$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.mft File: pnTGcB4rDOPRB-nyNsVc7-aHaPE.mft (raw, json) Hash identifier: jwbmqhnNGu3Cl4xjpr0p9GffCxGIpsQJ/l9SpMvdkHg= Subject key identifier: B8:17:1D:99:64:CE:43:C6:51:34:FF:46:AD:31:5A:3E:DF:DB:24:CA Authority key identifier: A6:74:C6:70:1E:2B:0C:E3:D1:07:E9:F2:36:C5:5C:EF:E6:87:68:F1 Certificate issuer: /CN=A91DD902/serialNumber=A674C6701E2B0CE3D107E9F236C55CEFE68768F1 Certificate serial: 0247 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnTGcB4rDOPRB-nyNsVc7-aHaPE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.mft Manifest number: 0241 Signing time: Fri 17 Apr 2026 02:13:24 +0000 Manifest this update: Fri 17 Apr 2026 02:13:24 +0000 Manifest next update: Fri 24 Apr 2026 02:13:24 +0000 Files and hashes: 1: pnTGcB4rDOPRB-nyNsVc7-aHaPE.crl (hash: nGNnR/fdx9pF9huXuZxfkIU/M7wo3Fre76I3MgInV+Y=) 2: 33A48584C92911EDAE3AB84EC4F9AE02.roa (hash: uBe9trVvTXibsFAdUxncYIdjHBZ+5n+JI/NflInuCrA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.crl rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnTGcB4rDOPRB-nyNsVc7-aHaPE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:13:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 583 (0x247) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD902, serialNumber=A674C6701E2B0CE3D107E9F236C55CEFE68768F1 Validity Not Before: Apr 17 02:13:24 2026 GMT Not After : Apr 24 02:13:24 2026 GMT Subject: CN=69e19744-ecda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c1:a8:be:f1:fe:38:44:89:d6:9d:96:c8:f6: aa:69:ad:56:84:e7:e4:f0:fa:cb:50:bb:a9:da:34: e5:f3:b1:1f:3b:25:7f:0e:9c:e0:15:6d:ff:88:82: 31:bf:c7:39:e0:58:f0:9d:ee:02:72:fe:f7:e9:88: 36:a4:55:9c:66:b0:1f:4e:b1:8e:a2:63:7f:d3:be: 87:27:9b:61:3a:7b:da:ab:a4:ad:b7:eb:ea:7f:82: 80:43:d4:03:c9:77:b3:0f:34:99:35:45:34:f3:9d: 77:0b:77:03:10:8a:81:f0:e5:29:35:58:33:82:7b: 1a:5f:e6:bf:f5:72:8a:e6:b0:38:16:d6:d3:2f:e7: 93:ba:10:9e:65:29:d2:e3:a9:c7:83:ca:1c:eb:19: 2d:b1:1a:f8:51:1e:b4:04:57:72:c8:2a:06:2e:23: 08:48:5a:92:90:26:8f:18:5d:0a:72:07:ca:3a:14: 89:8f:96:3a:1f:9a:0b:89:66:3f:d3:2a:7f:91:bf: 4f:93:5e:3d:83:bc:61:37:5f:19:8e:fd:8a:c4:9b: 0a:5b:b3:d5:1b:cb:f1:7b:9a:cc:23:70:34:3c:92: 12:34:59:8c:59:87:e9:e1:78:a9:5e:93:c3:06:9d: dd:04:10:f9:27:84:1e:a6:22:8a:7b:cb:0c:2c:0b: a6:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:17:1D:99:64:CE:43:C6:51:34:FF:46:AD:31:5A:3E:DF:DB:24:CA X509v3 Authority Key Identifier: