$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.mft File: Pxd5CYkXL0CSZ-D_50TuSLAXkec.mft (raw, json) Hash identifier: RFMiD6y1HKY4fOhG5uvqqmp9EJfEwrltCMGI1ftBEcI= Subject key identifier: A9:23:E0:5F:E3:AC:3A:F6:6A:4E:7F:82:62:74:FF:09:08:0F:3C:0B Authority key identifier: 3F:17:79:09:89:17:2F:40:92:67:E0:FF:E7:44:EE:48:B0:17:91:E7 Certificate issuer: /CN=A91F1303/serialNumber=3F17790989172F409267E0FFE744EE48B01791E7 Certificate serial: 8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pxd5CYkXL0CSZ-D_50TuSLAXkec.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.mft Manifest number: 8B Signing time: Sun 01 Mar 2026 08:54:02 +0000 Manifest this update: Sun 01 Mar 2026 08:54:02 +0000 Manifest next update: Sun 08 Mar 2026 08:54:02 +0000 Files and hashes: 1: Pxd5CYkXL0CSZ-D_50TuSLAXkec.crl (hash: V8uLU1gdethSBPgnsPZUo0WUwAvt7omEBAZgtCcNnik=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.crl rsync://rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pxd5CYkXL0CSZ-D_50TuSLAXkec.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 08:54:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 139 (0x8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1303, serialNumber=3F17790989172F409267E0FFE744EE48B01791E7 Validity Not Before: Mar 1 08:54:02 2026 GMT Not After : Mar 8 08:54:02 2026 GMT Subject: CN=69a3feaa-6330 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:97:d7:5a:7e:55:be:85:3b:cf:b1:90:cd:70: 43:7b:8e:63:54:77:2c:64:1a:1f:09:8f:f2:51:8b: 40:49:ba:82:99:1b:12:a0:29:00:4d:8d:12:6e:95: f1:62:fe:80:4d:55:92:20:8d:39:3c:84:60:46:3d: f2:27:fa:97:20:73:7b:8a:77:53:c9:ab:0e:b1:6e: 85:71:cb:0a:d7:01:3b:cc:26:1a:dc:cf:91:fd:4d: 1b:6b:40:f3:30:6b:3e:48:0c:27:42:b9:6d:6d:64: d0:82:3f:23:fa:2a:b1:39:4c:4f:40:7a:e1:d4:11: 6e:0f:da:72:07:12:d6:7b:1c:0f:ce:53:91:0f:e2: 4f:37:c5:72:0f:92:d3:1b:5e:cd:89:a7:a4:9b:98: 5d:d1:97:64:72:f9:1c:e4:b8:5c:b0:2d:5b:23:8a: 6c:4f:ad:0c:f3:37:4e:37:75:ed:4e:84:4e:7a:0f: fb:11:a2:74:bd:2e:51:23:cd:c8:52:2e:3f:d2:9d: de:e9:a2:cb:63:4d:fd:38:ac:d6:6e:aa:59:fc:d9: b8:de:7d:29:c9:09:f1:49:53:e0:0c:41:f6:f8:e9: 11:6f:47:75:36:ac:13:31:1e:d8:02:09:35:be:3b: 3a:35:07:e3:5b:b2:c7:c2:02:8a:1e:33:32:54:d0: 38:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:23:E0:5F:E3:AC:3A:F6:6A:4E:7F:82:62:74:FF:09:08:0F:3C:0B X509v3 Authority Key Identifier: keyid:3F:17:79:09:89:17:2F:40:92:67:E0:FF:E7:44:EE:48:B0:17:91:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pxd5CYkXL0CSZ-D_50TuSLAXkec.