$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft File: PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft (raw, json) Hash identifier: NFY4NkdTTOtWWwKhmw7LnCo7SrGHpnep3ddQx6jdOHc= Subject key identifier: 29:77:49:1B:D0:A7:D3:E5:5A:F2:7A:0C:1E:C7:2F:63:CD:7A:71:0D Authority key identifier: 3C:69:B9:B6:01:D2:C9:F2:A3:91:5A:6F:FB:CA:3D:AD:62:E9:92:45 Certificate issuer: /CN=A91EE09C/serialNumber=3C69B9B601D2C9F2A3915A6FFBCA3DAD62E99245 Certificate serial: 0268 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft Manifest number: 0238 Signing time: Fri 11 Sep 2026 03:07:20 +0000 Manifest this update: Fri 11 Sep 2026 03:07:19 +0000 Manifest next update: Fri 18 Sep 2026 03:07:19 +0000 Files and hashes: 1: PGm5tgHSyfKjkVpv-8o9rWLpkkU.crl (hash: 6PBpjwQoH+Qok5k/6TAwWfCohVYhjPd9actMxSuVUdk=) 2: 23D4183024D711EF932FC941C4F9AE02.roa (hash: yjfhbglGwJSFqMN6zxG/h3PTnwzIZZTxeRkuErtplaI=) 3: BBD867C86F4211F19FB8B63294A30FBC.roa (hash: Ux1LupbKKyTILVZiMV0XVF3ATA64u0d7idZqHuwcw5w=) 4: 1D98617687B311EFB4972044C4F9AE02.roa (hash: xYBSN0t6jgjQfq0Vs3mLR1yw03FEouHpBcT56A28m1A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.crl rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 03:07:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 616 (0x268) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE09C, serialNumber=3C69B9B601D2C9F2A3915A6FFBCA3DAD62E99245 Validity Not Before: Sep 11 03:07:19 2026 GMT Not After : Sep 18 03:07:19 2026 GMT Subject: CN=6aa37068-e48b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:68:91:6c:80:3b:66:54:aa:b2:bf:1c:69:de: ce:37:c8:a3:44:e0:eb:10:f6:b2:d1:43:2b:4b:e0: e3:e8:b0:db:ae:73:38:17:70:16:89:66:ea:b9:24: 9b:2c:88:c7:3b:00:47:37:52:94:3a:ab:f2:7d:e6: 48:c4:44:25:54:04:f4:3c:6e:98:4a:95:a0:62:36: 67:a7:ce:2b:6e:1b:30:17:f8:2a:32:b6:5e:80:42: f4:25:45:3b:2a:e9:09:f4:65:28:d5:3b:46:b5:83: c0:30:b1:50:cb:1a:9c:42:7c:46:0f:57:b8:7b:85: 35:c3:16:68:d8:c6:be:59:33:0e:59:94:7a:bf:b3: f4:b5:da:1a:d0:19:ff:53:f5:82:30:37:44:1c:fa: 4b:b2:88:5c:0b:65:62:ed:5c:4d:d7:06:a5:55:01: 95:26:7a:3c:cc:66:1d:a2:21:f3:2b:49:59:ec:84: 66:67:d8:96:c3:b8:73:d5:4a:19:18:cf:2b:e7:88: 39:3a:8d:5f:3f:0e:74:77:1e:ca:fe:d5:e1:1d:2e: d3:01:0c:3f:b6:37:9c:51:ef:eb:ac:fc:5e:61:ea: a8:69:42:91:dc:33:6d:6d:bc:de:ad:04:f4:02:6d: 09:2c:13:db:66:1b:b5:e2:d7:39:85:08:ac:48:ac: b1:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:77:49:1B:D0:A7:D3:E5:5A:F2:7A:0C:1E:C7:2F:63:CD:7A:71:0D X509v3 Authority Key Identifier: