$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.mft File: PinOb2p9uUttCRM7c_7VLd7hLas.mft (raw, json) Hash identifier: a5EzjKpW63Cp82PzHxTUUQCiP9FU+vH+SiedHvUgR78= Subject key identifier: E4:24:3F:70:2C:AF:A0:E3:94:99:48:3E:58:5D:5C:C4:F7:F6:4C:29 Authority key identifier: 3E:29:CE:6F:6A:7D:B9:4B:6D:09:13:3B:73:FE:D5:2D:DE:E1:2D:AB Certificate issuer: /CN=A91CF285/serialNumber=3E29CE6F6A7DB94B6D09133B73FED52DDEE12DAB Certificate serial: 1134 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PinOb2p9uUttCRM7c_7VLd7hLas.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.mft Manifest number: 111E Signing time: Thu 16 Apr 2026 17:11:29 +0000 Manifest this update: Thu 16 Apr 2026 17:11:28 +0000 Manifest next update: Thu 23 Apr 2026 17:11:28 +0000 Files and hashes: 1: PinOb2p9uUttCRM7c_7VLd7hLas.crl (hash: q73bxuhTdiKSD0zZFHN4A/jVRFBvHO2IXRl+dG69mzg=) 2: 073BC4F4ED3B11EDB5A01A46C4F9AE02.roa (hash: kDdsp4iSvLckrdY4wTu1OLUE3EtatMjtMPduF3y0gxY=) 3: DC83478EEB0311ED875DD72EC4F9AE02.roa (hash: ZgmeeVqm3Wnlajga6cIlcqeVmJlA7Tq6XrbJ7SjwrkM=) 4: AB731B004B2A11EFAAFCC92CC4F9AE02.roa (hash: Qof8TRE4aGZ+awtau2DmuMHWzwauOGLSt/MWNgJ6+M4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.crl rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PinOb2p9uUttCRM7c_7VLd7hLas.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 17:11:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4404 (0x1134) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF285, serialNumber=3E29CE6F6A7DB94B6D09133B73FED52DDEE12DAB Validity Not Before: Apr 16 17:11:28 2026 GMT Not After : Apr 23 17:11:28 2026 GMT Subject: CN=69e11841-e839 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d5:c8:71:fc:43:13:d3:ed:0a:cf:fa:5d:a7: 23:6a:83:28:f5:73:35:35:b0:25:9a:f4:f5:27:49: 8a:87:0f:a8:9c:b2:0d:37:1e:0c:ae:aa:7d:be:a8: 59:6c:f7:3e:9e:0e:10:10:37:98:5f:ec:58:c1:63: 87:23:2e:4f:ae:a0:f9:79:c4:e1:8d:70:1a:aa:55: f5:f7:56:24:b0:4d:15:cd:47:f2:ef:f7:7a:a1:f9: 42:62:8b:cf:7e:53:fc:15:20:78:85:a5:e9:9b:4a: 9d:60:27:37:fe:f4:14:ca:5e:72:e8:29:9e:ce:0f: 6c:47:23:fa:bc:12:5d:4f:5c:14:0d:1c:7f:15:0f: 05:bd:6a:b3:4c:1a:30:09:b3:e5:a2:eb:0d:b7:7c: 09:cf:2e:0a:c1:34:94:5f:30:0c:70:a8:04:1f:91: 8e:19:92:b6:84:b8:d1:23:5b:86:90:88:a0:e1:0e: ca:23:46:5e:bb:99:ae:8a:97:07:e7:20:27:9d:bc: b7:04:3a:ba:34:74:cd:31:fc:30:a2:e8:09:65:36: 01:a1:f3:13:b1:3b:d2:78:a4:fc:17:8b:d5:42:2c: 77:e4:e9:7a:9d:ff:7b:01:a8:ef:e0:e4:3f:aa:e4: 16:c7:50:45:d5:fa:4b:f3:4b:fe:88:74:be:2a:d2: fa:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:24:3F:70:2C:AF:A0:E3:94:99:48:3E:58:5D:5C:C4:F7:F6:4C:29 X509v3 Authority Key Identifier: keyid:3E:29:CE:6F:6A:7D:B9:4B:6D:09:13:3B:73:FE:D5:2D:DE:E1:2D:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PinOb2p9uUttCRM7c_7VLd7hLas.