$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft File: PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft (raw, json) Hash identifier: yaLYYEaA1MiHWdbUs7CAnovtBe3LGjyoDpjRjwP8+1c= Subject key identifier: 8E:09:AD:7E:2E:EE:75:3A:F1:77:D4:CE:EF:76:AB:E8:72:4C:48:C3 Authority key identifier: 3C:69:B9:B6:01:D2:C9:F2:A3:91:5A:6F:FB:CA:3D:AD:62:E9:92:45 Certificate issuer: /CN=A91EE09C/serialNumber=3C69B9B601D2C9F2A3915A6FFBCA3DAD62E99245 Certificate serial: 021E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft Manifest number: 01F0 Signing time: Mon 27 Apr 2026 03:36:56 +0000 Manifest this update: Mon 27 Apr 2026 03:36:56 +0000 Manifest next update: Mon 04 May 2026 03:36:56 +0000 Files and hashes: 1: PGm5tgHSyfKjkVpv-8o9rWLpkkU.crl (hash: NAqPhOcOWduoDKcck1KNGm2SjbwloJGjFB0XVxDc+aY=) 2: 1D98617687B311EFB4972044C4F9AE02.roa (hash: xYBSN0t6jgjQfq0Vs3mLR1yw03FEouHpBcT56A28m1A=) 3: A3E08ED6825711EFB7585B6FC4F9AE02.roa (hash: 2slykkHCwPvbeGF4Zx3D9JQfzEnRWOMcVvw7gilVFqk=) 4: 23D4183024D711EF932FC941C4F9AE02.roa (hash: yjfhbglGwJSFqMN6zxG/h3PTnwzIZZTxeRkuErtplaI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.crl rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 03:36:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 542 (0x21e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE09C, serialNumber=3C69B9B601D2C9F2A3915A6FFBCA3DAD62E99245 Validity Not Before: Apr 27 03:36:56 2026 GMT Not After : May 4 03:36:56 2026 GMT Subject: CN=69eed9d8-dc20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:07:4b:9f:7d:64:17:62:8a:a2:cd:18:d5:63: f1:42:e7:0c:73:b1:1d:02:bb:cf:db:c7:aa:5d:e4: 81:6a:bc:6d:92:68:80:b9:df:3b:d9:75:99:47:73: bb:08:52:ad:c2:90:8c:7f:b4:66:17:21:d8:3f:8e: 0c:47:71:36:07:92:fa:cd:50:f7:5c:53:b1:88:41: 59:6c:83:51:52:0c:2f:06:86:8a:3e:b3:18:51:c4: b0:57:40:f4:d5:0d:9b:3a:05:9e:4b:a5:7b:b2:95: 4e:a3:0f:e5:47:b6:64:5d:d8:3e:91:ee:53:d9:33: 2a:20:d7:ff:7a:ab:38:d0:9d:cb:6c:0e:f0:3e:9d: 00:e2:da:be:db:4f:47:1e:81:a0:7b:30:48:eb:88: c2:35:a3:bb:86:cc:d7:5e:65:a9:a3:5d:49:5d:f9: 05:f2:0a:e3:4d:92:30:c2:ac:4e:96:8f:15:33:fb: 00:72:82:41:df:97:db:07:08:39:bd:e6:2c:23:46: f2:c1:0d:b7:1f:8f:1f:9b:9b:76:4a:69:09:22:79: ca:14:8e:6e:8c:a3:00:49:d1:27:7f:b0:ed:34:7a: 60:14:44:4c:fb:66:2b:47:01:1d:e2:ff:ec:9b:59: 71:84:f6:68:d7:77:36:4a:43:03:5a:32:5b:8f:e0: ba:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:09:AD:7E:2E:EE:75:3A:F1:77:D4:CE:EF:76:AB:E8:72:4C:48:C3 X509v3 Authority Key Identifier: