$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.mft File: PenT3_bgSP2QgUZQLk8I5Fbz2bw.mft (raw, json) Hash identifier: 8cO7sIwAA/YWsTP21FRcpUT8TyY/NoU+u5zafDODJ8o= Subject key identifier: 19:AA:CA:40:76:E3:82:2F:9D:1B:94:EF:0D:1D:26:C4:41:12:CD:0C Authority key identifier: 3D:E9:D3:DF:F6:E0:48:FD:90:81:46:50:2E:4F:08:E4:56:F3:D9:BC Certificate issuer: /CN=A91CB7AB/serialNumber=3DE9D3DFF6E048FD908146502E4F08E456F3D9BC Certificate serial: 08F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PenT3_bgSP2QgUZQLk8I5Fbz2bw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.mft Manifest number: 084A Signing time: Mon 06 Apr 2026 21:13:05 +0000 Manifest this update: Mon 06 Apr 2026 21:13:04 +0000 Manifest next update: Mon 13 Apr 2026 21:13:04 +0000 Files and hashes: 1: PenT3_bgSP2QgUZQLk8I5Fbz2bw.crl (hash: MW9iQikUYyEqEhiK6z+BpAY5W+tzba5wr5oVCENYl5s=) 2: 0112375EA05411EDB043385AC4F9AE02.roa (hash: wt7sHeBZYX3+ynpGbSY8k/1ymNfDI2lkoFnaTMVP/Ps=) 3: 5CDB2402FD6D11EE951DE436C4F9AE02.roa (hash: GPPwnFCIcpt0RgF++70GuCleWCDXuGcVYR4o3iza94k=) 4: 5B2236E6FD6D11EE951DE436C4F9AE02.roa (hash: wVxc6nx/JmhL7VCPOsNGEB8sGimUMjqS6K/WHE14sqo=) 5: E2FEA6DA3E5411EF9B398D2DC4F9AE02.roa (hash: 4maJF9WUbj7sjherc9bKMjHY3wXl4HcmhFEcf5r/F/Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.crl rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PenT3_bgSP2QgUZQLk8I5Fbz2bw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Apr 2026 21:13:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2289 (0x8f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB7AB, serialNumber=3DE9D3DFF6E048FD908146502E4F08E456F3D9BC Validity Not Before: Apr 6 21:13:04 2026 GMT Not After : Apr 13 21:13:04 2026 GMT Subject: CN=69d421e1-de77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d5:cc:89:9c:aa:0f:bd:05:07:65:93:61:b9: b4:84:cf:e8:6a:cc:07:47:b6:24:36:99:d1:32:e2: 3d:bb:2f:1f:03:b9:54:d3:35:e3:3d:29:4e:63:4e: 4f:04:81:a7:4f:7a:6f:c3:c5:1b:99:43:ed:c4:81: 54:9a:56:2a:2e:ca:89:63:23:2d:3a:4d:66:f5:a6: 8c:57:c5:3a:73:24:ca:2c:4d:3c:cb:ff:04:cc:6c: 93:a8:73:07:92:bb:04:63:97:bd:b5:ab:38:96:ec: 70:23:b6:4c:9a:b8:09:a7:30:09:89:b3:79:8b:7a: 98:97:85:b9:d6:c0:7a:5b:1f:4d:ac:b4:8a:3b:32: 89:9b:46:c8:e6:10:18:a3:d8:f8:27:40:35:08:a1: 50:a8:53:66:81:c6:26:27:90:6a:43:b3:5b:6a:ff: 6c:bb:16:9c:02:45:57:62:62:df:19:42:42:b6:a8: d7:c4:d3:d8:b7:74:da:0b:21:4e:21:c9:65:c9:87: 18:5b:95:89:6e:b8:89:6f:fd:de:8f:c7:83:ff:77: 5d:ea:16:3d:bc:07:1e:c2:de:22:a8:2d:34:a7:f5: 79:6b:8b:c9:fe:eb:73:04:08:4b:45:3f:94:94:34: 9b:1c:b3:89:9a:e6:fc:ef:f4:10:33:de:7d:77:1a: 34:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:AA:CA:40:76:E3:82:2F:9D:1B:94:EF:0D:1D:26:C4:41:12:CD:0C