$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FE50D/37E508C29A9E11F1A6A7C6E93C11F970/pGQj9_nD0XLqG9TlSHDg0XfIP5o.mft File: pGQj9_nD0XLqG9TlSHDg0XfIP5o.mft (raw, json) Hash identifier: ewiKoSaZ/+5jOJy+gz2dmQisZbfrcayJOX4tgt8BjS8= Subject key identifier: 36:CB:54:70:77:76:55:90:77:75:52:95:69:AD:32:C0:24:18:BA:CB Authority key identifier: A4:64:23:F7:F9:C3:D1:72:EA:1B:D4:E5:48:70:E0:D1:77:C8:3F:9A Certificate issuer: /CN=A91FE50D/serialNumber=A46423F7F9C3D172EA1BD4E54870E0D177C83F9A Certificate serial: 1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGQj9_nD0XLqG9TlSHDg0XfIP5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE50D/37E508C29A9E11F1A6A7C6E93C11F970/pGQj9_nD0XLqG9TlSHDg0XfIP5o.mft Manifest number: 1C Signing time: Wed 07 Oct 2026 09:34:37 +0000 Manifest this update: Wed 07 Oct 2026 09:34:37 +0000 Manifest next update: Wed 14 Oct 2026 09:34:37 +0000 Files and hashes: 1: pGQj9_nD0XLqG9TlSHDg0XfIP5o.crl (hash: Z+FkUtXTd6pxzUrsrz6rpxtWw/5QawvD/F3X42uBwkw=) 2: 1B5E44FC9AA311F18B8864883E11F970.roa (hash: NxNm6oazSdpRh6axfmesg9/w4othsFM0hiBYDwhgf2E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE50D/37E508C29A9E11F1A6A7C6E93C11F970/pGQj9_nD0XLqG9TlSHDg0XfIP5o.crl rsync://rpki.apnic.net/member_repository/A91FE50D/37E508C29A9E11F1A6A7C6E93C11F970/pGQj9_nD0XLqG9TlSHDg0XfIP5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGQj9_nD0XLqG9TlSHDg0XfIP5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 09:34:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE50D, serialNumber=A46423F7F9C3D172EA1BD4E54870E0D177C83F9A Validity Not Before: Oct 7 09:34:37 2026 GMT Not After : Oct 14 09:34:37 2026 GMT Subject: CN=6ac6122d-c20d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:fe:dc:6a:3d:4f:9f:e3:47:36:9c:42:50:ee: 17:ba:7a:c1:b0:f5:39:c9:52:e1:48:00:c4:4a:d3: 4c:b3:4d:e9:6a:3a:64:8c:40:f9:b2:d2:e1:af:cb: e8:28:23:c2:d5:d3:38:f7:f5:e7:4e:b0:ab:9f:b7: e2:25:84:bc:5d:fb:f3:15:c8:5d:ba:78:d8:a9:ad: fc:e3:cb:0e:ae:4c:53:5a:cb:83:f8:d5:1f:f9:df: 21:d0:68:05:46:ca:da:55:d6:b4:30:58:e6:2b:3b: 14:d4:40:de:a4:25:72:95:d1:df:84:f0:7b:1a:0e: fb:77:7f:55:c8:06:46:0c:06:23:b0:69:1a:0f:22: a6:e3:b4:54:7a:92:65:da:47:8d:2d:2d:61:2f:45: 03:d5:10:2a:cb:72:39:f3:ec:99:e9:3c:fb:d1:ed: 54:07:35:4f:e6:58:b1:9d:95:7f:2d:da:b2:13:b8: b3:07:e0:30:a9:42:02:ff:d4:ca:51:fc:46:38:e8: 14:ed:cc:b2:ff:2a:3a:67:e7:67:70:6f:85:e1:67: ac:49:49:b5:3b:bb:ae:27:4e:4c:d6:e6:18:7d:87: c5:d6:4d:7d:f0:2e:8d:ae:cb:98:d2:b3:fc:21:8d: 81:0a:ca:d8:1a:cf:f1:f2:68:6b:aa:fa:36:cf:c9: 71:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:CB:54:70:77:76:55:90:77:75:52:95:69:AD:32:C0:24:18:BA:CB X509v3 Authority Key Identifier: