$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2F2C/FFB761FA967811EA840F0029C4F9AE02/PDml0ZGM9lqyVjMi8PXxQwmme48.mft File: PDml0ZGM9lqyVjMi8PXxQwmme48.mft (raw, json) Hash identifier: gs49t3AioMRBFYZlF99mAaNXS1qfs61Oan/3S8kjuK8= Subject key identifier: 9A:1E:C2:10:E6:BB:D2:9F:8B:C9:D5:F5:CB:CF:3C:26:7B:A6:26:9C Authority key identifier: 3C:39:A5:D1:91:8C:F6:5A:B2:56:33:22:F0:F5:F1:43:09:A6:7B:8F Certificate issuer: /CN=A91E2F2C/serialNumber=3C39A5D1918CF65AB2563322F0F5F14309A67B8F Certificate serial: 0A30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PDml0ZGM9lqyVjMi8PXxQwmme48.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2F2C/FFB761FA967811EA840F0029C4F9AE02/PDml0ZGM9lqyVjMi8PXxQwmme48.mft Manifest number: 0A1C Signing time: Thu 16 Apr 2026 19:44:37 +0000 Manifest this update: Thu 16 Apr 2026 19:44:37 +0000 Manifest next update: Thu 23 Apr 2026 19:44:37 +0000 Files and hashes: 1: PDml0ZGM9lqyVjMi8PXxQwmme48.crl (hash: EHAm5KYbcL8pS6S3cBoay7qBcT4Fgbuy1LVY/SVAYfc=) 2: DE07328A778911ECBD9C7748C4F9AE02.roa (hash: b+aLVYk2tgs7wuTrLgj88F2Zzs9HvJ7ppCzvA/wlonM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2F2C/FFB761FA967811EA840F0029C4F9AE02/PDml0ZGM9lqyVjMi8PXxQwmme48.crl rsync://rpki.apnic.net/member_repository/A91E2F2C/FFB761FA967811EA840F0029C4F9AE02/PDml0ZGM9lqyVjMi8PXxQwmme48.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PDml0ZGM9lqyVjMi8PXxQwmme48.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 19:44:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2608 (0xa30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2F2C, serialNumber=3C39A5D1918CF65AB2563322F0F5F14309A67B8F Validity Not Before: Apr 16 19:44:37 2026 GMT Not After : Apr 23 19:44:37 2026 GMT Subject: CN=69e13c25-33da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:2d:77:57:d8:20:5d:21:ee:62:72:7e:27:d4: 13:72:7d:24:71:9a:37:b4:cc:77:53:7f:eb:b0:86: d6:63:40:8e:42:d2:50:1f:82:77:3f:83:d0:80:c5: f0:be:1b:19:72:67:64:fd:20:cc:90:b6:ed:9a:e0: 51:a2:c1:1c:76:0f:3f:38:5f:fb:dd:64:a4:47:97: e3:64:a4:f5:c2:d4:ac:7f:05:f5:e5:d0:42:fb:0c: 08:35:04:65:41:3e:78:63:39:ac:20:5b:2b:72:59: 61:18:fb:0e:5e:22:8f:2c:ea:c4:a2:05:05:1e:37: 90:cf:ea:97:21:1a:3c:51:e4:16:a6:f9:92:f0:28: 8e:67:f2:69:fd:92:86:cd:c2:13:8e:d0:4e:0e:ae: 75:47:41:31:15:bf:2a:61:d7:2c:ff:25:75:e6:0d: 1f:92:1a:f5:67:4e:76:3b:1b:d7:d4:92:53:9b:03: d6:2e:e7:3c:cd:e5:f2:84:d5:2e:d8:2b:b4:8e:00: fa:21:c1:e4:e9:6c:0f:de:94:d8:12:65:c2:1e:f2: e8:1d:fd:68:cd:f5:73:84:09:ba:ff:b6:60:dd:a9: 1b:69:3a:d3:c7:d4:b0:62:4d:03:1f:58:7f:8e:5b: b9:86:c6:54:5e:39:32:77:12:0b:91:cb:1a:f3:4c: f5:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:1E:C2:10:E6:BB:D2:9F:8B:C9:D5:F5:CB:CF:3C:26:7B:A6:26:9C X509v3 Authority Key Identifier: keyid:3C:39:A5:D1:91:8C:F6:5A:B2:56:33:22:F0:F5:F1:43:09:A6:7B:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2F2C/FFB761FA967811EA840F0029C4F9AE02/PDml0ZGM9lqyVjMi8PXxQwmme48.