$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.mft File: PenT3_bgSP2QgUZQLk8I5Fbz2bw.mft (raw, json) Hash identifier: hwKAQbLSXJw/pLvv9z/n15Kf1mDBXMJVK4NzvqQH4M4= Subject key identifier: 97:F4:B0:45:7A:AB:14:98:20:23:DD:CA:3A:D3:53:65:A6:75:21:FB Authority key identifier: 3D:E9:D3:DF:F6:E0:48:FD:90:81:46:50:2E:4F:08:E4:56:F3:D9:BC Certificate issuer: /CN=A91CB7AB/serialNumber=3DE9D3DFF6E048FD908146502E4F08E456F3D9BC Certificate serial: 0936 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PenT3_bgSP2QgUZQLk8I5Fbz2bw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.mft Manifest number: 088F Signing time: Thu 20 Aug 2026 21:11:37 +0000 Manifest this update: Thu 20 Aug 2026 21:11:36 +0000 Manifest next update: Thu 27 Aug 2026 21:11:36 +0000 Files and hashes: 1: PenT3_bgSP2QgUZQLk8I5Fbz2bw.crl (hash: IbTPIsPc1shGkDSzVXFywkQB5jcEwO0irPPPznJSs68=) 2: E2FEA6DA3E5411EF9B398D2DC4F9AE02.roa (hash: 4maJF9WUbj7sjherc9bKMjHY3wXl4HcmhFEcf5r/F/Q=) 3: 5CDB2402FD6D11EE951DE436C4F9AE02.roa (hash: GPPwnFCIcpt0RgF++70GuCleWCDXuGcVYR4o3iza94k=) 4: 5B2236E6FD6D11EE951DE436C4F9AE02.roa (hash: wVxc6nx/JmhL7VCPOsNGEB8sGimUMjqS6K/WHE14sqo=) 5: 0112375EA05411EDB043385AC4F9AE02.roa (hash: wt7sHeBZYX3+ynpGbSY8k/1ymNfDI2lkoFnaTMVP/Ps=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.crl rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PenT3_bgSP2QgUZQLk8I5Fbz2bw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 10:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2358 (0x936) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB7AB, serialNumber=3DE9D3DFF6E048FD908146502E4F08E456F3D9BC Validity Not Before: Aug 20 21:11:36 2026 GMT Not After : Aug 27 21:11:36 2026 GMT Subject: CN=6a876d89-46b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:9b:8f:c7:3f:48:d1:e8:eb:a9:e8:e3:db:af: bd:c6:ac:74:25:47:82:a9:c5:a7:af:8e:ef:45:49: 20:97:ff:c4:c5:17:ff:44:7a:80:80:f0:e8:49:b1: 4f:7d:30:18:a2:66:43:17:86:43:32:79:a4:91:6e: 9e:97:98:fd:af:b9:9b:04:0d:0c:da:ef:07:89:67: f6:53:4b:b2:6f:0e:6b:80:73:cd:a4:92:f7:84:cc: b9:72:18:53:76:bf:f0:c5:e5:aa:6b:2f:ce:3e:b9: 7b:2a:fb:02:bd:f8:7f:c9:e8:f4:44:42:03:12:64: 85:1a:ea:f5:2f:1b:9c:b5:ef:f3:19:f5:4a:15:79: 01:2a:de:fe:dd:d1:31:cc:ce:92:0c:ae:d4:7a:c3: fe:a1:50:9b:a2:d2:68:ea:51:d2:7b:69:4f:3a:1a: 1b:1f:ae:e8:46:e2:96:33:88:c3:0a:3e:78:58:4a: 1b:1c:64:df:0f:40:5d:ba:dc:f7:c8:13:8c:01:71: c4:00:96:76:41:2e:04:f9:fa:dc:ff:cb:b4:c2:11: 21:17:b9:59:89:6d:8c:ba:5c:24:16:d4:e0:b8:13: ca:f4:a4:26:93:2a:66:7b:73:c9:b7:f2:64:82:36: 86:76:9b:da:10:12:b0:e9:3d:c0:a0:17:1c:29:a2: f3:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:F4:B0:45:7A:AB:14:98:20:23:DD:CA:3A:D3:53:65:A6:75:21:FB