$ rpki-client -vvf rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft File: Psg0IE1rqvmRQMA712IRRcB7umI.mft (raw, json) Hash identifier: YXG+p4FzX5viCVzGICuwGrNsr9sXWvmvNG5HkBj8rQY= Subject key identifier: 00:9D:0B:79:5D:D8:5F:48:3F:45:D9:B7:93:38:4A:C1:D0:6F:8E:00 Authority key identifier: 3E:C8:34:20:4D:6B:AA:F9:91:40:C0:3B:D7:62:11:45:C0:7B:BA:62 Certificate issuer: /CN=A9196D24/serialNumber=3EC834204D6BAAF99140C03BD7621145C07BBA62 Certificate serial: 354D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft Manifest number: 3538 Signing time: Thu 16 Apr 2026 15:07:03 +0000 Manifest this update: Thu 16 Apr 2026 15:07:03 +0000 Manifest next update: Thu 23 Apr 2026 15:07:03 +0000 Files and hashes: 1: Psg0IE1rqvmRQMA712IRRcB7umI.crl (hash: mmMxHvcdj09byxZeMBJ/AFAj3RStF90+nksdpyxGdgM=) 2: BC3EBE062E5B11F1A895088A9B833773.roa (hash: 7hRmAxI1zCBqDLioBHVfEw+Ax2fyJalt+hg/8ZM+HUQ=) 3: E73006AA682811EB8D635520C4F9AE02.roa (hash: bpfhYxtir2ry1hugzglFDH+ZPqZEnnOPHqDserf2jPs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.crl rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 15:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13645 (0x354d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196D24, serialNumber=3EC834204D6BAAF99140C03BD7621145C07BBA62 Validity Not Before: Apr 16 15:07:03 2026 GMT Not After : Apr 23 15:07:03 2026 GMT Subject: CN=69e0fb17-3cc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f8:ef:14:4c:62:41:85:4c:d7:ae:7c:73:fe: e1:96:16:42:b0:35:18:8c:39:3d:58:86:4c:43:02: 07:04:7d:aa:45:0e:c5:4e:4c:92:66:b6:60:03:05: cf:66:93:2e:40:a4:5c:00:5e:02:bb:26:59:6b:45: 8c:2b:2d:5d:c7:34:c9:bf:5a:1c:7c:ca:76:d2:b6: 49:27:79:b9:a9:f5:e4:5e:f7:16:31:76:f4:70:18: 6e:e5:f6:5e:51:d6:ea:70:12:9e:bf:11:f8:46:5c: dc:03:af:51:8b:29:db:62:fd:ec:c8:2f:44:87:7a: fe:80:95:d2:56:0d:a2:90:bc:0a:29:4f:2a:6c:10: f2:89:32:c1:03:f9:c1:aa:14:3a:cd:49:dc:33:84: 29:3c:bc:12:ea:f2:67:d7:08:c6:bc:4b:65:73:a5: 20:41:96:2c:9a:37:87:a6:52:00:ce:d9:73:98:da: 03:c6:6d:99:2a:43:14:ec:7a:de:63:68:41:d4:a2: cc:45:b4:b1:13:4a:f4:92:e8:74:4e:a4:2f:44:5e: de:2e:df:d0:ed:4b:ff:7d:c5:53:36:40:43:50:ee: 64:01:49:60:c7:08:a3:e8:f7:3e:1d:aa:85:b8:a2: a3:f3:47:16:9e:a7:fa:59:44:6e:0d:53:cf:7c:a7: 88:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:9D:0B:79:5D:D8:5F:48:3F:45:D9:B7:93:38:4A:C1:D0:6F:8E:00 X509v3 Authority Key Identifier: