$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.mft File: pnTGcB4rDOPRB-nyNsVc7-aHaPE.mft (raw, json) Hash identifier: hjEl2DtV+v+EY7AWCSO2GDIna+lnj0j35ZiynvEnO+Y= Subject key identifier: A4:61:16:89:AB:F4:59:26:5E:D8:DA:FE:8E:FB:DE:88:BB:4E:C6:65 Authority key identifier: A6:74:C6:70:1E:2B:0C:E3:D1:07:E9:F2:36:C5:5C:EF:E6:87:68:F1 Certificate issuer: /CN=A91DD902/serialNumber=A674C6701E2B0CE3D107E9F236C55CEFE68768F1 Certificate serial: 022F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnTGcB4rDOPRB-nyNsVc7-aHaPE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.mft Manifest number: 0229 Signing time: Sun 01 Mar 2026 23:39:52 +0000 Manifest this update: Sun 01 Mar 2026 23:39:50 +0000 Manifest next update: Sun 08 Mar 2026 23:39:50 +0000 Files and hashes: 1: pnTGcB4rDOPRB-nyNsVc7-aHaPE.crl (hash: JFLuRpJw+iVfXNz3v5xZV70/8fE/YnEKv4tp6nXIkQE=) 2: 33A48584C92911EDAE3AB84EC4F9AE02.roa (hash: uBe9trVvTXibsFAdUxncYIdjHBZ+5n+JI/NflInuCrA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.crl rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnTGcB4rDOPRB-nyNsVc7-aHaPE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:39:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 559 (0x22f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD902, serialNumber=A674C6701E2B0CE3D107E9F236C55CEFE68768F1 Validity Not Before: Mar 1 23:39:50 2026 GMT Not After : Mar 8 23:39:50 2026 GMT Subject: CN=69a4ce48-5f2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:86:79:40:9d:82:c9:63:76:91:2b:a8:31:c9: 97:ae:87:c0:7c:99:0f:02:0e:3e:9a:3d:86:13:d2: c2:6b:12:75:b6:3f:e0:7c:cb:78:65:23:24:d5:97: ee:32:4c:da:70:7a:ef:89:0a:af:be:d5:a7:a6:41: af:c0:b2:8a:48:d1:3a:0c:d2:30:fa:d3:3c:92:99: dc:8a:1d:0a:bc:13:f7:61:34:85:0e:24:5d:61:df: d6:40:30:35:8e:f8:d1:d9:b9:5b:4d:10:c0:b6:0e: 4a:9d:06:df:1d:91:6c:20:b2:c9:e1:2c:68:b1:1d: de:52:ec:11:46:d5:95:55:a1:76:9c:d5:7b:8f:af: e2:91:a3:9a:02:f8:7d:09:7b:39:8e:b3:42:e2:da: 01:e8:1e:e7:37:5f:39:9e:76:c9:16:bb:2f:ca:ab: d0:f8:3d:e2:4b:ad:81:16:45:30:60:5d:54:86:7c: 0b:c0:57:46:90:69:c9:9b:c4:6a:fb:1b:44:21:90: 06:dd:62:c8:0a:7e:e4:46:9c:55:52:d3:6f:cb:51: 2b:9e:b2:b0:d3:b6:5d:38:5c:01:8c:4c:32:d8:5f: 64:b2:1f:fd:d6:7d:93:0a:26:55:8f:f9:a0:27:1e: 30:5a:b6:dc:75:88:88:bd:eb:70:77:a4:2a:ad:af: 74:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:61:16:89:AB:F4:59:26:5E:D8:DA:FE:8E:FB:DE:88:BB:4E:C6:65 X509v3 Authority Key Identifier: keyid:A6:74:C6:70:1E:2B:0C:E3:D1:07:E9:F2:36:C5:5C:EF:E6:87:68:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnTGcB4rDOPRB-nyNsVc7-aHaPE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:e6:ce:ec:49:32:44:f4:ca:ba:19:6d:19:22:14:f0:6a:62: 79:3c:57:ec:69:d6:b7:44:1b:f8:88:b6:bf:cf:65:1f:e7:3d: 84:f6:ba:23:b3:ec:e1:13:80:5f:1d:7d:9a:87:ac:f9:7f:74: d1:0a:ea:8e:a4:51:06:ef:54:7a:2c:eb:f0:47:c3:5b:41:53: 76:78:a1:c3:bb:71:a3:f6:8e:89:56:e4:e6:2f:ca:27:3b:2b: 4b:50:17:59:21:c5:b3:44:ea:c2:67:45:cf:1f:c7:f1:49:4b: 6d:de:75:5c:fe:33:71:14:c7:7d:92:49:74:6d:cf:6f:44:c4: 73:01:d1:38:e2:b2:7f:9f:8b:93:a6:be:3e:c2:7e:a8:04:27: 76:fe:95:2f:aa:3c:14:21:2f:e0:cf:0a:78:85:74:48:ff:7f: 5d:ff:2b:b8:13:a4:bb:2f:1b:75:ea:58:41:9f:5a:5e:14:d9: 78:49:a8:59:2b:d5:5d:ef:ac:77:b2:b6:ff:70:c3:14:4a:d9: 68:be:2b:cb:37:65:08:47:e4:e4:5e:6f:16:18:81:a9:3c:21: 49:5c:e4:04:94:ed:60:1a:96:83:79:3e:47:90:47:e4:38:4c: 09:b9:39:75:52:86:d8:88:51:3e:36:84:27:1f:42:85:f4:2c: e0:a0:8f:75 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAi8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQ5MDIxMTAvBgNVBAUTKEE2NzRDNjcwMUUyQjBDRTNEMTA3RTlGMjM2QzU1Q0VG RTY4NzY4RjEwHhcNMjYwMzAxMjMzOTUwWhcNMjYwMzA4MjMzOTUwWjAYMRYwFAYD VQQDEw02OWE0Y2U0OC01ZjJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAi4Z5QJ2CyWN2kSuoMcmXrofAfJkPAg4+mj2GE9LCaxJ1tj/gfMt4ZSMk1Zfu MkzacHrviQqvvtWnpkGvwLKKSNE6DNIw+tM8kpncih0KvBP3YTSFDiRdYd/WQDA1 jvjR2blbTRDAtg5KnQbfHZFsILLJ4SxosR3eUuwRRtWVVaF2nNV7j6/ikaOaAvh9 CXs5jrNC4toB6B7nN185nnbJFrsvyqvQ+D3iS62BFkUwYF1UhnwLwFdGkGnJm8Rq +xtEIZAG3WLICn7kRpxVUtNvy1ErnrKw07ZdOFwBjEwy2F9ksh/91n2TCiZVj/mg Jx4wWrbcdYiIvetwd6Qqra90mwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKRhFomr 9FkmXtja/o773oi7TsZlMB8GA1UdIwQYMBaAFKZ0xnAeKwzj0Qfp8jbFXO/mh2jx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDkwMi81NzBCM0Y4RUM5 MjYxMUVEQUYyQjlENERDNEY5QUUwMi9wblRHY0I0ckRPUFJCLW55TnNWYzctYUhh UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BuVEdjQjRyRE9QUkItbnlOc1ZjNy1hSGFQRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDkwMi81NzBCM0Y4RUM5MjYxMUVEQUYyQjlENERDNEY5QUUwMi9wblRHY0I0ckRP UFJCLW55TnNWYzctYUhhUEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJ+bO7EkyRPTKuhltGSIU8GpieTxX7GnWt0Qb+Ii2v89lH+c9hPa6I7Ps4ROA Xx19moes+X900QrqjqRRBu9Ueizr8EfDW0FTdnihw7txo/aOiVbk5i/KJzsrS1AX WSHFs0TqwmdFzx/H8UlLbd51XP4zcRTHfZJJdG3Pb0TEcwHROOKyf5+Lk6a+PsJ+ qAQndv6VL6o8FCEv4M8KeIV0SP9/Xf8ruBOkuy8bdepYQZ9aXhTZeEmoWSvVXe+s d7K2/3DDFErZaL4ryzdlCEfk5F5vFhiBqTwhSVzkBJTtYBqWg3k+R5BH5DhMCbk5 dVKG2IhRPjaEJx9ChfQs4KCPdQ== -----END CERTIFICATE-----Generated at Mon Mar 2 05:30:41 2026 by rpki-client