$ rpki-client -vvvf rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft File: PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft (raw, json) Hash identifier: E3SzQU05BBcXTrRF6Hr/X1LsC+UNEFMDf7uqVe8hiUE= Subject key identifier: 50:5B:91:E3:59:3D:9B:1A:7F:7B:9D:C7:56:4C:F7:D2:9E:07:2E:53 Authority key identifier: 3E:93:58:DC:F2:C5:3F:66:21:05:2B:3A:A8:52:45:4E:2F:B3:1C:18 Certificate issuer: /CN=A9122B0D/serialNumber=3E9358DCF2C53F6621052B3AA852454E2FB31C18 Certificate serial: 0298 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PpNY3PLFP2YhBSs6qFJFTi-zHBg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft Manifest number: 028A Signing time: Sat 05 Sep 2026 01:49:22 +0000 Manifest this update: Sat 05 Sep 2026 01:49:21 +0000 Manifest next update: Sat 12 Sep 2026 01:49:21 +0000 Files and hashes: 1: PpNY3PLFP2YhBSs6qFJFTi-zHBg.crl (hash: h1XBhO43679nzhsnKxuhEZzIDqBVzdd3PCTHeBzd3RY=) 2: B2B63A82700311F1A845E35993A30FBC.roa (hash: GsHylxWmgU2d57aIkeGHod0v/td+O9Y0O73X5akYUUE=) 3: 7EBC5A18700311F18820273A93A30FBC.roa (hash: DtLfgJelfww9oIvfomUx8toqllrQvLO5uOciU7srb3E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.crl rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PpNY3PLFP2YhBSs6qFJFTi-zHBg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 01:49:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 664 (0x298) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122B0D, serialNumber=3E9358DCF2C53F6621052B3AA852454E2FB31C18 Validity Not Before: Sep 5 01:49:21 2026 GMT Not After : Sep 12 01:49:21 2026 GMT Subject: CN=6a9b7521-3c8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1d:e7:5a:ac:dd:8b:af:01:00:36:99:f4:08: 57:14:e7:6c:52:7d:08:aa:19:88:63:3a:78:f2:7b: 9c:92:fd:4e:4f:e0:07:8a:83:fd:f8:65:62:ab:82: 78:70:03:e7:b1:c8:3b:7a:1d:84:4d:19:7b:67:d4: 0d:5b:27:00:6d:51:de:46:40:ce:99:5e:08:52:33: 28:f3:6c:d5:44:aa:39:b0:31:19:ab:d9:ae:96:ea: 6f:bb:1e:50:1b:b1:a3:33:1e:78:a8:83:a7:d3:f5: e6:08:98:7f:d7:a5:20:bc:25:37:20:91:d7:3b:4b: de:cf:f7:84:e2:51:da:cc:be:7d:f2:34:a4:97:53: 26:93:b2:7f:a0:64:db:cd:22:87:80:78:a5:45:a6: 0c:31:d1:92:7e:67:90:33:b1:ef:f3:2b:37:a8:cc: 69:35:fa:67:ee:3b:1a:b2:91:6d:10:14:87:8d:17: 02:f8:7b:1b:da:ef:cc:30:20:3e:bf:e8:b7:24:e1: 94:22:11:ec:85:28:7d:78:87:ad:e5:ef:5c:4e:6b: 51:60:00:ce:f6:f3:f5:12:5b:d8:bf:af:52:a9:7a: f1:7d:ff:dc:3d:ff:28:84:dd:45:c7:02:a9:40:23: 13:81:ee:48:d2:49:9e:79:d9:19:10:68:cb:c4:91: 59:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:5B:91:E3:59:3D:9B:1A:7F:7B:9D:C7:56:4C:F7:D2:9E:07:2E:53 X509v3 Authority Key Identifier: