$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B2D85/9C21FE0C347911F18A5D1F3BA8833773/PbNMuLW9apns99UpKJE-ZSWnHF8.mft File: PbNMuLW9apns99UpKJE-ZSWnHF8.mft (raw, json) Hash identifier: KpYKuZ+k1zFiOZzUot9x8L55bFaKlZUvu0ZX17mbYIY= Subject key identifier: 07:42:AB:DE:96:0B:09:D9:6E:E6:1D:91:DB:93:B9:80:39:07:B4:9D Authority key identifier: 3D:B3:4C:B8:B5:BD:6A:99:EC:F7:D5:29:28:91:3E:65:25:A7:1C:5F Certificate issuer: /CN=A91B2D85/serialNumber=3DB34CB8B5BD6A99ECF7D52928913E6525A71C5F Certificate serial: 6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbNMuLW9apns99UpKJE-ZSWnHF8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D85/9C21FE0C347911F18A5D1F3BA8833773/PbNMuLW9apns99UpKJE-ZSWnHF8.mft Manifest number: 68 Signing time: Fri 23 Oct 2026 08:36:50 +0000 Manifest this update: Fri 23 Oct 2026 08:36:49 +0000 Manifest next update: Fri 30 Oct 2026 08:36:49 +0000 Files and hashes: 1: PbNMuLW9apns99UpKJE-ZSWnHF8.crl (hash: 72Ps4lGi1HosCbBbtC8TGtgzi27sI08Gvzp6GXm+7Xo=) 2: F41AA87837C311F1976C4134BE833773.roa (hash: +641YeMPVXU1XF3EY/Wo8DEhhBoEin7Q7KVnql2z71o=) 3: E21E9FE0347F11F19DF6F99AA9833773.roa (hash: D7+bSA2LIBJFLG6B18pSyvGelNlmr8zMF7Fhiy0Ow1c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2D85/9C21FE0C347911F18A5D1F3BA8833773/PbNMuLW9apns99UpKJE-ZSWnHF8.crl rsync://rpki.apnic.net/member_repository/A91B2D85/9C21FE0C347911F18A5D1F3BA8833773/PbNMuLW9apns99UpKJE-ZSWnHF8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbNMuLW9apns99UpKJE-ZSWnHF8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Oct 2026 08:36:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 107 (0x6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2D85, serialNumber=3DB34CB8B5BD6A99ECF7D52928913E6525A71C5F Validity Not Before: Oct 23 08:36:49 2026 GMT Not After : Oct 30 08:36:49 2026 GMT Subject: CN=6adb1ca2-5f4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b7:52:d0:3d:8d:da:46:cb:10:be:e6:03:0b: 8c:71:f1:02:3f:01:29:d1:10:2b:78:97:ce:77:04: 81:ef:f6:4a:ba:48:21:e4:6a:e1:20:18:02:89:0f: 6e:e5:f6:6b:38:5c:36:f9:a0:e5:b0:dd:46:1c:ce: 1a:27:f1:9e:3e:ef:eb:60:ca:83:9a:2b:03:44:46: c1:1c:82:33:fe:44:1d:8d:4c:4c:07:3c:33:00:85: 81:a9:36:3c:e6:53:b9:1d:87:5d:71:e1:ef:34:0d: 64:cf:9b:94:93:63:c9:e2:7f:d4:55:83:2a:e9:d6: c9:bf:4f:7a:8f:66:54:84:22:d8:2a:12:89:89:4b: 22:dc:01:ba:ca:74:cb:8a:d6:ad:d3:65:e2:bb:a6: 43:1a:0b:30:bf:e2:85:34:2e:6c:d2:af:8a:ed:42: 4e:f2:03:4f:d1:35:b7:73:c2:94:55:59:9a:2e:6f: 6c:1e:6d:b7:14:c2:c0:8e:7c:9f:8e:a7:8a:4f:2e: a2:a6:db:06:e3:44:b1:19:73:cd:b3:63:cb:51:23: 5b:01:fc:7f:d9:b1:77:8c:20:dc:ec:30:85:50:85: 73:22:85:a1:83:50:e6:65:3c:2f:b0:be:c5:17:19: fc:42:d2:5e:b9:36:67:0f:18:9b:a0:bc:4b:d3:84: 4c:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:42:AB:DE:96:0B:09:D9:6E:E6:1D:91:DB:93:B9:80:39:07:B4:9D X509v3 Authority Key Identifier: keyid:3D:B3:4C:B8:B5:BD:6A:99:EC:F7:D5:29:28:91:3E:65:25:A7:1C:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2D85/9C21FE0C347911F18A5D1F3BA8833773/PbNMuLW9apns99UpKJE-ZSWnHF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbNMuLW9apns99UpKJE-ZSWnHF8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D85/9C21FE0C347911F18A5D1F3BA8833773/PbNMuLW9apns99UpKJE-ZSWnHF8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:e8:be:61:67:ea:49:67:b4:ab:cb:74:41:08:e8:a4:a1:1d: f0:df:a4:29:a2:4d:bc:db:9a:c8:9a:66:99:0b:28:c7:71:2a: e1:23:6e:f6:6c:69:e9:bd:c2:03:e2:be:40:3c:70:b3:fb:f5: bd:d5:c2:41:66:2a:81:46:06:98:aa:d1:c2:b2:fc:d3:fb:2c: c9:a8:1c:87:81:5f:c3:f8:74:d5:4a:4f:83:72:45:8a:f4:08: 4c:44:51:94:49:54:ac:17:fd:5a:c3:5e:8e:fa:82:d9:bc:59: 75:f8:8f:7b:11:87:8d:0d:44:51:0f:7a:bd:51:67:92:32:c8: 7e:7b:05:16:e1:18:e5:52:8a:b7:51:e3:78:69:33:06:54:cd: 20:53:c1:dd:e7:a5:6d:db:eb:b7:97:9a:54:4e:a3:a6:2c:a7: ee:0a:2e:ec:f4:83:53:a3:9a:24:de:18:7f:71:88:ce:b7:b9: ad:6d:48:58:9d:6b:22:1e:c7:d5:6c:bf:79:92:08:f0:89:36: d1:00:e2:17:b8:92:dd:b3:bd:aa:18:de:ed:36:d5:f1:9f:78: 3e:82:85:2d:2b:5b:46:55:b2:e5:34:8e:ab:d4:6f:09:d0:2c: fd:cd:3b:e1:38:fc:ae:c2:79:fc:2e:d4:70:3c:cc:88:a7:df: 3a:17:45:37 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBazANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MkQ4NTExMC8GA1UEBRMoM0RCMzRDQjhCNUJENkE5OUVDRjdENTI5Mjg5MTNFNjUy NUE3MUM1RjAeFw0yNjEwMjMwODM2NDlaFw0yNjEwMzAwODM2NDlaMBgxFjAUBgNV BAMTDTZhZGIxY2EyLTVmNGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/t1LQPY3aRssQvuYDC4xx8QI/ASnRECt4l853BIHv9kq6SCHkauEgGAKJD27l 9ms4XDb5oOWw3UYczhon8Z4+7+tgyoOaKwNERsEcgjP+RB2NTEwHPDMAhYGpNjzm U7kdh11x4e80DWTPm5STY8nif9RVgyrp1sm/T3qPZlSEItgqEomJSyLcAbrKdMuK 1q3TZeK7pkMaCzC/4oU0LmzSr4rtQk7yA0/RNbdzwpRVWZoub2webbcUwsCOfJ+O p4pPLqKm2wbjRLEZc82zY8tRI1sB/H/ZsXeMINzsMIVQhXMihaGDUOZlPC+wvsUX GfxC0l65NmcPGJugvEvThEwnAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUB0Kr3pYL Cdlu5h2R25O5gDkHtJ0wHwYDVR0jBBgwFoAUPbNMuLW9apns99UpKJE+ZSWnHF8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIyRDg1LzlDMjFGRTBDMzQ3 OTExRjE4QTVEMUYzQkE4ODMzNzczL1BiTk11TFc5YXBuczk5VXBLSkUtWlNXbkhG OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUGJOTXVMVzlhcG5zOTlVcEtKRS1aU1duSEY4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIy RDg1LzlDMjFGRTBDMzQ3OTExRjE4QTVEMUYzQkE4ODMzNzczL1BiTk11TFc5YXBu czk5VXBLSkUtWlNXbkhGOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBd6L5hZ+pJZ7Sry3RBCOikoR3w36Qpok2825rImmaZCyjHcSrhI272bGnpvcID 4r5APHCz+/W91cJBZiqBRgaYqtHCsvzT+yzJqByHgV/D+HTVSk+DckWK9AhMRFGU SVSsF/1aw16O+oLZvFl1+I97EYeNDURRD3q9UWeSMsh+ewUW4RjlUoq3UeN4aTMG VM0gU8Hd56Vt2+u3l5pUTqOmLKfuCi7s9INTo5ok3hh/cYjOt7mtbUhYnWsiHsfV bL95kgjwiTbRAOIXuJLds72qGN7tNtXxn3g+goUtK1tGVbLlNI6r1G8J0Cz9zTvh OPyuwnn8LtRwPMyIp986F0U3 -----END CERTIFICATE-----Generated at Sun Oct 25 04:54:29 2026 by rpki-client