$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft File: PfG7945KTnVEGahIyf0My9LmpFg.mft (raw, json) Hash identifier: wVejhPBoQHg5y+lap3A1tDTJ00dFFJIZFdEL5x9Ud3E= Subject key identifier: C5:74:5B:84:43:CC:2B:A8:80:48:B8:09:3A:2B:C6:85:C4:34:A9:E0 Authority key identifier: 3D:F1:BB:F7:8E:4A:4E:75:44:19:A8:48:C9:FD:0C:CB:D2:E6:A4:58 Certificate issuer: /CN=A91C1052/serialNumber=3DF1BBF78E4A4E754419A848C9FD0CCBD2E6A458 Certificate serial: 0285 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfG7945KTnVEGahIyf0My9LmpFg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft Manifest number: 0278 Signing time: Fri 17 Apr 2026 01:44:59 +0000 Manifest this update: Fri 17 Apr 2026 01:44:58 +0000 Manifest next update: Fri 24 Apr 2026 01:44:58 +0000 Files and hashes: 1: PfG7945KTnVEGahIyf0My9LmpFg.crl (hash: yfHTdjrHPUvZJ+iNp+ugarp0uR/gx0+2Cx4GSEfUcto=) 2: 74A3C1988E8311ED903ADA1CC4F9AE02.roa (hash: +nejaKv7xuZCKQJRBEYk2kIxhLSRjN7BLyKcA9G8qXE=) 3: D6E2AAC0772911ED95084884C4F9AE02.roa (hash: 9uMRdpoWckw3Fu7tp6GE6C4ygIb26UeNoRv4LKPo7V0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.crl rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfG7945KTnVEGahIyf0My9LmpFg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:44:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 645 (0x285) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1052, serialNumber=3DF1BBF78E4A4E754419A848C9FD0CCBD2E6A458 Validity Not Before: Apr 17 01:44:58 2026 GMT Not After : Apr 24 01:44:58 2026 GMT Subject: CN=69e1909b-fae6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d9:26:f9:2f:6b:fc:4e:e5:00:7d:f9:82:cf: 1a:74:6b:f9:26:45:d2:f2:95:b0:a4:6a:0d:9b:67: 14:e8:a8:01:df:3f:95:32:b2:03:3a:a5:07:05:64: 60:de:7a:b8:17:9b:ef:0f:d5:1e:41:0f:79:be:ec: 1f:7f:d9:69:a2:2d:d4:e4:2c:3d:02:74:76:15:19: b1:95:cd:dd:2a:a5:4b:7e:3d:66:88:b8:0f:c4:10: bf:7e:f4:81:23:cc:b3:40:ed:85:76:76:b3:6a:e7: 4e:5d:7f:2c:09:15:c4:96:23:29:b7:d1:ea:63:d5: 63:d5:02:0c:61:f5:52:cb:64:15:8c:63:3f:a3:cb: c1:44:11:f7:a1:63:59:ff:96:33:9b:0b:bf:9a:00: 3f:6e:5e:35:ba:13:ca:2c:7a:48:57:51:96:a9:f0: ef:da:c7:53:95:fe:d9:53:68:0a:c5:b3:91:d5:24: 59:26:7b:df:61:7d:e1:97:f2:80:e3:bf:9f:50:ac: fe:db:9e:59:09:79:e5:72:ee:50:c2:ee:4c:7b:f7: 5f:69:a4:fa:dc:74:42:42:9d:06:71:a3:50:ed:da: f5:16:37:b9:96:9e:50:f2:0c:ac:1c:af:14:72:95: dc:3c:ab:8f:92:13:53:75:ab:49:51:df:db:d3:27: 02:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:74:5B:84:43:CC:2B:A8:80:48:B8:09:3A:2B:C6:85:C4:34:A9:E0 X509v3 Authority Key Identifier: keyid:3D:F1:BB:F7:8E:4A:4E:75:44:19:A8:48:C9:FD:0C:CB:D2:E6:A4:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfG7945KTnVEGahIyf0My9LmpFg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:ac:55:68:5d:ad:9c:18:87:79:3c:c7:d4:b2:dd:29:84:d7: 52:c2:a8:03:00:86:d5:97:30:ab:d4:ca:b6:51:8f:dd:1f:74: 2d:d8:64:50:9d:dd:d9:2c:f5:aa:b4:62:98:4e:75:78:d6:f7: 84:98:7d:35:fe:5f:9c:ad:14:a9:93:f0:62:57:b7:79:b8:46: 4d:01:21:a6:95:9b:b0:e3:c0:b3:8d:2b:0c:82:7e:26:06:51: fe:0d:8e:89:13:7b:a9:e3:b8:a2:dd:ba:18:08:92:ff:15:69: 14:98:1b:48:3e:f7:6d:61:1b:42:f3:a4:85:d7:91:98:c6:03: 83:10:51:c5:e7:91:b3:cc:12:d0:bd:63:6f:b1:e2:74:bb:96: 83:5d:f0:38:4c:bf:35:13:ce:23:89:dd:e5:f8:09:df:eb:a7: 6d:e1:21:92:ed:f7:9b:ab:09:a6:91:1a:00:c5:5d:00:60:73: 26:26:89:9e:8e:99:93:50:23:3d:26:ee:22:f1:19:d4:04:93: 27:37:86:53:09:08:3f:cf:a5:fc:fd:90:21:c0:70:04:4d:6d: f0:f0:4e:07:a5:aa:77:ee:c9:74:60:48:82:f0:41:e0:a6:39: c1:c9:eb:3b:22:3c:74:28:6d:0d:30:9d:46:3b:88:f5:d8:a8: a0:fc:d5:74 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzEwNTIxMTAvBgNVBAUTKDNERjFCQkY3OEU0QTRFNzU0NDE5QTg0OEM5RkQwQ0NC RDJFNkE0NTgwHhcNMjYwNDE3MDE0NDU4WhcNMjYwNDI0MDE0NDU4WjAYMRYwFAYD VQQDEw02OWUxOTA5Yi1mYWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsNkm+S9r/E7lAH35gs8adGv5JkXS8pWwpGoNm2cU6KgB3z+VMrIDOqUHBWRg 3nq4F5vvD9UeQQ95vuwff9lpoi3U5Cw9AnR2FRmxlc3dKqVLfj1miLgPxBC/fvSB I8yzQO2FdnazaudOXX8sCRXEliMpt9HqY9Vj1QIMYfVSy2QVjGM/o8vBRBH3oWNZ /5Yzmwu/mgA/bl41uhPKLHpIV1GWqfDv2sdTlf7ZU2gKxbOR1SRZJnvfYX3hl/KA 47+fUKz+255ZCXnlcu5Qwu5Me/dfaaT63HRCQp0GcaNQ7dr1Fje5lp5Q8gysHK8U cpXcPKuPkhNTdatJUd/b0ycC8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMV0W4RD zCuogEi4CTorxoXENKngMB8GA1UdIwQYMBaAFD3xu/eOSk51RBmoSMn9DMvS5qRY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTA1Mi84MDZGQjI3Njc3 MjYxMUVEODZEMDk2ODBDNEY5QUUwMi9QZkc3OTQ1S1RuVkVHYWhJeWYwTXk5TG1w RmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BmRzc5NDVLVG5WRUdhaEl5ZjBNeTlMbXBGZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTA1Mi84MDZGQjI3Njc3MjYxMUVEODZEMDk2ODBDNEY5QUUwMi9QZkc3OTQ1S1Ru VkVHYWhJeWYwTXk5TG1wRmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiqxVaF2tnBiHeTzH1LLdKYTXUsKoAwCG1Zcwq9TKtlGP3R90LdhkUJ3d2Sz1 qrRimE51eNb3hJh9Nf5fnK0UqZPwYle3ebhGTQEhppWbsOPAs40rDIJ+JgZR/g2O iRN7qeO4ot26GAiS/xVpFJgbSD73bWEbQvOkhdeRmMYDgxBRxeeRs8wS0L1jb7Hi dLuWg13wOEy/NRPOI4nd5fgJ3+unbeEhku33m6sJppEaAMVdAGBzJiaJno6Zk1Aj PSbuIvEZ1ASTJzeGUwkIP8+l/P2QIcBwBE1t8PBOB6Wqd+7JdGBIgvBB4KY5wcnr OyI8dChtDTCdRjuI9diooPzVdA== -----END CERTIFICATE-----Generated at Fri Apr 17 09:52:08 2026 by rpki-client