keyid:A6:74:C6:70:1E:2B:0C:E3:D1:07:E9:F2:36:C5:5C:EF:E6:87:68:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnTGcB4rDOPRB-nyNsVc7-aHaPE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:1f:41:7a:99:68:ff:ec:b1:c2:10:1d:72:0a:72:ae:af:83: 92:b3:04:7f:e6:18:b2:fc:f9:61:71:b2:ba:a7:45:3d:8e:3f: 91:9f:a1:1d:3e:ec:2c:e1:cb:5f:3b:81:0a:d3:29:cd:cb:60: ce:52:42:3e:08:43:59:c5:e0:07:f1:78:a3:a4:1d:85:a0:0a: 63:40:ee:96:7d:9b:2b:ec:b4:01:71:90:36:fb:bf:f7:5e:f2: 35:4c:a1:fb:16:c1:31:6c:d8:47:81:3a:ce:30:06:16:fe:bb: 9e:b8:70:4b:3a:1d:91:9e:69:6e:ed:19:7e:7f:4e:ff:83:e6: d0:5b:8c:35:74:74:08:79:95:7c:9d:be:a0:ed:3a:13:b4:7e: 6b:3d:87:7f:df:5c:cb:b9:c2:39:a1:63:28:f1:72:b6:ce:1b: 7f:9f:7f:c8:70:4b:10:1f:fd:a0:8a:0b:96:81:2d:e7:e4:f0: 8f:2e:60:94:56:7d:7a:8f:d4:e9:05:bc:d9:21:d6:26:de:67: c7:ab:ff:57:99:f1:f2:d9:99:56:cd:ec:05:5d:14:4e:b8:23: 45:a8:11:ae:94:7b:43:b5:d6:e8:f6:dd:2e:c1:f9:85:84:aa: 8c:18:71:bc:81:2e:01:2b:1e:55:7d:43:92:ce:22:1a:07:c1: 80:6c:33:9d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQ5MDIxMTAvBgNVBAUTKEE2NzRDNjcwMUUyQjBDRTNEMTA3RTlGMjM2QzU1Q0VG RTY4NzY4RjEwHhcNMjYwNDE3MDIxMzI0WhcNMjYwNDI0MDIxMzI0WjAYMRYwFAYD VQQDEw02OWUxOTc0NC1lY2RhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxsGovvH+OESJ1p2WyPaqaa1WhOfk8PrLULup2jTl87EfOyV/DpzgFW3/iIIx v8c54Fjwne4Ccv736Yg2pFWcZrAfTrGOomN/076HJ5thOnvaq6Stt+vqf4KAQ9QD yXezDzSZNUU08513C3cDEIqB8OUpNVgzgnsaX+a/9XKK5rA4FtbTL+eTuhCeZSnS 46nHg8oc6xktsRr4UR60BFdyyCoGLiMISFqSkCaPGF0KcgfKOhSJj5Y6H5oLiWY/ 0yp/kb9Pk149g7xhN18Zjv2KxJsKW7PVG8vxe5rMI3A0PJISNFmMWYfp4XipXpPD Bp3dBBD5J4QepiKKe8sMLAumOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLgXHZlk zkPGUTT/Rq0xWj7f2yTKMB8GA1UdIwQYMBaAFKZ0xnAeKwzj0Qfp8jbFXO/mh2jx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDkwMi81NzBCM0Y4RUM5 MjYxMUVEQUYyQjlENERDNEY5QUUwMi9wblRHY0I0ckRPUFJCLW55TnNWYzctYUhh UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BuVEdjQjRyRE9QUkItbnlOc1ZjNy1hSGFQRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDkwMi81NzBCM0Y4RUM5MjYxMUVEQUYyQjlENERDNEY5QUUwMi9wblRHY0I0ckRP UFJCLW55TnNWYzctYUhhUEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPh9Beplo/+yxwhAdcgpyrq+DkrMEf+YYsvz5YXGyuqdFPY4/kZ+hHT7sLOHL XzuBCtMpzctgzlJCPghDWcXgB/F4o6QdhaAKY0Duln2bK+y0AXGQNvu/917yNUyh +xbBMWzYR4E6zjAGFv67nrhwSzodkZ5pbu0Zfn9O/4Pm0FuMNXR0CHmVfJ2+oO06 E7R+az2Hf99cy7nCOaFjKPFyts4bf59/yHBLEB/9oIoLloEt5+Twjy5glFZ9eo/U 6QW82SHWJt5nx6v/V5nx8tmZVs3sBV0UTrgjRagRrpR7Q7XW6PbdLsH5hYSqjBhx vIEuASseVX1Dks4iGgfBgGwznQ== -----END CERTIFICATE-----Generated at Fri Apr 17 06:18:47 2026 by rpki-client