$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CED30/BE80C6A6AE1E11EEA7EA0A77C4F9AE02/PgzfiCrujHIh1YijxSYBjh1kyWg.mft File: PgzfiCrujHIh1YijxSYBjh1kyWg.mft (raw, json) Hash identifier: t+e0dQ1Hj7xMAQH5+JDTtgHz67E+2UKAW06gVtAbDTs= Subject key identifier: 8A:22:3B:5D:0E:D2:F0:B5:60:B8:C9:0A:F0:D5:A7:45:37:DF:9C:C3 Authority key identifier: 3E:0C:DF:88:2A:EE:8C:72:21:D5:88:A3:C5:26:01:8E:1D:64:C9:68 Certificate issuer: /CN=A91CED30/serialNumber=3E0CDF882AEE8C7221D588A3C526018E1D64C968 Certificate serial: 020A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PgzfiCrujHIh1YijxSYBjh1kyWg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CED30/BE80C6A6AE1E11EEA7EA0A77C4F9AE02/PgzfiCrujHIh1YijxSYBjh1kyWg.mft Manifest number: 0205 Signing time: Wed 07 Oct 2026 03:34:25 +0000 Manifest this update: Wed 07 Oct 2026 03:34:24 +0000 Manifest next update: Wed 14 Oct 2026 03:34:24 +0000 Files and hashes: 1: PgzfiCrujHIh1YijxSYBjh1kyWg.crl (hash: SWwjmNK5/zCCbg7lcM+3fR6S8pZX/MNIZ9jxM2VvvYU=) 2: 41E0B402AE1F11EE96A5C977C4F9AE02.roa (hash: I3Aip9lEI/tB1p617YVnjX7fZuimKLHKae3IrKIw1Ds=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CED30/BE80C6A6AE1E11EEA7EA0A77C4F9AE02/PgzfiCrujHIh1YijxSYBjh1kyWg.crl rsync://rpki.apnic.net/member_repository/A91CED30/BE80C6A6AE1E11EEA7EA0A77C4F9AE02/PgzfiCrujHIh1YijxSYBjh1kyWg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PgzfiCrujHIh1YijxSYBjh1kyWg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 03:34:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 522 (0x20a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CED30, serialNumber=3E0CDF882AEE8C7221D588A3C526018E1D64C968 Validity Not Before: Oct 7 03:34:24 2026 GMT Not After : Oct 14 03:34:24 2026 GMT Subject: CN=6ac5bdc1-473e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a0:e5:b0:36:f6:dc:44:f9:3a:a8:23:42:ff: 66:5f:92:ca:d3:44:5c:8e:bc:10:dd:62:51:81:d3: 7e:54:4d:45:81:b1:60:4f:92:ad:ec:c4:02:87:03: 16:4c:01:8c:7c:be:d1:dc:21:58:43:6f:0c:db:68: 23:0b:c9:a9:20:c8:e9:4d:5b:55:be:99:ae:d2:44: 50:2e:53:a5:7e:22:2d:cb:4b:86:bb:0f:69:86:b2: a0:99:a8:f3:c4:a6:92:47:23:52:24:8f:5f:2b:f4: cf:71:62:c7:27:11:11:e7:d5:5e:dd:63:a7:71:86: 03:62:a8:f6:9a:e3:5e:7a:59:14:1d:b1:aa:58:bd: ec:07:52:ce:76:2e:68:bc:a5:2c:ff:8e:36:ff:4a: bd:3b:11:a0:ad:84:0e:51:c2:5b:0a:09:fe:51:db: e0:4e:aa:a6:a4:64:ec:24:18:ec:54:e0:a4:f0:e6: e3:9d:37:fd:71:25:1f:f0:3a:a1:bb:26:a6:b8:6e: 65:ff:e9:1e:41:4d:98:21:51:f1:9c:36:68:2e:ee: 81:45:5a:b6:79:7b:aa:27:73:de:33:82:c0:5f:35: bf:59:09:5c:28:e1:1e:db:19:fd:95:ea:d0:b1:dc: 24:48:bb:4e:6a:ad:ba:61:a6:58:f2:24:fa:3d:c2: e5:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:22:3B:5D:0E:D2:F0:B5:60:B8:C9:0A:F0:D5:A7:45:37:DF:9C:C3 X509v3 Authority Key Identifier: keyid:3E:0C:DF:88:2A:EE:8C:72:21:D5:88:A3:C5:26:01:8E:1D:64:C9:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CED30/BE80C6A6AE1E11EEA7EA0A77C4F9AE02/PgzfiCrujHIh1YijxSYBjh1kyWg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PgzfiCrujHIh1YijxSYBjh1kyWg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CED30/BE80C6A6AE1E11EEA7EA0A77C4F9AE02/PgzfiCrujHIh1YijxSYBjh1kyWg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d1:63:a3:94:b6:60:26:a7:04:16:0e:d7:38:23:18:97:0a:62: 6e:77:d4:2f:22:e7:20:f1:4c:f1:2e:a3:e5:7a:60:5a:f9:9b: 98:9b:b0:c9:56:48:19:bd:22:f2:1a:c1:24:44:46:ca:a4:d5: ce:84:07:51:28:11:15:72:39:21:26:6a:89:5e:f5:87:ad:2b: f8:24:96:ed:8d:88:8d:c2:8b:8c:0c:45:9a:1c:bd:08:2b:b2: f7:13:fc:e9:98:3b:3e:fd:de:d3:01:e2:d4:dd:b6:43:fe:a7: 6f:16:3d:2e:d7:28:e6:4f:ae:8a:58:45:35:db:a1:54:be:80: 8d:b8:be:67:fa:b6:79:a1:17:12:f9:7b:5e:48:4d:88:37:13: 40:18:a9:2d:c4:c6:e3:8f:ce:a9:d0:3e:d4:69:95:f4:c9:d4: 75:f4:83:9c:bf:47:40:6f:38:0a:21:9a:0e:0a:2e:93:88:37: dc:d7:f2:cf:62:2a:9f:93:af:4b:e4:6e:c7:b0:0a:fd:67:22: d5:6a:88:9b:c8:79:c6:9e:8e:7f:92:1a:ae:58:be:3d:05:27: e8:c1:b9:77:9f:5c:1b:cb:a4:ea:a0:a5:86:f8:bd:70:3b:92: 1a:cf:67:2a:1e:cd:95:5e:82:d4:3c:02:17:10:ab:5f:35:7d: d8:fe:91:7e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VEMzAxMTAvBgNVBAUTKDNFMENERjg4MkFFRThDNzIyMUQ1ODhBM0M1MjYwMThF MUQ2NEM5NjgwHhcNMjYxMDA3MDMzNDI0WhcNMjYxMDE0MDMzNDI0WjAYMRYwFAYD VQQDEw02YWM1YmRjMS00NzNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp6DlsDb23ET5OqgjQv9mX5LK00RcjrwQ3WJRgdN+VE1FgbFgT5Kt7MQChwMW TAGMfL7R3CFYQ28M22gjC8mpIMjpTVtVvpmu0kRQLlOlfiIty0uGuw9phrKgmajz xKaSRyNSJI9fK/TPcWLHJxER59Ve3WOncYYDYqj2muNeelkUHbGqWL3sB1LOdi5o vKUs/442/0q9OxGgrYQOUcJbCgn+UdvgTqqmpGTsJBjsVOCk8ObjnTf9cSUf8Dqh uyamuG5l/+keQU2YIVHxnDZoLu6BRVq2eXuqJ3PeM4LAXzW/WQlcKOEe2xn9lerQ sdwkSLtOaq26YaZY8iT6PcLlewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIoiO10O 0vC1YLjJCvDVp0U335zDMB8GA1UdIwQYMBaAFD4M34gq7oxyIdWIo8UmAY4dZMlo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUQzMC9CRTgwQzZBNkFF MUUxMUVFQTdFQTBBNzdDNEY5QUUwMi9QZ3pmaUNydWpISWgxWWlqeFNZQmpoMWt5 V2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1BnemZpQ3J1akhJaDFZaWp4U1lCamgxa3lXZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUQzMC9CRTgwQzZBNkFFMUUxMUVFQTdFQTBBNzdDNEY5QUUwMi9QZ3pmaUNydWpI SWgxWWlqeFNZQmpoMWt5V2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA0WOjlLZgJqcEFg7XOCMYlwpibnfULyLnIPFM8S6j5XpgWvmbmJuwyVZIGb0i 8hrBJERGyqTVzoQHUSgRFXI5ISZqiV71h60r+CSW7Y2IjcKLjAxFmhy9CCuy9xP8 6Zg7Pv3e0wHi1N22Q/6nbxY9Ltco5k+uilhFNduhVL6Ajbi+Z/q2eaEXEvl7XkhN iDcTQBipLcTG44/OqdA+1GmV9MnUdfSDnL9HQG84CiGaDgouk4g33Nfyz2Iqn5Ov S+Rux7AK/Wci1WqIm8h5xp6Of5Iarli+PQUn6MG5d59cG8uk6qClhvi9cDuSGs9n Kh7NlV6C1DwCFxCrXzV92P6Rfg== -----END CERTIFICATE-----Generated at Thu Oct 8 14:39:05 2026 by rpki-client