$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.mft File: PV2GR6upu0BiXDxkPNg2fxUHgBo.mft (raw, json) Hash identifier: yzLha2szXO73/UMZCKe+CmUkvymdlAyF9AuzTRm8CbI= Subject key identifier: 0D:75:8E:CA:88:55:2D:9F:51:E9:25:F0:B0:67:D3:76:7A:50:7B:A0 Authority key identifier: 3D:5D:86:47:AB:A9:BB:40:62:5C:3C:64:3C:D8:36:7F:15:07:80:1A Certificate issuer: /CN=A91E0EF2/serialNumber=3D5D8647ABA9BB40625C3C643CD8367F1507801A Certificate serial: 04E9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PV2GR6upu0BiXDxkPNg2fxUHgBo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.mft Manifest number: 04E1 Signing time: Thu 16 Apr 2026 23:43:17 +0000 Manifest this update: Thu 16 Apr 2026 23:43:17 +0000 Manifest next update: Thu 23 Apr 2026 23:43:17 +0000 Files and hashes: 1: PV2GR6upu0BiXDxkPNg2fxUHgBo.crl (hash: q+dpBI3qN9p1jgmJeo1PD9fgh3pyrw5IFsk1CLDHWtY=) 2: CA7DCCFE5EE511ECA6B8CA48C4F9AE02.roa (hash: MZAkwEcI/RhPtb0HLVaP6vZemaPmWHrryFBvzadhdrI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.crl rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PV2GR6upu0BiXDxkPNg2fxUHgBo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 23:43:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1257 (0x4e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0EF2, serialNumber=3D5D8647ABA9BB40625C3C643CD8367F1507801A Validity Not Before: Apr 16 23:43:17 2026 GMT Not After : Apr 23 23:43:17 2026 GMT Subject: CN=69e17415-2320 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:6a:83:44:0c:75:00:12:08:45:7d:8b:4f:d1: d2:7f:3c:af:a6:4f:41:2a:a6:85:a3:d8:52:ad:6e: 4d:18:84:d4:9c:cb:7f:a4:31:7f:3b:4d:59:6b:01: 92:0b:b5:c2:b5:5b:c0:f1:a0:63:07:cb:8d:d7:3e: c4:04:ae:46:a5:69:ee:7a:77:fa:5e:65:b9:34:1c: cf:16:11:54:d4:06:18:65:fa:7b:b0:8a:6a:39:a9: 76:a8:e1:96:1c:26:32:91:be:fd:fb:17:29:d0:9b: 27:38:44:bb:bf:dc:52:53:35:a3:fa:73:f9:ec:bd: 9f:d4:0e:0b:5f:9a:6e:d2:87:c0:06:25:de:20:b0: c1:e3:7e:1f:98:9a:dc:f1:2d:c0:a0:db:b3:aa:f7: 6a:f6:2e:b1:61:4a:66:3f:1f:66:be:8b:44:73:50: aa:78:95:ee:11:43:2a:4a:ca:76:dc:9f:b5:3e:f6: 40:49:3b:d6:cb:3f:bf:6f:51:64:13:d5:5c:37:9e: bb:5c:14:12:c9:7f:f8:e3:56:98:30:ef:1f:a2:2f: 0f:51:0f:67:48:38:88:9e:c1:78:23:88:ab:0b:c6: e7:1d:fd:c8:7b:fb:ca:0b:cc:d6:c6:7e:82:31:45: 14:f5:20:77:6b:cf:61:f6:f2:bb:0e:d4:31:65:de: 0c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:75:8E:CA:88:55:2D:9F:51:E9:25:F0:B0:67:D3:76:7A:50:7B:A0 X509v3 Authority Key Identifier: keyid:3D:5D:86:47:AB:A9:BB:40:62:5C:3C:64:3C:D8:36:7F:15:07:80:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PV2GR6upu0BiXDxkPNg2fxUHgBo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:65:9a:0b:e2:f9:c0:9c:88:7c:7a:04:7f:5d:e3:67:6d:c7: b3:24:72:90:b1:aa:57:b4:08:4c:70:4f:5c:07:a7:49:8a:31: 95:f6:8c:b8:7d:5c:e7:d6:60:ed:65:cb:8a:65:ff:55:1e:b6: c9:b6:d9:5e:c9:35:60:66:ed:e0:b4:7d:2f:3f:cb:3e:db:3b: 34:0d:b9:3f:9d:89:5f:06:75:d4:f2:4d:68:39:d7:3f:59:a9: 39:88:58:01:60:3b:cf:ab:41:2f:f0:07:a8:9e:59:f7:e6:c1: 49:ff:a0:7a:91:00:49:4b:b3:44:29:ff:75:2a:8f:b2:5d:2a: ce:09:b0:dd:dd:b1:8b:95:76:1e:44:8f:02:72:36:2f:ae:ec: e9:8e:11:0d:bd:ba:af:6c:e9:a6:cc:51:5b:e8:4f:99:bf:0a: 84:f5:be:e3:0d:d5:d1:7c:e7:7e:17:dc:17:d0:ec:64:a5:97: fc:ea:23:e4:7b:a1:66:19:74:d3:8e:bd:73:39:a4:72:ed:93: 84:e7:86:96:85:b1:e2:5a:ed:32:3f:83:53:6e:3f:e1:36:b1: 4b:9d:08:e9:36:a3:24:a7:39:fe:e8:9d:ed:6b:0e:e8:4f:8e: 2f:81:3d:9c:bc:46:47:13:08:0b:29:89:48:6d:0d:91:96:0a: c9:70:c2:f6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBFRjIxMTAvBgNVBAUTKDNENUQ4NjQ3QUJBOUJCNDA2MjVDM0M2NDNDRDgzNjdG MTUwNzgwMUEwHhcNMjYwNDE2MjM0MzE3WhcNMjYwNDIzMjM0MzE3WjAYMRYwFAYD VQQDEw02OWUxNzQxNS0yMzIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4WqDRAx1ABIIRX2LT9HSfzyvpk9BKqaFo9hSrW5NGITUnMt/pDF/O01ZawGS C7XCtVvA8aBjB8uN1z7EBK5GpWnuenf6XmW5NBzPFhFU1AYYZfp7sIpqOal2qOGW HCYykb79+xcp0JsnOES7v9xSUzWj+nP57L2f1A4LX5pu0ofABiXeILDB434fmJrc 8S3AoNuzqvdq9i6xYUpmPx9mvotEc1CqeJXuEUMqSsp23J+1PvZASTvWyz+/b1Fk E9VcN567XBQSyX/441aYMO8foi8PUQ9nSDiInsF4I4irC8bnHf3Ie/vKC8zWxn6C MUUU9SB3a89h9vK7DtQxZd4MMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA11jsqI VS2fUekl8LBn03Z6UHugMB8GA1UdIwQYMBaAFD1dhkerqbtAYlw8ZDzYNn8VB4Aa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEVGMi9BQjZCMjdGNjVF RTIxMUVDQUZBNjRCNDRDNEY5QUUwMi9QVjJHUjZ1cHUwQmlYRHhrUE5nMmZ4VUhn Qm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1BWMkdSNnVwdTBCaVhEeGtQTmcyZnhVSGdCby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MEVGMi9BQjZCMjdGNjVFRTIxMUVDQUZBNjRCNDRDNEY5QUUwMi9QVjJHUjZ1cHUw QmlYRHhrUE5nMmZ4VUhnQm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXmWaC+L5wJyIfHoEf13jZ23HsyRykLGqV7QITHBPXAenSYoxlfaMuH1c59Zg 7WXLimX/VR62ybbZXsk1YGbt4LR9Lz/LPts7NA25P52JXwZ11PJNaDnXP1mpOYhY AWA7z6tBL/AHqJ5Z9+bBSf+gepEASUuzRCn/dSqPsl0qzgmw3d2xi5V2HkSPAnI2 L67s6Y4RDb26r2zppsxRW+hPmb8KhPW+4w3V0XznfhfcF9DsZKWX/Ooj5HuhZhl0 0469czmkcu2ThOeGloWx4lrtMj+DU24/4TaxS50I6TajJKc5/uid7WsO6E+OL4E9 nLxGRxMICymJSG0NkZYKyXDC9g== -----END CERTIFICATE-----Generated at Fri Apr 17 07:04:26 2026 by rpki-client