$ rpki-client -vvf rpki.apnic.net/member_repository/A918BB6D/880D6CACE91B11F0A7541612736F56BC/PNmBJcGXpVFDEgG3kG1QS7iySt4.mft File: PNmBJcGXpVFDEgG3kG1QS7iySt4.mft (raw, json) Hash identifier: qtR4WMLKGYefAsd/zILg6gIxot7Be6IikZUoGkpzezU= Subject key identifier: 76:C4:4D:9A:51:D3:3E:90:B1:D9:09:2A:06:24:D6:80:82:29:F1:C5 Authority key identifier: 3C:D9:81:25:C1:97:A5:51:43:12:01:B7:90:6D:50:4B:B8:B2:4A:DE Certificate issuer: /CN=A918BB6D/serialNumber=3CD98125C197A551431201B7906D504BB8B24ADE Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNmBJcGXpVFDEgG3kG1QS7iySt4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BB6D/880D6CACE91B11F0A7541612736F56BC/PNmBJcGXpVFDEgG3kG1QS7iySt4.mft Manifest number: 35 Signing time: Sun 05 Apr 2026 07:57:31 +0000 Manifest this update: Sun 05 Apr 2026 07:57:30 +0000 Manifest next update: Sun 12 Apr 2026 07:57:30 +0000 Files and hashes: 1: PNmBJcGXpVFDEgG3kG1QS7iySt4.crl (hash: 17aeN7SllbDzmxUQRTVFHklw3Fi14faoxZH+16l4oRM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BB6D/880D6CACE91B11F0A7541612736F56BC/PNmBJcGXpVFDEgG3kG1QS7iySt4.crl rsync://rpki.apnic.net/member_repository/A918BB6D/880D6CACE91B11F0A7541612736F56BC/PNmBJcGXpVFDEgG3kG1QS7iySt4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNmBJcGXpVFDEgG3kG1QS7iySt4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 07:57:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BB6D, serialNumber=3CD98125C197A551431201B7906D504BB8B24ADE Validity Not Before: Apr 5 07:57:30 2026 GMT Not After : Apr 12 07:57:30 2026 GMT Subject: CN=69d215eb-a9fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:dd:91:ba:91:7e:98:97:56:72:f4:24:cd:c2: c4:96:5e:62:92:68:3e:12:14:16:0a:54:de:e9:68: d8:83:86:5e:f3:9f:ab:dd:78:a7:56:d9:48:f2:aa: 37:cf:97:69:59:a5:45:d1:e3:0b:c5:27:60:73:25: 4c:9d:f9:1e:78:80:bf:29:dd:f2:4d:76:71:f9:f6: 17:08:8a:bb:53:86:28:d8:2f:22:1d:4c:5c:89:9f: 85:1d:55:dc:bf:6c:72:e2:49:2d:ee:22:b6:68:0a: 32:fd:3c:c1:ba:c5:4f:0c:8d:ac:57:5c:6e:88:70: 08:6c:78:57:a4:0b:88:d2:59:17:26:24:a9:ad:05: 07:b4:c8:a2:c8:ba:df:d7:ea:41:df:51:7c:6d:00: fa:db:35:87:8a:45:90:b6:8c:b6:13:40:d7:f5:b4: ea:f8:e8:78:ad:f8:5b:97:66:b0:0b:05:db:a0:cf: 7f:be:dc:3b:bc:2e:9e:42:b6:47:01:af:4b:98:6d: 60:07:f8:d7:fa:06:da:37:0a:86:03:b2:13:e1:57: 24:12:8e:a5:76:cb:95:3c:3e:12:f8:cb:69:1d:0e: fb:1d:da:09:15:5d:63:7d:a3:a5:ac:07:c5:bc:18: ab:70:40:e2:19:7b:2f:65:d6:5f:66:7b:7a:19:f9: e8:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:C4:4D:9A:51:D3:3E:90:B1:D9:09:2A:06:24:D6:80:82:29:F1:C5 X509v3 Authority Key Identifier: