:2d:7c:0d:b3:81:ec:87:ef:c5:39:83:8f:d4: 3b:87:18:b2:93:6a:a7:ef:e4:4d:94:cc:a7:22:63: 29:7f:24:13:49:50:03:04:f4:8d:56:3a:88:fa:4c: c7:48:d4:08:40:e3:bf:9b:4c:f2:4f:12:fb:0f:af: ba:57:7e:20:40:84:89:11:8f:e1:60:40:eb:9b:3b: fb:4a:f7:5f:94:e2:06:84:e1:f6:48:2f:ca:b3:16: 1d:2f:da:f4:6f:2d:8a:15:09:fb:77:d2:77:c4:33: 56:4a:ef:f7:4f:6e:12:1d:6c:30:12:e0:4e:98:a7: 02:c2:3e:9a:d8:2f:52:15:76:2c:c0:ee:d7:36:3f: f9:aa:cf:8d:a6:8e:a8:2d:a2:e4:74:f0:a0:66:a2: 8a:ec:86:75:13:5f:a1:c8:a8:d8:0c:b3:a6:12:73: 9b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:D7:27:5E:82:22:8F:82:EF:1E:17:EC:F0:7C:C1:B8:A8:5E:76:45 X509v3 Authority Key Identifier: keyid:3E:06:28:96:F7:96:14:0C:64:05:5E:47:D4:53:08:48:23:A7:08:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E65B/7F4BE9A226F411F084F59772C4F9AE02/PgYolveWFAxkBV5H1FMISCOnCCQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgYolveWFAxkBV5H1FMISCOnCCQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E65B/7F4BE9A226F411F084F59772C4F9AE02/PgYolveWFAxkBV5H1FMISCOnCCQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:af:cf:8d:97:7f:5d:0a:52:bc:b2:12:c0:3e:3f:73:53:b7: 2b:3a:67:d1:95:c8:43:a9:c4:04:47:7f:fc:80:59:6b:16:2d: ff:7e:f8:43:a6:d7:7a:f3:04:8a:86:95:67:1b:1a:38:0b:51: 45:30:fb:b2:2b:ae:e7:77:14:ee:a3:b0:0d:85:0f:4c:7d:c3: c6:aa:28:b2:ca:6a:17:c1:c4:1f:3a:6e:e2:d2:eb:aa:8c:dd: c6:4d:0f:0a:cd:96:6c:13:23:c3:ba:83:5a:d9:24:d9:c2:39: 24:f1:cc:85:2e:c2:ba:a4:45:a7:08:f8:45:67:98:1e:5e:16: bc:c8:8d:83:54:86:8d:2b:1d:6a:1d:65:e0:c2:ba:2c:d1:33: 38:eb:38:5e:52:1c:3b:e3:ee:3a:0c:b3:4e:5e:5d:ea:ee:ce: 7d:d0:cf:2e:ac:76:8f:da:10:1b:99:b9:aa:20:da:f4:45:e1: 88:60:ad:cd:e2:ea:3a:ac:1b:d8:1e:78:3f:4c:66:97:be:e2: fc:d5:18:a8:12:ea:a9:2c:77:f7:65:53:0f:c0:9a:42:25:43: 3f:66:0e:e9:ba:af:d4:be:2b:b3:72:85:66:d6:60:d7:47:cf: 77:80:c1:2f:1a:7b:45:cb:02:d4:e2:87:b9:6a:77:91:6a:16: 1d:a4:1c:42 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICALowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U2NUIxMTAvBgNVBAUTKDNFMDYyODk2Rjc5NjE0MEM2NDA1NUU0N0Q0NTMwODQ4 MjNBNzA4MjQwHhcNMjYwNDA1MDYzMTAyWhcNMjYwNDEyMDYzMTAyWjAYMRYwFAYD VQQDEw02OWQyMDFhNi04NWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkMqXzhYqzr4FJnH0upOXMNf5IznvtXuRl/urN6IusYNAqg1xKGJOHSpf0OVY bmV3ASuV1oGaX8b4DgaGSqguHnvwiMcJaudfFkf02Uf7VD2zqL+wHaXjbBCv8i18 DbOB7IfvxTmDj9Q7hxiyk2qn7+RNlMynImMpfyQTSVADBPSNVjqI+kzHSNQIQOO/ m0zyTxL7D6+6V34gQISJEY/hYEDrmzv7SvdflOIGhOH2SC/KsxYdL9r0by2KFQn7 d9J3xDNWSu/3T24SHWwwEuBOmKcCwj6a2C9SFXYswO7XNj/5qs+Npo6oLaLkdPCg ZqKK7IZ1E1+hyKjYDLOmEnObeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJnXJ16C Io+C7x4X7PB8wbioXnZFMB8GA1UdIwQYMBaAFD4GKJb3lhQMZAVeR9RTCEgjpwgk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTY1Qi83RjRCRTlBMjI2 RjQxMUYwODRGNTk3NzJDNEY5QUUwMi9QZ1lvbHZlV0ZBeGtCVjVIMUZNSVNDT25D Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BnWW9sdmVXRkF4a0JWNUgxRk1JU0NPbkNDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTY1Qi83RjRCRTlBMjI2RjQxMUYwODRGNTk3NzJDNEY5QUUwMi9QZ1lvbHZlV0ZB eGtCVjVIMUZNSVNDT25DQ1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALa/PjZd/XQpSvLISwD4/c1O3Kzpn0ZXIQ6nEBEd//IBZaxYt/374Q6bXevME ioaVZxsaOAtRRTD7siuu53cU7qOwDYUPTH3DxqoosspqF8HEHzpu4tLrqozdxk0P Cs2WbBMjw7qDWtkk2cI5JPHMhS7CuqRFpwj4RWeYHl4WvMiNg1SGjSsdah1l4MK6 LNEzOOs4XlIcO+PuOgyzTl5d6u7OfdDPLqx2j9oQG5m5qiDa9EXhiGCtzeLqOqwb 2B54P0xml77i/NUYqBLqqSx392VTD8CaQiVDP2YO6bqv1L4rs3KFZtZg10fPd4DB Lxp7RcsC1OKHuWp3kWoWHaQcQg== -----END CERTIFICATE-----Generated at Mon Apr 6 10:23:55 2026 by rpki-client