$ rpki-client -vvf rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft File: PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft (raw, json) Hash identifier: QtlQSwYge+VCTQqP61UuY8L2EGpqgeepAqMlA2nYfS0= Subject key identifier: D3:AD:56:11:2B:DB:A4:9C:3A:67:72:8A:B2:E8:54:00:38:96:53:BD Authority key identifier: 3E:93:58:DC:F2:C5:3F:66:21:05:2B:3A:A8:52:45:4E:2F:B3:1C:18 Certificate issuer: /CN=A9122B0D/serialNumber=3E9358DCF2C53F6621052B3AA852454E2FB31C18 Certificate serial: 024D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PpNY3PLFP2YhBSs6qFJFTi-zHBg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft Manifest number: 0241 Signing time: Fri 17 Apr 2026 02:23:49 +0000 Manifest this update: Fri 17 Apr 2026 02:23:49 +0000 Manifest next update: Fri 24 Apr 2026 02:23:49 +0000 Files and hashes: 1: PpNY3PLFP2YhBSs6qFJFTi-zHBg.crl (hash: y/IfZEUYX2aiWe9VZL4Ik2x4xzJbzlaUmA5f3DXfQuA=) 2: 650CB2EE081C11EFA47C4687C4F9AE02.roa (hash: dhqZez1CmQoNnl7tme2Gyw601Mw62gYrcOQDDpPCTCg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.crl rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PpNY3PLFP2YhBSs6qFJFTi-zHBg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:23:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 589 (0x24d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122B0D, serialNumber=3E9358DCF2C53F6621052B3AA852454E2FB31C18 Validity Not Before: Apr 17 02:23:49 2026 GMT Not After : Apr 24 02:23:49 2026 GMT Subject: CN=69e199b5-0082 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:bc:73:b3:34:ab:4a:1b:84:f8:e8:ed:06:fa: 1c:ea:8d:52:d2:06:c6:10:55:ae:10:71:2a:63:c4: 6b:cd:93:5b:73:81:0f:3d:5b:18:f4:12:1f:04:5b: 23:2e:f7:a5:c5:ea:db:0e:fc:08:1f:92:a9:c2:52: 37:eb:db:a6:ed:11:f8:59:b1:ca:3f:af:2b:13:1c: b8:e8:ee:bd:3d:cb:bd:53:8c:6b:1a:1c:44:e1:d5: 4d:e1:45:2c:21:43:96:11:d7:ba:ce:de:52:4b:57: 58:f8:90:80:ae:bb:03:8c:fb:c9:72:ab:aa:37:03: 00:4a:0c:bf:c2:7f:99:80:c4:ca:f1:5d:1f:4a:7e: c4:74:3c:d8:1c:92:27:be:12:21:2e:86:30:f7:6d: cd:00:cc:4d:4e:25:c4:7f:60:18:c7:98:10:27:d2: 6a:f5:50:c4:2a:d7:0c:0a:0c:1b:f5:3d:15:34:93: 4c:87:ab:e6:6b:b2:fd:a4:ba:0c:48:1b:b5:a9:6e: f2:15:29:c9:51:12:e7:5b:32:47:87:35:43:68:6b: c1:0f:26:5a:2d:15:05:f5:48:c8:f1:0a:d2:04:de: 03:7a:a6:76:3d:03:34:4b:39:dc:e7:15:01:1e:8d: 57:11:c9:0d:37:36:1c:24:d5:2a:30:1a:bf:59:30: 02:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:AD:56:11:2B:DB:A4:9C:3A:67:72:8A:B2:E8:54:00:38:96:53:BD X509v3 Authority Key Identifier: keyid:3E:93:58:DC:F2:C5:3F:66:21:05:2B:3A:A8:52:45:4E:2F:B3:1C:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PpNY3PLFP2YhBSs6qFJFTi-zHBg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:8a:b1:dd:83:2e:21:fc:98:ed:46:46:fa:45:ec:ea:41:85: 78:a6:d7:a3:34:b0:4b:e2:5f:ca:36:2f:f8:1b:64:51:fc:77: c9:b6:2b:bd:c6:dd:a7:fa:22:52:56:c0:92:3f:56:4f:b5:3f: 8d:de:64:c4:b4:22:1b:b3:68:e2:b0:8e:e9:91:3d:91:53:a5: c6:69:45:10:d9:e7:8a:9c:66:ef:61:c1:cd:60:fc:70:ad:69: 8c:ce:66:97:71:fc:9b:36:46:b7:1d:eb:a0:41:c6:78:f0:87: 73:92:17:a8:ac:0c:25:43:82:13:43:bb:cc:b7:44:07:a7:4a: d7:31:15:a7:fc:a1:80:76:f1:b9:e4:da:a0:1e:e2:e8:6c:48: 3b:69:57:e2:80:69:67:e4:b0:e5:c2:cd:34:02:e5:27:32:e8: 9e:d7:68:20:cb:91:e4:e4:e2:10:86:e3:b8:36:1c:20:7b:46: 7a:50:ef:57:19:b7:3a:a7:11:21:79:58:21:21:fc:a8:b5:e0: ad:05:54:38:ad:21:7c:ee:75:f4:70:88:88:40:82:49:62:d5: 84:93:8a:0a:91:89:a6:8e:5f:79:5e:05:27:35:05:a8:8b:c6: 92:18:b8:13:42:3d:e3:9a:22:ed:85:a0:8c:05:9d:79:f1:4d: bb:f7:bb:38 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAk0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJCMEQxMTAvBgNVBAUTKDNFOTM1OERDRjJDNTNGNjYyMTA1MkIzQUE4NTI0NTRF MkZCMzFDMTgwHhcNMjYwNDE3MDIyMzQ5WhcNMjYwNDI0MDIyMzQ5WjAYMRYwFAYD VQQDEw02OWUxOTliNS0wMDgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv7xzszSrShuE+OjtBvoc6o1S0gbGEFWuEHEqY8RrzZNbc4EPPVsY9BIfBFsj LvelxerbDvwIH5KpwlI369um7RH4WbHKP68rExy46O69Pcu9U4xrGhxE4dVN4UUs IUOWEde6zt5SS1dY+JCArrsDjPvJcquqNwMASgy/wn+ZgMTK8V0fSn7EdDzYHJIn vhIhLoYw923NAMxNTiXEf2AYx5gQJ9Jq9VDEKtcMCgwb9T0VNJNMh6vma7L9pLoM SBu1qW7yFSnJURLnWzJHhzVDaGvBDyZaLRUF9UjI8QrSBN4DeqZ2PQM0Sznc5xUB Ho1XEckNNzYcJNUqMBq/WTACgQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNOtVhEr 26ScOmdyirLoVAA4llO9MB8GA1UdIwQYMBaAFD6TWNzyxT9mIQUrOqhSRU4vsxwY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkIwRC85MDlCNzlGMEU1 MkIxMUVEQjJFQjY1ODVDNEY5QUUwMi9QcE5ZM1BMRlAyWWhCU3M2cUZKRlRpLXpI QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BwTlkzUExGUDJZaEJTczZxRkpGVGktekhCZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkIwRC85MDlCNzlGMEU1MkIxMUVEQjJFQjY1ODVDNEY5QUUwMi9QcE5ZM1BMRlAy WWhCU3M2cUZKRlRpLXpIQmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFoqx3YMuIfyY7UZG+kXs6kGFeKbXozSwS+JfyjYv+BtkUfx3ybYrvcbdp/oi UlbAkj9WT7U/jd5kxLQiG7No4rCO6ZE9kVOlxmlFENnnipxm72HBzWD8cK1pjM5m l3H8mzZGtx3roEHGePCHc5IXqKwMJUOCE0O7zLdEB6dK1zEVp/yhgHbxueTaoB7i 6GxIO2lX4oBpZ+Sw5cLNNALlJzLontdoIMuR5OTiEIbjuDYcIHtGelDvVxm3OqcR IXlYISH8qLXgrQVUOK0hfO519HCIiECCSWLVhJOKCpGJpo5feV4FJzUFqIvGkhi4 E0I945oi7YWgjAWdefFNu/e7OA== -----END CERTIFICATE-----Generated at Fri Apr 17 13:58:10 2026 by rpki-client