$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A423D/B9769BD8B09511F08C152778C4F9AE02/PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.mft File: PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.mft (raw, json) Hash identifier: sOdiDC/jvxBrtkmH1WcV8f4VvQhhHTtWP84NTdRxhaE= Subject key identifier: EC:43:62:7D:69:A1:1F:60:71:07:E2:62:30:FE:EE:1F:85:33:A3:C3 Authority key identifier: 3C:CE:EB:9D:20:59:CF:E9:F6:08:56:77:D4:B7:FA:26:4F:53:3A:0F Certificate issuer: /CN=A91A423D/serialNumber=3CCEEB9D2059CFE9F6085677D4B7FA264F533A0F Certificate serial: C3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A423D/B9769BD8B09511F08C152778C4F9AE02/PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.mft Manifest number: BD Signing time: Sat 17 Oct 2026 07:38:50 +0000 Manifest this update: Sat 17 Oct 2026 07:38:50 +0000 Manifest next update: Sat 24 Oct 2026 07:38:50 +0000 Files and hashes: 1: PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.crl (hash: tMKfm9eUCO6P0suZc4eEcUBH1b66Qtm2CR3+iTcM7iw=) 2: 2ECF71C4B0A111F0B537573FC4F9AE02.roa (hash: 2OKnQg5qjmkKGEleLvBDwSd2bcC+02+QaHkt9b4fvyA=) 3: DEE9FAB2B0A011F0B752B713C4F9AE02.roa (hash: N9DbzZhWjh9222Zzdpzo8MyanGXgo1s4o7cCfBAxME8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A423D/B9769BD8B09511F08C152778C4F9AE02/PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.crl rsync://rpki.apnic.net/member_repository/A91A423D/B9769BD8B09511F08C152778C4F9AE02/PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Oct 2026 06:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 195 (0xc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A423D, serialNumber=3CCEEB9D2059CFE9F6085677D4B7FA264F533A0F Validity Not Before: Oct 17 07:38:50 2026 GMT Not After : Oct 24 07:38:50 2026 GMT Subject: CN=6ad3260a-193b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a0:13:5e:08:64:45:b4:52:e8:03:87:fd:b8: f6:88:6b:58:e6:53:da:f8:8f:ba:98:7b:86:46:b1: 05:dc:74:7e:80:b8:36:a7:a2:a8:91:09:49:65:d6: 66:f9:98:32:b5:ec:79:b1:43:9a:55:d9:41:77:f9: 2d:3d:03:ae:e9:6d:56:f2:5a:56:17:99:99:d7:4d: ad:2c:35:61:e3:e5:a6:95:2b:cf:82:fb:05:79:8e: 2c:a2:20:f4:30:46:ba:f0:e5:9a:e6:c9:5f:47:13: 1f:7e:95:af:30:a4:27:ee:0d:c8:da:17:aa:22:9b: 33:7b:5e:86:73:46:3b:49:da:b2:f5:b2:a8:68:92: 6c:94:2c:48:bd:02:4e:de:ab:93:5a:c9:a5:a3:86: eb:6b:63:0a:e1:d7:d0:c2:b1:10:d4:34:d9:44:53: 8e:22:9e:c2:1b:ee:1b:24:3c:0f:3a:85:79:67:4c: 23:1b:17:8c:a4:00:e7:51:19:09:63:f7:93:90:cd: 59:c4:b2:f6:5b:35:cd:17:ad:15:9a:1e:2c:65:1d: 80:25:c5:16:10:b4:ad:a2:6d:9f:82:00:ef:74:7b: bd:a2:20:6f:6d:ed:5e:22:f2:d7:46:0a:be:ba:c4: 02:ad:07:4d:da:33:c7:69:3f:ca:0e:1c:e9:36:4b: 35:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:43:62:7D:69:A1:1F:60:71:07:E2:62:30:FE:EE:1F:85:33:A3:C3 