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:35:f3:ea:6c:8f:1f:34:59:e1:a8:f0:87:3d:e4:f4:10:ff: 75:00:26:57:4f:26:4d:e4:3b:55:8f:79:08:3e:69:13:ef:b6: 63:b5:7e:c9:95:7d:fa:99:30:bb:82:11:9c:44:97:13:7a:21: 4b:ae:67:36:a9:37:80:94:ff:51:58:9e:99:fc:ca:63:c4:ac: 15:94:1e:d0:d3:b9:8e:f5:f9:72:17:5c:77:4b:83:09:77:51: 25:e8:56:76:d2:33:fa:74:1e:af:5a:c5:87:30:f8:d3:6d:d1: b7:39:f9:1d:79:c4:70:71:52:0b:74:f2:a3:93:cf:f9:34:3c: a6:16:4e:39:98:92:1b:56:27:26:1e:36:e1:15:67:e9:fa:ee: 8d:5d:c4:59:30:b3:55:82:47:57:3a:de:29:68:c6:ae:11:79: 25:59:dd:43:ab:77:5d:f8:3e:68:46:d5:34:4a:d9:52:26:f9: 39:9c:43:39:47:ed:c0:95:d4:4a:b1:bb:72:d3:3c:fd:67:32: ae:2e:d4:7d:0b:70:a3:9d:5c:51:b0:f5:e4:5b:97:4c:cb:23: 10:8e:68:f9:2d:69:ea:55:c2:cc:df:60:99:c7:86:9d:48:d3: c2:57:55:ca:b1:d9:2f:29:81:f3:bf:a0:73:fd:ab:81:91:cf: b3:0a:9a:f1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjEzMDMxMTAvBgNVBAUTKDNGMTc3OTA5ODkxNzJGNDA5MjY3RTBGRkU3NDRFRTQ4 QjAxNzkxRTcwHhcNMjYwMzAxMDg1NDAyWhcNMjYwMzA4MDg1NDAyWjAYMRYwFAYD VQQDEw02OWEzZmVhYS02MzMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsJfXWn5VvoU7z7GQzXBDe45jVHcsZBofCY/yUYtASbqCmRsSoCkATY0SbpXx Yv6ATVWSII05PIRgRj3yJ/qXIHN7indTyasOsW6FccsK1wE7zCYa3M+R/U0ba0Dz MGs+SAwnQrltbWTQgj8j+iqxOUxPQHrh1BFuD9pyBxLWexwPzlORD+JPN8VyD5LT G17Niaekm5hd0Zdkcvkc5LhcsC1bI4psT60M8zdON3XtToROeg/7EaJ0vS5RI83I Ui4/0p3e6aLLY039OKzWbqpZ/Nm43n0pyQnxSVPgDEH2+OkRb0d1NqwTMR7YAgk1 vjs6NQfjW7LHwgKKHjMyVNA4PwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKkj4F/j rDr2ak5/gmJ0/wkIDzwLMB8GA1UdIwQYMBaAFD8XeQmJFy9Akmfg/+dE7kiwF5Hn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTMwMy85QjQyNEQzMDQ2 ODUxMUYwQTg4MTg4M0VDNEY5QUUwMi9QeGQ1Q1lrWEwwQ1NaLURfNTBUdVNMQVhr ZWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1B4ZDVDWWtYTDBDU1otRF81MFR1U0xBWGtlYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTMwMy85QjQyNEQzMDQ2ODUxMUYwQTg4MTg4M0VDNEY5QUUwMi9QeGQ1Q1lrWEww Q1NaLURfNTBUdVNMQVhrZWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiDXz6myPHzRZ4ajwhz3k9BD/dQAmV08mTeQ7VY95CD5pE++2Y7V+yZV9+pkw u4IRnESXE3ohS65nNqk3gJT/UViemfzKY8SsFZQe0NO5jvX5chdcd0uDCXdRJehW dtIz+nQer1rFhzD4023Rtzn5HXnEcHFSC3Tyo5PP+TQ8phZOOZiSG1YnJh424RVn 6frujV3EWTCzVYJHVzreKWjGrhF5JVndQ6t3Xfg+aEbVNErZUib5OZxDOUftwJXU SrG7ctM8/Wcyri7UfQtwo51cUbD15FuXTMsjEI5o+S1p6lXCzN9gmceGnUjTwldV yrHZLymB87+gc/2rgZHPswqa8Q== -----END CERTIFICATE-----Generated at Sun Mar 1 23:57:02 2026 by rpki-client