$ rpki-client -vvvf rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.mft File: PP5vPrHYknFeQTbpuoVrmPZxR7A.mft (raw, json) Hash identifier: oFYkJW7UNX9Wy9N9+x3AKJkrgW4juQCG/M89a5zq008= Subject key identifier: 47:D6:67:EF:72:56:C0:0C:83:A7:D4:B8:FE:79:40:22:05:C5:80:DB Authority key identifier: 3C:FE:6F:3E:B1:D8:92:71:5E:41:36:E9:BA:85:6B:98:F6:71:47:B0 Certificate issuer: /CN=A9122D89/serialNumber=3CFE6F3EB1D892715E4136E9BA856B98F67147B0 Certificate serial: 08AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PP5vPrHYknFeQTbpuoVrmPZxR7A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.mft Manifest number: 08A2 Signing time: Sat 24 Oct 2026 20:39:35 +0000 Manifest this update: Sat 24 Oct 2026 20:39:34 +0000 Manifest next update: Sat 31 Oct 2026 20:39:34 +0000 Files and hashes: 1: PP5vPrHYknFeQTbpuoVrmPZxR7A.crl (hash: 010/Jnsa2bUQrpx+dUs5eqNJ1azDKWCK4MKRAt8k/W0=) 2: 7E8114F414E611EB82C98471C4F9AE02.roa (hash: 4jo636T6jYuAB4lWYCYJ4Jdk6gTR1xHLVvPQO5ElmxA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.crl rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PP5vPrHYknFeQTbpuoVrmPZxR7A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 20:39:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2219 (0x8ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122D89, serialNumber=3CFE6F3EB1D892715E4136E9BA856B98F67147B0 Validity Not Before: Oct 24 20:39:34 2026 GMT Not After : Oct 31 20:39:34 2026 GMT Subject: CN=6add1786-5db4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:5d:fc:ba:4e:28:71:9c:b8:c2:1e:1c:58:5e: d9:03:4e:98:8f:26:ae:65:f2:b8:33:b8:da:86:ac: 2f:ab:49:82:6e:66:3c:8d:67:5d:cb:19:d6:29:36: ef:1c:88:5f:2d:e7:fe:aa:52:1b:96:ce:7a:86:6f: 38:cb:21:8c:a4:e6:57:cd:14:9e:4f:d0:32:16:ed: 34:77:64:17:f4:ca:4f:32:f5:46:5a:09:ba:f7:b6: bc:e9:f1:df:9f:31:d9:e9:81:4f:0a:44:22:22:02: f0:b0:05:c3:0d:3b:19:f2:db:f9:dc:09:0d:aa:4f: 0b:e1:0b:3b:05:4f:44:24:a8:d2:a0:e4:03:5e:10: 14:ad:51:79:b1:f0:37:6e:40:7a:87:41:9d:48:6f: 8a:e4:8f:06:6b:6d:d5:9f:50:98:9c:d4:88:d9:34: 73:49:25:02:2a:7a:21:aa:d6:f1:fe:b1:a9:92:42: ff:ba:15:80:7e:ec:0d:bb:2c:02:90:8a:61:95:25: 74:8d:67:8d:14:3b:d5:43:37:9a:bc:2d:b1:83:a8: fc:90:8b:2b:81:dc:e2:6f:79:89:6c:69:a0:dd:81: fe:4d:54:96:c5:e4:7f:f4:26:86:8a:6b:4e:61:f9: fc:0e:5f:ef:46:36:da:60:3e:4f:25:43:28:a8:1e: 99:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:D6:67:EF:72:56:C0:0C:83:A7:D4:B8:FE:79:40:22:05:C5:80:DB X509v3 Authority Key Identifier: