$ rpki-client -vvvf rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.mft File: PuJvukvjWd6uUAeS6_940ArLdgw.mft (raw, json) Hash identifier: 5WoShC2cHhPsQOCNnmpbPPuRNMcpm2816RySEZrIKBY= Subject key identifier: 1F:71:52:58:04:3A:0C:D4:56:9E:3F:E5:D7:F5:C9:F1:C6:A7:90:9F Authority key identifier: 3E:E2:6F:BA:4B:E3:59:DE:AE:50:07:92:EB:FF:78:D0:0A:CB:76:0C Certificate issuer: /CN=A91596C4/serialNumber=3EE26FBA4BE359DEAE500792EBFF78D00ACB760C Certificate serial: 04FA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PuJvukvjWd6uUAeS6_940ArLdgw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.mft Manifest number: 04D6 Signing time: Thu 24 Sep 2026 23:37:29 +0000 Manifest this update: Thu 24 Sep 2026 23:37:28 +0000 Manifest next update: Thu 01 Oct 2026 23:37:28 +0000 Files and hashes: 1: PuJvukvjWd6uUAeS6_940ArLdgw.crl (hash: 2ZBa912VawyltwIV8df2R7fnuSQtBKtem8t1/3VzB24=) 2: 0AE155E6833411ECBB74C786C4F9AE02.roa (hash: DF2zCDZzOfwV2Fb/7F4G0pHecJjvgJOAWTH8TiFGmoc=) 3: 09B62A48833411ECBB74C786C4F9AE02.roa (hash: 5CjAVhZ4H7jUaLeVyY5rhBjjQSwZO+qN9rQG5F9axLY=) 4: 0A4D6250833411ECBB74C786C4F9AE02.roa (hash: LGn5w+iTJlicKdWA6qyGgWwj55jd6LVvyCEcKfnAtIs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.crl rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PuJvukvjWd6uUAeS6_940ArLdgw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 23:37:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1274 (0x4fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91596C4, serialNumber=3EE26FBA4BE359DEAE500792EBFF78D00ACB760C Validity Not Before: Sep 24 23:37:28 2026 GMT Not After : Oct 1 23:37:28 2026 GMT Subject: CN=6ab5b439-e499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:46:8a:92:a4:4a:51:f8:df:4d:01:3a:58:b1: 69:cc:e2:7b:bb:35:33:47:bb:3d:a0:d1:1b:ea:02: c5:43:dc:39:d2:0e:70:d3:9d:7b:2c:bc:b4:9a:f7: 38:5b:4d:b6:c7:2a:d7:0c:42:1c:4c:6f:02:f8:ad: 79:dd:70:fe:68:9c:3e:c0:50:f9:0b:5a:ae:72:3e: 06:1d:f5:f9:bb:67:a4:31:92:55:8b:1f:4a:c1:24: 9b:5a:6d:07:0d:7f:5d:9d:05:0c:de:fe:b6:f1:89: b1:39:e1:14:c7:ef:1e:81:e3:78:ce:5c:22:e0:9b: 8c:6e:f1:5c:49:c3:74:14:0a:f6:2b:4c:a5:f0:97: b3:42:77:1a:91:d5:da:c8:f2:04:92:03:39:d5:4d: bb:8c:05:53:43:e9:b4:f1:8d:d3:a2:ea:3b:36:60: 34:c1:01:6e:40:97:24:a5:ff:ef:bb:02:1a:cf:b1: 42:3a:35:36:1b:c3:07:ce:fc:61:6a:b9:47:d3:93: a0:50:6d:97:7b:1f:b0:52:0b:42:55:f0:9f:59:f6: 32:e6:b6:48:84:de:bd:ef:91:8b:4c:56:b8:64:7b: 07:f7:1e:2b:d3:e7:44:64:7d:bc:e4:2d:f9:32:27: ba:ee:02:dc:65:50:ee:ae:05:cc:8e:94:dc:2e:c3: e4:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:71:52:58:04:3A:0C:D4:56:9E:3F:E5:D7:F5:C9:F1:C6:A7:90:9F