keyid:3C:69:B9:B6:01:D2:C9:F2:A3:91:5A:6F:FB:CA:3D:AD:62:E9:92:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:44:bb:7a:06:61:7e:39:b0:9c:78:90:ca:49:87:4e:f9:f5: 98:58:46:fa:1d:f6:73:1e:20:ba:26:7d:0e:d9:b4:0f:78:62: c5:da:a0:0c:45:2a:90:69:9f:0b:12:97:98:dd:53:b1:91:51: 53:d4:ef:08:bd:a7:99:85:d1:bb:81:b7:0b:41:cb:e1:36:ce: 96:fe:2a:47:00:97:dd:c1:4f:40:c6:48:40:d2:6b:15:e5:67: 86:91:79:6a:89:23:69:d0:f1:9a:8a:b0:a0:e9:41:b5:ce:7d: 6a:d6:6a:9e:91:40:83:c1:b7:07:3a:ee:c0:15:db:ad:f2:26: 78:a0:29:f5:3b:2c:d5:f0:3e:97:b8:47:91:b0:fb:0b:cb:aa: 49:3a:99:62:4b:3e:3e:56:99:bd:3b:e3:5c:b3:74:a9:61:55: bd:00:88:38:ef:61:38:be:48:49:05:09:43:8a:2e:59:e7:69: ec:af:5a:95:af:46:97:e4:fd:b3:5e:f1:d6:8c:f4:f3:80:8d: e9:c4:27:d7:1a:46:54:64:85:38:1f:db:a9:d2:05:02:48:35: 76:8c:0e:ce:76:0f:0a:ad:6f:29:6c:ba:42:df:74:77:f1:10: 57:1b:c2:83:c3:8b:1d:9b:88:2d:a0:aa:8a:2b:2a:bc:ca:f0: e1:20:7e:b7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAmgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUUwOUMxMTAvBgNVBAUTKDNDNjlCOUI2MDFEMkM5RjJBMzkxNUE2RkZCQ0EzREFE NjJFOTkyNDUwHhcNMjYwOTExMDMwNzE5WhcNMjYwOTE4MDMwNzE5WjAYMRYwFAYD VQQDEw02YWEzNzA2OC1lNDhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiGiRbIA7ZlSqsr8cad7ON8ijRODrEPay0UMrS+Dj6LDbrnM4F3AWiWbquSSb LIjHOwBHN1KUOqvyfeZIxEQlVAT0PG6YSpWgYjZnp84rbhswF/gqMrZegEL0JUU7 KukJ9GUo1TtGtYPAMLFQyxqcQnxGD1e4e4U1wxZo2Ma+WTMOWZR6v7P0tdoa0Bn/ U/WCMDdEHPpLsohcC2Vi7VxN1walVQGVJno8zGYdoiHzK0lZ7IRmZ9iWw7hz1UoZ GM8r54g5Oo1fPw50dx7K/tXhHS7TAQw/tjecUe/rrPxeYeqoaUKR3DNtbbzerQT0 Am0JLBPbZhu14tc5hQisSKyxAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCl3SRvQ p9PlWvJ6DB7HL2PNenENMB8GA1UdIwQYMBaAFDxpubYB0snyo5Fab/vKPa1i6ZJF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTA5Qy9FRUY3NjJDMDkw NzUxMUVFODdEMjY2ODBDNEY5QUUwMi9QR201dGdIU3lmS2prVnB2LThvOXJXTHBr a1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BHbTV0Z0hTeWZLamtWcHYtOG85cldMcGtrVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RTA5Qy9FRUY3NjJDMDkwNzUxMUVFODdEMjY2ODBDNEY5QUUwMi9QR201dGdIU3lm S2prVnB2LThvOXJXTHBra1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAyES7egZhfjmwnHiQykmHTvn1mFhG+h32cx4guiZ9Dtm0D3hixdqgDEUqkGmf CxKXmN1TsZFRU9TvCL2nmYXRu4G3C0HL4TbOlv4qRwCX3cFPQMZIQNJrFeVnhpF5 aokjadDxmoqwoOlBtc59atZqnpFAg8G3BzruwBXbrfImeKAp9Tss1fA+l7hHkbD7 C8uqSTqZYks+PlaZvTvjXLN0qWFVvQCIOO9hOL5ISQUJQ4ouWedp7K9ala9Gl+T9 s17x1oz084CN6cQn1xpGVGSFOB/bqdIFAkg1dowOznYPCq1vKWy6Qt90d/EQVxvC g8OLHZuILaCqiisqvMrw4SB+tw== -----END CERTIFICATE-----Generated at Fri Sep 11 09:27:30 2026 by rpki-client