$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft File: PfG7945KTnVEGahIyf0My9LmpFg.mft (raw, json) Hash identifier: LlVoBdfAb8h+XgfHShK3Vjlzpfdtoem5hY+ShMw+51Y= Subject key identifier: A1:AF:90:72:81:AC:59:18:7A:66:F2:8A:3F:3B:A3:9A:22:3A:D9:F0 Authority key identifier: 3D:F1:BB:F7:8E:4A:4E:75:44:19:A8:48:C9:FD:0C:CB:D2:E6:A4:58 Certificate issuer: /CN=A91C1052/serialNumber=3DF1BBF78E4A4E754419A848C9FD0CCBD2E6A458 Certificate serial: 0268 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfG7945KTnVEGahIyf0My9LmpFg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft Manifest number: 025F Signing time: Mon 02 Mar 2026 01:01:21 +0000 Manifest this update: Mon 02 Mar 2026 01:01:18 +0000 Manifest next update: Mon 09 Mar 2026 01:01:18 +0000 Files and hashes: 1: PfG7945KTnVEGahIyf0My9LmpFg.crl (hash: /qjrhDPtl9x7PuKCJzaAThMNIA+T1HyDio58pUZZrbM=) 2: D6E2AAC0772911ED95084884C4F9AE02.roa (hash: cj6biBNtaUtX7+44SxYYBzzhO476/vbaxRtf96Tl68E=) 3: 74A3C1988E8311ED903ADA1CC4F9AE02.roa (hash: 0Ty6Wy83nXEuGUo3EX3HWpgQzq88t3uK3cVK224snpU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.crl rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfG7945KTnVEGahIyf0My9LmpFg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 616 (0x268) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1052, serialNumber=3DF1BBF78E4A4E754419A848C9FD0CCBD2E6A458 Validity Not Before: Mar 2 01:01:18 2026 GMT Not After : Mar 9 01:01:18 2026 GMT Subject: CN=69a4e160-fb4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:55:aa:e4:f4:31:f5:b2:b9:f8:61:32:57:c5: 1a:56:d7:e6:91:7f:20:b7:6a:07:cd:01:c5:57:a5: b7:93:2f:ab:60:fc:8a:e0:b4:9e:05:2b:d4:ec:9a: 32:35:4e:55:8d:fd:08:a7:59:ac:f3:ce:3c:6d:2d: da:a9:ff:98:ad:5f:28:6e:1d:56:65:8b:fc:bd:e1: 59:df:c4:d6:19:ac:39:d1:7f:54:25:31:3a:a8:3c: 50:4d:42:45:39:e4:ff:ff:72:e7:0e:6e:8a:b0:79: 93:30:83:70:6a:d5:fa:c2:0f:eb:b6:3c:3d:41:7f: 40:e0:fa:6c:8d:f7:d9:94:0d:c2:1e:86:af:9a:6f: 36:fb:62:2f:dc:18:9b:07:8a:9e:4f:0a:18:b5:57: cb:67:b7:99:43:71:db:b3:dd:c7:55:c7:d5:ed:d8: ba:4c:97:71:1b:2d:4c:f9:4b:50:0c:16:ec:98:d0: 96:07:23:d2:04:c9:44:5d:91:6e:fe:3c:66:b9:e6: e6:88:6a:be:8c:5a:d1:f5:5a:7d:2e:fc:c2:34:f8: ab:e0:0d:9b:82:70:70:e1:9f:38:20:3f:71:3a:db: 97:91:26:28:5f:28:08:a0:26:aa:d6:f8:de:80:a5: bf:aa:5b:71:ad:1a:c9:72:bd:76:f6:07:06:04:20: d3:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:AF:90:72:81:AC:59:18:7A:66:F2:8A:3F:3B:A3:9A:22:3A:D9:F0 X509v3 Authority Key Identifier: keyid:3D:F1:BB:F7:8E:4A:4E:75:44:19:A8:48:C9:FD:0C:CB:D2:E6:A4:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfG7945KTnVEGahIyf0My9LmpFg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:75:f8:55:ed:5e:6f:f5:16:69:eb:75:2b:59:ab:4a:08:97: 52:de:15:7c:d9:e1:0c:19:32:e3:e6:7b:c1:17:78:48:35:b0: 93:37:36:14:e2:2b:3a:bc:4e:31:03:d2:a2:6a:f1:6d:d4:31: 8b:3b:31:9a:84:31:2c:df:49:82:d7:6e:24:29:48:3d:c2:0c: 81:59:3a:91:e7:78:63:cc:87:22:2b:c5:dc:0e:de:20:95:84: 15:53:2f:e9:15:ed:eb:a2:38:fd:a1:19:99:e2:b3:b8:c9:19: 00:a9:97:31:ac:0f:43:fd:c5:c4:16:2e:4b:9e:c9:33:5f:1d: a1:a1:d3:95:f0:29:df:63:ec:2a:c6:af:73:f6:f6:67:df:45: 94:ae:d8:d0:2b:b2:86:57:dc:0c:b2:87:b3:7f:5a:01:98:81: 82:2c:6a:1c:2e:42:0a:9a:73:30:25:b8:fc:18:80:4a:df:25: 75:26:37:e4:08:57:40:d6:6b:05:37:25:8e:4e:d8:f2:68:37: 2c:77:e3:82:d8:10:36:81:fe:6c:4e:11:43:89:32:fd:b3:c8: ee:dc:10:13:8b:f3:86:47:9c:87:5c:9d:9f:8c:76:67:b4:cb: 75:83:71:ba:c9:60:4d:20:ee:f1:78:17:d9:a1:a0:77:31:5e: 94:b2:07:8f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAmgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzEwNTIxMTAvBgNVBAUTKDNERjFCQkY3OEU0QTRFNzU0NDE5QTg0OEM5RkQwQ0NC RDJFNkE0NTgwHhcNMjYwMzAyMDEwMTE4WhcNMjYwMzA5MDEwMTE4WjAYMRYwFAYD VQQDEw02OWE0ZTE2MC1mYjRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnlWq5PQx9bK5+GEyV8UaVtfmkX8gt2oHzQHFV6W3ky+rYPyK4LSeBSvU7Joy NU5Vjf0Ip1ms8848bS3aqf+YrV8obh1WZYv8veFZ38TWGaw50X9UJTE6qDxQTUJF OeT//3LnDm6KsHmTMINwatX6wg/rtjw9QX9A4PpsjffZlA3CHoavmm82+2Iv3Bib B4qeTwoYtVfLZ7eZQ3Hbs93HVcfV7di6TJdxGy1M+UtQDBbsmNCWByPSBMlEXZFu /jxmuebmiGq+jFrR9Vp9LvzCNPir4A2bgnBw4Z84ID9xOtuXkSYoXygIoCaq1vje gKW/qltxrRrJcr129gcGBCDT8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKGvkHKB rFkYembyij87o5oiOtnwMB8GA1UdIwQYMBaAFD3xu/eOSk51RBmoSMn9DMvS5qRY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTA1Mi84MDZGQjI3Njc3 MjYxMUVEODZEMDk2ODBDNEY5QUUwMi9QZkc3OTQ1S1RuVkVHYWhJeWYwTXk5TG1w RmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BmRzc5NDVLVG5WRUdhaEl5ZjBNeTlMbXBGZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTA1Mi84MDZGQjI3Njc3MjYxMUVEODZEMDk2ODBDNEY5QUUwMi9QZkc3OTQ1S1Ru VkVHYWhJeWYwTXk5TG1wRmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXXX4Ve1eb/UWaet1K1mrSgiXUt4VfNnhDBky4+Z7wRd4SDWwkzc2FOIrOrxO MQPSomrxbdQxizsxmoQxLN9JgtduJClIPcIMgVk6ked4Y8yHIivF3A7eIJWEFVMv 6RXt66I4/aEZmeKzuMkZAKmXMawPQ/3FxBYuS57JM18doaHTlfAp32PsKsavc/b2 Z99FlK7Y0CuyhlfcDLKHs39aAZiBgixqHC5CCppzMCW4/BiASt8ldSY35AhXQNZr BTcljk7Y8mg3LHfjgtgQNoH+bE4RQ4ky/bPI7twQE4vzhkech1ydn4x2Z7TLdYNx uslgTSDu8XgX2aGgdzFelLIHjw== -----END CERTIFICATE-----Generated at Mon Mar 2 04:03:56 2026 by rpki-client