$ rpki-client -vvvf rpki.apnic.net/member_repository/A91210E0/3EB10C9A6D9811EEAA2AA36AC4F9AE02/PyDCnh1-UV3z49hapE51H4Fycxo.mft File: PyDCnh1-UV3z49hapE51H4Fycxo.mft (raw, json) Hash identifier: rJ0sty0rPQ4TkUYgRLfEviz7tnOo2k2h3gLG8tB0CNU= Subject key identifier: 2E:2C:DF:3D:87:8D:76:02:4A:36:24:32:E4:3A:1F:75:2F:26:FB:EB Authority key identifier: 3F:20:C2:9E:1D:7E:51:5D:F3:E3:D8:5A:A4:4E:75:1F:81:72:73:1A Certificate issuer: /CN=A91210E0/serialNumber=3F20C29E1D7E515DF3E3D85AA44E751F8172731A Certificate serial: 0232 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PyDCnh1-UV3z49hapE51H4Fycxo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91210E0/3EB10C9A6D9811EEAA2AA36AC4F9AE02/PyDCnh1-UV3z49hapE51H4Fycxo.mft Manifest number: 022A Signing time: Wed 23 Sep 2026 02:37:56 +0000 Manifest this update: Wed 23 Sep 2026 02:37:56 +0000 Manifest next update: Wed 30 Sep 2026 02:37:56 +0000 Files and hashes: 1: PyDCnh1-UV3z49hapE51H4Fycxo.crl (hash: 1aFuuo9KZvTgHHfPcWNurBUA+K442CUSGSbCJk/jSF0=) 2: 503E43126E5E11EEB39D9E48C4F9AE02.roa (hash: 0Pp/jipwHz+dDFZW3SdujQfWz5D9Ej7JkD74IDbQ7uI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91210E0/3EB10C9A6D9811EEAA2AA36AC4F9AE02/PyDCnh1-UV3z49hapE51H4Fycxo.crl rsync://rpki.apnic.net/member_repository/A91210E0/3EB10C9A6D9811EEAA2AA36AC4F9AE02/PyDCnh1-UV3z49hapE51H4Fycxo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PyDCnh1-UV3z49hapE51H4Fycxo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 02:37:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 562 (0x232) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91210E0, serialNumber=3F20C29E1D7E515DF3E3D85AA44E751F8172731A Validity Not Before: Sep 23 02:37:56 2026 GMT Not After : Sep 30 02:37:56 2026 GMT Subject: CN=6ab33b84-1fbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:65:b1:3a:ad:ce:cc:22:6b:60:f3:16:35:44: 20:d3:41:a4:0a:ad:4c:c5:1c:31:e0:68:43:fe:25: a5:23:97:7f:25:64:02:4d:5e:79:cd:16:2e:47:07: b6:30:9b:a4:c7:6f:9f:23:4f:6d:44:22:38:f4:62: c2:e7:ee:9f:8d:dc:1c:c6:1b:72:7d:07:9e:2a:b0: 52:78:dd:9d:f3:ff:e4:10:c7:fb:97:9d:c8:6b:7c: dc:1d:64:ca:84:50:b8:5c:82:28:f6:5d:de:5f:6e: 3b:54:8a:10:8e:0b:7e:d9:6f:8e:a1:d2:84:6b:71: 9d:5e:cd:93:ed:47:e1:b1:a0:d3:8e:c7:5c:52:bd: 43:62:5b:31:0c:26:da:10:e3:60:85:b9:11:92:ca: a8:cd:0f:02:0e:f5:dc:9b:f5:89:d5:eb:d6:c4:35: 34:47:c6:ee:03:2a:32:12:17:29:b3:3a:f1:66:b9: 27:38:ee:97:38:e3:18:97:8e:02:57:51:9d:c5:a4: a6:63:33:a9:4e:30:53:b8:51:2b:01:e4:8b:45:17: 02:74:4e:c9:57:49:89:84:b1:4d:b8:a2:b0:25:f8: 89:1c:c2:f2:29:51:3c:cc:71:61:be:57:9e:17:11: c2:a2:f2:ba:ae:ea:94:ea:1a:06:db:81:c5:03:21: 73:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:2C:DF:3D:87:8D:76:02:4A:36:24:32:E4:3A:1F:75:2F:26:FB:EB X509v3 Authority Key Identifier: keyid:3F:20:C2:9E:1D:7E:51:5D:F3:E3:D8:5A:A4:4E:75:1F:81:72:73:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91210E0/3EB10C9A6D9811EEAA2AA36AC4F9AE02/PyDCnh1-UV3z49hapE51H4Fycxo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PyDCnh1-UV3z49hapE51H4Fycxo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91210E0/3EB10C9A6D9811EEAA2AA36AC4F9AE02/PyDCnh1-UV3z49hapE51H4Fycxo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:a2:0d:4f:b7:20:ab:05:59:98:b3:8a:75:42:bd:59:47:5c: 6c:69:7b:d2:46:a6:d6:68:46:1e:2c:0d:28:90:3a:51:db:ca: b2:43:dc:5b:f1:19:df:77:99:e6:e2:f5:ca:e9:ab:72:20:6e: f1:ee:83:d5:01:d1:d0:47:fa:ff:78:cf:20:29:85:a6:f2:81: c5:57:56:de:55:14:cc:c4:39:3f:47:61:e3:ff:f7:b2:12:db: c3:63:8c:67:2c:56:6b:05:f5:0c:57:29:f6:7f:9c:01:89:7c: 07:7a:2a:b6:e2:d5:92:63:87:18:fd:9c:b4:b4:10:fa:c1:7d: f2:d6:d6:85:46:83:b5:b1:8f:e8:c9:3a:9d:28:0e:4e:49:1f: 58:ed:be:87:2b:34:42:47:dd:2b:d9:ac:94:ee:21:9b:80:1e: b0:01:e9:9e:a9:61:f5:52:44:bd:7a:c8:05:a0:f2:5b:7e:75: 4c:ef:6a:9e:18:f9:a7:16:f3:a5:46:b5:ee:5f:fc:95:c5:c6: 58:46:0e:17:f6:5d:e9:ca:1c:f1:1c:59:23:b5:ea:b9:09:5a: 09:8f:65:1a:f0:23:dd:d3:f4:7c:f5:9a:35:96:d1:b1:11:fd: bf:b6:7b:0a:24:51:26:48:3e:e0:4b:0c:d0:05:f4:e2:a8:b6: ae:5d:60:28 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjEwRTAxMTAvBgNVBAUTKDNGMjBDMjlFMUQ3RTUxNURGM0UzRDg1QUE0NEU3NTFG ODE3MjczMUEwHhcNMjYwOTIzMDIzNzU2WhcNMjYwOTMwMDIzNzU2WjAYMRYwFAYD VQQDEw02YWIzM2I4NC0xZmJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApmWxOq3OzCJrYPMWNUQg00GkCq1MxRwx4GhD/iWlI5d/JWQCTV55zRYuRwe2 MJukx2+fI09tRCI49GLC5+6fjdwcxhtyfQeeKrBSeN2d8//kEMf7l53Ia3zcHWTK hFC4XIIo9l3eX247VIoQjgt+2W+OodKEa3GdXs2T7UfhsaDTjsdcUr1DYlsxDCba EONghbkRksqozQ8CDvXcm/WJ1evWxDU0R8buAyoyEhcpszrxZrknOO6XOOMYl44C V1GdxaSmYzOpTjBTuFErAeSLRRcCdE7JV0mJhLFNuKKwJfiJHMLyKVE8zHFhvlee FxHCovK6ruqU6hoG24HFAyFzhwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC4s3z2H jXYCSjYkMuQ6H3UvJvvrMB8GA1UdIwQYMBaAFD8gwp4dflFd8+PYWqROdR+BcnMa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTBFMC8zRUIxMEM5QTZE OTgxMUVFQUEyQUEzNkFDNEY5QUUwMi9QeURDbmgxLVVWM3o0OWhhcEU1MUg0Rnlj eG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1B5RENuaDEtVVYzejQ5aGFwRTUxSDRGeWN4by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTBFMC8zRUIxMEM5QTZEOTgxMUVFQUEyQUEzNkFDNEY5QUUwMi9QeURDbmgxLVVW M3o0OWhhcEU1MUg0RnljeG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKqINT7cgqwVZmLOKdUK9WUdcbGl70kam1mhGHiwNKJA6UdvKskPcW/EZ33eZ 5uL1yumrciBu8e6D1QHR0Ef6/3jPICmFpvKBxVdW3lUUzMQ5P0dh4//3shLbw2OM ZyxWawX1DFcp9n+cAYl8B3oqtuLVkmOHGP2ctLQQ+sF98tbWhUaDtbGP6Mk6nSgO TkkfWO2+hys0QkfdK9mslO4hm4AesAHpnqlh9VJEvXrIBaDyW351TO9qnhj5pxbz pUa17l/8lcXGWEYOF/Zd6coc8RxZI7XquQlaCY9lGvAj3dP0fPWaNZbRsRH9v7Z7 CiRRJkg+4EsM0AX04qi2rl1gKA== -----END CERTIFICATE-----Generated at Thu Sep 24 12:42:24 2026 by rpki-client