keyid:3C:FE:6F:3E:B1:D8:92:71:5E:41:36:E9:BA:85:6B:98:F6:71:47:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PP5vPrHYknFeQTbpuoVrmPZxR7A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:de:f9:c5:fd:e3:64:bf:0c:43:82:08:63:ac:7a:d6:26:20: 74:a7:bf:8b:60:64:66:b6:82:c0:91:c8:21:63:bf:4e:2c:21: ef:dc:af:5b:70:c2:78:82:ab:0c:e0:1a:5c:fa:0d:d1:27:6d: f3:96:70:ef:d0:3c:04:ce:9f:05:b7:c9:67:94:67:b4:8b:1e: 1d:53:ca:2c:dd:f0:ca:b1:7f:c8:0b:55:73:35:1c:fd:66:4b: 89:7b:26:0e:14:3c:51:34:15:17:7a:10:54:3f:c7:30:d1:7b: 46:bf:31:b7:5a:01:44:03:ac:9b:4f:30:72:12:5a:f8:0c:4b: a0:1e:aa:bd:06:08:19:0e:78:7b:24:37:ff:21:c6:58:5e:3c: c4:40:e7:c0:f0:f8:e1:4d:f3:51:b4:a3:23:2a:53:2b:7e:c7: 63:7e:92:e5:62:59:e3:ff:15:89:3b:63:05:57:0a:22:5c:19: f9:a9:82:df:a4:fd:f5:b1:b3:87:39:36:f4:e5:ea:38:d4:71: c9:34:66:85:1e:7d:20:df:a1:b1:07:06:23:b0:ca:6b:5e:2e: 0f:a1:c4:1e:0c:7f:dc:06:50:47:7c:55:98:03:91:9f:69:55: 87:7e:65:3c:54:8a:16:54:5d:2f:41:4c:90:41:27:28:37:5f: 7d:68:b4:04 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJEODkxMTAvBgNVBAUTKDNDRkU2RjNFQjFEODkyNzE1RTQxMzZFOUJBODU2Qjk4 RjY3MTQ3QjAwHhcNMjYxMDI0MjAzOTM0WhcNMjYxMDMxMjAzOTM0WjAYMRYwFAYD VQQDEw02YWRkMTc4Ni01ZGI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8V38uk4ocZy4wh4cWF7ZA06YjyauZfK4M7jahqwvq0mCbmY8jWddyxnWKTbv HIhfLef+qlIbls56hm84yyGMpOZXzRSeT9AyFu00d2QX9MpPMvVGWgm697a86fHf nzHZ6YFPCkQiIgLwsAXDDTsZ8tv53AkNqk8L4Qs7BU9EJKjSoOQDXhAUrVF5sfA3 bkB6h0GdSG+K5I8Ga23Vn1CYnNSI2TRzSSUCKnohqtbx/rGpkkL/uhWAfuwNuywC kIphlSV0jWeNFDvVQzeavC2xg6j8kIsrgdzib3mJbGmg3YH+TVSWxeR/9CaGimtO Yfn8Dl/vRjbaYD5PJUMoqB6ZvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEfWZ+9y VsAMg6fUuP55QCIFxYDbMB8GA1UdIwQYMBaAFDz+bz6x2JJxXkE26bqFa5j2cUew MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkQ4OS9DNkE0QTVFMjA4 NDQxMUVCOUM3MzY1MTRDNEY5QUUwMi9QUDV2UHJIWWtuRmVRVGJwdW9Wcm1QWnhS N0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BQNXZQckhZa25GZVFUYnB1b1ZybVBaeFI3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkQ4OS9DNkE0QTVFMjA4NDQxMUVCOUM3MzY1MTRDNEY5QUUwMi9QUDV2UHJIWWtu RmVRVGJwdW9Wcm1QWnhSN0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAut75xf3jZL8MQ4IIY6x61iYgdKe/i2BkZraCwJHIIWO/Tiwh79yvW3DCeIKr DOAaXPoN0Sdt85Zw79A8BM6fBbfJZ5RntIseHVPKLN3wyrF/yAtVczUc/WZLiXsm DhQ8UTQVF3oQVD/HMNF7Rr8xt1oBRAOsm08wchJa+AxLoB6qvQYIGQ54eyQ3/yHG WF48xEDnwPD44U3zUbSjIypTK37HY36S5WJZ4/8ViTtjBVcKIlwZ+amC36T99bGz hzk29OXqONRxyTRmhR59IN+hsQcGI7DKa14uD6HEHgx/3AZQR3xVmAORn2lVh35l PFSKFlRdL0FMkEEnKDdffWi0BA== -----END CERTIFICATE-----Generated at Sun Oct 25 08:09:57 2026 by rpki-client