$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft File: PfG7945KTnVEGahIyf0My9LmpFg.mft (raw, json) Hash identifier: QxUvrU2wqHUY/SZWefhCgJeprzVtr4b1jCMiM5I1l5M= Subject key identifier: CC:7D:F0:A9:61:09:CE:97:95:24:ED:37:79:CA:DC:1E:8F:F7:7C:FC Authority key identifier: 3D:F1:BB:F7:8E:4A:4E:75:44:19:A8:48:C9:FD:0C:CB:D2:E6:A4:58 Certificate issuer: /CN=A91C1052/serialNumber=3DF1BBF78E4A4E754419A848C9FD0CCBD2E6A458 Certificate serial: 027F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfG7945KTnVEGahIyf0My9LmpFg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft Manifest number: 0272 Signing time: Sun 05 Apr 2026 01:35:43 +0000 Manifest this update: Sun 05 Apr 2026 01:35:42 +0000 Manifest next update: Sun 12 Apr 2026 01:35:42 +0000 Files and hashes: 1: PfG7945KTnVEGahIyf0My9LmpFg.crl (hash: TC7x0dAA+jdcQwqQByG3YAejUFBMUOVjM/ZIBaH+EpI=) 2: 74A3C1988E8311ED903ADA1CC4F9AE02.roa (hash: +nejaKv7xuZCKQJRBEYk2kIxhLSRjN7BLyKcA9G8qXE=) 3: D6E2AAC0772911ED95084884C4F9AE02.roa (hash: 9uMRdpoWckw3Fu7tp6GE6C4ygIb26UeNoRv4LKPo7V0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.crl rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfG7945KTnVEGahIyf0My9LmpFg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 01:35:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 639 (0x27f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1052, serialNumber=3DF1BBF78E4A4E754419A848C9FD0CCBD2E6A458 Validity Not Before: Apr 5 01:35:42 2026 GMT Not After : Apr 12 01:35:42 2026 GMT Subject: CN=69d1bc6f-b307 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:64:10:f6:01:ed:1e:3f:ae:34:7a:25:20:cb: 82:31:d1:88:c0:2c:ca:fd:16:9c:1f:94:3a:72:5b: 8d:12:49:2e:db:ca:ff:c8:a6:b6:cc:67:97:d3:74: 3c:dd:fa:a2:3a:5d:b2:be:9c:ec:6a:c3:25:8f:a6: fa:29:be:6f:47:df:08:17:9b:f6:dc:60:97:ef:fc: 88:34:cc:8a:b9:3f:59:6c:89:d9:8d:02:f8:24:95: 71:6e:37:c9:1c:05:2b:a0:4e:72:f6:46:94:ae:15: 53:85:b1:87:c5:e0:07:09:8c:65:d7:57:92:b3:6a: e6:62:f8:38:e4:08:f0:72:9f:6d:ab:db:e8:58:2a: 1b:31:4d:5f:7d:11:9a:5d:94:14:26:05:f9:14:3e: cd:b2:b7:f9:35:d4:f0:e4:07:2f:0c:d0:02:f0:ae: 52:2e:d8:a0:49:e7:24:ac:e2:59:8d:c3:c7:c7:de: 7d:26:18:9b:8e:58:8d:a3:d2:13:7d:b5:1c:31:ca: 1e:49:11:ff:d6:65:1a:df:7b:58:1e:fd:73:3b:c2: 75:6a:1b:69:16:ab:35:28:ca:d0:ca:3a:48:be:38: e8:ac:d7:39:4e:ca:0e:8d:c5:4b:03:14:5a:f9:6d: a1:62:67:fe:25:84:e2:e0:6c:b9:4c:2e:69:f4:20: 60:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:7D:F0:A9:61:09:CE:97:95:24:ED:37:79:CA:DC:1E:8F:F7:7C:FC X509v3 Authority Key Identifier: keyid:3D:F1:BB:F7:8E:4A:4E:75:44:19:A8:48:C9:FD:0C:CB:D2:E6:A4:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfG7945KTnVEGahIyf0My9LmpFg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:8e:60:3f:f7:b2:c6:95:dc:46:1b:e2:c5:1b:58:5a:1e:72: 02:76:fa:94:b1:be:94:94:cd:1e:c1:20:51:5e:d3:8f:55:fa: d7:a8:65:37:a7:28:a0:87:b7:bd:40:b1:da:7e:b3:90:0e:78: ca:2f:69:bb:a3:4b:f1:01:f0:55:26:bc:a9:57:a1:22:95:0b: 31:ae:7e:f4:2c:11:3d:ab:f9:4b:75:fc:f0:06:cf:e1:e2:9d: 0e:44:a6:54:68:1e:08:f2:6b:4b:83:ed:c3:c7:2c:b9:e4:72: ee:cf:ae:cc:44:a6:19:a8:5a:79:ed:0c:fd:10:b5:36:9c:e0: 3f:81:10:10:8d:6b:60:39:da:15:76:86:8d:0f:ae:83:7b:9d: e4:97:1d:07:6d:2f:d4:0e:ea:d7:f2:e0:31:7b:13:93:8a:e8: 63:a1:5d:f2:69:9d:63:4d:1b:09:af:b4:ef:5d:f2:df:51:30: 08:69:70:e2:33:53:5d:5a:68:10:9b:c3:2d:06:5c:40:f5:77: a0:d0:21:fa:67:68:c5:b7:d7:c3:79:47:3d:20:7e:58:42:10: 4c:c9:4e:3f:cb:55:2c:2e:35:12:26:f8:a8:bf:a9:50:b4:a7: 2b:38:2b:b2:c3:1c:0c:19:a5:17:5d:56:34:0b:cf:25:6b:e2: 5f:20:f0:44 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAn8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzEwNTIxMTAvBgNVBAUTKDNERjFCQkY3OEU0QTRFNzU0NDE5QTg0OEM5RkQwQ0NC RDJFNkE0NTgwHhcNMjYwNDA1MDEzNTQyWhcNMjYwNDEyMDEzNTQyWjAYMRYwFAYD VQQDEw02OWQxYmM2Zi1iMzA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0mQQ9gHtHj+uNHolIMuCMdGIwCzK/RacH5Q6cluNEkku28r/yKa2zGeX03Q8 3fqiOl2yvpzsasMlj6b6Kb5vR98IF5v23GCX7/yINMyKuT9ZbInZjQL4JJVxbjfJ HAUroE5y9kaUrhVThbGHxeAHCYxl11eSs2rmYvg45Ajwcp9tq9voWCobMU1ffRGa XZQUJgX5FD7Nsrf5NdTw5AcvDNAC8K5SLtigSeckrOJZjcPHx959JhibjliNo9IT fbUcMcoeSRH/1mUa33tYHv1zO8J1ahtpFqs1KMrQyjpIvjjorNc5TsoOjcVLAxRa +W2hYmf+JYTi4Gy5TC5p9CBg6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMx98Klh Cc6XlSTtN3nK3B6P93z8MB8GA1UdIwQYMBaAFD3xu/eOSk51RBmoSMn9DMvS5qRY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTA1Mi84MDZGQjI3Njc3 MjYxMUVEODZEMDk2ODBDNEY5QUUwMi9QZkc3OTQ1S1RuVkVHYWhJeWYwTXk5TG1w RmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BmRzc5NDVLVG5WRUdhaEl5ZjBNeTlMbXBGZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTA1Mi84MDZGQjI3Njc3MjYxMUVEODZEMDk2ODBDNEY5QUUwMi9QZkc3OTQ1S1Ru VkVHYWhJeWYwTXk5TG1wRmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGY5gP/eyxpXcRhvixRtYWh5yAnb6lLG+lJTNHsEgUV7Tj1X616hlN6cooIe3 vUCx2n6zkA54yi9pu6NL8QHwVSa8qVehIpULMa5+9CwRPav5S3X88AbP4eKdDkSm VGgeCPJrS4Ptw8csueRy7s+uzESmGahaee0M/RC1NpzgP4EQEI1rYDnaFXaGjQ+u g3ud5JcdB20v1A7q1/LgMXsTk4roY6Fd8mmdY00bCa+0713y31EwCGlw4jNTXVpo EJvDLQZcQPV3oNAh+mdoxbfXw3lHPSB+WEIQTMlOP8tVLC41Eib4qL+pULSnKzgr ssMcDBmlF11WNAvPJWviXyDwRA== -----END CERTIFICATE-----Generated at Mon Apr 6 08:54:03 2026 by rpki-client