X509v3 Authority Key Identifier: keyid:3C:CE:EB:9D:20:59:CF:E9:F6:08:56:77:D4:B7:FA:26:4F:53:3A:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A423D/B9769BD8B09511F08C152778C4F9AE02/PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A423D/B9769BD8B09511F08C152778C4F9AE02/PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:66:51:e7:aa:76:8e:48:42:7d:57:1f:be:08:ae:78:74:1a: dc:90:fc:f1:30:7f:f3:4d:6a:cc:ab:3f:a4:4f:03:92:2b:a1: ee:4f:1e:39:d0:0f:47:4d:d8:30:77:59:59:17:f5:d2:e5:d0: e0:22:ed:a0:8e:04:04:f9:71:cc:10:e7:b0:17:81:70:e1:60: a7:ed:69:13:71:b5:51:f3:4e:49:fa:e0:ac:a2:6a:db:3f:92: d4:16:1b:76:a3:da:b6:db:89:38:69:2d:81:04:b4:e7:37:90: df:f2:5c:5d:f2:4f:ea:81:b0:7a:02:2c:10:91:62:21:63:eb: 5e:70:03:d0:dc:de:39:67:a6:20:d7:c1:5b:aa:95:a5:06:a0: 46:e7:c8:e1:7e:e7:18:fc:b5:96:97:76:7c:1b:c1:16:c6:aa: 20:8f:81:f5:5c:c6:0e:18:d6:04:c8:fd:d4:47:58:9c:cd:a6: f7:6e:c0:ba:07:3a:3c:53:be:e2:b0:12:2a:99:ef:5b:99:5b: e8:56:5d:01:4b:37:28:20:cc:e6:5b:25:a1:a0:51:16:f2:50: f6:71:dc:03:44:39:81:ff:a0:cd:ef:75:c5:88:92:a7:d9:9d: 19:96:02:85:81:fb:74:1b:72:dd:00:36:ca:ba:f7:7e:ab:c8: f0:58:86:da -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQyM0QxMTAvBgNVBAUTKDNDQ0VFQjlEMjA1OUNGRTlGNjA4NTY3N0Q0QjdGQTI2 NEY1MzNBMEYwHhcNMjYxMDE3MDczODUwWhcNMjYxMDI0MDczODUwWjAYMRYwFAYD VQQDEw02YWQzMjYwYS0xOTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwKATXghkRbRS6AOH/bj2iGtY5lPa+I+6mHuGRrEF3HR+gLg2p6KokQlJZdZm +Zgytex5sUOaVdlBd/ktPQOu6W1W8lpWF5mZ102tLDVh4+WmlSvPgvsFeY4soiD0 MEa68OWa5slfRxMffpWvMKQn7g3I2heqIpsze16Gc0Y7Sdqy9bKoaJJslCxIvQJO 3quTWsmlo4bra2MK4dfQwrEQ1DTZRFOOIp7CG+4bJDwPOoV5Z0wjGxeMpADnURkJ Y/eTkM1ZxLL2WzXNF60Vmh4sZR2AJcUWELStom2fggDvdHu9oiBvbe1eIvLXRgq+ usQCrQdN2jPHaT/KDhzpNks1TQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOxDYn1p oR9gcQfiYjD+7h+FM6PDMB8GA1UdIwQYMBaAFDzO650gWc/p9ghWd9S3+iZPUzoP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDIzRC9COTc2OUJEOEIw OTUxMUYwOEMxNTI3NzhDNEY5QUUwMi9QTTdyblNCWnotbjJDRlozMUxmNkprOVRP ZzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1BNN3JuU0Jaei1uMkNGWjMxTGY2Sms5VE9nOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDIzRC9COTc2OUJEOEIwOTUxMUYwOEMxNTI3NzhDNEY5QUUwMi9QTTdyblNCWnot bjJDRlozMUxmNkprOVRPZzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAM2ZR56p2jkhCfVcfvgiueHQa3JD88TB/801qzKs/pE8Dkiuh7k8eOdAPR03Y MHdZWRf10uXQ4CLtoI4EBPlxzBDnsBeBcOFgp+1pE3G1UfNOSfrgrKJq2z+S1BYb dqPattuJOGktgQS05zeQ3/JcXfJP6oGwegIsEJFiIWPrXnAD0NzeOWemINfBW6qV pQagRufI4X7nGPy1lpd2fBvBFsaqII+B9VzGDhjWBMj91EdYnM2m927Augc6PFO+ 4rASKpnvW5lb6FZdAUs3KCDM5lsloaBRFvJQ9nHcA0Q5gf+gze91xYiSp9mdGZYC hYH7dBty3QA2yrr3fqvI8FiG2g== -----END CERTIFICATE-----Generated at Sat Oct 17 15:47:46 2026 by rpki-client