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:ac:01:3e:b2:d0:5f:fa:73:ca:a2:d6:86:12:c0:81:6d:f7: 69:a9:34:07:aa:3d:18:7e:3b:05:31:62:60:a1:cf:13:5e:1b: 4b:4b:08:7a:9e:1c:3a:12:4d:62:4d:c1:2a:df:89:97:58:d4: a4:a7:a0:aa:06:50:e0:cf:0c:96:5b:26:4b:b7:d1:d3:cf:3a: fe:57:0f:b0:9d:ea:4a:41:79:7f:9f:28:f3:f9:5f:12:87:7c: 39:7d:1b:af:4a:50:40:47:1e:55:df:40:6d:6f:05:e7:ed:31: 33:c8:57:0b:2a:c7:28:05:12:71:1a:a1:7c:e0:5b:fd:5e:ea: d6:dc:2a:02:ca:eb:50:d4:e1:f6:8c:e1:29:98:cb:39:21:c5: 58:ad:13:9e:38:d0:5e:fa:01:18:e6:d8:91:70:75:35:44:22: ae:65:ba:ac:ee:d6:a2:f2:9c:a7:ba:d1:a9:4d:b8:c5:94:46: 1f:00:8e:18:6f:77:e3:55:c7:23:40:ae:fd:db:6a:f5:4b:91: 52:ed:b2:ba:7c:91:47:24:59:81:b6:c3:58:89:d3:05:fa:9a: 15:9f:90:19:bd:f2:eb:95:03:9b:34:28:53:59:3b:8c:40:ca: f6:23:98:d7:f1:f0:ca:be:b7:50:7a:19:d3:e9:4d:19:7a:62: cb:71:77:dc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICETQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0YyODUxMTAvBgNVBAUTKDNFMjlDRTZGNkE3REI5NEI2RDA5MTMzQjczRkVENTJE REVFMTJEQUIwHhcNMjYwNDE2MTcxMTI4WhcNMjYwNDIzMTcxMTI4WjAYMRYwFAYD VQQDEw02OWUxMTg0MS1lODM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx9XIcfxDE9PtCs/6XacjaoMo9XM1NbAlmvT1J0mKhw+onLINNx4Mrqp9vqhZ bPc+ng4QEDeYX+xYwWOHIy5PrqD5ecThjXAaqlX191YksE0VzUfy7/d6oflCYovP flP8FSB4haXpm0qdYCc3/vQUyl5y6Cmezg9sRyP6vBJdT1wUDRx/FQ8FvWqzTBow CbPlousNt3wJzy4KwTSUXzAMcKgEH5GOGZK2hLjRI1uGkIig4Q7KI0Zeu5muipcH 5yAnnby3BDq6NHTNMfwwougJZTYBofMTsTvSeKT8F4vVQix35Ol6nf97Aajv4OQ/ quQWx1BF1fpL80v+iHS+KtL6lQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOQkP3As r6DjlJlIPlhdXMT39kwpMB8GA1UdIwQYMBaAFD4pzm9qfblLbQkTO3P+1S3e4S2r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjI4NS9GRDY0RjBCODM0 MEMxMUU5OTY2QzVBNzZDNEY5QUUwMi9QaW5PYjJwOXVVdHRDUk03Y183VkxkN2hM YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Bpbk9iMnA5dVV0dENSTTdjXzdWTGQ3aExhcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjI4NS9GRDY0RjBCODM0MEMxMUU5OTY2QzVBNzZDNEY5QUUwMi9QaW5PYjJwOXVV dHRDUk03Y183VkxkN2hMYXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFqwBPrLQX/pzyqLWhhLAgW33aak0B6o9GH47BTFiYKHPE14bS0sIep4cOhJN Yk3BKt+Jl1jUpKegqgZQ4M8MllsmS7fR0886/lcPsJ3qSkF5f58o8/lfEod8OX0b r0pQQEceVd9AbW8F5+0xM8hXCyrHKAUScRqhfOBb/V7q1twqAsrrUNTh9ozhKZjL OSHFWK0TnjjQXvoBGObYkXB1NUQirmW6rO7WovKcp7rRqU24xZRGHwCOGG9341XH I0Cu/dtq9UuRUu2yunyRRyRZgbbDWInTBfqaFZ+QGb3y65UDmzQoU1k7jEDK9iOY 1/Hwyr63UHoZ0+lNGXpiy3F33A== -----END CERTIFICATE-----Generated at Fri Apr 17 06:15:26 2026 by rpki-client