$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft File: PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft (raw, json) Hash identifier: qGKeuyHttxuBuyYK12luls64HaGNT4bidSOjeEiLxTY= Subject key identifier: A5:34:21:F9:2B:BD:B5:B6:59:80:1F:97:82:15:98:9A:AB:D6:78:93 Authority key identifier: 3C:69:B9:B6:01:D2:C9:F2:A3:91:5A:6F:FB:CA:3D:AD:62:E9:92:45 Certificate issuer: /CN=A91EE09C/serialNumber=3C69B9B601D2C9F2A3915A6FFBCA3DAD62E99245 Certificate serial: 0201 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft Manifest number: 01D3 Signing time: Mon 02 Mar 2026 00:04:12 +0000 Manifest this update: Mon 02 Mar 2026 00:04:10 +0000 Manifest next update: Mon 09 Mar 2026 00:04:10 +0000 Files and hashes: 1: PGm5tgHSyfKjkVpv-8o9rWLpkkU.crl (hash: o1WZ1MmynB3tRfvPIuxBgt8WqAPEOg96iYIqli7Xqz0=) 2: A3E08ED6825711EFB7585B6FC4F9AE02.roa (hash: 2slykkHCwPvbeGF4Zx3D9JQfzEnRWOMcVvw7gilVFqk=) 3: 23D4183024D711EF932FC941C4F9AE02.roa (hash: yjfhbglGwJSFqMN6zxG/h3PTnwzIZZTxeRkuErtplaI=) 4: 1D98617687B311EFB4972044C4F9AE02.roa (hash: xYBSN0t6jgjQfq0Vs3mLR1yw03FEouHpBcT56A28m1A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.crl rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:04:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 513 (0x201) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE09C, serialNumber=3C69B9B601D2C9F2A3915A6FFBCA3DAD62E99245 Validity Not Before: Mar 2 00:04:10 2026 GMT Not After : Mar 9 00:04:10 2026 GMT Subject: CN=69a4d3fb-5ff2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:18:18:26:e3:12:d8:b0:04:94:af:f3:18:15: 2f:97:c6:ef:a3:23:68:7d:d6:a7:24:cc:a7:20:60: 09:85:4a:9c:28:1a:ec:62:bc:48:8a:0a:a5:51:53: bc:37:e5:6b:81:b7:b9:20:83:58:4c:46:ef:53:b5: d5:82:c9:68:72:52:06:cc:22:51:a2:89:ae:00:d8: 26:50:fc:e8:e0:a2:ca:98:9f:4e:2f:e4:c6:a7:fe: de:bb:4f:4d:82:5e:5d:8d:d0:a5:10:2f:2b:a5:4b: 46:b5:37:9f:02:ba:ac:53:df:5d:73:e9:2d:73:b1: 6a:2c:da:9d:04:98:4e:1e:7d:81:e6:1f:a9:18:14: 69:63:cb:f4:37:8a:76:d0:eb:e7:5c:c6:32:27:ef: 67:52:b2:ee:ab:38:84:a3:15:2d:8e:c3:fb:87:9c: 3d:8d:16:03:26:68:3a:fd:9c:07:30:7e:bd:b1:92: 4e:3e:cf:57:a4:f7:22:35:c9:6c:78:4b:1f:36:9f: 95:78:ee:d1:2f:6f:60:d7:b8:f5:ea:46:e4:74:59: 4a:2a:75:79:5e:78:4b:37:8b:72:d8:a2:f0:a7:b6: 7c:ee:f9:38:d5:41:65:a0:38:a1:db:75:97:b3:34: b8:71:33:91:d8:76:a9:c8:95:13:f9:06:e6:68:2f: 83:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:34:21:F9:2B:BD:B5:B6:59:80:1F:97:82:15:98:9A:AB:D6:78:93 X509v3 Authority Key Identifier: keyid:3C:69:B9:B6:01:D2:C9:F2:A3:91:5A:6F:FB:CA:3D:AD:62:E9:92:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:33:64:de:20:59:6b:e2:82:5b:8a:f1:73:31:33:a3:49:00: c1:fc:0f:27:82:7a:a4:64:6a:c9:53:cc:11:fd:fe:a6:cc:2a: 21:bf:c6:d2:ae:91:36:86:80:1b:f1:f1:7d:18:82:f7:fc:c0: 44:d9:f5:a0:b9:21:1a:70:f4:27:06:a2:a4:3d:a0:ea:ea:7e: 01:5d:a4:fd:68:f4:c8:08:23:c7:55:eb:b4:76:74:a2:89:99: c9:0e:c9:38:ea:53:1f:ce:46:e5:1c:4b:cb:0e:7c:62:b9:c5: 33:56:58:4f:af:7b:4a:a4:84:d8:9b:b9:15:3c:12:a2:be:f2: b9:d9:0d:ca:43:6c:6a:d9:3a:dd:5f:dd:e8:56:b8:7f:5a:f3: 7b:5c:e3:46:7d:5a:db:5a:0a:93:0b:1a:78:ca:a3:cd:77:7d: ca:2d:27:7f:08:4a:cf:ae:b3:8c:5a:f0:a9:d2:f2:cc:35:32: 77:3a:32:e6:aa:af:d7:f7:b2:f6:fa:69:47:df:77:0f:ac:0b: 14:ca:15:5b:35:4b:c7:df:b1:c4:76:b0:9e:60:42:6d:d3:26: dd:6b:a5:36:5f:48:f0:0c:10:94:1b:fd:cf:00:bc:8f:f4:4d: c4:6e:0a:e6:00:c9:3b:f2:04:f5:23:14:fd:a0:7b:46:83:2b: 1f:3f:f8:7b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUUwOUMxMTAvBgNVBAUTKDNDNjlCOUI2MDFEMkM5RjJBMzkxNUE2RkZCQ0EzREFE NjJFOTkyNDUwHhcNMjYwMzAyMDAwNDEwWhcNMjYwMzA5MDAwNDEwWjAYMRYwFAYD VQQDEw02OWE0ZDNmYi01ZmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwBgYJuMS2LAElK/zGBUvl8bvoyNofdanJMynIGAJhUqcKBrsYrxIigqlUVO8 N+Vrgbe5IINYTEbvU7XVgsloclIGzCJRoomuANgmUPzo4KLKmJ9OL+TGp/7eu09N gl5djdClEC8rpUtGtTefArqsU99dc+ktc7FqLNqdBJhOHn2B5h+pGBRpY8v0N4p2 0OvnXMYyJ+9nUrLuqziEoxUtjsP7h5w9jRYDJmg6/ZwHMH69sZJOPs9XpPciNcls eEsfNp+VeO7RL29g17j16kbkdFlKKnV5XnhLN4ty2KLwp7Z87vk41UFloDih23WX szS4cTOR2HapyJUT+QbmaC+DYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKU0Ifkr vbW2WYAfl4IVmJqr1niTMB8GA1UdIwQYMBaAFDxpubYB0snyo5Fab/vKPa1i6ZJF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTA5Qy9FRUY3NjJDMDkw NzUxMUVFODdEMjY2ODBDNEY5QUUwMi9QR201dGdIU3lmS2prVnB2LThvOXJXTHBr a1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BHbTV0Z0hTeWZLamtWcHYtOG85cldMcGtrVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RTA5Qy9FRUY3NjJDMDkwNzUxMUVFODdEMjY2ODBDNEY5QUUwMi9QR201dGdIU3lm S2prVnB2LThvOXJXTHBra1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcDNk3iBZa+KCW4rxczEzo0kAwfwPJ4J6pGRqyVPMEf3+pswqIb/G0q6RNoaA G/HxfRiC9/zARNn1oLkhGnD0JwaipD2g6up+AV2k/Wj0yAgjx1XrtHZ0oomZyQ7J OOpTH85G5RxLyw58YrnFM1ZYT697SqSE2Ju5FTwSor7yudkNykNsatk63V/d6Fa4 f1rze1zjRn1a21oKkwsaeMqjzXd9yi0nfwhKz66zjFrwqdLyzDUydzoy5qqv1/ey 9vppR993D6wLFMoVWzVLx9+xxHawnmBCbdMm3WulNl9I8AwQlBv9zwC8j/RNxG4K 5gDJO/IE9SMU/aB7RoMrHz/4ew== -----END CERTIFICATE-----Generated at Mon Mar 2 13:23:53 2026 by rpki-client