keyid:3E:93:58:DC:F2:C5:3F:66:21:05:2B:3A:A8:52:45:4E:2F:B3:1C:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PpNY3PLFP2YhBSs6qFJFTi-zHBg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:71:3f:2f:c4:e0:ef:84:59:78:dc:08:58:11:67:fa:dc:d2: 79:e3:4a:b0:58:50:49:3b:c8:69:8b:e4:86:b4:5b:85:19:e3: 0d:b0:39:df:2a:4a:d9:15:9c:29:22:cb:47:33:b1:f7:ce:06: 0a:f3:5e:e6:3d:04:95:d4:62:07:d6:5d:9c:8d:9f:7f:cb:b6: 38:90:8a:2d:79:7b:6e:f8:cc:ce:07:b6:54:3d:1b:1a:b7:45: bb:20:57:ce:05:80:77:99:10:28:e6:60:c3:cd:07:1f:ad:e7: ab:f4:da:f3:bc:3f:17:6f:58:3a:e1:3d:03:30:28:15:7e:f1: 48:1e:15:e4:b9:fd:f4:c0:65:8a:85:05:62:57:5b:53:c2:3f: 99:4d:dc:66:a2:ef:75:b9:11:3a:18:70:c7:7f:1d:b2:90:56: fd:ed:b6:93:a0:cf:12:98:51:22:66:4d:11:0e:f3:37:36:0b: 23:87:75:72:af:bb:76:26:30:3e:dc:ae:e0:5e:8a:9b:ea:c4: 6e:47:70:06:9b:67:c6:1a:e7:a1:f5:25:79:81:c2:58:3d:cb: db:3d:d4:cb:fc:a8:90:79:3d:72:19:47:3b:e7:f4:ba:49:49: 02:30:9a:cc:1f:ef:2f:04:ca:0f:ab:67:65:72:78:ef:4d:57: e6:e7:e5:b2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJCMEQxMTAvBgNVBAUTKDNFOTM1OERDRjJDNTNGNjYyMTA1MkIzQUE4NTI0NTRF MkZCMzFDMTgwHhcNMjYwOTA1MDE0OTIxWhcNMjYwOTEyMDE0OTIxWjAYMRYwFAYD VQQDEw02YTliNzUyMS0zYzhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuR3nWqzdi68BADaZ9AhXFOdsUn0IqhmIYzp48nuckv1OT+AHioP9+GViq4J4 cAPnscg7eh2ETRl7Z9QNWycAbVHeRkDOmV4IUjMo82zVRKo5sDEZq9mulupvux5Q G7GjMx54qIOn0/XmCJh/16UgvCU3IJHXO0vez/eE4lHazL598jSkl1Mmk7J/oGTb zSKHgHilRaYMMdGSfmeQM7Hv8ys3qMxpNfpn7jsaspFtEBSHjRcC+Hsb2u/MMCA+ v+i3JOGUIhHshSh9eIet5e9cTmtRYADO9vP1ElvYv69SqXrxff/cPf8ohN1FxwKp QCMTge5I0kmeedkZEGjLxJFZ/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFBbkeNZ PZsaf3udx1ZM99KeBy5TMB8GA1UdIwQYMBaAFD6TWNzyxT9mIQUrOqhSRU4vsxwY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkIwRC85MDlCNzlGMEU1 MkIxMUVEQjJFQjY1ODVDNEY5QUUwMi9QcE5ZM1BMRlAyWWhCU3M2cUZKRlRpLXpI QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BwTlkzUExGUDJZaEJTczZxRkpGVGktekhCZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkIwRC85MDlCNzlGMEU1MkIxMUVEQjJFQjY1ODVDNEY5QUUwMi9QcE5ZM1BMRlAy WWhCU3M2cUZKRlRpLXpIQmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAB3E/L8Tg74RZeNwIWBFn+tzSeeNKsFhQSTvIaYvkhrRbhRnjDbA53ypK2RWc KSLLRzOx984GCvNe5j0EldRiB9ZdnI2ff8u2OJCKLXl7bvjMzge2VD0bGrdFuyBX zgWAd5kQKOZgw80HH63nq/Ta87w/F29YOuE9AzAoFX7xSB4V5Ln99MBlioUFYldb U8I/mU3cZqLvdbkROhhwx38dspBW/e22k6DPEphRImZNEQ7zNzYLI4d1cq+7diYw Ptyu4F6Km+rEbkdwBptnxhrnofUleYHCWD3L2z3Uy/yokHk9chlHO+f0uklJAjCa zB/vLwTKD6tnZXJ4701X5uflsg== -----END CERTIFICATE-----Generated at Sat Sep 5 06:50:35 2026 by rpki-client