$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.mft File: Pxd5CYkXL0CSZ-D_50TuSLAXkec.mft (raw, json) Hash identifier: 4j8wXb6J5uorL8qHEmIXjrs7VX41RU/m/JAxaOdYUug= Subject key identifier: 7D:B3:ED:19:08:41:7F:88:13:F6:81:63:10:83:DA:0B:C2:5C:FC:56 Authority key identifier: 3F:17:79:09:89:17:2F:40:92:67:E0:FF:E7:44:EE:48:B0:17:91:E7 Certificate issuer: /CN=A91F1303/serialNumber=3F17790989172F409267E0FFE744EE48B01791E7 Certificate serial: A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pxd5CYkXL0CSZ-D_50TuSLAXkec.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.mft Manifest number: A2 Signing time: Wed 15 Apr 2026 06:53:26 +0000 Manifest this update: Wed 15 Apr 2026 06:53:25 +0000 Manifest next update: Wed 22 Apr 2026 06:53:25 +0000 Files and hashes: 1: Pxd5CYkXL0CSZ-D_50TuSLAXkec.crl (hash: ammsjBuBDQNZHxVgcgQ6DSnKWzVUGzzRPchZZPXLif4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.crl rsync://rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pxd5CYkXL0CSZ-D_50TuSLAXkec.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 06:53:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162 (0xa2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1303, serialNumber=3F17790989172F409267E0FFE744EE48B01791E7 Validity Not Before: Apr 15 06:53:25 2026 GMT Not After : Apr 22 06:53:25 2026 GMT Subject: CN=69df35e6-7225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8d:cf:1e:4c:79:74:10:5c:c0:7b:ab:82:09: e1:88:14:8b:c1:8c:41:56:fb:71:39:49:37:9a:2a: 31:80:21:6f:57:57:d9:8c:fc:4c:34:af:b9:f4:58: 6b:ae:5e:36:08:f2:40:a6:e9:97:a7:59:9d:b5:40: 27:b7:ba:9a:48:48:32:93:53:24:42:03:4b:77:49: 70:7e:5d:27:60:6f:9c:25:89:dc:e5:5a:11:a9:cd: 36:c0:4e:99:94:85:3c:3b:e2:28:a7:69:1f:0d:73: 8c:a6:13:21:e5:0b:21:0e:da:3b:dd:a7:9a:a2:81: 3c:dd:e3:61:3f:25:47:07:3e:e3:8b:3d:00:f6:c0: b3:d3:8b:13:9e:0b:e4:e1:27:b1:94:5f:fa:19:64: cf:97:43:c3:eb:54:ef:82:cd:8d:69:30:b3:11:df: 33:3b:cd:46:0c:9b:82:df:ab:24:5d:b6:86:81:6a: 38:1f:66:58:37:ca:af:71:19:91:e9:ab:c1:6b:50: 8c:3e:49:b4:d2:0a:ef:8b:4e:57:b6:2f:1b:ff:c1: f4:f2:a0:c8:46:a4:10:e7:60:28:bc:a9:d6:20:07: 6f:63:82:00:60:ed:60:6f:79:af:12:6c:ea:01:1f: 77:05:00:6b:e9:47:9c:1d:d8:42:64:79:eb:80:a5: c4:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:B3:ED:19:08:41:7F:88:13:F6:81:63:10:83:DA:0B:C2:5C:FC:56 X509v3 Authority Key Identifier: keyid:3F:17:79:09:89:17:2F:40:92:67:E0:FF:E7:44:EE:48:B0:17:91:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pxd5CYkXL0CSZ-D_50TuSLAXkec.