X509v3 Authority Key Identifier: keyid:3E:E2:6F:BA:4B:E3:59:DE:AE:50:07:92:EB:FF:78:D0:0A:CB:76:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PuJvukvjWd6uUAeS6_940ArLdgw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:c0:2b:a2:10:e5:a0:8b:87:d9:82:35:80:a8:81:dd:4d:3d: 1d:ea:54:8a:75:fe:b3:74:54:8d:7f:d9:84:98:1f:fb:95:2e: 8c:75:eb:7e:c2:3c:41:ec:91:8a:c3:16:db:78:bd:9d:22:1b: f4:2a:ec:13:e2:02:ca:05:94:5b:97:89:65:b8:68:bf:56:00: 3f:95:3c:7d:ce:07:8c:9f:b4:25:46:59:5f:86:1e:60:4a:f3: 93:7c:0d:4f:28:43:7e:16:03:84:45:3f:f2:ae:64:f8:ca:0b: 59:26:85:3f:1e:c4:67:c9:2f:0d:ab:ec:f0:46:6a:1b:b7:ce: 48:f5:47:c9:a7:d5:87:d9:9d:6d:03:d9:c0:ca:c1:76:15:c5: 55:c2:ec:ec:21:f2:70:cd:8f:a8:b4:19:5d:83:86:65:4b:6b: 5c:9a:55:07:b1:81:f2:28:17:77:15:c2:91:69:50:0a:f6:99: b8:0a:d9:e0:0b:43:f5:67:dc:62:58:5b:6d:20:8d:25:cf:73: 1c:bc:b0:54:30:6a:46:f9:ae:56:00:1a:d7:2f:b2:ec:bb:60: c3:7f:17:94:ea:c3:f3:c7:33:d3:57:16:3d:05:aa:00:10:17: ce:94:15:51:8f:57:20:64:c8:e1:2e:5d:0f:fb:c4:2b:55:98: 82:c8:0f:a7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTk2QzQxMTAvBgNVBAUTKDNFRTI2RkJBNEJFMzU5REVBRTUwMDc5MkVCRkY3OEQw MEFDQjc2MEMwHhcNMjYwOTI0MjMzNzI4WhcNMjYxMDAxMjMzNzI4WjAYMRYwFAYD VQQDEw02YWI1YjQzOS1lNDk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoEaKkqRKUfjfTQE6WLFpzOJ7uzUzR7s9oNEb6gLFQ9w50g5w0517LLy0mvc4 W022xyrXDEIcTG8C+K153XD+aJw+wFD5C1qucj4GHfX5u2ekMZJVix9KwSSbWm0H DX9dnQUM3v628YmxOeEUx+8egeN4zlwi4JuMbvFcScN0FAr2K0yl8JezQncakdXa yPIEkgM51U27jAVTQ+m08Y3Touo7NmA0wQFuQJckpf/vuwIaz7FCOjU2G8MHzvxh arlH05OgUG2Xex+wUgtCVfCfWfYy5rZIhN6975GLTFa4ZHsH9x4r0+dEZH285C35 Mie67gLcZVDurgXMjpTcLsPkJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB9xUlgE OgzUVp4/5df1yfHGp5CfMB8GA1UdIwQYMBaAFD7ib7pL41nerlAHkuv/eNAKy3YM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTZDNC9GM0RERUVERTgz MzAxMUVDOEZGMzkzODNDNEY5QUUwMi9QdUp2dWt2aldkNnVVQWVTNl85NDBBckxk Z3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1B1SnZ1a3ZqV2Q2dVVBZVM2Xzk0MEFyTGRndy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTZDNC9GM0RERUVERTgzMzAxMUVDOEZGMzkzODNDNEY5QUUwMi9QdUp2dWt2aldk NnVVQWVTNl85NDBBckxkZ3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPMArohDloIuH2YI1gKiB3U09HepUinX+s3RUjX/ZhJgf+5UujHXrfsI8QeyR isMW23i9nSIb9CrsE+ICygWUW5eJZbhov1YAP5U8fc4HjJ+0JUZZX4YeYErzk3wN TyhDfhYDhEU/8q5k+MoLWSaFPx7EZ8kvDavs8EZqG7fOSPVHyafVh9mdbQPZwMrB dhXFVcLs7CHycM2PqLQZXYOGZUtrXJpVB7GB8igXdxXCkWlQCvaZuArZ4AtD9Wfc YlhbbSCNJc9zHLywVDBqRvmuVgAa1y+y7Ltgw38XlOrD88cz01cWPQWqABAXzpQV UY9XIGTI4S5dD/vEK1WYgsgPpw== -----END CERTIFICATE-----Generated at Sat Sep 26 03:31:33 2026 by rpki-client