$ rpki-client -vvvf rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.mft File: S_PofKK5q1lZdiDQT8BUEY1-09k.mft (raw, json) Hash identifier: qxRPza9H7KnhYRXjHsylUHLGT2hrGkvK74ScEUrt+d8= Subject key identifier: 13:99:77:C4:3C:BF:4A:BD:9E:B0:03:02:29:19:90:00:40:C1:FD:34 Authority key identifier: 4B:F3:E8:7C:A2:B9:AB:59:59:76:20:D0:4F:C0:54:11:8D:7E:D3:D9 Certificate issuer: /CN=A9191B71/serialNumber=4BF3E87CA2B9AB59597620D04FC054118D7ED3D9 Certificate serial: 0439 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S_PofKK5q1lZdiDQT8BUEY1-09k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.mft Manifest number: 042D Signing time: Mon 05 Oct 2026 00:17:23 +0000 Manifest this update: Mon 05 Oct 2026 00:17:23 +0000 Manifest next update: Mon 12 Oct 2026 00:17:23 +0000 Files and hashes: 1: S_PofKK5q1lZdiDQT8BUEY1-09k.crl (hash: ZfODFE9kHgd+uka2pvX+EdO7WPkcjOvTrqudOBnxk6I=) 2: 5734DF38D56811EF89A7D332C4F9AE02.roa (hash: +ePsXEldU8XwZr86Pjr8gpmcjv5LOq79B94UDeNsGa8=) 3: 5A48B534C6C811ECA5A9AB33C4F9AE02.roa (hash: KxT8vQKIHFK7Gk3hZ5CxcVmRf+RluSRn51YSF+ICMIo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.crl rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S_PofKK5q1lZdiDQT8BUEY1-09k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 00:17:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1081 (0x439) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191B71, serialNumber=4BF3E87CA2B9AB59597620D04FC054118D7ED3D9 Validity Not Before: Oct 5 00:17:23 2026 GMT Not After : Oct 12 00:17:23 2026 GMT Subject: CN=6ac2ec93-5389 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:cf:21:e8:b8:d5:72:bf:c9:85:3e:e1:7c:c1: ff:51:b7:db:61:d6:dd:6a:bb:be:e5:ac:6a:69:33: 24:55:ce:95:41:e1:b9:88:6d:04:31:58:cc:35:c4: 68:ba:22:5f:55:aa:4a:16:7d:cd:98:e6:45:9d:d2: e2:bf:b6:05:20:69:1b:08:4e:fc:b4:74:29:42:6a: aa:3f:2c:a3:a1:16:4d:72:a6:dd:4f:60:10:4b:d8: 21:d8:d4:b1:29:c4:55:ab:c9:25:9e:a9:35:da:20: 97:b0:de:a7:89:8c:2a:21:fb:85:b8:56:d9:59:da: 1d:9a:af:18:4c:47:30:b4:ae:dd:d1:a2:55:51:d1: c0:89:65:de:d5:6e:e3:78:cb:1c:5e:57:2a:07:e7: 2a:a6:bd:4d:7c:7e:45:64:89:2c:7f:6a:18:eb:0c: f8:59:ef:9a:bb:76:58:ed:4c:a3:c4:db:fd:73:ad: 49:2b:08:ec:04:11:59:24:eb:ea:d6:6b:47:14:5b: 06:f7:38:39:bb:f3:54:b6:2d:83:73:f7:98:01:5f: b2:7a:fb:87:ba:d7:e4:17:a1:ca:a9:82:41:84:e0: 9b:68:49:6f:c4:ec:7f:f9:eb:c5:a9:3d:3a:32:47: c9:c5:92:ae:5c:8e:43:a5:0a:e6:de:b9:2c:c5:ce: e6:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:99:77:C4:3C:BF:4A:BD:9E:B0:03:02:29:19:90:00:40:C1:FD:34 X509v3 Authority Key Identifier: