$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D85/9C21FE0C347911F18A5D1F3BA8833773/PbNMuLW9apns99UpKJE-ZSWnHF8.mft File: PbNMuLW9apns99UpKJE-ZSWnHF8.mft (raw, json) Hash identifier: gN/xZeGGEA48OcylxQNYPrhLkcTk7EJNt5PJu0guCPI= Subject key identifier: B3:7A:33:A8:F3:D4:A9:22:53:13:B4:26:B0:98:54:14:EA:AD:61:1F Authority key identifier: 3D:B3:4C:B8:B5:BD:6A:99:EC:F7:D5:29:28:91:3E:65:25:A7:1C:5F Certificate issuer: /CN=A91B2D85/serialNumber=3DB34CB8B5BD6A99ECF7D52928913E6525A71C5F Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbNMuLW9apns99UpKJE-ZSWnHF8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D85/9C21FE0C347911F18A5D1F3BA8833773/PbNMuLW9apns99UpKJE-ZSWnHF8.mft Manifest number: 38 Signing time: Tue 21 Jul 2026 10:29:06 +0000 Manifest this update: Tue 21 Jul 2026 10:29:05 +0000 Manifest next update: Tue 28 Jul 2026 10:29:05 +0000 Files and hashes: 1: PbNMuLW9apns99UpKJE-ZSWnHF8.crl (hash: EWSxMtIEUdXnUItzFHjj3dIfkFnz45nkcvh3MwIHFCo=) 2: F41AA87837C311F1976C4134BE833773.roa (hash: +641YeMPVXU1XF3EY/Wo8DEhhBoEin7Q7KVnql2z71o=) 3: E21E9FE0347F11F19DF6F99AA9833773.roa (hash: D7+bSA2LIBJFLG6B18pSyvGelNlmr8zMF7Fhiy0Ow1c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2D85/9C21FE0C347911F18A5D1F3BA8833773/PbNMuLW9apns99UpKJE-ZSWnHF8.crl rsync://rpki.apnic.net/member_repository/A91B2D85/9C21FE0C347911F18A5D1F3BA8833773/PbNMuLW9apns99UpKJE-ZSWnHF8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbNMuLW9apns99UpKJE-ZSWnHF8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 10:29:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2D85, serialNumber=3DB34CB8B5BD6A99ECF7D52928913E6525A71C5F Validity Not Before: Jul 21 10:29:05 2026 GMT Not After : Jul 28 10:29:05 2026 GMT Subject: CN=6a5f49f1-4c88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:aa:50:27:2d:20:b6:57:f2:ca:d5:79:08:a3: fe:21:af:6c:c2:b1:d4:ad:18:b9:08:68:14:4c:95: 4c:15:be:6b:4c:bb:25:f9:a0:55:fa:20:a6:76:89: 2f:48:04:7d:35:52:1d:58:90:37:90:36:cd:44:9c: 45:08:5f:ed:2b:3f:78:09:d0:94:5f:0d:93:6a:04: 05:3b:97:45:d9:1b:79:5a:b9:54:83:80:98:b1:6a: de:9a:f8:cc:f6:2e:b7:45:fd:e2:21:98:32:17:92: 31:71:69:c1:d4:6c:98:ca:91:0f:8d:3b:4d:23:f4: f1:08:bd:cc:0f:51:ce:19:3b:79:00:05:cd:c9:70: 1f:e5:a4:4b:ca:22:c8:0f:40:12:a0:0d:ee:90:11: 6d:d8:a4:38:b1:be:93:10:ab:f3:c0:06:b3:61:6b: 31:34:09:32:ce:f2:79:ee:e2:71:4e:54:70:29:a0: 19:dd:89:fb:b1:8e:fb:ed:67:cc:bc:2a:55:fe:8b: 4e:ff:c7:9f:ed:35:1f:c7:72:49:5c:8e:a1:c6:88: 98:5a:fc:38:2e:23:8b:01:31:38:53:26:c6:25:3d: 3f:6d:f5:a0:4c:73:cd:73:18:27:4f:b7:c0:dd:3a: 47:d6:29:47:1b:93:3b:3e:ca:19:53:5f:09:1c:c9: fa:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:7A:33:A8:F3:D4:A9:22:53:13:B4:26:B0:98:54:14:EA:AD:61:1F X509v3 Authority Key Identifier: