$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft File: PfG7945KTnVEGahIyf0My9LmpFg.mft (raw, json) Hash identifier: rFv1LrkSuXD0P9R9h1EnkBzHkiv1yGbj29DfWE9ey3k= Subject key identifier: 6D:2A:A3:AC:70:93:30:6E:69:CA:3D:60:87:ED:66:41:3C:87:ED:04 Authority key identifier: 3D:F1:BB:F7:8E:4A:4E:75:44:19:A8:48:C9:FD:0C:CB:D2:E6:A4:58 Certificate issuer: /CN=A91C1052/serialNumber=3DF1BBF78E4A4E754419A848C9FD0CCBD2E6A458 Certificate serial: 02DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfG7945KTnVEGahIyf0My9LmpFg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft Manifest number: 02CD Signing time: Sat 03 Oct 2026 01:49:03 +0000 Manifest this update: Sat 03 Oct 2026 01:49:02 +0000 Manifest next update: Sat 10 Oct 2026 01:49:02 +0000 Files and hashes: 1: PfG7945KTnVEGahIyf0My9LmpFg.crl (hash: Axw2LwqU6g3hh18FoQsItQceiDOlbCH6p4iWx+fwcwU=) 2: D6E2AAC0772911ED95084884C4F9AE02.roa (hash: 9uMRdpoWckw3Fu7tp6GE6C4ygIb26UeNoRv4LKPo7V0=) 3: 74A3C1988E8311ED903ADA1CC4F9AE02.roa (hash: +nejaKv7xuZCKQJRBEYk2kIxhLSRjN7BLyKcA9G8qXE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.crl rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfG7945KTnVEGahIyf0My9LmpFg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 01:49:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 730 (0x2da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1052, serialNumber=3DF1BBF78E4A4E754419A848C9FD0CCBD2E6A458 Validity Not Before: Oct 3 01:49:02 2026 GMT Not After : Oct 10 01:49:02 2026 GMT Subject: CN=6ac05f0e-0c9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ac:15:df:2f:09:dd:19:49:61:56:d3:ae:4d: 17:27:1a:a1:4c:c3:d4:b7:fa:9c:64:c9:39:48:f5: db:fe:e9:90:b4:42:0b:ea:39:55:08:c0:e9:32:0f: dd:b2:96:eb:cd:8f:04:52:b1:5e:00:ee:35:ba:5f: fe:c2:4c:61:14:8c:23:aa:78:f3:82:92:1a:03:9d: a8:9e:39:43:4c:1e:c1:5b:ec:40:e4:78:1e:b8:09: b7:4d:88:ab:9f:83:21:9b:79:44:4b:c1:38:d1:88: 0c:33:42:17:df:9e:16:bb:a5:7f:8f:6a:cf:3d:fb: 83:1b:27:a3:a2:14:f2:1d:15:6f:3f:a6:27:34:49: 57:d2:29:79:7f:49:33:b3:63:2b:26:1f:fc:45:4f: 59:de:a7:ff:5e:d8:06:fc:6e:a5:29:b8:2d:36:c8: 79:8c:d4:e3:b2:2b:be:b6:cd:20:39:7f:76:7f:ef: f3:b6:f6:d5:69:c2:e4:86:c7:a8:38:7f:51:3e:3e: f3:1b:22:b4:40:e0:22:e1:3c:e4:20:9d:b0:5d:6c: 18:d2:2d:45:29:d9:4a:02:36:73:97:a6:d7:f9:06: 14:00:7b:e5:b0:5c:44:ab:37:1f:44:16:36:92:88: 3f:05:ec:e7:5f:9b:46:e6:19:a7:96:85:32:a1:e7: a8:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:2A:A3:AC:70:93:30:6E:69:CA:3D:60:87:ED:66:41:3C:87:ED:04 X509v3 Authority Key Identifier: keyid:3D:F1:BB:F7:8E:4A:4E:75:44:19:A8:48:C9:FD:0C:CB:D2:E6:A4:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfG7945KTnVEGahIyf0My9LmpFg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:0a:45:80:42:82:fe:53:9d:6c:9e:3d:76:c2:10:fe:3d:fb: 04:88:80:48:e2:aa:4b:aa:85:d3:db:d6:a1:9d:34:bf:aa:36: 4c:93:d2:08:1b:ef:a6:03:7b:46:be:aa:49:5e:8f:cd:7c:64: d4:42:26:8e:fb:5f:11:41:93:2e:09:a4:98:09:38:99:11:09: 22:3a:af:27:e3:83:e9:9a:22:d6:a7:f1:08:3c:f2:8e:d5:38: ce:d8:85:83:d6:87:99:a2:09:03:05:00:d8:42:bc:ec:fa:e1: 28:83:06:82:bd:bf:9b:50:49:2a:cd:67:f4:d3:a5:25:1e:e4: 88:24:8c:c8:81:84:8a:d6:0c:c9:de:3c:c1:b1:af:2d:2c:3e: 92:48:1b:3d:23:32:a5:95:56:6c:08:2e:bf:7a:ca:bb:f0:f6: b8:56:2f:5b:72:93:b2:68:01:c5:2b:a7:40:08:a4:1e:61:6c: 67:a4:49:e9:2b:d2:de:04:9b:8d:98:7f:85:6b:bd:8f:70:a6: 64:d2:ef:f3:ce:b1:82:fc:a7:d5:cc:ec:a5:4f:89:86:e3:ed: 77:1b:85:a8:7b:9f:f5:3a:0d:1f:d8:bc:24:a6:19:6d:3b:74: 6d:39:29:22:f7:15:a0:1a:71:80:b9:5a:4c:21:69:86:ae:f3: 42:f7:9d:f6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAtowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzEwNTIxMTAvBgNVBAUTKDNERjFCQkY3OEU0QTRFNzU0NDE5QTg0OEM5RkQwQ0NC RDJFNkE0NTgwHhcNMjYxMDAzMDE0OTAyWhcNMjYxMDEwMDE0OTAyWjAYMRYwFAYD VQQDEw02YWMwNWYwZS0wYzliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuawV3y8J3RlJYVbTrk0XJxqhTMPUt/qcZMk5SPXb/umQtEIL6jlVCMDpMg/d spbrzY8EUrFeAO41ul/+wkxhFIwjqnjzgpIaA52onjlDTB7BW+xA5HgeuAm3TYir n4Mhm3lES8E40YgMM0IX354Wu6V/j2rPPfuDGyejohTyHRVvP6YnNElX0il5f0kz s2MrJh/8RU9Z3qf/XtgG/G6lKbgtNsh5jNTjsiu+ts0gOX92f+/ztvbVacLkhseo OH9RPj7zGyK0QOAi4TzkIJ2wXWwY0i1FKdlKAjZzl6bX+QYUAHvlsFxEqzcfRBY2 kog/BeznX5tG5hmnloUyoeeoFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG0qo6xw kzBuaco9YIftZkE8h+0EMB8GA1UdIwQYMBaAFD3xu/eOSk51RBmoSMn9DMvS5qRY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTA1Mi84MDZGQjI3Njc3 MjYxMUVEODZEMDk2ODBDNEY5QUUwMi9QZkc3OTQ1S1RuVkVHYWhJeWYwTXk5TG1w RmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BmRzc5NDVLVG5WRUdhaEl5ZjBNeTlMbXBGZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTA1Mi84MDZGQjI3Njc3MjYxMUVEODZEMDk2ODBDNEY5QUUwMi9QZkc3OTQ1S1Ru VkVHYWhJeWYwTXk5TG1wRmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACwpFgEKC/lOdbJ49dsIQ/j37BIiASOKqS6qF09vWoZ00v6o2TJPSCBvvpgN7 Rr6qSV6PzXxk1EImjvtfEUGTLgmkmAk4mREJIjqvJ+OD6Zoi1qfxCDzyjtU4ztiF g9aHmaIJAwUA2EK87PrhKIMGgr2/m1BJKs1n9NOlJR7kiCSMyIGEitYMyd48wbGv LSw+kkgbPSMypZVWbAguv3rKu/D2uFYvW3KTsmgBxSunQAikHmFsZ6RJ6SvS3gSb jZh/hWu9j3CmZNLv886xgvyn1czspU+JhuPtdxuFqHuf9ToNH9i8JKYZbTt0bTkp IvcVoBpxgLlaTCFphq7zQved9g== -----END CERTIFICATE-----Generated at Sun Oct 4 11:20:51 2026 by rpki-client