$ rpki-client -vvf rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.mft File: PXe1hqP2gsVjtkJlJiiR1NpGp6g.mft (raw, json) Hash identifier: eeKP3MHt//QPm9Rs8QRMwAEP6/vCxS7Ff6Ka5+VnG+w= Subject key identifier: 76:8F:EE:C0:0E:33:33:6D:71:B4:A8:52:A5:08:7B:DC:ED:49:0B:0C Authority key identifier: 3D:77:B5:86:A3:F6:82:C5:63:B6:42:65:26:28:91:D4:DA:46:A7:A8 Certificate issuer: /CN=A91B10B9/serialNumber=3D77B586A3F682C563B64265262891D4DA46A7A8 Certificate serial: 0439 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXe1hqP2gsVjtkJlJiiR1NpGp6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.mft Manifest number: 0431 Signing time: Sun 05 Apr 2026 00:07:24 +0000 Manifest this update: Sun 05 Apr 2026 00:07:23 +0000 Manifest next update: Sun 12 Apr 2026 00:07:23 +0000 Files and hashes: 1: PXe1hqP2gsVjtkJlJiiR1NpGp6g.crl (hash: 04gRvdOfERKWjc8AMj0hKs5ytW+uIVTiefUdqGwkrz4=) 2: BCD0F6B0A0FF11EC924D4461C4F9AE02.roa (hash: RLT4OavkIPlkhOt4yNgRmjMZlXgnd7ZiolTVU7K89ho=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.crl rsync://rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXe1hqP2gsVjtkJlJiiR1NpGp6g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 00:07:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1081 (0x439) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B10B9, serialNumber=3D77B586A3F682C563B64265262891D4DA46A7A8 Validity Not Before: Apr 5 00:07:23 2026 GMT Not After : Apr 12 00:07:23 2026 GMT Subject: CN=69d1a7bc-47e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d4:36:92:fd:d9:5e:1f:f8:be:81:72:bc:f7: 11:d6:6c:2f:98:74:0b:66:b2:44:f1:58:69:32:33: e8:b1:0d:0b:49:08:92:8d:75:b4:e9:81:64:cf:c7: 02:99:6f:1b:a9:36:1c:5e:cb:79:f9:0a:4d:f7:d9: c7:2d:e4:ce:ed:e5:07:ef:af:05:00:e2:58:5c:d3: 4e:da:78:b4:65:14:1a:f8:a6:d3:1f:b8:0e:52:c4: 65:55:c8:bb:f3:03:31:e8:fb:50:20:a9:f1:b2:c9: b1:af:a6:d4:d7:94:f7:b8:c3:2d:11:b2:6c:63:e5: 16:34:73:9a:66:51:b8:5f:0f:56:6a:80:c9:ef:92: 44:bc:d9:58:cb:76:60:8a:e9:a1:12:43:d8:e9:63: ee:8d:37:e9:48:7d:93:19:69:64:d9:3f:c0:83:cc: b4:78:21:60:6f:53:93:34:4c:64:60:84:51:9d:61: 92:ae:ef:70:99:35:77:31:28:2b:08:93:8c:76:07: 77:21:4f:58:ff:56:b5:46:ef:d0:4d:eb:ad:89:c0: cb:a1:05:18:fb:24:8b:16:2c:49:a9:13:a3:9c:2f: 4d:ec:b6:b1:2a:b4:2b:e7:15:8b:bd:bb:01:e4:c6: 35:70:a8:58:df:de:2c:0a:d9:88:1e:96:76:19:26: b2:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:8F:EE:C0:0E:33:33:6D:71:B4:A8:52:A5:08:7B:DC:ED:49:0B:0C X509v3 Authority Key Identifier: keyid:3D:77:B5:86:A3:F6:82:C5:63:B6:42:65:26:28:91:D4:DA:46:A7:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXe1hqP2gsVjtkJlJiiR1NpGp6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:e0:9e:fa:5a:28:ef:a8:98:d4:b6:02:85:39:f3:46:91:c9: 1d:31:e2:dd:38:f7:98:cc:fd:a6:04:d9:08:1b:58:cc:e5:12: cd:9c:4a:17:39:12:be:f4:4c:34:a6:7b:43:8d:57:72:94:74: 45:bd:0d:2b:e5:3a:2e:b9:0a:54:cc:84:b5:e0:c9:4d:ad:86: 72:53:59:c2:3a:33:c6:44:b0:71:ce:e2:b2:85:58:af:e5:89: 7e:81:03:c7:2a:7e:6a:2b:92:8a:37:27:6e:bb:d2:a2:9f:61: 09:b1:4d:55:14:8f:9e:b2:ff:69:0c:55:a5:c6:c2:95:17:81: 39:12:c3:aa:e3:9d:85:90:df:3b:bd:96:b2:2d:22:13:24:dd: 0d:c1:2f:b1:61:1d:b0:6d:a2:9e:34:e9:e4:b8:44:b4:76:5e: dd:a4:4c:9c:7f:f3:24:98:b4:0d:5a:74:91:cb:b2:66:80:12: 13:90:29:74:c3:43:9a:d0:9f:d3:87:be:49:d3:e3:8d:f3:cc: 97:25:53:90:29:8f:21:62:88:1d:a8:fd:c0:be:d9:3c:19:ef: d5:6a:27:1c:2f:7b:82:ec:10:ae:9a:25:4b:cd:de:0e:aa:95: 3f:c7:52:78:56:3f:fb:3d:f6:b7:a1:cb:73:51:70:73:e4:b7: 29:11:11:30 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBDkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjEwQjkxMTAvBgNVBAUTKDNENzdCNTg2QTNGNjgyQzU2M0I2NDI2NTI2Mjg5MUQ0 REE0NkE3QTgwHhcNMjYwNDA1MDAwNzIzWhcNMjYwNDEyMDAwNzIzWjAYMRYwFAYD VQQDEw02OWQxYTdiYy00N2U5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArNQ2kv3ZXh/4voFyvPcR1mwvmHQLZrJE8VhpMjPosQ0LSQiSjXW06YFkz8cC mW8bqTYcXst5+QpN99nHLeTO7eUH768FAOJYXNNO2ni0ZRQa+KbTH7gOUsRlVci7 8wMx6PtQIKnxssmxr6bU15T3uMMtEbJsY+UWNHOaZlG4Xw9WaoDJ75JEvNlYy3Zg iumhEkPY6WPujTfpSH2TGWlk2T/Ag8y0eCFgb1OTNExkYIRRnWGSru9wmTV3MSgr CJOMdgd3IU9Y/1a1Ru/QTeuticDLoQUY+ySLFixJqROjnC9N7LaxKrQr5xWLvbsB 5MY1cKhY394sCtmIHpZ2GSayhwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHaP7sAO MzNtcbSoUqUIe9ztSQsMMB8GA1UdIwQYMBaAFD13tYaj9oLFY7ZCZSYokdTaRqeo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTBCOS9EMTNCRUFBQUEw RkIxMUVDQTVEMURGNUJDNEY5QUUwMi9QWGUxaHFQMmdzVmp0a0psSmlpUjFOcEdw NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BYZTFocVAyZ3NWanRrSmxKaWlSMU5wR3A2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTBCOS9EMTNCRUFBQUEwRkIxMUVDQTVEMURGNUJDNEY5QUUwMi9QWGUxaHFQMmdz Vmp0a0psSmlpUjFOcEdwNmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAw+Ce+loo76iY1LYChTnzRpHJHTHi3Tj3mMz9pgTZCBtYzOUSzZxKFzkSvvRM NKZ7Q41XcpR0Rb0NK+U6LrkKVMyEteDJTa2GclNZwjozxkSwcc7isoVYr+WJfoED xyp+aiuSijcnbrvSop9hCbFNVRSPnrL/aQxVpcbClReBORLDquOdhZDfO72Wsi0i EyTdDcEvsWEdsG2injTp5LhEtHZe3aRMnH/zJJi0DVp0kcuyZoASE5ApdMNDmtCf 04e+SdPjjfPMlyVTkCmPIWKIHaj9wL7ZPBnv1WonHC97guwQrpolS83eDqqVP8dS eFY/+z32t6HLc1Fwc+S3KRERMA== -----END CERTIFICATE-----Generated at Mon Apr 6 08:31:49 2026 by rpki-client