$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft File: PfG7945KTnVEGahIyf0My9LmpFg.mft (raw, json) Hash identifier: OtqK523GOHU2KvLp9p2MajEtH9vlWkkk7VQ+5rodMnc= Subject key identifier: D4:61:B9:58:26:F4:1A:83:BD:84:09:04:D2:73:15:3F:FF:2D:C5:EE Authority key identifier: 3D:F1:BB:F7:8E:4A:4E:75:44:19:A8:48:C9:FD:0C:CB:D2:E6:A4:58 Certificate issuer: /CN=A91C1052/serialNumber=3DF1BBF78E4A4E754419A848C9FD0CCBD2E6A458 Certificate serial: 02B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfG7945KTnVEGahIyf0My9LmpFg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft Manifest number: 02A7 Signing time: Tue 21 Jul 2026 02:40:04 +0000 Manifest this update: Tue 21 Jul 2026 02:40:04 +0000 Manifest next update: Tue 28 Jul 2026 02:40:04 +0000 Files and hashes: 1: PfG7945KTnVEGahIyf0My9LmpFg.crl (hash: rOKOBnDA7NTCfL/39Ieskdvw9LGkFASDybB2uJGdUmo=) 2: D6E2AAC0772911ED95084884C4F9AE02.roa (hash: 9uMRdpoWckw3Fu7tp6GE6C4ygIb26UeNoRv4LKPo7V0=) 3: 74A3C1988E8311ED903ADA1CC4F9AE02.roa (hash: +nejaKv7xuZCKQJRBEYk2kIxhLSRjN7BLyKcA9G8qXE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.crl rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfG7945KTnVEGahIyf0My9LmpFg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 02:40:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 692 (0x2b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1052, serialNumber=3DF1BBF78E4A4E754419A848C9FD0CCBD2E6A458 Validity Not Before: Jul 21 02:40:04 2026 GMT Not After : Jul 28 02:40:04 2026 GMT Subject: CN=6a5edc04-0374 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b6:67:4b:5e:78:ed:d7:20:72:47:18:1c:c0: c9:19:88:ee:a2:68:24:75:68:cc:75:1d:55:05:49: 01:75:fd:26:77:45:5d:5c:f6:e6:3f:b5:a8:5e:2f: 10:bc:cf:11:ad:6e:cd:ae:01:ac:7e:21:dd:75:63: 02:0a:da:37:23:fd:eb:6f:d4:f9:69:a4:fa:d4:43: 7e:65:32:75:a3:a1:f6:fc:64:5f:90:48:04:ef:e1: 28:9a:e2:1a:e7:95:be:61:88:1d:77:03:e7:3e:a7: ef:3c:1b:d9:36:bd:cd:df:61:0d:06:4a:c2:c2:e8: dd:61:ba:95:1b:a5:57:10:86:8c:37:86:dd:e7:04: a3:f8:ae:56:24:e5:bf:de:13:85:e7:b9:82:6f:88: 93:1a:28:2d:fc:a7:91:6e:16:86:a3:21:8a:6f:f1: bd:14:d4:7a:94:9a:33:c0:18:b5:d0:52:0b:c7:9f: a7:92:47:a2:fb:7b:7c:0c:67:17:cc:b5:b9:9a:91: bb:bc:16:db:f4:50:e2:fd:32:e4:69:cd:5e:76:99: 10:cd:bf:ee:40:fd:aa:ea:e3:26:e8:53:27:f7:4e: 26:f1:53:97:7a:ca:5f:e0:df:cc:e5:8d:97:38:e0: fa:7a:a6:5a:fc:1d:7e:ed:30:95:52:77:07:1c:69: 46:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:61:B9:58:26:F4:1A:83:BD:84:09:04:D2:73:15:3F:FF:2D:C5:EE X509v3 Authority Key Identifier: keyid:3D:F1:BB:F7:8E:4A:4E:75:44:19:A8:48:C9:FD:0C:CB:D2:E6:A4:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfG7945KTnVEGahIyf0My9LmpFg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:49:56:f3:95:37:f2:8a:27:d2:33:9d:cc:8a:ac:a7:12:ea: 7c:9c:8d:04:72:b3:21:41:d4:42:9b:f4:4d:f2:fd:64:69:60: 76:20:c3:c0:e0:0f:3c:95:2e:ad:77:07:77:65:a7:d9:5e:a1: df:32:64:21:64:6a:cd:5f:de:e6:46:b4:a1:5a:03:6f:19:03: 90:db:8f:80:53:b9:73:e3:dd:d5:14:06:42:84:b9:89:75:9e: b7:aa:25:b1:0f:f6:b0:82:8c:cd:7c:c2:95:06:dd:fb:80:6e: 0a:0c:54:63:16:5b:6b:5f:57:d0:6a:72:86:4e:98:90:6b:90: 45:aa:8e:fb:3f:d2:42:10:23:1a:35:93:cd:1c:7a:56:73:e8: 8a:13:82:30:d3:12:a9:68:30:3a:64:86:c9:56:1e:34:1c:47: 37:84:a1:af:c0:6e:ff:88:94:a0:7e:c4:78:85:91:1d:a8:40: 77:2e:a2:10:43:b1:9f:f8:de:ce:3c:67:71:13:c5:9f:2a:9e: a8:96:7b:28:64:51:65:45:72:21:a3:27:c6:06:9e:de:42:be: 61:2a:37:5a:29:c5:a5:dd:8c:57:88:55:a1:5e:18:19:17:c8: 8c:c9:df:40:e2:4f:d5:51:40:a0:d9:cc:3e:32:f5:25:71:26: f6:ba:7c:48 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICArQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzEwNTIxMTAvBgNVBAUTKDNERjFCQkY3OEU0QTRFNzU0NDE5QTg0OEM5RkQwQ0NC RDJFNkE0NTgwHhcNMjYwNzIxMDI0MDA0WhcNMjYwNzI4MDI0MDA0WjAYMRYwFAYD VQQDEw02YTVlZGMwNC0wMzc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2LZnS1547dcgckcYHMDJGYjuomgkdWjMdR1VBUkBdf0md0VdXPbmP7WoXi8Q vM8RrW7NrgGsfiHddWMCCto3I/3rb9T5aaT61EN+ZTJ1o6H2/GRfkEgE7+EomuIa 55W+YYgddwPnPqfvPBvZNr3N32ENBkrCwujdYbqVG6VXEIaMN4bd5wSj+K5WJOW/ 3hOF57mCb4iTGigt/KeRbhaGoyGKb/G9FNR6lJozwBi10FILx5+nkkei+3t8DGcX zLW5mpG7vBbb9FDi/TLkac1edpkQzb/uQP2q6uMm6FMn904m8VOXespf4N/M5Y2X OOD6eqZa/B1+7TCVUncHHGlG2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNRhuVgm 9BqDvYQJBNJzFT//LcXuMB8GA1UdIwQYMBaAFD3xu/eOSk51RBmoSMn9DMvS5qRY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTA1Mi84MDZGQjI3Njc3 MjYxMUVEODZEMDk2ODBDNEY5QUUwMi9QZkc3OTQ1S1RuVkVHYWhJeWYwTXk5TG1w RmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BmRzc5NDVLVG5WRUdhaEl5ZjBNeTlMbXBGZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTA1Mi84MDZGQjI3Njc3MjYxMUVEODZEMDk2ODBDNEY5QUUwMi9QZkc3OTQ1S1Ru VkVHYWhJeWYwTXk5TG1wRmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcklW85U38oon0jOdzIqspxLqfJyNBHKzIUHUQpv0TfL9ZGlgdiDDwOAPPJUu rXcHd2Wn2V6h3zJkIWRqzV/e5ka0oVoDbxkDkNuPgFO5c+Pd1RQGQoS5iXWet6ol sQ/2sIKMzXzClQbd+4BuCgxUYxZba19X0Gpyhk6YkGuQRaqO+z/SQhAjGjWTzRx6 VnPoihOCMNMSqWgwOmSGyVYeNBxHN4Shr8Bu/4iUoH7EeIWRHahAdy6iEEOxn/je zjxncRPFnyqeqJZ7KGRRZUVyIaMnxgae3kK+YSo3WinFpd2MV4hVoV4YGRfIjMnf QOJP1VFAoNnMPjL1JXEm9rp8SA== -----END CERTIFICATE-----Generated at Tue Jul 21 23:15:27 2026 by rpki-client