$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.mft File: PUfmaHu030DFGwOkVZwQyiL2dy8.mft (raw, json) Hash identifier: RNV9l2PqmM0xqvwLDjhlHV5k0SH4NfNQzKYt6dqjIeQ= Subject key identifier: 14:64:17:42:1C:AE:49:40:EB:FB:E0:2B:A0:12:EC:13:DC:43:C0:28 Authority key identifier: 3D:47:E6:68:7B:B4:DF:40:C5:1B:03:A4:55:9C:10:CA:22:F6:77:2F Certificate issuer: /CN=A91AA5C6/serialNumber=3D47E6687BB4DF40C51B03A4559C10CA22F6772F Certificate serial: 01F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUfmaHu030DFGwOkVZwQyiL2dy8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.mft Manifest number: 01DE Signing time: Mon 02 Mar 2026 01:26:21 +0000 Manifest this update: Mon 02 Mar 2026 01:26:19 +0000 Manifest next update: Mon 09 Mar 2026 01:26:19 +0000 Files and hashes: 1: PUfmaHu030DFGwOkVZwQyiL2dy8.crl (hash: tgB68tKcUFUQCJb2DOO3aMj8piJwkAaohB86PIu1Osk=) 2: EA1E8B8A51C711EE9A3CC954C4F9AE02.roa (hash: G97KXaER8oHFpVxJ9Nr+pWkbaSoOX+AJP+0tU8j2jBg=) 3: FAA2E3324C3811EEB7116433C4F9AE02.roa (hash: lY4zHcYM+OKzlDFbmIejzsChBG9D4T2+3+SOYmgyPIs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.crl rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUfmaHu030DFGwOkVZwQyiL2dy8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:26:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 498 (0x1f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA5C6, serialNumber=3D47E6687BB4DF40C51B03A4559C10CA22F6772F Validity Not Before: Mar 2 01:26:19 2026 GMT Not After : Mar 9 01:26:19 2026 GMT Subject: CN=69a4e73c-277e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:2f:ac:7a:e7:27:19:9d:74:c6:e5:d7:64:3e: eb:f2:a2:0d:24:7e:81:49:04:51:68:15:8d:ea:ab: 55:b1:f6:61:c0:e9:c9:e2:8a:3b:13:0a:4f:42:d0: 21:40:52:42:68:89:df:51:c1:fc:e1:c2:37:a9:d4: 4c:7b:bb:51:ca:84:59:a4:a9:15:f4:4c:db:51:ab: 3d:fc:0b:fa:a6:18:85:d2:44:3f:90:25:b4:7c:c8: 62:c5:5c:7a:b4:b7:bd:bb:c4:99:b3:ab:5e:7c:62: 98:06:1c:09:f1:86:44:43:7c:f7:27:2e:f2:26:64: d7:e5:c2:6e:be:77:90:80:80:21:f8:30:80:df:4a: 68:3a:f8:07:57:9c:ed:cf:66:52:1e:2b:50:32:66: 56:ff:77:4a:07:92:06:fc:8a:1a:28:db:2c:08:08: 12:3c:e8:65:4e:4c:22:ec:e4:b7:cd:0a:0a:51:c8: 3b:66:d7:52:e6:a4:6b:75:f1:cd:1c:b8:d8:3c:e6: 77:a2:cb:81:7c:a3:4e:c6:67:96:c6:b0:46:2e:8f: 3e:b5:ed:78:c8:ae:19:07:37:b4:3c:d7:ca:a9:52: ca:0e:b8:d6:32:c5:6e:2e:a9:4d:57:a4:27:6a:86: 1b:86:1c:e8:e7:92:20:91:4d:a2:2e:91:74:09:ea: 9d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:64:17:42:1C:AE:49:40:EB:FB:E0:2B:A0:12:EC:13:DC:43:C0:28 X509v3 Authority Key Identifier: keyid:3D:47:E6:68:7B:B4:DF:40:C5:1B:03:A4:55:9C:10:CA:22:F6:77:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUfmaHu030DFGwOkVZwQyiL2dy8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:8a:d1:04:c9:af:92:33:3b:7e:a8:7f:8c:4e:b4:c2:ea:99: e4:b5:1c:d8:02:e5:73:a3:5a:22:91:29:9e:bf:31:03:63:bc: d4:70:47:5e:12:18:20:09:8d:99:dc:54:97:f2:fb:af:f5:81: 6b:96:de:2d:43:40:e9:be:82:a9:30:b6:8e:2a:54:e0:6b:31: a8:26:e1:e0:d5:04:cd:98:09:fa:28:07:6b:65:8a:6b:66:9d: a7:81:de:02:b5:a5:1a:90:a5:36:4c:5f:8e:81:5a:e1:e9:c6: 01:53:41:d6:1f:d2:a0:68:c2:0b:19:1c:82:72:b1:d6:88:1e: 90:ed:79:96:a1:f9:90:33:4e:3d:0d:61:89:55:b7:0c:5b:6c: 94:49:5f:50:a1:1b:c8:d3:51:e4:74:a4:f5:73:86:03:44:6a: df:63:f9:a3:c8:5a:9e:61:e0:39:cc:f7:24:a1:cc:8d:b0:78: 5a:b4:ed:15:58:ca:2a:94:8d:e3:2c:c3:0d:70:86:4a:78:65: 5a:ef:33:5b:8f:e8:bc:82:9c:e4:74:40:da:b5:36:0e:0c:1b: 5a:73:ca:d4:e6:0c:ab:c7:ac:83:bf:fb:c6:08:47:33:20:ce: f5:15:47:88:8f:20:8a:66:81:3e:e9:e6:aa:a1:1e:c1:1a:6f: 36:9c:20:26 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE1QzYxMTAvBgNVBAUTKDNENDdFNjY4N0JCNERGNDBDNTFCMDNBNDU1OUMxMENB MjJGNjc3MkYwHhcNMjYwMzAyMDEyNjE5WhcNMjYwMzA5MDEyNjE5WjAYMRYwFAYD VQQDEw02OWE0ZTczYy0yNzdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3y+seucnGZ10xuXXZD7r8qINJH6BSQRRaBWN6qtVsfZhwOnJ4oo7EwpPQtAh QFJCaInfUcH84cI3qdRMe7tRyoRZpKkV9EzbUas9/Av6phiF0kQ/kCW0fMhixVx6 tLe9u8SZs6tefGKYBhwJ8YZEQ3z3Jy7yJmTX5cJuvneQgIAh+DCA30poOvgHV5zt z2ZSHitQMmZW/3dKB5IG/IoaKNssCAgSPOhlTkwi7OS3zQoKUcg7ZtdS5qRrdfHN HLjYPOZ3osuBfKNOxmeWxrBGLo8+te14yK4ZBze0PNfKqVLKDrjWMsVuLqlNV6Qn aoYbhhzo55IgkU2iLpF0CeqdfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBRkF0Ic rklA6/vgK6AS7BPcQ8AoMB8GA1UdIwQYMBaAFD1H5mh7tN9AxRsDpFWcEMoi9ncv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTVDNi9ENTU1MTlCNDRD MzQxMUVFQUVFREEyMkNDNEY5QUUwMi9QVWZtYUh1MDMwREZHd09rVlp3UXlpTDJk eTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BVZm1hSHUwMzBERkd3T2tWWndReWlMMmR5OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTVDNi9ENTU1MTlCNDRDMzQxMUVFQUVFREEyMkNDNEY5QUUwMi9QVWZtYUh1MDMw REZHd09rVlp3UXlpTDJkeTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAC4rRBMmvkjM7fqh/jE60wuqZ5LUc2ALlc6NaIpEpnr8xA2O81HBHXhIYIAmN mdxUl/L7r/WBa5beLUNA6b6CqTC2jipU4GsxqCbh4NUEzZgJ+igHa2WKa2adp4He ArWlGpClNkxfjoFa4enGAVNB1h/SoGjCCxkcgnKx1ogekO15lqH5kDNOPQ1hiVW3 DFtslElfUKEbyNNR5HSk9XOGA0Rq32P5o8hanmHgOcz3JKHMjbB4WrTtFVjKKpSN 4yzDDXCGSnhlWu8zW4/ovIKc5HRA2rU2DgwbWnPK1OYMq8esg7/7xghHMyDO9RVH iI8gimaBPunmqqEewRpvNpwgJg== -----END CERTIFICATE-----Generated at Mon Mar 2 05:59:14 2026 by rpki-client