keyid:3D:B3:4C:B8:B5:BD:6A:99:EC:F7:D5:29:28:91:3E:65:25:A7:1C:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2D85/9C21FE0C347911F18A5D1F3BA8833773/PbNMuLW9apns99UpKJE-ZSWnHF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbNMuLW9apns99UpKJE-ZSWnHF8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D85/9C21FE0C347911F18A5D1F3BA8833773/PbNMuLW9apns99UpKJE-ZSWnHF8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:77:3d:18:d2:07:e1:71:72:82:7b:c1:98:a2:18:31:84:4c: 73:96:6f:fc:e9:e1:d1:9e:1a:99:8f:37:65:2f:cc:79:c4:0e: 03:7e:17:0b:5b:a0:a7:1d:36:58:24:13:5b:a2:e2:14:e5:07: fb:cd:9f:ea:f0:cb:d0:18:0e:81:51:af:95:73:f7:77:cf:31: 0e:06:5a:f8:9d:f5:4d:22:c3:e7:8f:da:dc:45:ca:23:60:e4: 75:f7:65:a1:bd:44:82:c9:75:2b:12:1c:f6:37:f0:e9:d0:1f: af:db:ac:ba:dc:e8:6d:a9:83:ba:8e:8d:0c:13:31:18:6e:e1: 3d:cf:a2:99:79:99:13:17:3f:97:ef:d4:6a:2c:54:43:53:70: c3:b7:cf:d4:d2:0e:01:11:22:06:d1:31:c0:d2:2b:8d:5b:7c: 48:ff:a9:cd:07:3c:c2:3d:ca:cd:b0:3c:15:bf:93:01:df:12: 12:4c:e9:fc:f1:3f:ec:8e:ef:f0:8e:a7:74:25:09:38:b7:76: 77:66:22:5a:34:e5:13:96:82:c0:87:5a:45:d2:0d:cc:05:d2: af:77:13:cd:f9:3a:d0:c1:8e:83:bf:f1:80:59:d7:84:f4:1a: a8:e7:1d:62:35:9f:9e:85:47:61:2c:04:93:84:e1:fb:30:03: 55:22:7f:d3 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MkQ4NTExMC8GA1UEBRMoM0RCMzRDQjhCNUJENkE5OUVDRjdENTI5Mjg5MTNFNjUy NUE3MUM1RjAeFw0yNjA3MjExMDI5MDVaFw0yNjA3MjgxMDI5MDVaMBgxFjAUBgNV BAMTDTZhNWY0OWYxLTRjODgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD5qlAnLSC2V/LK1XkIo/4hr2zCsdStGLkIaBRMlUwVvmtMuyX5oFX6IKZ2iS9I BH01Uh1YkDeQNs1EnEUIX+0rP3gJ0JRfDZNqBAU7l0XZG3lauVSDgJixat6a+Mz2 LrdF/eIhmDIXkjFxacHUbJjKkQ+NO00j9PEIvcwPUc4ZO3kABc3JcB/lpEvKIsgP QBKgDe6QEW3YpDixvpMQq/PABrNhazE0CTLO8nnu4nFOVHApoBndifuxjvvtZ8y8 KlX+i07/x5/tNR/HcklcjqHGiJha/DguI4sBMThTJsYlPT9t9aBMc81zGCdPt8Dd OkfWKUcbkzs+yhlTXwkcyfoVAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUs3ozqPPU qSJTE7QmsJhUFOqtYR8wHwYDVR0jBBgwFoAUPbNMuLW9apns99UpKJE+ZSWnHF8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIyRDg1LzlDMjFGRTBDMzQ3 OTExRjE4QTVEMUYzQkE4ODMzNzczL1BiTk11TFc5YXBuczk5VXBLSkUtWlNXbkhG OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUGJOTXVMVzlhcG5zOTlVcEtKRS1aU1duSEY4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIy RDg1LzlDMjFGRTBDMzQ3OTExRjE4QTVEMUYzQkE4ODMzNzczL1BiTk11TFc5YXBu czk5VXBLSkUtWlNXbkhGOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAcdz0Y0gfhcXKCe8GYohgxhExzlm/86eHRnhqZjzdlL8x5xA4DfhcLW6CnHTZY JBNbouIU5Qf7zZ/q8MvQGA6BUa+Vc/d3zzEOBlr4nfVNIsPnj9rcRcojYOR192Wh vUSCyXUrEhz2N/Dp0B+v26y63OhtqYO6jo0MEzEYbuE9z6KZeZkTFz+X79RqLFRD U3DDt8/U0g4BESIG0THA0iuNW3xI/6nNBzzCPcrNsDwVv5MB3xISTOn88T/sju/w jqd0JQk4t3Z3ZiJaNOUTloLAh1pF0g3MBdKvdxPN+TrQwY6Dv/GAWdeE9Bqo5x1i NZ+ehUdhLASThOH7MANVIn/T -----END CERTIFICATE-----Generated at Wed Jul 22 04:38:34 2026 by rpki-client