$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.mft File: pnTGcB4rDOPRB-nyNsVc7-aHaPE.mft (raw, json) Hash identifier: RMyopbL6H3DWDEUcWGBwmRNp/DVTnjKvwTcKDSh4hy0= Subject key identifier: A4:C5:CF:4F:D8:2D:F6:AF:82:10:5A:14:AE:F9:19:AD:78:73:62:5F Authority key identifier: A6:74:C6:70:1E:2B:0C:E3:D1:07:E9:F2:36:C5:5C:EF:E6:87:68:F1 Certificate issuer: /CN=A91DD902/serialNumber=A674C6701E2B0CE3D107E9F236C55CEFE68768F1 Certificate serial: 0290 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnTGcB4rDOPRB-nyNsVc7-aHaPE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.mft Manifest number: 0289 Signing time: Thu 03 Sep 2026 01:58:21 +0000 Manifest this update: Thu 03 Sep 2026 01:58:20 +0000 Manifest next update: Thu 10 Sep 2026 01:58:20 +0000 Files and hashes: 1: pnTGcB4rDOPRB-nyNsVc7-aHaPE.crl (hash: B1HCJ+sqoXvJ9XAVAesYjCgj+TcYWMULbEv086j27U0=) 2: 33A48584C92911EDAE3AB84EC4F9AE02.roa (hash: oPoTgdYw+Xp4zsCLRgOst4RRIJvgrTE9ExRg+Am+0NI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.crl rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnTGcB4rDOPRB-nyNsVc7-aHaPE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Sep 2026 01:58:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 656 (0x290) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD902, serialNumber=A674C6701E2B0CE3D107E9F236C55CEFE68768F1 Validity Not Before: Sep 3 01:58:20 2026 GMT Not After : Sep 10 01:58:20 2026 GMT Subject: CN=6a98d43d-264e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:41:3c:43:17:be:c7:01:71:c6:24:cf:24:a9: 7b:7c:83:94:d4:f7:bd:b6:80:d9:3f:d1:3d:84:ae: 79:58:a6:9d:f1:6b:8f:86:31:c8:a5:e3:e5:25:69: 31:43:ac:5c:61:0d:44:52:d6:3d:bb:48:c5:0d:de: 40:01:8a:3f:eb:a3:27:9e:2c:aa:ec:35:91:6d:56: 66:f1:47:7a:57:3d:2b:fe:f4:38:73:ff:d4:31:74: 29:a6:b0:83:7d:36:b1:fe:e8:d2:d4:cc:bc:3a:f5: 30:b8:83:8e:cc:4e:3c:1c:d5:b8:0c:d2:c7:f0:f0: d4:f8:f2:93:7c:1d:9d:c9:37:14:0e:d9:99:22:6b: bf:fe:d3:6e:5e:ab:6c:9f:87:b7:ff:1d:1c:6a:49: ea:09:2c:30:82:6a:42:53:37:c3:e8:2a:4e:38:fe: 17:2e:18:c7:ea:78:cb:b6:7a:fd:42:45:9d:c4:e7: cb:56:63:6d:37:d4:4a:84:19:cf:eb:75:81:56:eb: 45:44:16:ec:30:2c:bd:f5:07:74:e6:2e:c2:43:3b: ad:ef:66:ac:ec:12:da:00:35:d1:c8:e8:44:e6:9c: 38:e9:0b:90:e9:34:da:75:bd:15:7b:29:65:a9:25: ac:98:a1:57:13:71:de:dc:4d:28:2a:6b:c5:7a:a6: 9d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:C5:CF:4F:D8:2D:F6:AF:82:10:5A:14:AE:F9:19:AD:78:73:62:5F X509v3 Authority Key Identifier: keyid:A6:74:C6:70:1E:2B:0C:E3:D1:07:E9:F2:36:C5:5C:EF:E6:87:68:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnTGcB4rDOPRB-nyNsVc7-aHaPE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:80:e6:6e:df:31:cc:e8:6a:24:1a:bc:0b:1c:0f:d0:10:d6: b8:8d:00:50:25:86:b1:5a:cb:a7:8b:a6:46:59:73:ff:f5:1d: e5:8d:55:d2:b5:c4:de:6f:ec:e3:f0:ae:6b:89:04:28:2b:e0: 2e:98:a9:39:fb:1e:67:83:60:f5:71:1d:ee:15:ab:ba:56:54: 34:f9:2b:8f:b0:8c:2a:5c:77:51:6b:0b:dc:46:86:c0:b8:03: d2:10:f9:10:31:d0:eb:a5:f6:7b:8e:a6:08:57:aa:8d:72:b7: ab:66:b5:66:f2:7d:44:df:b8:bb:b4:e1:09:49:2d:ae:58:be: 1c:ec:17:9c:f5:b2:ed:21:74:82:c4:85:a7:fd:06:12:01:3d: 27:2c:6b:98:d5:ed:1e:bc:8a:12:5b:c4:63:66:9c:7a:cc:22: a5:2b:68:0a:49:51:58:4f:12:0b:f9:79:de:4b:db:c8:85:c3: 33:23:3b:47:73:f3:bd:f7:ec:1b:09:3a:6f:fb:ea:5b:bd:c9: 1e:5d:49:95:c9:90:8f:3e:b8:a1:d9:a9:78:3b:9c:ce:ac:41: b6:2e:d0:e1:e2:e5:a1:a5:89:f6:b7:1b:8a:1e:62:c7:e8:7e: 86:b3:9e:6a:ce:02:34:44:d3:73:14:2f:f4:4b:54:e3:36:93: 0a:bc:39:8f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQ5MDIxMTAvBgNVBAUTKEE2NzRDNjcwMUUyQjBDRTNEMTA3RTlGMjM2QzU1Q0VG RTY4NzY4RjEwHhcNMjYwOTAzMDE1ODIwWhcNMjYwOTEwMDE1ODIwWjAYMRYwFAYD VQQDEw02YTk4ZDQzZC0yNjRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoUE8Qxe+xwFxxiTPJKl7fIOU1Pe9toDZP9E9hK55WKad8WuPhjHIpePlJWkx Q6xcYQ1EUtY9u0jFDd5AAYo/66Mnniyq7DWRbVZm8Ud6Vz0r/vQ4c//UMXQpprCD fTax/ujS1My8OvUwuIOOzE48HNW4DNLH8PDU+PKTfB2dyTcUDtmZImu//tNuXqts n4e3/x0caknqCSwwgmpCUzfD6CpOOP4XLhjH6njLtnr9QkWdxOfLVmNtN9RKhBnP 63WBVutFRBbsMCy99Qd05i7CQzut72as7BLaADXRyOhE5pw46QuQ6TTadb0Veyll qSWsmKFXE3He3E0oKmvFeqadCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKTFz0/Y LfavghBaFK75Ga14c2JfMB8GA1UdIwQYMBaAFKZ0xnAeKwzj0Qfp8jbFXO/mh2jx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDkwMi81NzBCM0Y4RUM5 MjYxMUVEQUYyQjlENERDNEY5QUUwMi9wblRHY0I0ckRPUFJCLW55TnNWYzctYUhh UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BuVEdjQjRyRE9QUkItbnlOc1ZjNy1hSGFQRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDkwMi81NzBCM0Y4RUM5MjYxMUVEQUYyQjlENERDNEY5QUUwMi9wblRHY0I0ckRP UFJCLW55TnNWYzctYUhhUEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZoDmbt8xzOhqJBq8CxwP0BDWuI0AUCWGsVrLp4umRllz//Ud5Y1V0rXE3m/s 4/Cua4kEKCvgLpipOfseZ4Ng9XEd7hWrulZUNPkrj7CMKlx3UWsL3EaGwLgD0hD5 EDHQ66X2e46mCFeqjXK3q2a1ZvJ9RN+4u7ThCUktrli+HOwXnPWy7SF0gsSFp/0G EgE9JyxrmNXtHryKElvEY2aceswipStoCklRWE8SC/l53kvbyIXDMyM7R3Pzvffs Gwk6b/vqW73JHl1JlcmQjz64odmpeDuczqxBti7Q4eLloaWJ9rcbih5ix+h+hrOe as4CNETTcxQv9EtU4zaTCrw5jw== -----END CERTIFICATE-----Generated at Sat Sep 5 00:55:10 2026 by rpki-client