X509v3 Authority Key Identifier: keyid:3D:E9:D3:DF:F6:E0:48:FD:90:81:46:50:2E:4F:08:E4:56:F3:D9:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PenT3_bgSP2QgUZQLk8I5Fbz2bw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d3:4b:3e:a2:f2:26:25:3a:9a:11:d9:9e:87:a8:f9:a6:5f:cb: 2a:4a:f2:ca:5e:33:ce:8e:f2:56:d3:28:46:e4:aa:c7:1d:0c: bc:5c:bb:e5:fb:11:26:fa:4e:ee:11:eb:e3:1e:6f:8a:17:2e: f6:69:fb:bb:3f:d0:2c:06:bf:00:8d:ef:89:5f:b2:79:0d:94: cb:c9:8c:0a:30:8c:3f:a7:db:e9:6b:95:dd:2f:f4:d3:70:ed: 07:47:78:94:ca:a8:86:c7:fd:25:83:c4:11:8f:4e:ab:ab:a9: 7a:67:4d:12:1e:ca:c8:9a:55:f0:a1:2c:ce:cd:6e:a8:eb:ea: 8b:c2:f6:31:6a:23:c1:c0:68:51:94:9c:97:2a:51:eb:8f:fb: 33:2c:13:8f:64:f8:cd:86:88:77:66:12:7d:41:29:66:bf:57: ba:44:66:da:3a:b2:8c:c7:ec:22:ca:6f:0f:f5:46:4c:16:b2: 34:5e:c4:54:77:c2:5b:bd:6f:41:d9:60:79:e8:25:03:d2:2f: cf:7f:18:3d:4e:5b:a6:50:6e:90:8d:b4:90:8f:03:f7:9f:6d: 01:62:21:82:b4:fd:06:ad:6d:9d:99:c1:85:66:0e:f2:b6:6c: 5b:76:0b:31:00:8c:8f:38:3d:bc:46:a2:e8:84:65:ea:fe:5d: f6:fc:09:ec -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I3QUIxMTAvBgNVBAUTKDNERTlEM0RGRjZFMDQ4RkQ5MDgxNDY1MDJFNEYwOEU0 NTZGM0Q5QkMwHhcNMjYwNDA2MjExMzA0WhcNMjYwNDEzMjExMzA0WjAYMRYwFAYD VQQDEw02OWQ0MjFlMS1kZTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsdXMiZyqD70FB2WTYbm0hM/oaswHR7YkNpnRMuI9uy8fA7lU0zXjPSlOY05P BIGnT3pvw8UbmUPtxIFUmlYqLsqJYyMtOk1m9aaMV8U6cyTKLE08y/8EzGyTqHMH krsEY5e9tas4luxwI7ZMmrgJpzAJibN5i3qYl4W51sB6Wx9NrLSKOzKJm0bI5hAY o9j4J0A1CKFQqFNmgcYmJ5BqQ7Nbav9suxacAkVXYmLfGUJCtqjXxNPYt3TaCyFO IcllyYcYW5WJbriJb/3ej8eD/3dd6hY9vAcewt4iqC00p/V5a4vJ/utzBAhLRT+U lDSbHLOJmub87/QQM959dxo00QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBmqykB2 44IvnRuU7w0dJsRBEs0MMB8GA1UdIwQYMBaAFD3p09/24Ej9kIFGUC5PCORW89m8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjdBQi81Njc4NjU2ODQw MDkxMUVCQTM3NDIyNUJDNEY5QUUwMi9QZW5UM19iZ1NQMlFnVVpRTGs4STVGYnoy YncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BlblQzX2JnU1AyUWdVWlFMazhJNUZiejJidy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjdBQi81Njc4NjU2ODQwMDkxMUVCQTM3NDIyNUJDNEY5QUUwMi9QZW5UM19iZ1NQ MlFnVVpRTGs4STVGYnoyYncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA00s+ovImJTqaEdmeh6j5pl/LKkryyl4zzo7yVtMoRuSqxx0MvFy75fsRJvpO 7hHr4x5vihcu9mn7uz/QLAa/AI3viV+yeQ2Uy8mMCjCMP6fb6WuV3S/003DtB0d4 lMqohsf9JYPEEY9Oq6upemdNEh7KyJpV8KEszs1uqOvqi8L2MWojwcBoUZSclypR 64/7MywTj2T4zYaId2YSfUEpZr9XukRm2jqyjMfsIspvD/VGTBayNF7EVHfCW71v QdlgeeglA9Ivz38YPU5bplBukI20kI8D959tAWIhgrT9Bq1tnZnBhWYO8rZsW3YL MQCMjzg9vEai6IRl6v5d9vwJ7A== -----END CERTIFICATE-----Generated at Tue Apr 7 13:30:50 2026 by rpki-client