$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/PQaSnY1eH2juI-yj-UjP96LklbM.mft File: PQaSnY1eH2juI-yj-UjP96LklbM.mft (raw, json) Hash identifier: wtyu182S1T77erYxtn/E3+DR9KpVrB9jRJl6XdKTwdY= Subject key identifier: 39:D2:56:44:6A:E9:74:C4:1B:B0:35:72:70:1D:3C:6F:CA:E0:7C:16 Authority key identifier: 3D:06:92:9D:8D:5E:1F:68:EE:23:EC:A3:F9:48:CF:F7:A2:E4:95:B3 Certificate issuer: /CN=A91DDCD9/serialNumber=3D06929D8D5E1F68EE23ECA3F948CFF7A2E495B3 Certificate serial: 63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQaSnY1eH2juI-yj-UjP96LklbM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/PQaSnY1eH2juI-yj-UjP96LklbM.mft Manifest number: 0BD6 Signing time: Sat 04 Apr 2026 18:58:56 +0000 Manifest this update: Sat 04 Apr 2026 18:58:56 +0000 Manifest next update: Sat 11 Apr 2026 18:58:56 +0000 Files and hashes: 1: PQaSnY1eH2juI-yj-UjP96LklbM.crl (hash: CC6TxoCYFSLsOUBmqmcWkc5Pq4/J2LlssOQZ6WB91/E=) 2: 4140D222AB0511F0AD64C814C4F9AE02.roa (hash: lm+nFcqH0a+9WsNgR01SH0qMnw/FVhg7/KwG6EmLyBA=) 3: 41D7A1D4AB0511F0AD64C814C4F9AE02.roa (hash: rShfJxqE0h5coYqcR6ikXPA4HtTIMuqnQcLhGpxQm7o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/PQaSnY1eH2juI-yj-UjP96LklbM.crl rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/PQaSnY1eH2juI-yj-UjP96LklbM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQaSnY1eH2juI-yj-UjP96LklbM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 18:58:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 99 (0x63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDCD9, serialNumber=3D06929D8D5E1F68EE23ECA3F948CFF7A2E495B3 Validity Not Before: Apr 4 18:58:56 2026 GMT Not After : Apr 11 18:58:56 2026 GMT Subject: CN=69d15f70-e8b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:05:48:77:b5:3f:0d:2c:b0:09:93:fe:8d:84: 30:24:53:07:22:49:60:12:e5:48:52:89:d5:ec:70: ed:42:9a:29:d4:b0:cd:2e:fb:1e:ab:96:5e:4b:47: e4:cd:d2:21:98:f1:d8:ed:d9:0d:39:3b:bc:de:85: 37:9e:c9:ae:1f:48:ad:8d:1b:2a:90:94:40:1c:21: fb:25:8e:11:19:42:d3:ed:12:f9:0f:4e:75:13:9a: 5f:de:32:12:89:86:af:90:a7:d5:f6:6e:d7:13:fb: 2b:ce:0c:b6:eb:3f:88:4f:31:64:86:a7:4d:76:a7: 32:56:50:79:80:47:ad:18:cf:a9:51:c0:41:07:d9: e1:27:ff:98:ea:6f:2e:a6:95:8d:f0:6c:ce:e7:37: 9b:4c:81:3f:ed:5b:0a:77:74:e2:35:54:11:76:97: 6f:3c:cb:8d:20:35:ae:28:b4:d3:40:fd:f2:a2:f7: 21:2c:22:d8:2f:39:7b:f8:cf:e6:18:32:e7:17:e8: 25:d2:81:1c:5c:74:5b:24:25:0d:4b:55:0c:8f:b4: 0a:a1:38:a9:98:22:f8:30:d1:27:ba:2e:99:05:0d: 87:df:e4:5c:55:b8:2f:6c:74:fa:9d:e9:65:49:a3: d2:87:66:53:aa:04:a0:16:7d:29:6b:86:d6:5d:c6: 08:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:D2:56:44:6A:E9:74:C4:1B:B0:35:72:70:1D:3C:6F:CA:E0:7C:16 X509v3 Authority Key Identifier: keyid:3D:06:92:9D:8D:5E:1F:68:EE:23:EC:A3:F9:48:CF:F7:A2:E4:95:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/PQaSnY1eH2juI-yj-UjP96LklbM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQaSnY1eH2juI-yj-UjP96LklbM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/PQaSnY1eH2juI-yj-UjP96LklbM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:ac:c5:0d:95:77:01:81:9d:06:9a:34:52:7d:be:a3:ec:b8: 1c:81:29:7f:36:d7:b2:d6:39:a5:b4:dd:a7:47:2f:3f:f4:1e: a5:1a:0a:22:00:ea:f5:3a:d9:31:6e:73:44:54:95:a4:00:ce: 85:7a:fa:d6:30:65:c1:e5:e2:3c:3b:14:a3:37:95:0f:4f:40: b6:34:90:1d:98:da:c0:e8:ba:50:82:4d:5f:92:0d:a5:b7:46: b7:ed:01:13:e2:ce:75:fd:42:15:a5:30:cb:1a:26:29:51:1d: b8:d8:df:e2:0f:a6:b4:3c:8a:e3:45:85:c2:a2:4a:e6:a4:f4: f9:83:b8:5e:21:4e:73:0b:f2:70:d2:19:d3:0b:dc:2f:81:23: e9:76:1b:f0:ff:21:82:77:75:d3:6e:5f:b3:fc:87:0c:2a:cc: 6c:59:a7:37:3f:40:97:3c:3d:ad:4b:00:6a:2a:ce:ab:8f:77: ba:26:a2:28:e0:97:17:73:cd:50:3b:66:e7:d7:66:77:0e:7b: 5e:5c:18:8f:82:74:f2:6b:ed:dc:3f:29:03:fa:d5:e8:07:e2: 63:cf:f9:c2:f7:af:6d:a6:f7:9f:53:34:2b:a6:56:d6:2a:b3: c3:d5:34:b5:16:ce:34:18:a1:e4:4c:67:5e:a7:16:04:3e:dc: 69:8e:56:bd -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBYzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RENEOTExMC8GA1UEBRMoM0QwNjkyOUQ4RDVFMUY2OEVFMjNFQ0EzRjk0OENGRjdB MkU0OTVCMzAeFw0yNjA0MDQxODU4NTZaFw0yNjA0MTExODU4NTZaMBgxFjAUBgNV BAMTDTY5ZDE1ZjcwLWU4YjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEBUh3tT8NLLAJk/6NhDAkUwciSWAS5UhSidXscO1CminUsM0u+x6rll5LR+TN 0iGY8djt2Q05O7zehTeeya4fSK2NGyqQlEAcIfsljhEZQtPtEvkPTnUTml/eMhKJ hq+Qp9X2btcT+yvODLbrP4hPMWSGp012pzJWUHmAR60Yz6lRwEEH2eEn/5jqby6m lY3wbM7nN5tMgT/tWwp3dOI1VBF2l288y40gNa4otNNA/fKi9yEsItgvOXv4z+YY MucX6CXSgRxcdFskJQ1LVQyPtAqhOKmYIvgw0Se6LpkFDYff5FxVuC9sdPqd6WVJ o9KHZlOqBKAWfSlrhtZdxghNAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUOdJWRGrp dMQbsDVycB08b8rgfBYwHwYDVR0jBBgwFoAUPQaSnY1eH2juI+yj+UjP96LklbMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUREQ0Q5LzQxMEJCQzE0NEU2 QzExRUE4OTA0OTc0N0M0RjlBRTAyL1BRYVNuWTFlSDJqdUkteWotVWpQOTZMa2xi TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUFFhU25ZMWVIMmp1SS15ai1ValA5NkxrbGJNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURE Q0Q5LzQxMEJCQzE0NEU2QzExRUE4OTA0OTc0N0M0RjlBRTAyL1BRYVNuWTFlSDJq dUkteWotVWpQOTZMa2xiTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAlrMUNlXcBgZ0GmjRSfb6j7LgcgSl/Ntey1jmltN2nRy8/9B6lGgoiAOr1Otkx bnNEVJWkAM6FevrWMGXB5eI8OxSjN5UPT0C2NJAdmNrA6LpQgk1fkg2lt0a37QET 4s51/UIVpTDLGiYpUR242N/iD6a0PIrjRYXCokrmpPT5g7heIU5zC/Jw0hnTC9wv gSPpdhvw/yGCd3XTbl+z/IcMKsxsWac3P0CXPD2tSwBqKs6rj3e6JqIo4JcXc81Q O2bn12Z3DnteXBiPgnTya+3cPykD+tXoB+Jjz/nC969tpvefUzQrplbWKrPD1TS1 Fs40GKHkTGdepxYEPtxpjla9 -----END CERTIFICATE-----Generated at Mon Apr 6 08:33:34 2026 by rpki-client