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:b7:83:9c:12:24:5f:f4:04:b5:88:a8:15:44:b0:fe:20:d4: 74:03:a8:95:df:26:3f:e4:c3:18:71:ff:25:66:cd:0b:3b:ec: 4e:8a:f6:31:a7:e8:34:41:2c:9d:0d:87:58:b3:b8:c6:03:20: 49:1b:50:f6:0b:0d:7b:83:26:8c:a8:a1:a7:a8:5f:b7:58:15: d2:5a:c5:78:40:53:c9:df:ff:ed:6c:05:a6:38:b4:a9:52:5d: 79:c2:65:6f:61:0a:cc:58:7b:c3:c4:8a:1b:d2:3f:8d:37:57: 55:c9:b5:95:01:29:11:d5:87:4a:e3:3b:bb:81:f9:5a:ae:6e: c7:5f:4e:3d:af:dd:bf:08:c5:2b:3f:fb:6a:d0:b1:13:3f:9e: 4b:3e:1c:09:12:c6:54:35:c2:ad:8d:1a:c5:3a:5e:bd:2c:e9: 08:b6:86:71:50:c0:ea:33:d0:a2:c2:48:1b:cf:1d:ca:7d:ee: df:b0:f3:75:c7:6c:77:2e:c9:f9:db:2e:30:b9:f0:fa:47:44: d2:9f:13:94:b2:b2:1b:05:6b:7f:1c:5d:8d:5d:73:fd:ca:ba: e7:80:8e:85:28:d5:ba:9e:13:44:1d:c1:35:66:af:1e:09:18: 2e:e1:c9:04:d4:70:14:96:50:6f:61:80:cb:1f:57:fb:00:55: 26:55:e1:74 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjEzMDMxMTAvBgNVBAUTKDNGMTc3OTA5ODkxNzJGNDA5MjY3RTBGRkU3NDRFRTQ4 QjAxNzkxRTcwHhcNMjYwNDE1MDY1MzI1WhcNMjYwNDIyMDY1MzI1WjAYMRYwFAYD VQQDEw02OWRmMzVlNi03MjI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtI3PHkx5dBBcwHurggnhiBSLwYxBVvtxOUk3mioxgCFvV1fZjPxMNK+59Fhr rl42CPJApumXp1mdtUAnt7qaSEgyk1MkQgNLd0lwfl0nYG+cJYnc5VoRqc02wE6Z lIU8O+Iop2kfDXOMphMh5QshDto73aeaooE83eNhPyVHBz7jiz0A9sCz04sTngvk 4SexlF/6GWTPl0PD61Tvgs2NaTCzEd8zO81GDJuC36skXbaGgWo4H2ZYN8qvcRmR 6avBa1CMPkm00grvi05Xti8b/8H08qDIRqQQ52AovKnWIAdvY4IAYO1gb3mvEmzq AR93BQBr6UecHdhCZHnrgKXELwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH2z7RkI QX+IE/aBYxCD2gvCXPxWMB8GA1UdIwQYMBaAFD8XeQmJFy9Akmfg/+dE7kiwF5Hn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTMwMy85QjQyNEQzMDQ2 ODUxMUYwQTg4MTg4M0VDNEY5QUUwMi9QeGQ1Q1lrWEwwQ1NaLURfNTBUdVNMQVhr ZWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1B4ZDVDWWtYTDBDU1otRF81MFR1U0xBWGtlYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTMwMy85QjQyNEQzMDQ2ODUxMUYwQTg4MTg4M0VDNEY5QUUwMi9QeGQ1Q1lrWEww Q1NaLURfNTBUdVNMQVhrZWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAX7eDnBIkX/QEtYioFUSw/iDUdAOold8mP+TDGHH/JWbNCzvsTor2MafoNEEs nQ2HWLO4xgMgSRtQ9gsNe4MmjKihp6hft1gV0lrFeEBTyd//7WwFpji0qVJdecJl b2EKzFh7w8SKG9I/jTdXVcm1lQEpEdWHSuM7u4H5Wq5ux19OPa/dvwjFKz/7atCx Ez+eSz4cCRLGVDXCrY0axTpevSzpCLaGcVDA6jPQosJIG88dyn3u37Dzdcdsdy7J +dsuMLnw+kdE0p8TlLKyGwVrfxxdjV1z/cq654COhSjVup4TRB3BNWavHgkYLuHJ BNRwFJZQb2GAyx9X+wBVJlXhdA== -----END CERTIFICATE-----Generated at Fri Apr 17 08:01:16 2026 by rpki-client