$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.mft File: pnTGcB4rDOPRB-nyNsVc7-aHaPE.mft (raw, json) Hash identifier: JOdD1jp9bOQS6o74nuOYv3Exfa7vVQ7pkIz2JE4aIXI= Subject key identifier: 99:B8:0D:CC:86:2F:41:A1:66:17:55:A3:EB:60:37:24:7B:0C:F7:57 Authority key identifier: A6:74:C6:70:1E:2B:0C:E3:D1:07:E9:F2:36:C5:5C:EF:E6:87:68:F1 Certificate issuer: /CN=A91DD902/serialNumber=A674C6701E2B0CE3D107E9F236C55CEFE68768F1 Certificate serial: 02A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnTGcB4rDOPRB-nyNsVc7-aHaPE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.mft Manifest number: 02A1 Signing time: Wed 21 Oct 2026 02:04:14 +0000 Manifest this update: Wed 21 Oct 2026 02:04:14 +0000 Manifest next update: Wed 28 Oct 2026 02:04:14 +0000 Files and hashes: 1: pnTGcB4rDOPRB-nyNsVc7-aHaPE.crl (hash: qJdsNsLUrknRvYIaRXnp165uPNUraH5FqprZ5/X/cMo=) 2: 33A48584C92911EDAE3AB84EC4F9AE02.roa (hash: oPoTgdYw+Xp4zsCLRgOst4RRIJvgrTE9ExRg+Am+0NI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.crl rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnTGcB4rDOPRB-nyNsVc7-aHaPE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 02:04:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 680 (0x2a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD902, serialNumber=A674C6701E2B0CE3D107E9F236C55CEFE68768F1 Validity Not Before: Oct 21 02:04:14 2026 GMT Not After : Oct 28 02:04:14 2026 GMT Subject: CN=6ad81d9e-5f6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ab:ca:28:72:6a:26:c1:c6:c4:60:7b:1a:77: 98:71:96:20:ac:df:5d:29:80:90:9e:6b:e2:14:da: 25:7e:48:f9:18:fc:10:b5:c5:4f:f7:3f:31:cc:36: 50:b7:0e:f8:6b:a2:d6:67:5a:9a:50:d0:19:06:56: f3:32:8c:70:9c:69:a1:a8:fa:81:ad:ff:1c:70:d6: 79:a8:98:30:ea:88:c4:58:c5:27:21:62:b3:63:4c: 4e:0f:e2:54:ee:a4:af:79:40:21:a2:1d:3d:52:81: df:ec:45:5a:e2:aa:f3:82:10:96:56:88:24:64:6c: b6:2c:09:92:f2:b7:82:27:08:84:7f:c3:c0:f4:95: fa:36:50:33:fb:7f:5f:ec:85:44:93:85:44:02:43: f6:fb:73:98:b1:6f:c9:e5:c7:e6:b2:c5:cc:29:72: 0b:ca:bc:39:4e:7a:3d:78:12:50:eb:de:09:93:62: 27:ed:9c:46:b6:23:ab:71:9a:b5:11:9b:64:21:05: 78:a6:aa:41:33:a3:1b:35:b7:86:1e:ac:0a:8a:2d: 3f:de:fc:73:27:c6:ba:ec:1e:18:3d:33:c9:fc:3a: 98:7c:7d:c0:04:9c:ae:2b:92:fb:25:37:45:e2:a5: ab:93:13:1e:c6:fa:94:cd:43:e8:b9:a2:20:db:45: 92:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:B8:0D:CC:86:2F:41:A1:66:17:55:A3:EB:60:37:24:7B:0C:F7:57 X509v3 Authority Key Identifier: keyid:A6:74:C6:70:1E:2B:0C:E3:D1:07:E9:F2:36:C5:5C:EF:E6:87:68:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnTGcB4rDOPRB-nyNsVc7-aHaPE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:c7:c2:ea:50:c3:f0:e1:a4:00:ca:79:76:43:dc:96:ff:f7: a1:e1:f5:7f:14:9d:61:e3:f0:e9:db:68:ca:4f:5f:3b:13:1f: 08:5a:77:91:01:18:86:ae:88:fb:87:f6:74:1d:62:17:10:06: d1:0f:b3:b3:49:08:c8:cd:fc:46:37:65:e3:fb:20:91:e1:06: cb:a7:77:33:ee:44:db:f2:5b:2c:4b:ec:09:d9:10:f1:93:54: e6:23:75:ba:c0:d0:82:b9:84:fe:02:c5:44:d6:36:34:5f:0a: 15:b8:4a:28:0b:40:fa:a6:c8:5b:56:68:f6:4c:c6:f3:94:0b: d9:ec:fb:d7:fc:ef:71:90:dc:e9:0d:e6:ce:92:4a:66:5b:ec: b3:f7:6a:ad:8e:d3:e8:8c:66:1d:92:42:3e:46:7a:fd:ae:28: 98:66:13:46:b8:88:fe:44:52:da:b9:37:57:28:55:94:ec:d4: 11:6a:98:91:36:98:68:73:cc:d7:5c:04:f8:b2:7f:30:78:e1: c8:24:f6:53:70:77:fd:ba:5c:39:e6:bc:0c:30:2d:9e:53:8e: 36:7f:37:92:57:90:fd:de:e3:ad:eb:88:93:21:6b:22:c4:2c: f2:df:72:cd:b2:dc:15:2f:66:37:a9:5c:8c:ee:b4:26:89:67: 48:9b:5e:e6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQ5MDIxMTAvBgNVBAUTKEE2NzRDNjcwMUUyQjBDRTNEMTA3RTlGMjM2QzU1Q0VG RTY4NzY4RjEwHhcNMjYxMDIxMDIwNDE0WhcNMjYxMDI4MDIwNDE0WjAYMRYwFAYD VQQDEw02YWQ4MWQ5ZS01ZjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqqvKKHJqJsHGxGB7GneYcZYgrN9dKYCQnmviFNolfkj5GPwQtcVP9z8xzDZQ tw74a6LWZ1qaUNAZBlbzMoxwnGmhqPqBrf8ccNZ5qJgw6ojEWMUnIWKzY0xOD+JU 7qSveUAhoh09UoHf7EVa4qrzghCWVogkZGy2LAmS8reCJwiEf8PA9JX6NlAz+39f 7IVEk4VEAkP2+3OYsW/J5cfmssXMKXILyrw5Tno9eBJQ694Jk2In7ZxGtiOrcZq1 EZtkIQV4pqpBM6MbNbeGHqwKii0/3vxzJ8a67B4YPTPJ/DqYfH3ABJyuK5L7JTdF 4qWrkxMexvqUzUPouaIg20WSgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJm4DcyG L0GhZhdVo+tgNyR7DPdXMB8GA1UdIwQYMBaAFKZ0xnAeKwzj0Qfp8jbFXO/mh2jx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDkwMi81NzBCM0Y4RUM5 MjYxMUVEQUYyQjlENERDNEY5QUUwMi9wblRHY0I0ckRPUFJCLW55TnNWYzctYUhh UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BuVEdjQjRyRE9QUkItbnlOc1ZjNy1hSGFQRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDkwMi81NzBCM0Y4RUM5MjYxMUVEQUYyQjlENERDNEY5QUUwMi9wblRHY0I0ckRP UFJCLW55TnNWYzctYUhhUEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAisfC6lDD8OGkAMp5dkPclv/3oeH1fxSdYePw6dtoyk9fOxMfCFp3kQEYhq6I +4f2dB1iFxAG0Q+zs0kIyM38Rjdl4/sgkeEGy6d3M+5E2/JbLEvsCdkQ8ZNU5iN1 usDQgrmE/gLFRNY2NF8KFbhKKAtA+qbIW1Zo9kzG85QL2ez71/zvcZDc6Q3mzpJK Zlvss/dqrY7T6IxmHZJCPkZ6/a4omGYTRriI/kRS2rk3VyhVlOzUEWqYkTaYaHPM 11wE+LJ/MHjhyCT2U3B3/bpcOea8DDAtnlOONn83kleQ/d7jreuIkyFrIsQs8t9y zbLcFS9mN6lcjO60JolnSJte5g== -----END CERTIFICATE-----Generated at Wed Oct 21 07:18:40 2026 by rpki-client