$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B9D/4CF3B3702D1211F1BFC478F598EE528E/PDiOKfqhof7qOJefIG9GaK2oyJ4.mft File: PDiOKfqhof7qOJefIG9GaK2oyJ4.mft (raw, json) Hash identifier: TQTu1ZiN7Wlb24hVK8KX8BZRjKYtsot3Ryt+UOv6IGA= Subject key identifier: 73:F5:58:2E:1C:E8:B3:83:DC:ED:90:0C:6A:4A:2C:C7:84:D2:E0:43 Authority key identifier: 3C:38:8E:29:FA:A1:A1:FE:EA:38:97:9F:20:6F:46:68:AD:A8:C8:9E Certificate issuer: /CN=A91A4B9D/serialNumber=3C388E29FAA1A1FEEA38979F206F4668ADA8C89E Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PDiOKfqhof7qOJefIG9GaK2oyJ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4B9D/4CF3B3702D1211F1BFC478F598EE528E/PDiOKfqhof7qOJefIG9GaK2oyJ4.mft Manifest number: 27 Signing time: Fri 12 Jun 2026 15:00:17 +0000 Manifest this update: Fri 12 Jun 2026 15:00:17 +0000 Manifest next update: Fri 19 Jun 2026 15:00:17 +0000 Files and hashes: 1: PDiOKfqhof7qOJefIG9GaK2oyJ4.crl (hash: tkviTO/RYR0xFDoz7xOgN6boK2vKp1WygUmtTezw+gc=) 2: 1ECF684E387B11F1BDE8C228B8833773.roa (hash: S/Tt5Vr+xRIVcH8BCYMOSKSimexAoRp0itqrqHYRHlw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4B9D/4CF3B3702D1211F1BFC478F598EE528E/PDiOKfqhof7qOJefIG9GaK2oyJ4.crl rsync://rpki.apnic.net/member_repository/A91A4B9D/4CF3B3702D1211F1BFC478F598EE528E/PDiOKfqhof7qOJefIG9GaK2oyJ4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PDiOKfqhof7qOJefIG9GaK2oyJ4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 15:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4B9D, serialNumber=3C388E29FAA1A1FEEA38979F206F4668ADA8C89E Validity Not Before: Jun 12 15:00:17 2026 GMT Not After : Jun 19 15:00:17 2026 GMT Subject: CN=6a2c1f01-a526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d6:c7:64:fa:7a:24:be:d3:41:d6:29:b0:ca: 69:fe:c8:2a:b0:d4:35:36:40:54:d3:c4:63:57:71: 8d:30:e8:0f:0f:d6:95:2f:f5:a0:7f:e2:dd:26:54: aa:0f:62:09:bd:31:cc:42:01:24:75:6c:4e:51:9c: db:54:bc:2a:22:23:9d:a8:64:3c:1a:5c:9a:2a:bb: 58:b3:e1:10:c3:b8:42:13:7a:2f:db:a0:4b:50:41: 2a:ad:6b:6f:e1:8b:a2:03:04:2a:74:b6:25:df:62: ea:26:76:b5:47:52:46:99:98:18:75:b3:c1:2f:ef: 0b:d2:a5:97:82:1f:c3:3f:42:7e:b4:af:7a:0d:14: 6c:04:54:b3:5c:37:80:4b:56:ac:ef:d9:41:72:9d: 35:e6:d8:d4:e9:89:e8:2c:49:3b:86:08:e3:bf:06: 90:8f:05:3d:6f:35:d5:3b:d9:b1:9e:0a:83:e1:62: 9f:bb:dc:be:7e:e0:4e:44:24:1f:c7:48:5f:14:46: 25:e1:a2:3d:80:d3:85:87:ae:27:66:3b:ac:c4:9b: 61:15:ec:03:9b:05:14:5d:23:84:d9:de:e3:94:06: 07:07:74:f0:69:d1:34:65:8b:02:71:c9:df:ed:5b: 08:a3:06:74:ca:cc:93:50:2a:b8:66:e8:84:7d:9a: 49:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:F5:58:2E:1C:E8:B3:83:DC:ED:90:0C:6A:4A:2C:C7:84:D2:E0:43 X509v3 Authority Key Identifier: keyid:3C:38:8E:29:FA:A1:A1:FE:EA:38:97:9F:20:6F:46:68:AD:A8:C8:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4B9D/4CF3B3702D1211F1BFC478F598EE528E/PDiOKfqhof7qOJefIG9GaK2oyJ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PDiOKfqhof7qOJefIG9GaK2oyJ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B9D/4CF3B3702D1211F1BFC478F598EE528E/PDiOKfqhof7qOJefIG9GaK2oyJ4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:bf:d0:e2:a0:3b:d9:ae:2d:70:ed:57:f4:a1:a9:c6:4a:a7: d0:cd:f5:08:e2:21:c7:42:9c:23:e6:6b:5c:74:85:a8:50:4b: bc:c0:09:18:57:b0:20:8b:f0:5e:f6:30:4d:1c:a7:e4:13:17: 47:0f:46:39:61:d7:7a:d3:f1:e6:26:7a:41:67:6b:b0:7b:a0: 3d:de:46:f0:99:6b:6b:5a:e9:eb:a9:95:eb:7c:e2:58:b0:cf: e4:6f:94:96:a8:2e:52:d8:fa:8f:4c:fb:ba:92:22:c8:ea:a3: 6f:3b:05:c0:1a:56:68:5e:93:ca:65:56:20:05:66:58:2a:ca: be:ba:5c:37:f0:82:be:1c:bd:84:b3:ba:92:23:94:2b:78:e7: c9:3d:42:ee:a5:e9:e8:ef:73:a4:39:4f:58:bb:f5:2c:c6:5a: ff:ce:73:5c:98:d3:33:40:5d:6f:21:79:62:a0:8d:c5:b8:74: b3:b1:50:5c:9c:42:7d:1c:46:a8:4d:04:66:ce:64:da:c7:f5: 16:45:59:4b:9a:68:4c:d2:ee:d7:c4:34:c7:e1:06:1e:69:6c: 6d:2e:5e:77:fc:7c:40:76:45:bc:e6:5f:fa:d3:e0:58:83:3d: 91:12:ec:e2:ce:2e:ad:52:37:67:24:81:a3:b0:41:14:a5:dd: d0:2a:73:07 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NEI5RDExMC8GA1UEBRMoM0MzODhFMjlGQUExQTFGRUVBMzg5NzlGMjA2RjQ2NjhB REE4Qzg5RTAeFw0yNjA2MTIxNTAwMTdaFw0yNjA2MTkxNTAwMTdaMBgxFjAUBgNV BAMTDTZhMmMxZjAxLWE1MjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCe1sdk+nokvtNB1imwymn+yCqw1DU2QFTTxGNXcY0w6A8P1pUv9aB/4t0mVKoP Ygm9McxCASR1bE5RnNtUvCoiI52oZDwaXJoqu1iz4RDDuEITei/boEtQQSqta2/h i6IDBCp0tiXfYuomdrVHUkaZmBh1s8Ev7wvSpZeCH8M/Qn60r3oNFGwEVLNcN4BL Vqzv2UFynTXm2NTpiegsSTuGCOO/BpCPBT1vNdU72bGeCoPhYp+73L5+4E5EJB/H SF8URiXhoj2A04WHridmO6zEm2EV7AObBRRdI4TZ3uOUBgcHdPBp0TRliwJxyd/t WwijBnTKzJNQKrhm6IR9mkldAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUc/VYLhzo s4Pc7ZAMakosx4TS4EMwHwYDVR0jBBgwFoAUPDiOKfqhof7qOJefIG9GaK2oyJ4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0QjlELzRDRjNCMzcwMkQx MjExRjFCRkM0NzhGNTk4RUU1MjhFL1BEaU9LZnFob2Y3cU9KZWZJRzlHYUsyb3lK NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUERpT0tmcWhvZjdxT0plZklHOUdhSzJveUo0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0 QjlELzRDRjNCMzcwMkQxMjExRjFCRkM0NzhGNTk4RUU1MjhFL1BEaU9LZnFob2Y3 cU9KZWZJRzlHYUsyb3lKNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAwv9DioDvZri1w7Vf0oanGSqfQzfUI4iHHQpwj5mtcdIWoUEu8wAkYV7Agi/Be 9jBNHKfkExdHD0Y5Ydd60/HmJnpBZ2uwe6A93kbwmWtrWunrqZXrfOJYsM/kb5SW qC5S2PqPTPu6kiLI6qNvOwXAGlZoXpPKZVYgBWZYKsq+ulw38IK+HL2Es7qSI5Qr eOfJPULupeno73OkOU9Yu/Usxlr/znNcmNMzQF1vIXlioI3FuHSzsVBcnEJ9HEao TQRmzmTax/UWRVlLmmhM0u7XxDTH4QYeaWxtLl53/HxAdkW85l/60+BYgz2REuzi zi6tUjdnJIGjsEEUpd3QKnMH -----END CERTIFICATE-----Generated at Sat Jun 13 14:28:24 2026 by rpki-client