keyid:A4:64:23:F7:F9:C3:D1:72:EA:1B:D4:E5:48:70:E0:D1:77:C8:3F:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE50D/37E508C29A9E11F1A6A7C6E93C11F970/pGQj9_nD0XLqG9TlSHDg0XfIP5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGQj9_nD0XLqG9TlSHDg0XfIP5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE50D/37E508C29A9E11F1A6A7C6E93C11F970/pGQj9_nD0XLqG9TlSHDg0XfIP5o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:49:44:da:f5:08:ae:f1:c3:96:92:8e:f9:fa:6c:32:94:f2: 8c:4d:4f:81:b1:12:5e:db:fd:5d:f5:8d:22:46:d9:2a:21:f4: ae:4d:aa:b7:a5:6f:f3:4b:92:87:96:e4:44:bd:e1:c0:df:b7: 71:35:a8:85:57:c1:95:fb:52:6d:f6:e8:b2:ef:76:0b:ff:d0: 85:7d:e1:7e:52:98:3e:90:93:d7:e2:e5:74:60:8d:3b:5a:b9: f5:05:36:2e:65:30:2b:05:e1:d3:a7:13:bc:82:e6:88:6f:1c: 74:12:a2:c7:f7:ff:cb:4f:53:cf:01:fd:89:45:b9:04:6d:6c: 9e:68:88:8b:26:bb:24:f5:a7:64:02:78:88:fa:f4:61:51:2c: a9:aa:47:f1:79:3d:50:75:29:2f:ca:1e:0b:91:58:1b:8c:90: 88:13:1d:54:90:f1:e8:49:23:b1:5e:ad:83:ef:59:73:e0:4a: a8:54:4d:cf:fa:9e:b5:ab:e5:f5:38:ee:93:8f:5e:3c:a5:93: 23:39:8d:fd:ef:f0:15:18:c8:7b:d4:1b:c1:2f:a8:50:f5:4f: 50:02:b0:32:a0:aa:c6:22:23:a4:b7:f8:8e:66:2f:2a:32:d5: 50:67:1a:fc:3d:3d:3c:25:14:e7:18:c8:9e:9b:22:1b:34:bf: c7:3c:77:9d -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RTUwRDExMC8GA1UEBRMoQTQ2NDIzRjdGOUMzRDE3MkVBMUJENEU1NDg3MEUwRDE3 N0M4M0Y5QTAeFw0yNjEwMDcwOTM0MzdaFw0yNjEwMTQwOTM0MzdaMBgxFjAUBgNV BAMTDTZhYzYxMjJkLWMyMGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCj/txqPU+f40c2nEJQ7he6esGw9TnJUuFIAMRK00yzTelqOmSMQPmy0uGvy+go I8LV0zj39edOsKuft+IlhLxd+/MVyF26eNiprfzjyw6uTFNay4P41R/53yHQaAVG ytpV1rQwWOYrOxTUQN6kJXKV0d+E8HsaDvt3f1XIBkYMBiOwaRoPIqbjtFR6kmXa R40tLWEvRQPVECrLcjnz7JnpPPvR7VQHNU/mWLGdlX8t2rITuLMH4DCpQgL/1MpR /EY46BTtzLL/Kjpn52dwb4XhZ6xJSbU7u64nTkzW5hh9h8XWTX3wLo2uy5jSs/wh jYEKytgaz/HyaGuq+jbPyXFzAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUNstUcHd2 VZB3dVKVaa0ywCQYusswHwYDVR0jBBgwFoAUpGQj9/nD0XLqG9TlSHDg0XfIP5ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZFNTBELzM3RTUwOEMyOUE5 RTExRjFBNkE3QzZFOTNDMTFGOTcwL3BHUWo5X25EMFhMcUc5VGxTSERnMFhmSVA1 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcEdRajlfbkQwWExxRzlUbFNIRGcwWGZJUDVvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZF NTBELzM3RTUwOEMyOUE5RTExRjFBNkE3QzZFOTNDMTFGOTcwL3BHUWo5X25EMFhM cUc5VGxTSERnMFhmSVA1by5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA4SUTa9Qiu8cOWko75+mwylPKMTU+BsRJe2/1d9Y0iRtkqIfSuTaq3pW/zS5KH luREveHA37dxNaiFV8GV+1Jt9uiy73YL/9CFfeF+Upg+kJPX4uV0YI07Wrn1BTYu ZTArBeHTpxO8guaIbxx0EqLH9//LT1PPAf2JRbkEbWyeaIiLJrsk9adkAniI+vRh USypqkfxeT1QdSkvyh4LkVgbjJCIEx1UkPHoSSOxXq2D71lz4EqoVE3P+p61q+X1 OO6Tj148pZMjOY397/AVGMh71BvBL6hQ9U9QArAyoKrGIiOkt/iOZi8qMtVQZxr8 PT08JRTnGMiemyIbNL/HPHed -----END CERTIFICATE-----Generated at Thu Oct 8 12:21:37 2026 by rpki-client