$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B9D/4CF3B3702D1211F1BFC478F598EE528E/PDiOKfqhof7qOJefIG9GaK2oyJ4.mft File: PDiOKfqhof7qOJefIG9GaK2oyJ4.mft (raw, json) Hash identifier: 2GV9XbgbQPDmV6hOqcC5Rcr6XmV3YmwfOvBWbM0c2FQ= Subject key identifier: 4A:1B:B5:5A:2B:7B:08:3C:38:65:6D:0A:68:9F:C4:92:BD:C1:6E:91 Authority key identifier: 3C:38:8E:29:FA:A1:A1:FE:EA:38:97:9F:20:6F:46:68:AD:A8:C8:9E Certificate issuer: /CN=A91A4B9D/serialNumber=3C388E29FAA1A1FEEA38979F206F4668ADA8C89E Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PDiOKfqhof7qOJefIG9GaK2oyJ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4B9D/4CF3B3702D1211F1BFC478F598EE528E/PDiOKfqhof7qOJefIG9GaK2oyJ4.mft Manifest number: 0A Signing time: Thu 16 Apr 2026 14:59:56 +0000 Manifest this update: Thu 16 Apr 2026 14:59:55 +0000 Manifest next update: Thu 23 Apr 2026 14:59:55 +0000 Files and hashes: 1: PDiOKfqhof7qOJefIG9GaK2oyJ4.crl (hash: POacAwCEdJFpxF31ctYBBaFj925ez4S7cU1dtEKGIWs=) 2: 1ECF684E387B11F1BDE8C228B8833773.roa (hash: S/Tt5Vr+xRIVcH8BCYMOSKSimexAoRp0itqrqHYRHlw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4B9D/4CF3B3702D1211F1BFC478F598EE528E/PDiOKfqhof7qOJefIG9GaK2oyJ4.crl rsync://rpki.apnic.net/member_repository/A91A4B9D/4CF3B3702D1211F1BFC478F598EE528E/PDiOKfqhof7qOJefIG9GaK2oyJ4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PDiOKfqhof7qOJefIG9GaK2oyJ4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 14:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4B9D, serialNumber=3C388E29FAA1A1FEEA38979F206F4668ADA8C89E Validity Not Before: Apr 16 14:59:55 2026 GMT Not After : Apr 23 14:59:55 2026 GMT Subject: CN=69e0f96c-d8f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:27:8b:a6:9d:a4:e6:34:16:b0:f1:64:e9:bb: 5a:4c:e5:0f:c5:94:1c:1e:65:a1:2e:f0:5b:26:d0: 1b:c0:e6:3b:1f:97:18:c3:b2:3d:12:20:b7:d0:d1: ec:a4:01:61:1e:9d:3a:f8:c3:07:09:87:6d:21:5f: 20:06:d5:d4:7d:b7:19:8e:dc:45:ff:6a:2b:46:a3: 35:38:61:c1:fc:47:a5:5a:2f:94:08:05:ce:ce:79: b8:a0:2f:f1:d6:8a:26:02:b7:88:ca:17:52:94:dc: 80:8e:2b:13:5c:c1:74:46:38:a9:5c:cf:19:89:e0: d9:ac:d6:47:a1:5f:00:1b:09:4c:d8:a4:52:30:98: 84:37:39:cf:96:bf:43:e5:e2:a6:04:15:8a:89:d6: 74:8f:0b:a6:99:27:74:af:cc:d3:09:91:d3:a0:e0: 08:8f:55:9c:f4:4e:1e:3c:8f:3c:5a:84:e2:29:9e: ff:27:5f:d9:fb:36:60:84:e1:0d:72:35:5e:17:56: 2b:ea:53:02:f6:c8:23:f0:7c:a0:3b:b9:8c:1a:a1: 2c:5f:ac:99:a7:9a:b0:da:75:96:68:af:e3:0a:ae: 07:1a:c8:13:94:9c:4f:78:c8:cb:d7:33:61:2b:81: 93:45:22:28:be:48:53:fe:1e:b7:dc:4f:3c:0f:86: ef:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:1B:B5:5A:2B:7B:08:3C:38:65:6D:0A:68:9F:C4:92:BD:C1:6E:91 X509v3 Authority Key Identifier: keyid:3C:38:8E:29:FA:A1:A1:FE:EA:38:97:9F:20:6F:46:68:AD:A8:C8:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4B9D/4CF3B3702D1211F1BFC478F598EE528E/PDiOKfqhof7qOJefIG9GaK2oyJ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PDiOKfqhof7qOJefIG9GaK2oyJ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B9D/4CF3B3702D1211F1BFC478F598EE528E/PDiOKfqhof7qOJefIG9GaK2oyJ4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:23:d5:dc:3e:6d:1b:f1:38:1e:1b:75:57:4c:64:30:5e:78: 8b:95:4c:51:0f:e8:9e:12:9b:64:5f:36:76:3d:5d:b3:d9:55: 2f:98:83:6b:a6:dd:dd:dd:34:79:30:e1:6c:7e:f5:ea:69:91: f6:a0:96:2f:bc:cd:29:be:b7:0f:3e:5e:e1:e0:b0:36:6e:cc: 92:49:81:35:47:03:73:b3:69:65:1b:7a:14:c9:34:da:59:2c: 6e:c3:3d:46:e1:ba:41:f2:76:ee:ad:50:2c:d3:28:30:c6:d1: 19:91:e3:49:9a:d9:50:d4:e9:e2:1e:8d:01:a1:b2:d2:ab:4b: 86:04:0b:cc:6c:06:82:34:2a:74:e7:82:9b:93:6a:0a:60:b4: 38:37:1a:0a:bf:95:80:ac:bc:dc:33:3e:2c:86:79:2f:1d:5f: 1f:4a:7f:79:a1:b3:d8:59:c8:8f:81:55:97:9c:91:c8:b3:8a: 0b:6a:61:3d:62:d7:4e:d7:1e:62:17:d4:35:52:fe:27:1a:23: 76:6d:50:4a:e4:79:aa:d7:6a:7f:64:d7:6e:fd:82:47:ce:d4: 00:6d:0c:c0:00:b3:9f:98:4b:e4:3c:d3:d5:bf:d9:9c:d1:59: 3e:1f:7e:0f:4c:79:e9:6e:07:5a:af:62:03:3d:fc:03:53:00: f7:d5:d6:3a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NEI5RDExMC8GA1UEBRMoM0MzODhFMjlGQUExQTFGRUVBMzg5NzlGMjA2RjQ2NjhB REE4Qzg5RTAeFw0yNjA0MTYxNDU5NTVaFw0yNjA0MjMxNDU5NTVaMBgxFjAUBgNV BAMTDTY5ZTBmOTZjLWQ4ZjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDqJ4umnaTmNBaw8WTpu1pM5Q/FlBweZaEu8Fsm0BvA5jsflxjDsj0SILfQ0eyk AWEenTr4wwcJh20hXyAG1dR9txmO3EX/aitGozU4YcH8R6VaL5QIBc7OebigL/HW iiYCt4jKF1KU3ICOKxNcwXRGOKlczxmJ4Nms1kehXwAbCUzYpFIwmIQ3Oc+Wv0Pl 4qYEFYqJ1nSPC6aZJ3SvzNMJkdOg4AiPVZz0Th48jzxahOIpnv8nX9n7NmCE4Q1y NV4XVivqUwL2yCPwfKA7uYwaoSxfrJmnmrDadZZor+MKrgcayBOUnE94yMvXM2Er gZNFIii+SFP+HrfcTzwPhu8/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUShu1Wit7 CDw4ZW0KaJ/Ekr3BbpEwHwYDVR0jBBgwFoAUPDiOKfqhof7qOJefIG9GaK2oyJ4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0QjlELzRDRjNCMzcwMkQx MjExRjFCRkM0NzhGNTk4RUU1MjhFL1BEaU9LZnFob2Y3cU9KZWZJRzlHYUsyb3lK NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUERpT0tmcWhvZjdxT0plZklHOUdhSzJveUo0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0 QjlELzRDRjNCMzcwMkQxMjExRjFCRkM0NzhGNTk4RUU1MjhFL1BEaU9LZnFob2Y3 cU9KZWZJRzlHYUsyb3lKNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAmI9XcPm0b8TgeG3VXTGQwXniLlUxRD+ieEptkXzZ2PV2z2VUvmINrpt3d3TR5 MOFsfvXqaZH2oJYvvM0pvrcPPl7h4LA2bsySSYE1RwNzs2llG3oUyTTaWSxuwz1G 4bpB8nburVAs0ygwxtEZkeNJmtlQ1OniHo0BobLSq0uGBAvMbAaCNCp054Kbk2oK YLQ4NxoKv5WArLzcMz4shnkvHV8fSn95obPYWciPgVWXnJHIs4oLamE9YtdO1x5i F9Q1Uv4nGiN2bVBK5Hmq12p/ZNdu/YJHztQAbQzAALOfmEvkPNPVv9mc0Vk+H34P THnpbgdar2IDPfwDUwD31dY6 -----END CERTIFICATE-----Generated at Fri Apr 17 03:06:58 2026 by rpki-client