$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft File: PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft (raw, json) Hash identifier: Ai8JW9nRf9/wFR4B1XTHhdXXdHb8/H+l3kKkDmOB7EM= Subject key identifier: 27:13:F8:1C:1D:4C:E7:D7:E3:6F:6A:37:8B:A8:A4:D5:6C:C1:0D:9D Authority key identifier: 3C:69:B9:B6:01:D2:C9:F2:A3:91:5A:6F:FB:CA:3D:AD:62:E9:92:45 Certificate issuer: /CN=A91EE09C/serialNumber=3C69B9B601D2C9F2A3915A6FFBCA3DAD62E99245 Certificate serial: 0219 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft Manifest number: 01EB Signing time: Fri 17 Apr 2026 03:34:32 +0000 Manifest this update: Fri 17 Apr 2026 03:34:31 +0000 Manifest next update: Fri 24 Apr 2026 03:34:31 +0000 Files and hashes: 1: PGm5tgHSyfKjkVpv-8o9rWLpkkU.crl (hash: 6Jyhtf1lcIbyO+AjmwK01gArSfP8GuVfhLd5du1VdQw=) 2: A3E08ED6825711EFB7585B6FC4F9AE02.roa (hash: 2slykkHCwPvbeGF4Zx3D9JQfzEnRWOMcVvw7gilVFqk=) 3: 23D4183024D711EF932FC941C4F9AE02.roa (hash: yjfhbglGwJSFqMN6zxG/h3PTnwzIZZTxeRkuErtplaI=) 4: 1D98617687B311EFB4972044C4F9AE02.roa (hash: xYBSN0t6jgjQfq0Vs3mLR1yw03FEouHpBcT56A28m1A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.crl rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 03:34:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 537 (0x219) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE09C, serialNumber=3C69B9B601D2C9F2A3915A6FFBCA3DAD62E99245 Validity Not Before: Apr 17 03:34:31 2026 GMT Not After : Apr 24 03:34:31 2026 GMT Subject: CN=69e1aa48-986e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ae:e3:ae:bc:99:b5:57:cf:c4:9d:6f:6a:d6: 89:d0:9d:83:fc:9d:0b:04:ea:02:03:4b:e5:05:b9: a8:4e:b8:35:a0:f2:d8:32:37:d6:1d:01:52:b8:5c: e0:97:f4:29:4b:f2:0e:aa:4f:06:78:3e:89:bd:4f: cb:15:2c:b3:f2:7a:78:6f:ad:c5:b0:b8:e5:34:0f: b1:45:8b:72:76:f4:d4:47:e2:ae:97:17:f6:29:a5: a9:f8:9f:27:c4:cf:cd:cf:bd:3f:e8:9d:89:ac:6c: c5:50:2a:ea:bc:57:70:49:79:e2:8a:b9:50:16:2e: 2b:f1:d1:b8:92:cb:84:ef:6c:6d:1a:13:3f:b8:96: 15:92:ec:75:5f:fd:c4:2e:61:66:c5:77:09:4d:ad: 49:5f:8d:c9:2e:98:2a:94:14:d3:ef:6e:be:e7:aa: 0d:79:d0:1e:20:fb:2c:72:0a:73:0c:64:b2:e3:ad: fa:57:fa:f1:94:4b:b7:4e:4a:5a:a5:3f:5c:ff:8a: 76:dc:c7:b0:2b:f5:aa:66:88:53:ec:1b:24:5f:58: fe:3d:68:ba:1b:27:5f:58:37:fe:12:32:5b:2b:54: 79:fd:d7:dc:fb:42:9b:c2:eb:d0:20:de:f1:12:b2: 41:bb:78:48:75:29:05:63:44:67:1e:48:0c:dc:01: 26:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:13:F8:1C:1D:4C:E7:D7:E3:6F:6A:37:8B:A8:A4:D5:6C:C1:0D:9D X509v3 Authority Key Identifier: keyid:3C:69:B9:B6:01:D2:C9:F2:A3:91:5A:6F:FB:CA:3D:AD:62:E9:92:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d0:ec:26:56:e5:e3:d2:bd:95:1e:29:c9:39:16:5d:66:6f:ef: 2c:af:75:31:f1:33:41:42:b3:db:48:6e:29:dc:77:d3:b2:f9: d5:d7:69:37:2c:7e:b0:96:9b:e7:62:a9:21:9d:da:7d:6e:cb: 5c:55:30:7b:53:b0:e1:af:78:cd:ca:3a:c2:a5:50:dd:9c:66: 25:60:02:82:aa:0d:fc:e2:0b:05:c6:be:f2:c2:c3:5f:ee:3d: 3b:8f:83:d9:9b:9b:fd:08:a4:6a:dc:4d:be:c3:4a:44:b2:a5: ac:6d:57:62:8b:a2:e2:b4:f8:b5:8f:71:87:da:eb:b6:14:21: 3e:72:72:71:08:31:0e:e3:4f:2e:cf:01:cd:01:fd:f4:b3:5c: 1d:63:88:f6:94:77:ca:ea:07:51:20:da:72:db:43:c4:88:6c: 5a:cb:60:43:07:d8:7a:f2:7f:e2:b3:67:7e:cd:89:71:f9:fe: b6:e4:0a:f2:0b:cb:c0:f4:0e:7c:0d:fa:44:94:7f:a5:ad:8b: d4:40:6c:f8:90:92:c9:5e:f2:f5:70:2d:9c:eb:5e:70:80:84: a5:86:d3:18:4b:8d:35:11:85:5e:87:87:45:3c:ea:7e:3f:f3: 27:df:19:32:52:30:c8:a1:87:1e:a5:1d:39:f7:26:95:2a:a2: 95:39:f3:98 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUUwOUMxMTAvBgNVBAUTKDNDNjlCOUI2MDFEMkM5RjJBMzkxNUE2RkZCQ0EzREFE NjJFOTkyNDUwHhcNMjYwNDE3MDMzNDMxWhcNMjYwNDI0MDMzNDMxWjAYMRYwFAYD VQQDEw02OWUxYWE0OC05ODZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu67jrryZtVfPxJ1vataJ0J2D/J0LBOoCA0vlBbmoTrg1oPLYMjfWHQFSuFzg l/QpS/IOqk8GeD6JvU/LFSyz8np4b63FsLjlNA+xRYtydvTUR+Kulxf2KaWp+J8n xM/Nz70/6J2JrGzFUCrqvFdwSXniirlQFi4r8dG4ksuE72xtGhM/uJYVkux1X/3E LmFmxXcJTa1JX43JLpgqlBTT726+56oNedAeIPsscgpzDGSy4636V/rxlEu3Tkpa pT9c/4p23MewK/WqZohT7BskX1j+PWi6GydfWDf+EjJbK1R5/dfc+0KbwuvQIN7x ErJBu3hIdSkFY0RnHkgM3AEmZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCcT+Bwd TOfX429qN4uopNVswQ2dMB8GA1UdIwQYMBaAFDxpubYB0snyo5Fab/vKPa1i6ZJF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTA5Qy9FRUY3NjJDMDkw NzUxMUVFODdEMjY2ODBDNEY5QUUwMi9QR201dGdIU3lmS2prVnB2LThvOXJXTHBr a1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BHbTV0Z0hTeWZLamtWcHYtOG85cldMcGtrVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RTA5Qy9FRUY3NjJDMDkwNzUxMUVFODdEMjY2ODBDNEY5QUUwMi9QR201dGdIU3lm S2prVnB2LThvOXJXTHBra1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA0OwmVuXj0r2VHinJORZdZm/vLK91MfEzQUKz20huKdx307L51ddpNyx+sJab 52KpIZ3afW7LXFUwe1Ow4a94zco6wqVQ3ZxmJWACgqoN/OILBca+8sLDX+49O4+D 2Zub/QikatxNvsNKRLKlrG1XYoui4rT4tY9xh9rrthQhPnJycQgxDuNPLs8BzQH9 9LNcHWOI9pR3yuoHUSDacttDxIhsWstgQwfYevJ/4rNnfs2Jcfn+tuQK8gvLwPQO fA36RJR/pa2L1EBs+JCSyV7y9XAtnOtecICEpYbTGEuNNRGFXoeHRTzqfj/zJ98Z MlIwyKGHHqUdOfcmlSqilTnzmA== -----END CERTIFICATE-----Generated at Fri Apr 17 22:22:26 2026 by rpki-client