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PDml0ZGM9lqyVjMi8PXxQwmme48.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2F2C/FFB761FA967811EA840F0029C4F9AE02/PDml0ZGM9lqyVjMi8PXxQwmme48.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:51:b5:10:98:a5:e2:59:f6:ee:cb:6b:86:60:ab:08:61:78: e4:cf:ae:e4:03:aa:82:a6:d9:de:0c:14:3c:65:92:8d:f7:32: e5:fe:ac:33:61:35:8f:97:eb:68:c4:b4:90:10:06:39:90:3c: f2:b6:04:5a:39:b7:0f:85:67:cf:ea:3d:96:88:98:81:28:31: 61:d2:d9:30:e4:30:b7:24:d5:bf:ce:18:ef:69:35:68:af:4e: a9:56:88:ee:53:d8:83:18:4a:f5:65:a8:0c:4a:0b:7f:5b:3f: 4f:bb:8f:5b:64:f7:34:2a:d4:02:52:f6:7e:4d:32:bf:20:95: 8c:86:40:b9:71:aa:62:45:7a:f9:b8:a1:8e:0a:81:f1:15:84: b1:ba:1c:a2:e2:ab:43:43:54:22:22:42:69:f4:61:fb:d2:db: a6:76:51:e3:d9:16:c6:7e:30:81:da:d3:5d:a9:a0:85:e0:0c: 5e:0d:87:a1:97:0a:02:67:fa:23:7e:49:78:c1:6e:45:d5:5f: a7:7e:44:93:e9:76:5a:1f:a0:ef:b7:7e:b9:b5:c7:92:95:d6: d8:0f:a7:16:47:bc:55:7c:03:01:43:5a:e2:1a:6e:11:d9:30: ca:cc:e1:2a:2a:4b:0a:bf:63:15:9c:c5:cd:17:db:ef:e5:35: 91:e5:f9:5b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCjAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJGMkMxMTAvBgNVBAUTKDNDMzlBNUQxOTE4Q0Y2NUFCMjU2MzMyMkYwRjVGMTQz MDlBNjdCOEYwHhcNMjYwNDE2MTk0NDM3WhcNMjYwNDIzMTk0NDM3WjAYMRYwFAYD VQQDEw02OWUxM2MyNS0zM2RhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4C13V9ggXSHuYnJ+J9QTcn0kcZo3tMx3U3/rsIbWY0COQtJQH4J3P4PQgMXw vhsZcmdk/SDMkLbtmuBRosEcdg8/OF/73WSkR5fjZKT1wtSsfwX15dBC+wwINQRl QT54YzmsIFsrcllhGPsOXiKPLOrEogUFHjeQz+qXIRo8UeQWpvmS8CiOZ/Jp/ZKG zcITjtBODq51R0ExFb8qYdcs/yV15g0fkhr1Z052OxvX1JJTmwPWLuc8zeXyhNUu 2Cu0jgD6IcHk6WwP3pTYEmXCHvLoHf1ozfVzhAm6/7Zg3akbaTrTx9SwYk0DH1h/ jlu5hsZUXjkydxILkcsa80z1QQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJoewhDm u9Kfi8nV9cvPPCZ7piacMB8GA1UdIwQYMBaAFDw5pdGRjPZaslYzIvD18UMJpnuP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkYyQy9GRkI3NjFGQTk2 NzgxMUVBODQwRjAwMjlDNEY5QUUwMi9QRG1sMFpHTTlscXlWak1pOFBYeFF3bW1l NDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BEbWwwWkdNOWxxeVZqTWk4UFh4UXdtbWU0OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MkYyQy9GRkI3NjFGQTk2NzgxMUVBODQwRjAwMjlDNEY5QUUwMi9QRG1sMFpHTTls cXlWak1pOFBYeFF3bW1lNDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAxVG1EJil4ln27strhmCrCGF45M+u5AOqgqbZ3gwUPGWSjfcy5f6sM2E1j5fr aMS0kBAGOZA88rYEWjm3D4Vnz+o9loiYgSgxYdLZMOQwtyTVv84Y72k1aK9OqVaI 7lPYgxhK9WWoDEoLf1s/T7uPW2T3NCrUAlL2fk0yvyCVjIZAuXGqYkV6+bihjgqB 8RWEsbocouKrQ0NUIiJCafRh+9LbpnZR49kWxn4wgdrTXamgheAMXg2HoZcKAmf6 I35JeMFuRdVfp35Ek+l2Wh+g77d+ubXHkpXW2A+nFke8VXwDAUNa4hpuEdkwyszh KipLCr9jFZzFzRfb7+U1keX5Ww== -----END CERTIFICATE-----Generated at Fri Apr 17 15:59:41 2026 by rpki-client