$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B9D/4CF3B3702D1211F1BFC478F598EE528E/PDiOKfqhof7qOJefIG9GaK2oyJ4.mft File: PDiOKfqhof7qOJefIG9GaK2oyJ4.mft (raw, json) Hash identifier: nUQw0KCarw2tH4i5a53OyUsnSCHtyshECvmPMNgo3lg= Subject key identifier: 30:B6:04:4B:78:2D:54:A6:BD:1A:72:32:B3:7E:C3:E7:05:40:DA:18 Authority key identifier: 3C:38:8E:29:FA:A1:A1:FE:EA:38:97:9F:20:6F:46:68:AD:A8:C8:9E Certificate issuer: /CN=A91A4B9D/serialNumber=3C388E29FAA1A1FEEA38979F206F4668ADA8C89E Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PDiOKfqhof7qOJefIG9GaK2oyJ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4B9D/4CF3B3702D1211F1BFC478F598EE528E/PDiOKfqhof7qOJefIG9GaK2oyJ4.mft Manifest number: 22 Signing time: Tue 02 Jun 2026 15:00:40 +0000 Manifest this update: Tue 02 Jun 2026 15:00:39 +0000 Manifest next update: Tue 09 Jun 2026 15:00:39 +0000 Files and hashes: 1: PDiOKfqhof7qOJefIG9GaK2oyJ4.crl (hash: olU+ATX8vaJ+lI9AxReg4mckwJx46PTMijRTbJDnZyk=) 2: 1ECF684E387B11F1BDE8C228B8833773.roa (hash: S/Tt5Vr+xRIVcH8BCYMOSKSimexAoRp0itqrqHYRHlw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4B9D/4CF3B3702D1211F1BFC478F598EE528E/PDiOKfqhof7qOJefIG9GaK2oyJ4.crl rsync://rpki.apnic.net/member_repository/A91A4B9D/4CF3B3702D1211F1BFC478F598EE528E/PDiOKfqhof7qOJefIG9GaK2oyJ4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PDiOKfqhof7qOJefIG9GaK2oyJ4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Jun 2026 15:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4B9D, serialNumber=3C388E29FAA1A1FEEA38979F206F4668ADA8C89E Validity Not Before: Jun 2 15:00:39 2026 GMT Not After : Jun 9 15:00:39 2026 GMT Subject: CN=6a1ef018-88bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:86:62:f9:66:60:d6:b1:a9:49:30:b9:ff:c4: cd:1d:a0:01:79:2e:4c:23:10:e4:09:28:e9:ee:48: e6:43:bf:6c:64:f4:65:d1:dd:51:81:60:88:dc:d1: 34:44:dd:74:85:7e:e8:ac:c3:b2:5e:ff:a8:39:da: ba:38:4f:d6:20:51:96:c3:31:29:fc:e9:63:11:87: b1:b6:26:ed:ee:05:7e:e6:aa:f9:01:d2:39:c6:3e: 18:b9:94:e9:f6:58:b3:f3:71:ff:ef:ba:d8:b5:98: e3:68:06:6f:82:db:f4:72:a3:97:67:25:ad:a7:d8: bf:34:6c:14:bc:59:ae:87:31:07:b1:e9:61:c4:11: 61:b2:97:fa:e2:66:fe:fc:8d:d1:c0:fa:ff:ac:25: 0d:69:04:d9:d9:d5:05:60:d9:b4:fa:94:81:c7:c3: 39:64:68:04:ce:3b:7d:2c:de:d0:af:b8:57:43:7e: be:80:b5:29:14:05:c2:65:73:6c:fa:46:5a:c4:b8: 9f:75:9b:2a:ad:95:aa:99:da:65:8b:eb:f6:e1:ba: 22:49:8e:d2:88:21:f0:b3:43:90:0e:df:23:8b:5b: 7e:fa:93:ff:23:86:42:ef:5d:d0:51:05:6c:a5:99: 40:ec:2a:12:b7:93:38:dd:10:15:29:4e:64:22:93: 77:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:B6:04:4B:78:2D:54:A6:BD:1A:72:32:B3:7E:C3:E7:05:40:DA:18 X509v3 Authority Key Identifier: keyid:3C:38:8E:29:FA:A1:A1:FE:EA:38:97:9F:20:6F:46:68:AD:A8:C8:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4B9D/4CF3B3702D1211F1BFC478F598EE528E/PDiOKfqhof7qOJefIG9GaK2oyJ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PDiOKfqhof7qOJefIG9GaK2oyJ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B9D/4CF3B3702D1211F1BFC478F598EE528E/PDiOKfqhof7qOJefIG9GaK2oyJ4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:fe:81:af:8f:9f:cb:a8:a2:c4:40:13:e4:8d:34:49:ab:4f: 0d:d6:30:c2:bb:7d:20:02:e6:49:c8:2a:cd:58:25:80:26:51: 9e:67:ac:90:85:64:3c:ec:11:df:8b:7e:dd:2c:8a:ae:e5:b5: 07:36:48:97:4d:03:1f:ba:23:b0:32:3b:ef:f7:05:46:16:1e: f5:68:8c:d3:13:de:c7:a6:1b:17:2d:35:b8:c2:6f:fa:fd:6c: 5d:7b:1d:5b:ce:c3:93:ac:81:02:95:a7:b4:60:78:77:c4:77: 69:41:f9:ec:d3:c5:04:0b:6e:b7:01:8f:9f:74:9a:1b:b9:2d: 11:17:4a:2c:50:34:72:83:34:e2:95:63:00:66:58:3e:f6:be: f9:60:0b:e6:bf:0e:35:e6:3a:07:5a:5d:77:27:63:d0:b9:88: aa:8e:ad:dd:dc:71:88:85:74:42:5d:eb:1c:d0:1f:a8:f4:73: aa:29:75:2f:56:25:38:68:dd:19:be:93:30:5b:2e:41:21:b6: 43:2f:f6:c1:06:0e:f7:9b:52:2d:48:7b:2f:76:3e:cd:85:c8: 99:34:17:71:de:b0:b4:45:af:3f:4b:24:cf:d6:87:77:ec:b3: fd:6a:a8:fa:23:c0:12:28:d5:f9:5b:33:f9:b5:ce:79:87:71: 5b:97:27:03 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NEI5RDExMC8GA1UEBRMoM0MzODhFMjlGQUExQTFGRUVBMzg5NzlGMjA2RjQ2NjhB REE4Qzg5RTAeFw0yNjA2MDIxNTAwMzlaFw0yNjA2MDkxNTAwMzlaMBgxFjAUBgNV BAMTDTZhMWVmMDE4LTg4YmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrhmL5ZmDWsalJMLn/xM0doAF5LkwjEOQJKOnuSOZDv2xk9GXR3VGBYIjc0TRE 3XSFfuisw7Je/6g52ro4T9YgUZbDMSn86WMRh7G2Ju3uBX7mqvkB0jnGPhi5lOn2 WLPzcf/vuti1mONoBm+C2/Ryo5dnJa2n2L80bBS8Wa6HMQex6WHEEWGyl/riZv78 jdHA+v+sJQ1pBNnZ1QVg2bT6lIHHwzlkaATOO30s3tCvuFdDfr6AtSkUBcJlc2z6 RlrEuJ91myqtlaqZ2mWL6/bhuiJJjtKIIfCzQ5AO3yOLW376k/8jhkLvXdBRBWyl mUDsKhK3kzjdEBUpTmQik3f3AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUMLYES3gt VKa9GnIys37D5wVA2hgwHwYDVR0jBBgwFoAUPDiOKfqhof7qOJefIG9GaK2oyJ4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0QjlELzRDRjNCMzcwMkQx MjExRjFCRkM0NzhGNTk4RUU1MjhFL1BEaU9LZnFob2Y3cU9KZWZJRzlHYUsyb3lK NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUERpT0tmcWhvZjdxT0plZklHOUdhSzJveUo0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0 QjlELzRDRjNCMzcwMkQxMjExRjFCRkM0NzhGNTk4RUU1MjhFL1BEaU9LZnFob2Y3 cU9KZWZJRzlHYUsyb3lKNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAk/oGvj5/LqKLEQBPkjTRJq08N1jDCu30gAuZJyCrNWCWAJlGeZ6yQhWQ87BHf i37dLIqu5bUHNkiXTQMfuiOwMjvv9wVGFh71aIzTE97HphsXLTW4wm/6/Wxdex1b zsOTrIEClae0YHh3xHdpQfns08UEC263AY+fdJobuS0RF0osUDRygzTilWMAZlg+ 9r75YAvmvw415joHWl13J2PQuYiqjq3d3HGIhXRCXesc0B+o9HOqKXUvViU4aN0Z vpMwWy5BIbZDL/bBBg73m1ItSHsvdj7NhciZNBdx3rC0Ra8/SyTP1od37LP9aqj6 I8ASKNX5WzP5tc55h3FblycD -----END CERTIFICATE-----Generated at Tue Jun 2 21:23:30 2026 by rpki-client