$ rpki-client -vvvf rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft File: PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft (raw, json) Hash identifier: FxAM141INqL4K4VFmnqOUJB7sTnizNpZWbIr3CXHvVY= Subject key identifier: 98:15:AC:64:A9:FC:63:0D:FC:E1:81:8F:65:0F:A8:7B:4F:0B:94:CD Authority key identifier: 3E:93:58:DC:F2:C5:3F:66:21:05:2B:3A:A8:52:45:4E:2F:B3:1C:18 Certificate issuer: /CN=A9122B0D/serialNumber=3E9358DCF2C53F6621052B3AA852454E2FB31C18 Certificate serial: 02B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PpNY3PLFP2YhBSs6qFJFTi-zHBg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft Manifest number: 02A2 Signing time: Fri 23 Oct 2026 02:10:46 +0000 Manifest this update: Fri 23 Oct 2026 02:10:45 +0000 Manifest next update: Fri 30 Oct 2026 02:10:45 +0000 Files and hashes: 1: PpNY3PLFP2YhBSs6qFJFTi-zHBg.crl (hash: XamqEuVPAtQEhe86HIq9TJi+je31D3QMytQNlaseczE=) 2: B2B63A82700311F1A845E35993A30FBC.roa (hash: GsHylxWmgU2d57aIkeGHod0v/td+O9Y0O73X5akYUUE=) 3: 7EBC5A18700311F18820273A93A30FBC.roa (hash: DtLfgJelfww9oIvfomUx8toqllrQvLO5uOciU7srb3E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.crl rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PpNY3PLFP2YhBSs6qFJFTi-zHBg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Oct 2026 02:10:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 688 (0x2b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122B0D, serialNumber=3E9358DCF2C53F6621052B3AA852454E2FB31C18 Validity Not Before: Oct 23 02:10:45 2026 GMT Not After : Oct 30 02:10:45 2026 GMT Subject: CN=6adac226-1183 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0a:7f:18:2d:c5:05:a4:da:ab:58:bb:59:ea: 70:90:32:3a:33:c0:f4:ab:17:f1:0d:9a:f5:f8:98: 72:d7:a9:9f:71:10:ad:e4:73:b1:2a:27:db:4a:e8: ea:40:9e:5d:0b:ef:fe:6b:76:ec:49:48:e3:5c:95: fa:57:f6:0e:25:a4:d1:0e:42:a9:2c:3b:c1:20:1b: 9d:5b:36:28:37:ac:a6:b9:66:59:1d:92:a1:b5:b3: 6c:79:92:ee:5d:8e:3b:e6:c3:56:23:f9:c0:a0:4f: 04:b9:f9:ca:66:6f:ef:cd:2e:83:d7:63:6b:b2:c8: f9:d3:29:e4:63:05:c3:c0:60:6b:b8:93:5c:28:ce: 54:43:92:98:e8:75:35:18:40:d1:f1:85:a5:d5:88: b2:c0:d0:bc:11:0e:fd:31:f1:ac:b9:e5:52:3a:a6: df:f8:27:90:bb:5e:1c:ff:14:1e:a5:23:bb:a9:5f: 89:64:80:92:a3:38:3a:97:ca:1f:f5:06:21:b2:78: 45:19:5f:61:62:59:7a:08:2e:3a:e5:cd:ea:e0:cb: e1:21:c8:02:63:0e:2e:90:a6:a9:45:35:42:ed:a6: bb:c7:34:bf:eb:74:96:0e:24:9c:b4:eb:cf:fa:b8: bf:78:b4:fa:f2:a8:57:c7:40:92:0c:64:15:a2:b7: 3a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:15:AC:64:A9:FC:63:0D:FC:E1:81:8F:65:0F:A8:7B:4F:0B:94:CD X509v3 Authority Key Identifier: keyid:3E:93:58:DC:F2:C5:3F:66:21:05:2B:3A:A8:52:45:4E:2F:B3:1C:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PpNY3PLFP2YhBSs6qFJFTi-zHBg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:9f:e5:56:79:f9:a2:80:f5:dc:6c:fa:f4:4a:a1:68:23:d4: c2:c5:fa:af:00:cc:17:53:3c:c8:5c:82:5a:9f:32:33:72:01: b7:cc:d1:07:cc:27:7c:e4:34:6e:57:d3:dd:29:7c:6a:bd:a0: 3c:e1:a4:5f:46:15:ca:a1:17:2b:ab:bc:3d:b2:c5:8a:6d:f8: b3:0b:97:b1:21:61:83:cb:cd:0d:35:69:ed:6e:84:a8:f3:29: 1e:5f:86:69:34:51:ae:24:24:b7:1c:89:ee:0c:31:b5:15:7d: ab:21:6b:1b:3e:9e:3a:92:74:2c:17:10:a9:9a:17:53:75:70: 6d:c1:69:65:98:fc:67:f1:06:fc:17:44:ef:23:46:c2:eb:e5: 59:04:03:ba:76:ac:d2:0e:72:9a:9d:a8:16:5b:52:98:91:93: 15:25:a0:89:17:82:a2:77:b0:5c:46:7f:10:85:83:5c:1d:1f: f7:8e:d5:ac:2a:c6:08:65:29:98:f7:4a:2b:ec:10:26:33:1f: dc:1f:a2:ba:df:79:6d:f1:0e:32:eb:7f:dd:cc:b8:11:88:f5: 4e:6a:f3:f4:e8:87:b8:26:86:96:d1:ca:88:d2:55:70:ca:13: 47:60:54:7f:5f:3d:63:4e:6c:8d:f1:bb:e0:1c:d7:95:be:80: bf:46:60:2c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICArAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJCMEQxMTAvBgNVBAUTKDNFOTM1OERDRjJDNTNGNjYyMTA1MkIzQUE4NTI0NTRF MkZCMzFDMTgwHhcNMjYxMDIzMDIxMDQ1WhcNMjYxMDMwMDIxMDQ1WjAYMRYwFAYD VQQDEw02YWRhYzIyNi0xMTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsQp/GC3FBaTaq1i7WepwkDI6M8D0qxfxDZr1+Jhy16mfcRCt5HOxKifbSujq QJ5dC+/+a3bsSUjjXJX6V/YOJaTRDkKpLDvBIBudWzYoN6ymuWZZHZKhtbNseZLu XY475sNWI/nAoE8EufnKZm/vzS6D12Nrssj50ynkYwXDwGBruJNcKM5UQ5KY6HU1 GEDR8YWl1YiywNC8EQ79MfGsueVSOqbf+CeQu14c/xQepSO7qV+JZICSozg6l8of 9QYhsnhFGV9hYll6CC465c3q4MvhIcgCYw4ukKapRTVC7aa7xzS/63SWDiSctOvP +ri/eLT68qhXx0CSDGQVorc6EwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJgVrGSp /GMN/OGBj2UPqHtPC5TNMB8GA1UdIwQYMBaAFD6TWNzyxT9mIQUrOqhSRU4vsxwY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkIwRC85MDlCNzlGMEU1 MkIxMUVEQjJFQjY1ODVDNEY5QUUwMi9QcE5ZM1BMRlAyWWhCU3M2cUZKRlRpLXpI QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BwTlkzUExGUDJZaEJTczZxRkpGVGktekhCZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkIwRC85MDlCNzlGMEU1MkIxMUVEQjJFQjY1ODVDNEY5QUUwMi9QcE5ZM1BMRlAy WWhCU3M2cUZKRlRpLXpIQmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdJ/lVnn5ooD13Gz69EqhaCPUwsX6rwDMF1M8yFyCWp8yM3IBt8zRB8wnfOQ0 blfT3Sl8ar2gPOGkX0YVyqEXK6u8PbLFim34swuXsSFhg8vNDTVp7W6EqPMpHl+G aTRRriQktxyJ7gwxtRV9qyFrGz6eOpJ0LBcQqZoXU3VwbcFpZZj8Z/EG/BdE7yNG wuvlWQQDunas0g5ymp2oFltSmJGTFSWgiReConewXEZ/EIWDXB0f947VrCrGCGUp mPdKK+wQJjMf3B+iut95bfEOMut/3cy4EYj1Tmrz9OiHuCaGltHKiNJVcMoTR2BU f189Y05sjfG74BzXlb6Av0ZgLA== -----END CERTIFICATE-----Generated at Sat Oct 24 01:16:42 2026 by rpki-client