$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B9D/4CF3B3702D1211F1BFC478F598EE528E/PDiOKfqhof7qOJefIG9GaK2oyJ4.mft File: PDiOKfqhof7qOJefIG9GaK2oyJ4.mft (raw, json) Hash identifier: gxKudqhrjsdeBOVEYeKZ0/59MVPDV8NUpWfJCxiiS+g= Subject key identifier: C3:CE:52:68:3E:32:C6:28:DC:AF:69:78:B1:CA:00:32:7B:2E:5E:79 Authority key identifier: 3C:38:8E:29:FA:A1:A1:FE:EA:38:97:9F:20:6F:46:68:AD:A8:C8:9E Certificate issuer: /CN=A91A4B9D/serialNumber=3C388E29FAA1A1FEEA38979F206F4668ADA8C89E Certificate serial: 0C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PDiOKfqhof7qOJefIG9GaK2oyJ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4B9D/4CF3B3702D1211F1BFC478F598EE528E/PDiOKfqhof7qOJefIG9GaK2oyJ4.mft Manifest number: 0B Signing time: Sat 18 Apr 2026 14:58:56 +0000 Manifest this update: Sat 18 Apr 2026 14:58:56 +0000 Manifest next update: Sat 25 Apr 2026 14:58:56 +0000 Files and hashes: 1: PDiOKfqhof7qOJefIG9GaK2oyJ4.crl (hash: QwXVc43UkmglMUIRkZh5azlQ4+YQ19ZxMYub0wOP6XA=) 2: 1ECF684E387B11F1BDE8C228B8833773.roa (hash: S/Tt5Vr+xRIVcH8BCYMOSKSimexAoRp0itqrqHYRHlw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4B9D/4CF3B3702D1211F1BFC478F598EE528E/PDiOKfqhof7qOJefIG9GaK2oyJ4.crl rsync://rpki.apnic.net/member_repository/A91A4B9D/4CF3B3702D1211F1BFC478F598EE528E/PDiOKfqhof7qOJefIG9GaK2oyJ4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PDiOKfqhof7qOJefIG9GaK2oyJ4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 14:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12 (0xc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4B9D, serialNumber=3C388E29FAA1A1FEEA38979F206F4668ADA8C89E Validity Not Before: Apr 18 14:58:56 2026 GMT Not After : Apr 25 14:58:56 2026 GMT Subject: CN=69e39c30-cc94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:1a:50:0c:40:77:b8:99:78:c2:36:84:4e:11: da:34:f3:e1:98:ce:55:69:2e:30:a2:01:70:ee:24: e4:44:97:06:56:b3:bb:39:89:51:25:1a:45:f1:9b: c0:fa:37:38:8b:29:66:f8:0e:d2:3a:40:a3:25:a2: bf:ed:26:16:76:a8:88:d0:f9:82:6e:35:86:5f:15: de:7a:7e:44:39:e1:d4:d6:1c:4b:b9:85:71:3b:5e: c2:aa:36:e7:a5:91:31:65:70:aa:9e:0a:d5:02:10: 92:81:5a:c9:83:1d:97:f8:b6:98:97:d4:37:c2:0a: e0:eb:da:c0:fc:27:82:ae:ed:7b:e3:04:31:49:ba: 0a:8c:86:bd:c1:ac:f0:21:27:e4:7d:33:b1:76:22: c2:c6:77:5c:9e:d4:75:89:47:b8:a3:49:8f:ac:76: 3e:0d:60:6b:d4:77:6d:46:69:af:f7:9e:ab:ae:02: 6f:5a:5e:7b:1e:a8:ea:e0:4e:60:63:e1:4f:4f:c5: 07:eb:51:54:52:5f:d4:8d:b3:50:01:13:20:4a:3f: 3e:64:7d:9c:18:cb:e2:4c:90:0b:af:eb:fa:b8:04: ea:21:8a:08:42:5d:7e:e3:77:20:43:c6:85:ed:e2: 64:7f:8d:e4:e2:d3:f5:6e:43:cb:74:8b:a1:01:f9: 55:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:CE:52:68:3E:32:C6:28:DC:AF:69:78:B1:CA:00:32:7B:2E:5E:79 X509v3 Authority Key Identifier: keyid:3C:38:8E:29:FA:A1:A1:FE:EA:38:97:9F:20:6F:46:68:AD:A8:C8:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4B9D/4CF3B3702D1211F1BFC478F598EE528E/PDiOKfqhof7qOJefIG9GaK2oyJ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PDiOKfqhof7qOJefIG9GaK2oyJ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B9D/4CF3B3702D1211F1BFC478F598EE528E/PDiOKfqhof7qOJefIG9GaK2oyJ4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:70:03:bf:9c:4f:9c:a2:6d:63:3c:39:8b:e6:6a:5b:2d:1d: f3:f4:72:f4:6c:6c:b9:3e:5b:8e:bc:f5:e8:99:98:2a:26:24: 69:22:a0:db:2b:26:1b:bb:68:2d:5d:ee:30:f5:22:33:e8:7e: 25:d8:3b:31:0c:4a:ac:5d:af:1b:ab:84:e3:91:e7:11:fa:24: 52:e6:ee:e6:cd:4a:e5:56:6c:ec:c4:da:26:63:af:ce:43:b6: ea:23:72:fd:f6:27:82:d8:61:3b:9c:57:7d:d2:ad:05:62:2a: 5d:b1:ed:ff:ea:6a:fe:51:c0:67:42:b8:34:a0:14:f5:cc:1d: 4d:94:2b:7a:70:cf:28:62:a6:44:b3:ac:dd:c5:81:7d:db:84: 05:f3:3d:58:8b:64:31:d7:9f:3e:6c:5f:43:bd:be:2d:73:56: 9d:b3:83:b6:93:da:a5:98:23:37:51:98:eb:6c:a2:7b:9d:10: 16:77:27:1f:42:23:50:76:45:3b:5b:1f:5e:22:f1:a0:ba:ca: e0:55:25:28:a5:bf:19:46:8f:94:d6:23:6f:b7:63:5a:e2:ab: 29:bd:da:87:40:cf:71:09:93:0b:6e:7b:4a:63:e3:e4:0f:92: fa:46:d8:f4:dc:24:40:b7:18:be:aa:92:ab:5e:c3:dd:62:c4: f8:d7:a4:af -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NEI5RDExMC8GA1UEBRMoM0MzODhFMjlGQUExQTFGRUVBMzg5NzlGMjA2RjQ2NjhB REE4Qzg5RTAeFw0yNjA0MTgxNDU4NTZaFw0yNjA0MjUxNDU4NTZaMBgxFjAUBgNV BAMTDTY5ZTM5YzMwLWNjOTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDuGlAMQHe4mXjCNoROEdo08+GYzlVpLjCiAXDuJORElwZWs7s5iVElGkXxm8D6 NziLKWb4DtI6QKMlor/tJhZ2qIjQ+YJuNYZfFd56fkQ54dTWHEu5hXE7XsKqNuel kTFlcKqeCtUCEJKBWsmDHZf4tpiX1DfCCuDr2sD8J4Ku7XvjBDFJugqMhr3BrPAh J+R9M7F2IsLGd1ye1HWJR7ijSY+sdj4NYGvUd21Gaa/3nquuAm9aXnseqOrgTmBj 4U9PxQfrUVRSX9SNs1ABEyBKPz5kfZwYy+JMkAuv6/q4BOohighCXX7jdyBDxoXt 4mR/jeTi0/VuQ8t0i6EB+VW1AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUw85SaD4y xijcr2l4scoAMnsuXnkwHwYDVR0jBBgwFoAUPDiOKfqhof7qOJefIG9GaK2oyJ4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0QjlELzRDRjNCMzcwMkQx MjExRjFCRkM0NzhGNTk4RUU1MjhFL1BEaU9LZnFob2Y3cU9KZWZJRzlHYUsyb3lK NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUERpT0tmcWhvZjdxT0plZklHOUdhSzJveUo0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0 QjlELzRDRjNCMzcwMkQxMjExRjFCRkM0NzhGNTk4RUU1MjhFL1BEaU9LZnFob2Y3 cU9KZWZJRzlHYUsyb3lKNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCvcAO/nE+com1jPDmL5mpbLR3z9HL0bGy5PluOvPXomZgqJiRpIqDbKyYbu2gt Xe4w9SIz6H4l2DsxDEqsXa8bq4TjkecR+iRS5u7mzUrlVmzsxNomY6/OQ7bqI3L9 9ieC2GE7nFd90q0FYipdse3/6mr+UcBnQrg0oBT1zB1NlCt6cM8oYqZEs6zdxYF9 24QF8z1Yi2Qx158+bF9Dvb4tc1ads4O2k9qlmCM3UZjrbKJ7nRAWdycfQiNQdkU7 Wx9eIvGgusrgVSUopb8ZRo+U1iNvt2Na4qspvdqHQM9xCZMLbntKY+PkD5L6Rtj0 3CRAtxi+qpKrXsPdYsT416Sv -----END CERTIFICATE-----Generated at Sat Apr 18 20:58:03 2026 by rpki-client