keyid:3E:C8:34:20:4D:6B:AA:F9:91:40:C0:3B:D7:62:11:45:C0:7B:BA:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:5f:bb:e9:e4:21:95:ff:36:c7:78:53:56:2d:5c:35:ff:e7: d3:32:6f:6c:b6:a3:22:f7:56:4f:4c:02:5a:6b:ff:58:41:60: 8b:91:b2:20:f2:77:20:d4:95:d1:2c:79:37:16:91:cb:ff:77: 80:3c:d6:c1:f6:3e:51:6a:cf:cb:77:d6:bf:9c:9f:72:6d:e5: 9b:7c:4e:b9:2f:8f:02:c4:41:c5:e5:49:dd:c1:31:af:24:e3: 3b:3d:28:50:ba:e7:0a:d4:a1:49:dc:76:84:2d:8d:44:f5:74: be:e9:67:72:59:63:56:75:9d:56:bc:54:78:62:24:87:92:d1: 6b:49:9e:db:e1:4d:3f:96:26:77:5d:26:9c:fd:55:dc:76:20: a8:bc:f7:7a:20:7a:1b:26:6b:1c:aa:f5:7e:bb:02:90:28:ad: 6d:45:06:aa:22:29:bd:7b:ca:c8:2a:b6:21:78:3b:11:c7:a1: 08:5c:90:a7:9f:cb:8a:c8:ce:b4:06:c1:ac:5e:1f:4e:9f:3f: e7:d7:a7:36:a0:a7:44:b6:6a:1c:c0:2f:70:07:2b:57:a4:5b: 53:4c:83:bf:45:12:b0:88:0a:e4:86:c2:9a:dd:c0:a3:b9:c6: e9:b0:9a:8c:33:ad:52:9e:fa:dd:27:79:f1:0f:1a:de:83:73: 54:05:65:38 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZEMjQxMTAvBgNVBAUTKDNFQzgzNDIwNEQ2QkFBRjk5MTQwQzAzQkQ3NjIxMTQ1 QzA3QkJBNjIwHhcNMjYwNDE2MTUwNzAzWhcNMjYwNDIzMTUwNzAzWjAYMRYwFAYD VQQDEw02OWUwZmIxNy0zY2MwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApfjvFExiQYVM1658c/7hlhZCsDUYjDk9WIZMQwIHBH2qRQ7FTkySZrZgAwXP ZpMuQKRcAF4CuyZZa0WMKy1dxzTJv1ocfMp20rZJJ3m5qfXkXvcWMXb0cBhu5fZe UdbqcBKevxH4RlzcA69RiynbYv3syC9Eh3r+gJXSVg2ikLwKKU8qbBDyiTLBA/nB qhQ6zUncM4QpPLwS6vJn1wjGvEtlc6UgQZYsmjeHplIAztlzmNoDxm2ZKkMU7Hre Y2hB1KLMRbSxE0r0kuh0TqQvRF7eLt/Q7Uv/fcVTNkBDUO5kAUlgxwij6Pc+HaqF uKKj80cWnqf6WURuDVPPfKeIpQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFACdC3ld 2F9IP0XZt5M4SsHQb44AMB8GA1UdIwQYMBaAFD7INCBNa6r5kUDAO9diEUXAe7pi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkQyNC81NTBFMjdGMjFE QTQxMUUyOEM1MzNCOUEwOEIwMkNEMi9Qc2cwSUUxcnF2bVJRTUE3MTJJUlJjQjd1 bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BzZzBJRTFycXZtUlFNQTcxMklSUmNCN3VtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkQyNC81NTBFMjdGMjFEQTQxMUUyOEM1MzNCOUEwOEIwMkNEMi9Qc2cwSUUxcnF2 bVJRTUE3MTJJUlJjQjd1bUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWV+76eQhlf82x3hTVi1cNf/n0zJvbLajIvdWT0wCWmv/WEFgi5GyIPJ3INSV 0Sx5NxaRy/93gDzWwfY+UWrPy3fWv5yfcm3lm3xOuS+PAsRBxeVJ3cExryTjOz0o ULrnCtShSdx2hC2NRPV0vulnclljVnWdVrxUeGIkh5LRa0me2+FNP5Ymd10mnP1V 3HYgqLz3eiB6GyZrHKr1frsCkCitbUUGqiIpvXvKyCq2IXg7EcehCFyQp5/LisjO tAbBrF4fTp8/59enNqCnRLZqHMAvcAcrV6RbU0yDv0USsIgK5IbCmt3Ao7nG6bCa jDOtUp763Sd58Q8a3oNzVAVlOA== -----END CERTIFICATE-----Generated at Sat Apr 18 01:07:03 2026 by rpki-client