X509v3 Authority Key Identifier: keyid:3D:E9:D3:DF:F6:E0:48:FD:90:81:46:50:2E:4F:08:E4:56:F3:D9:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PenT3_bgSP2QgUZQLk8I5Fbz2bw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:b5:75:35:02:1b:c4:5d:41:38:33:79:25:9b:2e:45:d3:d9: 3f:ca:74:d7:09:30:94:ce:8b:02:7d:cf:b2:9a:7f:61:52:2d: 0a:42:a3:8b:f2:2f:70:b4:39:be:28:14:ce:64:a2:33:0b:10: ff:9d:4d:e0:9f:0f:73:d7:b3:84:8a:84:06:17:1f:b4:1d:c2: f0:86:86:37:e4:4d:c4:27:c9:ba:80:dc:74:08:f2:99:03:2e: 62:78:ba:da:21:bc:c5:3b:ba:a9:22:23:b5:36:08:c1:97:b0: f7:ec:cd:39:c3:64:a2:8d:5b:9e:d4:3d:dc:8d:0f:03:79:2b: ba:23:e0:82:82:e3:27:11:cd:b6:1b:6e:94:07:25:43:29:89: 61:70:81:ac:8e:e2:8a:24:c6:52:1d:e9:6b:05:b2:4b:94:03: ac:51:bc:77:a7:15:09:40:35:21:ab:33:a3:e9:23:74:e8:70: 0e:59:ac:1c:91:d2:f5:c9:f6:1a:d1:ed:57:4c:84:d7:6d:ee: 6b:a4:62:a0:a6:a4:44:1b:4a:1c:2d:2d:8f:72:9f:1f:7f:33: ef:ca:65:28:6f:e3:20:3c:e6:9c:c8:61:d2:23:b6:b4:5e:de: 5d:94:36:8d:1a:80:f8:64:29:cc:70:6a:6f:4b:95:da:37:65: 80:fb:06:50 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCTYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I3QUIxMTAvBgNVBAUTKDNERTlEM0RGRjZFMDQ4RkQ5MDgxNDY1MDJFNEYwOEU0 NTZGM0Q5QkMwHhcNMjYwODIwMjExMTM2WhcNMjYwODI3MjExMTM2WjAYMRYwFAYD VQQDEw02YTg3NmQ4OS00NmIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqZuPxz9I0ejrqejj26+9xqx0JUeCqcWnr47vRUkgl//ExRf/RHqAgPDoSbFP fTAYomZDF4ZDMnmkkW6el5j9r7mbBA0M2u8HiWf2U0uybw5rgHPNpJL3hMy5chhT dr/wxeWqay/OPrl7KvsCvfh/yej0REIDEmSFGur1Lxucte/zGfVKFXkBKt7+3dEx zM6SDK7UesP+oVCbotJo6lHSe2lPOhobH67oRuKWM4jDCj54WEobHGTfD0Bdutz3 yBOMAXHEAJZ2QS4E+frc/8u0whEhF7lZiW2MulwkFtTguBPK9KQmkypme3PJt/Jk gjaGdpvaEBKw6T3AoBccKaLzXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJf0sEV6 qxSYICPdyjrTU2WmdSH7MB8GA1UdIwQYMBaAFD3p09/24Ej9kIFGUC5PCORW89m8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjdBQi81Njc4NjU2ODQw MDkxMUVCQTM3NDIyNUJDNEY5QUUwMi9QZW5UM19iZ1NQMlFnVVpRTGs4STVGYnoy YncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BlblQzX2JnU1AyUWdVWlFMazhJNUZiejJidy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjdBQi81Njc4NjU2ODQwMDkxMUVCQTM3NDIyNUJDNEY5QUUwMi9QZW5UM19iZ1NQ MlFnVVpRTGs4STVGYnoyYncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvbV1NQIbxF1BODN5JZsuRdPZP8p01wkwlM6LAn3Pspp/YVItCkKji/IvcLQ5 vigUzmSiMwsQ/51N4J8Pc9ezhIqEBhcftB3C8IaGN+RNxCfJuoDcdAjymQMuYni6 2iG8xTu6qSIjtTYIwZew9+zNOcNkoo1bntQ93I0PA3kruiPggoLjJxHNthtulAcl QymJYXCBrI7iiiTGUh3pawWyS5QDrFG8d6cVCUA1Iaszo+kjdOhwDlmsHJHS9cn2 GtHtV0yE123ua6RioKakRBtKHC0tj3KfH38z78plKG/jIDzmnMhh0iO2tF7eXZQ2 jRqA+GQpzHBqb0uV2jdlgPsGUA== -----END CERTIFICATE-----Generated at Thu Aug 20 22:54:02 2026 by rpki-client