$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.mft File: PinOb2p9uUttCRM7c_7VLd7hLas.mft (raw, json) Hash identifier: XcTjUbebnKo83YcVqQera0sNtzYfssCZ6jJ5fLyeViU= Subject key identifier: 13:F2:DF:EE:0A:02:9D:07:69:CC:2E:E1:8B:0D:E1:C3:47:68:41:B2 Authority key identifier: 3E:29:CE:6F:6A:7D:B9:4B:6D:09:13:3B:73:FE:D5:2D:DE:E1:2D:AB Certificate issuer: /CN=A91CF285/serialNumber=3E29CE6F6A7DB94B6D09133B73FED52DDEE12DAB Certificate serial: 1190 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PinOb2p9uUttCRM7c_7VLd7hLas.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.mft Manifest number: 1177 Signing time: Sun 04 Oct 2026 17:14:35 +0000 Manifest this update: Sun 04 Oct 2026 17:14:35 +0000 Manifest next update: Sun 11 Oct 2026 17:14:35 +0000 Files and hashes: 1: PinOb2p9uUttCRM7c_7VLd7hLas.crl (hash: kckQkBlB0vHtnHmrZyUEOMVLGfbesU2OnoEiz8ajSGo=) 2: DC83478EEB0311ED875DD72EC4F9AE02.roa (hash: NK1hqtZdCO6WmHvrmwdW3dn10uFeaY5J8E6tA43KEZ0=) 3: 073BC4F4ED3B11EDB5A01A46C4F9AE02.roa (hash: iQFJd86XO7yAIa5GnWERfrbSbZ5wfHcFrug+5uoA1TM=) 4: AB731B004B2A11EFAAFCC92CC4F9AE02.roa (hash: Vx2WbMEsYUJvjxHD6WL00kPDD7uH5hiABevdW4+Xt0o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.crl rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PinOb2p9uUttCRM7c_7VLd7hLas.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 17:14:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4496 (0x1190) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF285, serialNumber=3E29CE6F6A7DB94B6D09133B73FED52DDEE12DAB Validity Not Before: Oct 4 17:14:35 2026 GMT Not After : Oct 11 17:14:35 2026 GMT Subject: CN=6ac2897b-8f14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:67:8c:da:1c:ad:72:63:22:85:4e:cd:39:83: 33:2e:bb:97:e1:80:65:3d:ed:fc:a6:d1:55:9a:40: 6a:39:38:4e:bb:63:49:82:5a:20:02:19:aa:de:3e: 68:56:19:f7:55:fc:02:da:d5:2a:02:cd:81:33:be: af:44:9f:2b:5d:86:47:01:29:47:24:81:be:9a:1e: f9:43:94:bd:cf:a8:09:de:b7:41:ce:f8:7a:66:dd: 54:bd:20:6d:86:e6:57:da:fe:d9:bc:c4:3f:92:52: 22:33:a5:8f:64:ea:9b:36:19:86:f7:1a:b4:94:e0: 1c:dc:dc:23:d3:79:8a:58:98:fc:cf:08:a6:a4:50: ef:7d:12:37:b0:97:f2:4c:9e:7e:aa:4b:2f:7d:5c: bf:c2:84:1f:7c:64:01:33:3c:b2:81:31:b7:ba:8b: a3:96:49:db:ac:69:32:fa:64:8b:d8:ca:49:8d:89: f1:3c:53:94:c4:18:fb:9c:3b:41:75:55:28:99:d7: 4c:3a:61:03:40:37:72:06:22:bd:a8:24:fb:36:11: cb:fd:11:21:60:15:c0:de:3d:1a:bb:5d:fc:18:0f: a0:bb:f1:21:a3:69:cc:fe:74:60:35:e2:73:bf:81: eb:da:ff:07:f2:d5:50:a4:ab:0f:a1:0e:02:07:0a: 2a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:F2:DF:EE:0A:02:9D:07:69:CC:2E:E1:8B:0D:E1:C3:47:68:41:B2 X509v3 Authority Key Identifier: keyid:3E:29:CE:6F:6A:7D:B9:4B:6D:09:13:3B:73:FE:D5:2D:DE:E1:2D:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PinOb2p9uUttCRM7c_7VLd7hLas.