keyid:3C:D9:81:25:C1:97:A5:51:43:12:01:B7:90:6D:50:4B:B8:B2:4A:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BB6D/880D6CACE91B11F0A7541612736F56BC/PNmBJcGXpVFDEgG3kG1QS7iySt4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNmBJcGXpVFDEgG3kG1QS7iySt4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BB6D/880D6CACE91B11F0A7541612736F56BC/PNmBJcGXpVFDEgG3kG1QS7iySt4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:b9:36:0d:ef:c5:28:53:70:23:db:40:88:3d:22:56:49:dc: 04:32:04:7a:bc:e3:35:a9:da:9f:ed:ce:e7:de:c8:f9:de:65: 59:da:6f:73:8c:60:00:1f:85:84:4c:e2:05:bf:ce:fb:d1:52: 29:f8:cc:8a:49:0c:33:e3:85:1a:42:b2:c0:c1:46:94:a0:04: ff:cf:14:c9:3b:a1:6d:8f:eb:ad:85:49:12:85:49:7f:42:86: e1:a5:19:37:77:80:63:47:9c:08:9c:d0:4b:97:f2:f6:50:00: 36:98:08:92:23:6e:95:5b:9a:0f:e5:a8:23:ac:7c:d8:6f:76: d2:58:d3:d4:81:e0:43:d9:ba:8c:c3:13:30:5c:99:39:0b:74: 75:0d:d2:81:b4:3e:c7:3f:57:d2:ac:21:7f:46:c6:0b:9e:e7: 09:bd:ad:b5:0d:0f:92:58:e3:7b:75:1b:6d:e1:88:ee:4c:c3: be:0d:fd:4c:6c:00:cf:d1:cb:e3:cc:bd:c4:58:c2:8a:d3:20: 2b:e6:44:37:03:dc:d8:6d:1c:7e:d1:3f:76:52:e1:ae:03:8d: 47:77:7d:4b:f8:0a:81:65:cc:24:e1:4f:ff:1b:6a:3f:5e:b8: 1d:9f:b1:a0:22:7f:51:21:d8:80:93:8b:dc:f1:c5:83:c1:b4: ab:c6:77:92 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 QkI2RDExMC8GA1UEBRMoM0NEOTgxMjVDMTk3QTU1MTQzMTIwMUI3OTA2RDUwNEJC OEIyNEFERTAeFw0yNjA0MDUwNzU3MzBaFw0yNjA0MTIwNzU3MzBaMBgxFjAUBgNV BAMTDTY5ZDIxNWViLWE5ZmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCh3ZG6kX6Yl1Zy9CTNwsSWXmKSaD4SFBYKVN7paNiDhl7zn6vdeKdW2UjyqjfP l2lZpUXR4wvFJ2BzJUyd+R54gL8p3fJNdnH59hcIirtThijYLyIdTFyJn4UdVdy/ bHLiSS3uIrZoCjL9PMG6xU8MjaxXXG6IcAhseFekC4jSWRcmJKmtBQe0yKLIut/X 6kHfUXxtAPrbNYeKRZC2jLYTQNf1tOr46Hit+FuXZrALBdugz3++3Du8Lp5CtkcB r0uYbWAH+Nf6Bto3CoYDshPhVyQSjqV2y5U8PhL4y2kdDvsd2gkVXWN9o6WsB8W8 GKtwQOIZey9l1l9me3oZ+egbAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUdsRNmlHT PpCx2QkqBiTWgIIp8cUwHwYDVR0jBBgwFoAUPNmBJcGXpVFDEgG3kG1QS7iySt4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThCQjZELzg4MEQ2Q0FDRTkx QjExRjBBNzU0MTYxMjczNkY1NkJDL1BObUJKY0dYcFZGREVnRzNrRzFRUzdpeVN0 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUE5tQkpjR1hwVkZERWdHM2tHMVFTN2l5U3Q0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThC QjZELzg4MEQ2Q0FDRTkxQjExRjBBNzU0MTYxMjczNkY1NkJDL1BObUJKY0dYcFZG REVnRzNrRzFRUzdpeVN0NC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQC0uTYN78UoU3Aj20CIPSJWSdwEMgR6vOM1qdqf7c7n3sj53mVZ2m9zjGAAH4WE TOIFv8770VIp+MyKSQwz44UaQrLAwUaUoAT/zxTJO6Ftj+uthUkShUl/QobhpRk3 d4BjR5wInNBLl/L2UAA2mAiSI26VW5oP5agjrHzYb3bSWNPUgeBD2bqMwxMwXJk5 C3R1DdKBtD7HP1fSrCF/RsYLnucJva21DQ+SWON7dRtt4YjuTMO+Df1MbADP0cvj zL3EWMKK0yAr5kQ3A9zYbRx+0T92UuGuA41Hd31L+AqBZcwk4U//G2o/Xrgdn7Gg In9RIdiAk4vc8cWDwbSrxneS -----END CERTIFICATE-----Generated at Mon Apr 6 08:33:00 2026 by rpki-client