keyid:4B:F3:E8:7C:A2:B9:AB:59:59:76:20:D0:4F:C0:54:11:8D:7E:D3:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S_PofKK5q1lZdiDQT8BUEY1-09k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:1c:3d:3f:42:d1:f3:e2:2e:40:09:50:61:25:70:44:3c:fd: b1:e0:80:34:cc:02:ad:61:a3:20:9e:77:e9:76:18:79:5b:80: 3b:25:71:0c:46:42:8d:7d:de:9f:2d:22:73:76:4f:db:3d:38: a2:11:6d:72:1e:4f:15:48:d7:c4:46:d9:11:99:a7:69:19:c2: 32:9d:32:5b:1a:07:7f:58:ca:f9:97:9e:76:0d:a2:29:0f:63: 76:f1:38:6f:e6:cb:09:fd:cf:3c:72:79:68:9e:1b:75:d2:fc: 5b:5d:4e:c3:d6:3d:74:69:3d:63:6e:ef:52:a6:3b:23:d3:c7: 12:4f:97:05:25:86:7e:e5:93:44:a6:d0:17:ab:8f:c3:7b:5e: f2:1c:26:fb:30:10:df:2b:45:cc:cd:e8:eb:91:a6:5d:7e:be: 9f:1f:a5:28:f6:58:ce:27:59:a5:db:ef:62:f1:36:52:c1:a4: d6:55:c4:40:64:df:33:ff:e5:c3:66:a8:2f:e1:d6:aa:77:8b: a9:41:50:62:59:b7:89:6d:47:af:59:de:3f:35:d6:e3:49:97: 6b:52:ed:1a:d5:40:d0:06:b0:5e:00:8e:c3:1e:48:a4:d0:89: 73:ec:a2:18:4e:fa:c2:b3:11:aa:a3:96:ae:bf:e5:c1:d9:5a: c3:24:bb:2c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBDkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFCNzExMTAvBgNVBAUTKDRCRjNFODdDQTJCOUFCNTk1OTc2MjBEMDRGQzA1NDEx OEQ3RUQzRDkwHhcNMjYxMDA1MDAxNzIzWhcNMjYxMDEyMDAxNzIzWjAYMRYwFAYD VQQDEw02YWMyZWM5My01Mzg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAms8h6LjVcr/JhT7hfMH/UbfbYdbdaru+5axqaTMkVc6VQeG5iG0EMVjMNcRo uiJfVapKFn3NmOZFndLiv7YFIGkbCE78tHQpQmqqPyyjoRZNcqbdT2AQS9gh2NSx KcRVq8klnqk12iCXsN6niYwqIfuFuFbZWdodmq8YTEcwtK7d0aJVUdHAiWXe1W7j eMscXlcqB+cqpr1NfH5FZIksf2oY6wz4We+au3ZY7UyjxNv9c61JKwjsBBFZJOvq 1mtHFFsG9zg5u/NUti2Dc/eYAV+yevuHutfkF6HKqYJBhOCbaElvxOx/+evFqT06 MkfJxZKuXI5DpQrm3rksxc7mkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBOZd8Q8 v0q9nrADAikZkABAwf00MB8GA1UdIwQYMBaAFEvz6HyiuatZWXYg0E/AVBGNftPZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUI3MS9CODQ5QkExMkM2 MDQxMUVDQjkwNjkxNUNDNEY5QUUwMi9TX1BvZktLNXExbFpkaURRVDhCVUVZMS0w OWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NfUG9mS0s1cTFsWmRpRFFUOEJVRVkxLTA5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUI3MS9CODQ5QkExMkM2MDQxMUVDQjkwNjkxNUNDNEY5QUUwMi9TX1BvZktLNXEx bFpkaURRVDhCVUVZMS0wOWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKxw9P0LR8+IuQAlQYSVwRDz9seCANMwCrWGjIJ536XYYeVuAOyVxDEZCjX3e ny0ic3ZP2z04ohFtch5PFUjXxEbZEZmnaRnCMp0yWxoHf1jK+Zeedg2iKQ9jdvE4 b+bLCf3PPHJ5aJ4bddL8W11Ow9Y9dGk9Y27vUqY7I9PHEk+XBSWGfuWTRKbQF6uP w3te8hwm+zAQ3ytFzM3o65GmXX6+nx+lKPZYzidZpdvvYvE2UsGk1lXEQGTfM//l w2aoL+HWqneLqUFQYlm3iW1Hr1nePzXW40mXa1LtGtVA0AawXgCOwx5IpNCJc+yi GE76wrMRqqOWrr/lwdlawyS7LA== -----END CERTIFICATE-----Generated at Tue Oct 6 04:07:47 2026 by rpki-client