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:56:5c:72:8f:34:ad:11:48:4f:97:a9:3e:b5:a5:52:0c:58: 57:0c:f6:44:59:94:6d:8d:08:f5:28:be:f6:0e:c0:39:e2:50: 73:5d:29:90:bb:e0:50:67:0d:29:a8:07:93:80:ae:19:82:ef: ba:dd:ac:af:3b:2d:4f:76:30:67:2f:78:70:12:b9:cc:b5:5a: 68:a1:e6:00:cf:5b:da:c8:78:78:4e:eb:8d:98:ef:9b:b4:b6: c6:31:21:6f:7a:a3:94:b5:d8:7e:af:43:6a:ab:64:36:63:fa: 47:9f:dc:6d:f5:df:6f:39:31:95:b7:2c:3d:0b:5a:3c:1d:34: 70:f6:8a:1a:d4:f4:da:72:6c:53:a7:83:5c:87:ca:96:e1:2e: 35:2a:bc:c4:57:ed:6e:38:12:81:90:33:5f:bb:57:b2:92:3f: b3:c6:09:98:7b:36:31:cd:0b:42:7a:75:57:89:92:45:d6:bf: 17:7a:fb:79:b9:37:4a:17:e5:1e:c1:08:5d:78:8b:20:1d:c2: f7:a1:ae:31:e6:d1:fb:0a:f7:23:47:4b:85:30:b5:49:29:e5: 23:39:ff:26:05:0f:8a:57:d2:1d:ad:af:73:80:42:45:c7:0b: 4d:45:1f:6e:0c:27:b8:c5:57:35:41:9b:c8:f0:60:47:c1:01: 71:0e:0c:c6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0YyODUxMTAvBgNVBAUTKDNFMjlDRTZGNkE3REI5NEI2RDA5MTMzQjczRkVENTJE REVFMTJEQUIwHhcNMjYxMDA0MTcxNDM1WhcNMjYxMDExMTcxNDM1WjAYMRYwFAYD VQQDEw02YWMyODk3Yi04ZjE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsmeM2hytcmMihU7NOYMzLruX4YBlPe38ptFVmkBqOThOu2NJglogAhmq3j5o Vhn3VfwC2tUqAs2BM76vRJ8rXYZHASlHJIG+mh75Q5S9z6gJ3rdBzvh6Zt1UvSBt huZX2v7ZvMQ/klIiM6WPZOqbNhmG9xq0lOAc3Nwj03mKWJj8zwimpFDvfRI3sJfy TJ5+qksvfVy/woQffGQBMzyygTG3uoujlknbrGky+mSL2MpJjYnxPFOUxBj7nDtB dVUomddMOmEDQDdyBiK9qCT7NhHL/REhYBXA3j0au138GA+gu/Eho2nM/nRgNeJz v4Hr2v8H8tVQpKsPoQ4CBwoqtwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBPy3+4K Ap0Hacwu4YsN4cNHaEGyMB8GA1UdIwQYMBaAFD4pzm9qfblLbQkTO3P+1S3e4S2r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjI4NS9GRDY0RjBCODM0 MEMxMUU5OTY2QzVBNzZDNEY5QUUwMi9QaW5PYjJwOXVVdHRDUk03Y183VkxkN2hM YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Bpbk9iMnA5dVV0dENSTTdjXzdWTGQ3aExhcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjI4NS9GRDY0RjBCODM0MEMxMUU5OTY2QzVBNzZDNEY5QUUwMi9QaW5PYjJwOXVV dHRDUk03Y183VkxkN2hMYXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAFZcco80rRFIT5epPrWlUgxYVwz2RFmUbY0I9Si+9g7AOeJQc10pkLvgUGcN KagHk4CuGYLvut2srzstT3YwZy94cBK5zLVaaKHmAM9b2sh4eE7rjZjvm7S2xjEh b3qjlLXYfq9DaqtkNmP6R5/cbfXfbzkxlbcsPQtaPB00cPaKGtT02nJsU6eDXIfK luEuNSq8xFftbjgSgZAzX7tXspI/s8YJmHs2Mc0LQnp1V4mSRda/F3r7ebk3Shfl HsEIXXiLIB3C96GuMebR+wr3I0dLhTC1SSnlIzn/JgUPilfSHa2vc4BCRccLTUUf bgwnuMVXNUGbyPBgR8EBcQ4Mxg== -----END CERTIFICATE-----Generated at Mon Oct 5 13:02:53 2026 by rpki-client