keyid:3C:69:B9:B6:01:D2:C9:F2:A3:91:5A:6F:FB:CA:3D:AD:62:E9:92:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:cd:bc:30:6a:cb:db:b4:3f:52:99:8c:cc:26:78:df:31:31: ac:94:7a:d8:78:e6:91:35:a6:71:e7:da:7e:08:d9:4b:a7:bc: 58:28:b4:30:f4:67:c8:c9:ee:82:0e:1b:f3:b6:5c:59:6e:77: 46:32:95:96:0e:ca:5a:10:10:9a:18:da:d5:53:0d:96:53:c9: f2:9c:51:0f:fd:dd:07:c4:53:51:c6:81:68:2c:97:98:ec:a0: df:7a:8f:61:46:cd:58:8f:3e:8a:83:01:98:92:14:39:2e:2a: 86:35:00:c2:ec:97:7d:4b:cf:85:23:37:3f:ab:fe:ea:fb:29: ad:16:0f:61:17:11:44:fe:06:00:fe:76:62:aa:e8:b8:66:ad: 71:86:90:73:69:a7:e8:b8:4d:49:42:bb:c3:16:fd:ad:73:97: 49:6c:e8:c4:44:76:1f:47:62:d5:3d:b8:6b:07:3d:1f:b4:4d: ce:fe:f1:56:9d:94:be:be:99:8f:09:a7:45:9e:3a:16:1b:88: 58:85:b4:5a:77:ec:44:63:f4:2e:ae:8c:3f:55:ff:12:c5:19: 93:81:54:a6:84:5e:e2:eb:34:a1:25:76:fc:57:2b:c7:09:59: d9:b4:bb:8d:4a:7f:46:f5:82:53:04:ba:09:50:5e:de:25:f8: 43:a9:0f:1f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUUwOUMxMTAvBgNVBAUTKDNDNjlCOUI2MDFEMkM5RjJBMzkxNUE2RkZCQ0EzREFE NjJFOTkyNDUwHhcNMjYwNDI3MDMzNjU2WhcNMjYwNTA0MDMzNjU2WjAYMRYwFAYD VQQDEw02OWVlZDlkOC1kYzIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmQdLn31kF2KKos0Y1WPxQucMc7EdArvP28eqXeSBarxtkmiAud872XWZR3O7 CFKtwpCMf7RmFyHYP44MR3E2B5L6zVD3XFOxiEFZbINRUgwvBoaKPrMYUcSwV0D0 1Q2bOgWeS6V7spVOow/lR7ZkXdg+ke5T2TMqINf/eqs40J3LbA7wPp0A4tq+209H HoGgezBI64jCNaO7hszXXmWpo11JXfkF8grjTZIwwqxOlo8VM/sAcoJB35fbBwg5 veYsI0bywQ23H48fm5t2SmkJInnKFI5ujKMASdEnf7DtNHpgFERM+2YrRwEd4v/s m1lxhPZo13c2SkMDWjJbj+C6bwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI4JrX4u 7nU68XfUzu92q+hyTEjDMB8GA1UdIwQYMBaAFDxpubYB0snyo5Fab/vKPa1i6ZJF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTA5Qy9FRUY3NjJDMDkw NzUxMUVFODdEMjY2ODBDNEY5QUUwMi9QR201dGdIU3lmS2prVnB2LThvOXJXTHBr a1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BHbTV0Z0hTeWZLamtWcHYtOG85cldMcGtrVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RTA5Qy9FRUY3NjJDMDkwNzUxMUVFODdEMjY2ODBDNEY5QUUwMi9QR201dGdIU3lm S2prVnB2LThvOXJXTHBra1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgs28MGrL27Q/UpmMzCZ43zExrJR62HjmkTWmcefafgjZS6e8WCi0MPRnyMnu gg4b87ZcWW53RjKVlg7KWhAQmhja1VMNllPJ8pxRD/3dB8RTUcaBaCyXmOyg33qP YUbNWI8+ioMBmJIUOS4qhjUAwuyXfUvPhSM3P6v+6vsprRYPYRcRRP4GAP52Yqro uGatcYaQc2mn6LhNSUK7wxb9rXOXSWzoxER2H0di1T24awc9H7RNzv7xVp2Uvr6Z jwmnRZ46FhuIWIW0WnfsRGP0Lq6MP1X/EsUZk4FUpoRe4us0oSV2/FcrxwlZ2bS7 jUp/RvWCUwS6CVBe3iX4Q6kPHw== -----END CERTIFICATE-----Generated at Tue Apr 28 12:46:09 2026 by rpki-client