$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft File: PnOyvhMDe-dEOR06iZzdICuC920.mft (raw, json) Hash identifier: vQ5xF8CB0IbPkIvQcSiEnEaH8+VoIXwjYC5FZEsJEOE= Subject key identifier: 0A:40:B7:52:3B:BD:3D:81:C7:02:0D:C1:6E:AD:7D:C6:23:29:D3:33 Authority key identifier: 3E:73:B2:BE:13:03:7B:E7:44:39:1D:3A:89:9C:DD:20:2B:82:F7:6D Certificate issuer: /CN=A91E5D0C/serialNumber=3E73B2BE13037BE744391D3A899CDD202B82F76D Certificate serial: 05D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft Manifest number: 05B0 Signing time: Thu 10 Sep 2026 23:05:32 +0000 Manifest this update: Thu 10 Sep 2026 23:05:32 +0000 Manifest next update: Thu 17 Sep 2026 23:05:32 +0000 Files and hashes: 1: PnOyvhMDe-dEOR06iZzdICuC920.crl (hash: DlKK8Ze/DXyKN1eRXWdSfMEoIUDY3UB8BYOeJlort60=) 2: D902277E8EA711F19DEFB3165011F970.roa (hash: makP1nCQSr7msWQWb7v+jKtBFmxktQvlRg6b5kvtgUc=) 3: EFFA034837D111EC9337B812C4F9AE02.roa (hash: N/0bVIyC0MPM6KEQ2d3ilkuUkeyn80eIzEQ24nUZdi8=) 4: FE76F7D8EC4A11EFA7845862C4F9AE02.roa (hash: MgGvtEJxOhpocdjEABKQeXDE9AITBRXrKCKdxOChgec=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.crl rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 23:05:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1493 (0x5d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D0C, serialNumber=3E73B2BE13037BE744391D3A899CDD202B82F76D Validity Not Before: Sep 10 23:05:32 2026 GMT Not After : Sep 17 23:05:32 2026 GMT Subject: CN=6aa337bc-8e52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:62:98:aa:ac:6c:eb:01:bb:97:5a:91:bb:aa: 5c:1c:61:69:76:35:3d:e7:ff:87:a2:7a:50:41:b9: 25:d5:d9:7a:6b:1a:27:63:a7:ec:d0:aa:dc:89:c3: cf:ea:e5:99:71:01:59:04:51:4b:9f:0a:91:fd:62: d1:59:b2:1a:14:ed:11:fa:67:f5:15:28:d0:4c:2e: ab:dc:05:30:05:df:94:80:1a:06:11:15:97:c4:2b: 98:d9:b4:84:1b:b0:e9:9e:fe:3b:6b:34:e5:13:3e: e0:0f:16:22:25:5d:0f:ab:f6:89:00:57:8c:09:bd: 54:a1:1d:71:d1:1c:ce:b5:f5:82:40:51:f3:e9:44: 51:90:42:67:cd:d0:26:89:9d:f8:45:d6:da:29:9f: 68:78:72:a4:98:07:4a:c3:36:b3:9b:a4:1c:3e:3e: 0d:4e:7b:17:66:9b:15:bf:8b:7d:45:f5:4f:f9:80: a3:1e:e3:7f:0b:c9:e3:d1:46:d6:95:95:e1:71:5e: aa:8e:1f:41:e7:42:f1:44:7f:fa:21:7a:a1:66:aa: 9f:71:cc:8c:50:ec:ab:6d:84:0f:b2:84:56:0f:71: b8:5d:a0:c2:06:f7:80:04:f6:df:57:96:fb:2d:e9: 30:c8:26:19:b7:01:ab:f4:e9:aa:a5:d2:ee:43:48: db:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:40:B7:52:3B:BD:3D:81:C7:02:0D:C1:6E:AD:7D:C6:23:29:D3:33 X509v3 Authority Key Identifier: keyid:3E:73:B2:BE:13:03:7B:E7:44:39:1D:3A:89:9C:DD:20:2B:82:F7:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:03:39:f1:54:cc:00:be:69:20:00:af:0c:9f:bd:4a:62:a8: dd:2b:f8:3e:1c:80:0e:1b:4b:2f:9d:4e:8b:13:b5:5a:1f:7e: 92:1f:23:0f:c3:66:17:95:63:3a:8c:33:d0:0c:3d:05:e6:f1: 7f:2f:92:00:10:e3:d7:5a:1b:50:c3:e7:9d:30:bf:49:ca:b7: 33:55:65:b2:76:78:9b:6f:51:a3:92:51:06:a3:48:86:1e:a6: fb:fe:f7:08:ea:97:0f:e0:6b:7f:0f:6c:cb:d5:22:42:83:48: 92:de:3b:78:5d:3d:b3:b8:18:8f:71:6a:95:37:d9:9d:b3:54: 62:9c:b3:b5:6d:8f:0a:b6:35:f4:3f:d3:f1:9a:0a:a3:99:50: 4f:32:91:06:67:4b:16:be:8d:5f:ca:7d:ab:7b:82:08:c2:5e: 95:31:68:d8:2b:bb:1a:61:77:3d:60:26:df:3c:55:0a:2b:b1: 4a:62:12:41:f3:e0:5b:cb:31:6f:f6:a3:9f:74:c6:3e:f5:04: 98:56:52:ec:54:11:2b:0b:f3:ce:ac:bf:a1:3c:b9:98:e0:17: 47:73:79:65:17:34:ea:f8:43:e5:c0:a1:ba:d1:bc:be:9f:4d: d0:e8:67:99:54:84:36:bb:1a:9c:47:9b:07:b5:25:af:42:ba: e1:88:7f:ca -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBdUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVEMEMxMTAvBgNVBAUTKDNFNzNCMkJFMTMwMzdCRTc0NDM5MUQzQTg5OUNERDIw MkI4MkY3NkQwHhcNMjYwOTEwMjMwNTMyWhcNMjYwOTE3MjMwNTMyWjAYMRYwFAYD VQQDEw02YWEzMzdiYy04ZTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxGKYqqxs6wG7l1qRu6pcHGFpdjU95/+HonpQQbkl1dl6axonY6fs0KrcicPP 6uWZcQFZBFFLnwqR/WLRWbIaFO0R+mf1FSjQTC6r3AUwBd+UgBoGERWXxCuY2bSE G7Dpnv47azTlEz7gDxYiJV0Pq/aJAFeMCb1UoR1x0RzOtfWCQFHz6URRkEJnzdAm iZ34RdbaKZ9oeHKkmAdKwzazm6QcPj4NTnsXZpsVv4t9RfVP+YCjHuN/C8nj0UbW lZXhcV6qjh9B50LxRH/6IXqhZqqfccyMUOyrbYQPsoRWD3G4XaDCBveABPbfV5b7 LekwyCYZtwGr9OmqpdLuQ0jbHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFApAt1I7 vT2BxwINwW6tfcYjKdMzMB8GA1UdIwQYMBaAFD5zsr4TA3vnRDkdOomc3SArgvdt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUQwQy84OTFCNEVDQTMy MzYxMUVDODk4Mzg3NTZDNEY5QUUwMi9Qbk95dmhNRGUtZEVPUjA2aVp6ZElDdUM5 MjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BuT3l2aE1EZS1kRU9SMDZpWnpkSUN1QzkyMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUQwQy84OTFCNEVDQTMyMzYxMUVDODk4Mzg3NTZDNEY5QUUwMi9Qbk95dmhNRGUt ZEVPUjA2aVp6ZElDdUM5MjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACgM58VTMAL5pIACvDJ+9SmKo3Sv4PhyADhtLL51OixO1Wh9+kh8jD8NmF5Vj Oowz0Aw9Bebxfy+SABDj11obUMPnnTC/Scq3M1VlsnZ4m29Ro5JRBqNIhh6m+/73 COqXD+Brfw9sy9UiQoNIkt47eF09s7gYj3FqlTfZnbNUYpyztW2PCrY19D/T8ZoK o5lQTzKRBmdLFr6NX8p9q3uCCMJelTFo2Cu7GmF3PWAm3zxVCiuxSmISQfPgW8sx b/ajn3TGPvUEmFZS7FQRKwvzzqy/oTy5mOAXR3N5ZRc06vhD5cChutG8vp9N0Ohn mVSENrsanEebB7Ulr0K64Yh/yg== -----END CERTIFICATE-----Generated at Fri Sep 11 15:35:16 2026 by rpki-client