$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4A13/BB6C9B54B98011EDA37B1B65C4F9AE02/pfsx1NUSX3yarlADNaSA_HeQjxU.mft File: pfsx1NUSX3yarlADNaSA_HeQjxU.mft (raw, json) Hash identifier: mkWxrifD/zS3Sk8XZhAXQe2/cov+oIge6N6FdTE5Gkk= Subject key identifier: A5:02:9C:FF:0B:DE:96:15:9B:A6:5F:A6:C6:8B:3F:AA:21:E3:CF:27 Authority key identifier: A5:FB:31:D4:D5:12:5F:7C:9A:AE:50:03:35:A4:80:FC:77:90:8F:15 Certificate issuer: /CN=A91A4A13/serialNumber=A5FB31D4D5125F7C9AAE500335A480FC77908F15 Certificate serial: 02AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfsx1NUSX3yarlADNaSA_HeQjxU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4A13/BB6C9B54B98011EDA37B1B65C4F9AE02/pfsx1NUSX3yarlADNaSA_HeQjxU.mft Manifest number: 02A5 Signing time: Mon 05 Oct 2026 01:52:09 +0000 Manifest this update: Mon 05 Oct 2026 01:52:08 +0000 Manifest next update: Mon 12 Oct 2026 01:52:08 +0000 Files and hashes: 1: pfsx1NUSX3yarlADNaSA_HeQjxU.crl (hash: qmqg6I6B9/nuTq2NffVEh0UvvZik2vqai8hJB9kngzA=) 2: A8D327E4BBC711ED8DF23C40C4F9AE02.roa (hash: BbJgy4+r5xqumD47JYCsm8jlMt7XgJ8HLQRHYGqlUlQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4A13/BB6C9B54B98011EDA37B1B65C4F9AE02/pfsx1NUSX3yarlADNaSA_HeQjxU.crl rsync://rpki.apnic.net/member_repository/A91A4A13/BB6C9B54B98011EDA37B1B65C4F9AE02/pfsx1NUSX3yarlADNaSA_HeQjxU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfsx1NUSX3yarlADNaSA_HeQjxU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 01:52:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 685 (0x2ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4A13, serialNumber=A5FB31D4D5125F7C9AAE500335A480FC77908F15 Validity Not Before: Oct 5 01:52:08 2026 GMT Not After : Oct 12 01:52:08 2026 GMT Subject: CN=6ac302c9-6994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:49:b0:e6:7a:ab:5a:cc:ad:4c:be:c9:c0:ef: ce:f7:ee:ab:c9:ab:94:19:f2:8e:03:49:e9:47:5a: c2:ba:40:56:89:42:2c:90:df:4b:f0:b9:4b:db:e1: 09:cf:92:96:1e:4e:6c:4b:96:e5:7d:6d:53:ba:4c: 6a:90:11:68:e7:b9:00:f1:ab:e4:5a:5e:9e:c6:29: 2e:61:e3:e2:22:86:06:d5:1c:a7:f7:60:3c:a4:f4: a8:3d:9b:fa:7e:b2:68:1e:79:e3:b6:bd:df:f8:21: b5:35:03:7f:2f:ad:c0:81:58:74:70:16:b1:84:2b: a6:89:0f:ba:d5:46:e7:bd:d5:fe:9e:83:c9:61:65: cd:dd:57:e1:fa:46:e6:e9:bd:fd:e4:b4:a4:a3:23: 9e:fc:6f:7c:97:f2:83:b9:16:ea:e9:1c:2c:35:3a: fe:66:a6:ac:6c:56:a4:9e:ee:0e:4f:96:21:ab:7c: 3d:26:4e:64:8f:17:4f:28:02:86:8a:9b:68:72:9d: 55:7f:26:80:88:d5:e5:1a:5c:a5:18:0b:93:4e:82: 9d:21:de:50:d9:9a:e8:9f:72:76:26:a3:bc:49:15: 00:c6:2c:0f:ff:1a:04:54:97:e1:17:1f:ab:22:1b: 28:f2:5c:62:fc:84:80:8a:1d:99:0d:e0:90:71:55: 37:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:02:9C:FF:0B:DE:96:15:9B:A6:5F:A6:C6:8B:3F:AA:21:E3:CF:27 X509v3 Authority Key Identifier: keyid:A5:FB:31:D4:D5:12:5F:7C:9A:AE:50:03:35:A4:80:FC:77:90:8F:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4A13/BB6C9B54B98011EDA37B1B65C4F9AE02/pfsx1NUSX3yarlADNaSA_HeQjxU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfsx1NUSX3yarlADNaSA_HeQjxU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4A13/BB6C9B54B98011EDA37B1B65C4F9AE02/pfsx1NUSX3yarlADNaSA_HeQjxU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:b2:b9:8a:7e:f9:f4:b1:cd:d6:de:09:b1:ec:4d:1d:de:89: 86:1b:0b:05:25:84:20:fd:bd:f4:6f:a3:6a:9d:24:af:6c:f3: 7b:96:69:02:0f:9d:1f:a2:d6:14:fb:5c:89:c6:74:e1:1a:f7: c2:24:83:ea:84:be:f7:9f:c5:73:8c:da:c1:08:3d:a4:1f:e8: fc:ad:92:46:8b:b7:9e:c0:fd:bb:2d:69:d6:f7:92:8e:63:b5: bf:95:04:5d:e3:46:78:bf:2a:1a:09:b7:88:bd:55:c7:55:b7: 2e:5b:3f:80:6e:67:b8:97:99:4e:33:03:26:62:43:84:45:c8: a0:61:92:fd:9b:21:81:94:87:f6:63:1a:b3:1a:0d:ca:12:05: bb:53:b3:c5:b2:c3:a1:0f:b0:9e:cc:3d:8b:2b:6f:a1:f8:7a: 48:6d:67:c4:be:8a:73:33:49:80:7c:5c:49:44:9e:a1:77:72: 01:67:de:a4:4c:2c:dc:c5:1b:3a:81:8c:37:47:d6:74:21:76: f6:ad:f0:04:b7:4f:ac:ef:2e:c0:b9:93:2d:13:82:54:3f:bd: 79:5f:52:dc:fc:30:8a:e1:e7:29:13:70:1e:c0:5e:cf:f2:7e: 14:04:07:c5:05:96:9f:df:cc:a3:52:17:dc:90:48:15:c9:98: fe:6c:e7:0b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAq0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRBMTMxMTAvBgNVBAUTKEE1RkIzMUQ0RDUxMjVGN0M5QUFFNTAwMzM1QTQ4MEZD Nzc5MDhGMTUwHhcNMjYxMDA1MDE1MjA4WhcNMjYxMDEyMDE1MjA4WjAYMRYwFAYD VQQDEw02YWMzMDJjOS02OTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmEmw5nqrWsytTL7JwO/O9+6ryauUGfKOA0npR1rCukBWiUIskN9L8LlL2+EJ z5KWHk5sS5blfW1TukxqkBFo57kA8avkWl6exikuYePiIoYG1Ryn92A8pPSoPZv6 frJoHnnjtr3f+CG1NQN/L63AgVh0cBaxhCumiQ+61UbnvdX+noPJYWXN3Vfh+kbm 6b395LSkoyOe/G98l/KDuRbq6RwsNTr+ZqasbFaknu4OT5Yhq3w9Jk5kjxdPKAKG iptocp1VfyaAiNXlGlylGAuTToKdId5Q2Zron3J2JqO8SRUAxiwP/xoEVJfhFx+r Ihso8lxi/ISAih2ZDeCQcVU3hQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKUCnP8L 3pYVm6ZfpsaLP6oh488nMB8GA1UdIwQYMBaAFKX7MdTVEl98mq5QAzWkgPx3kI8V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEExMy9CQjZDOUI1NEI5 ODAxMUVEQTM3QjFCNjVDNEY5QUUwMi9wZnN4MU5VU1gzeWFybEFETmFTQV9IZVFq eFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Bmc3gxTlVTWDN5YXJsQUROYVNBX0hlUWp4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEExMy9CQjZDOUI1NEI5ODAxMUVEQTM3QjFCNjVDNEY5QUUwMi9wZnN4MU5VU1gz eWFybEFETmFTQV9IZVFqeFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcbK5in759LHN1t4JsexNHd6JhhsLBSWEIP299G+jap0kr2zze5ZpAg+dH6LW FPtcicZ04Rr3wiSD6oS+95/Fc4zawQg9pB/o/K2SRou3nsD9uy1p1veSjmO1v5UE XeNGeL8qGgm3iL1Vx1W3Lls/gG5nuJeZTjMDJmJDhEXIoGGS/ZshgZSH9mMasxoN yhIFu1OzxbLDoQ+wnsw9iytvofh6SG1nxL6KczNJgHxcSUSeoXdyAWfepEws3MUb OoGMN0fWdCF29q3wBLdPrO8uwLmTLROCVD+9eV9S3PwwiuHnKRNwHsBez/J+FAQH xQWWn9/Mo1IX3JBIFcmY/mznCw== -----END CERTIFICATE-----Generated at Mon Oct 5 05:35:36 2026 by rpki-client