$ rpki-client -vvvf rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft File: PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft (raw, json) Hash identifier: dJXqzpBaXUphtGagR+fmWt51y7jjHFU+Q5OukRRsGLc= Subject key identifier: C3:8E:B7:94:06:CF:71:62:D1:FA:FE:4C:54:0B:4C:1E:FD:D3:4C:52 Authority key identifier: 3E:93:58:DC:F2:C5:3F:66:21:05:2B:3A:A8:52:45:4E:2F:B3:1C:18 Certificate issuer: /CN=A9122B0D/serialNumber=3E9358DCF2C53F6621052B3AA852454E2FB31C18 Certificate serial: 02A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PpNY3PLFP2YhBSs6qFJFTi-zHBg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft Manifest number: 0293 Signing time: Wed 23 Sep 2026 01:45:03 +0000 Manifest this update: Wed 23 Sep 2026 01:45:02 +0000 Manifest next update: Wed 30 Sep 2026 01:45:02 +0000 Files and hashes: 1: PpNY3PLFP2YhBSs6qFJFTi-zHBg.crl (hash: EZvLX2Fl+7kitMAIrUDJy0dDHDIn9EDnlBnbg6SacZE=) 2: 7EBC5A18700311F18820273A93A30FBC.roa (hash: DtLfgJelfww9oIvfomUx8toqllrQvLO5uOciU7srb3E=) 3: B2B63A82700311F1A845E35993A30FBC.roa (hash: GsHylxWmgU2d57aIkeGHod0v/td+O9Y0O73X5akYUUE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.crl rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PpNY3PLFP2YhBSs6qFJFTi-zHBg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 01:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 673 (0x2a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122B0D, serialNumber=3E9358DCF2C53F6621052B3AA852454E2FB31C18 Validity Not Before: Sep 23 01:45:02 2026 GMT Not After : Sep 30 01:45:02 2026 GMT Subject: CN=6ab32f1f-39a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:86:0a:a5:72:77:30:4a:1f:bb:79:cc:77:a7: fb:71:2e:7c:5d:3d:50:f4:51:a0:12:b4:59:ef:37: e5:dc:c0:1c:3a:d8:9c:86:36:9c:ec:53:40:61:01: ab:b7:9d:65:6d:64:3d:bb:d3:c9:e0:58:8e:93:d5: d3:29:17:98:d8:90:a3:ad:ed:5e:f9:bf:1e:0f:dc: a4:c0:54:58:b8:52:8b:87:2e:cb:da:af:a0:15:58: e4:f7:f7:d9:a7:42:08:13:1a:aa:e4:ec:5e:59:af: 1f:36:77:af:cd:47:0e:a2:71:e1:de:bf:01:7c:94: 49:a4:ce:f7:8e:b8:8d:de:50:e3:3a:ed:25:05:0d: ea:78:8a:76:45:8d:3b:11:b4:16:e4:57:2e:92:38: 81:3f:90:b1:2b:71:02:98:a1:e4:59:5f:28:6f:e6: 46:0a:2f:cc:ab:9a:a2:e1:68:26:01:b6:fb:a0:67: 06:49:6a:54:fa:55:4a:f3:90:a5:e9:63:cd:24:23: 92:70:20:a3:55:c7:2c:40:7a:74:91:cf:c5:fc:b8: 10:82:21:1f:e1:6f:e5:a7:ec:20:11:3d:cb:d4:52: 9c:fb:5b:6b:ff:1b:7b:3b:f8:b4:b0:99:8c:e4:cd: 4f:dc:cd:98:b0:cb:f8:d2:ff:6b:f7:d8:43:97:e6: f9:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:8E:B7:94:06:CF:71:62:D1:FA:FE:4C:54:0B:4C:1E:FD:D3:4C:52 X509v3 Authority Key Identifier: keyid:3E:93:58:DC:F2:C5:3F:66:21:05:2B:3A:A8:52:45:4E:2F:B3:1C:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PpNY3PLFP2YhBSs6qFJFTi-zHBg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:2c:83:a7:d5:77:71:88:e5:14:eb:d4:ff:21:33:ec:5e:23: ad:85:08:9b:a6:1d:88:9e:d6:3a:9b:d0:fc:79:30:55:fb:09: 1a:43:33:97:dc:c0:b1:f7:86:77:81:9c:fb:e7:1e:5c:ac:96: bd:5f:c3:73:40:dc:a1:e9:b9:de:ea:c0:fe:20:e6:0b:e6:cd: c5:c9:d0:69:55:d9:61:45:38:22:8a:83:88:ef:a9:4e:0c:9e: a4:09:02:e6:b0:f8:82:ae:b7:0d:48:0d:a3:70:e0:71:2f:e2: fa:52:19:8b:f8:77:6a:07:db:73:03:46:f4:5e:cc:a1:7e:32: 0d:dd:50:5e:6e:72:1c:5a:e8:8f:cd:4b:86:c8:73:5d:29:09: 7d:c2:ed:ec:9b:fd:c1:66:f9:2e:d6:cf:0f:44:51:5d:0e:b2: a8:a6:fb:20:57:bd:bf:72:95:3c:1f:b4:7b:bb:89:8f:58:69: 89:f2:6a:c8:a4:ee:1b:7e:68:bd:3e:f4:cb:af:3b:d4:f9:c9: 4e:bf:78:ac:20:b3:3d:f3:2f:51:5c:82:76:20:eb:c6:f9:5d: 78:30:f8:7c:d0:ff:ea:a0:03:15:ea:5c:62:d0:57:cf:e7:3b: d9:30:d7:8c:f4:74:58:f1:83:c9:e1:22:fe:9d:2e:92:e8:d2: 1e:3a:4e:8c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJCMEQxMTAvBgNVBAUTKDNFOTM1OERDRjJDNTNGNjYyMTA1MkIzQUE4NTI0NTRF MkZCMzFDMTgwHhcNMjYwOTIzMDE0NTAyWhcNMjYwOTMwMDE0NTAyWjAYMRYwFAYD VQQDEw02YWIzMmYxZi0zOWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjIYKpXJ3MEofu3nMd6f7cS58XT1Q9FGgErRZ7zfl3MAcOtichjac7FNAYQGr t51lbWQ9u9PJ4FiOk9XTKReY2JCjre1e+b8eD9ykwFRYuFKLhy7L2q+gFVjk9/fZ p0IIExqq5OxeWa8fNnevzUcOonHh3r8BfJRJpM73jriN3lDjOu0lBQ3qeIp2RY07 EbQW5FcukjiBP5CxK3ECmKHkWV8ob+ZGCi/Mq5qi4WgmAbb7oGcGSWpU+lVK85Cl 6WPNJCOScCCjVccsQHp0kc/F/LgQgiEf4W/lp+wgET3L1FKc+1tr/xt7O/i0sJmM 5M1P3M2YsMv40v9r99hDl+b5GQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMOOt5QG z3Fi0fr+TFQLTB7900xSMB8GA1UdIwQYMBaAFD6TWNzyxT9mIQUrOqhSRU4vsxwY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkIwRC85MDlCNzlGMEU1 MkIxMUVEQjJFQjY1ODVDNEY5QUUwMi9QcE5ZM1BMRlAyWWhCU3M2cUZKRlRpLXpI QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BwTlkzUExGUDJZaEJTczZxRkpGVGktekhCZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkIwRC85MDlCNzlGMEU1MkIxMUVEQjJFQjY1ODVDNEY5QUUwMi9QcE5ZM1BMRlAy WWhCU3M2cUZKRlRpLXpIQmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaCyDp9V3cYjlFOvU/yEz7F4jrYUIm6YdiJ7WOpvQ/HkwVfsJGkMzl9zAsfeG d4Gc++ceXKyWvV/Dc0Dcoem53urA/iDmC+bNxcnQaVXZYUU4IoqDiO+pTgyepAkC 5rD4gq63DUgNo3DgcS/i+lIZi/h3agfbcwNG9F7MoX4yDd1QXm5yHFroj81Lhshz XSkJfcLt7Jv9wWb5LtbPD0RRXQ6yqKb7IFe9v3KVPB+0e7uJj1hpifJqyKTuG35o vT70y6871PnJTr94rCCzPfMvUVyCdiDrxvldeDD4fND/6qADFepcYtBXz+c72TDX jPR0WPGDyeEi/p0ukujSHjpOjA== -----END CERTIFICATE-----Generated at Thu Sep 24 04:05:23 2026 by rpki-client