$ rpki-client -vvvf rpki.apnic.net/member_repository/A91629F2/E183CEC44C0411F18A6F8D79A1833773/PzD_G7sm8QLtikdaS_vJQqHfMoo.mft File: PzD_G7sm8QLtikdaS_vJQqHfMoo.mft (raw, json) Hash identifier: XDyiprPImdba+Ej7DVC4p7Mh2m2larFrYOtHlqhTPqk= Subject key identifier: 3A:31:7C:31:26:38:55:BB:D1:A3:38:B4:A1:CD:61:64:DF:A2:D5:F7 Authority key identifier: 3F:30:FF:1B:BB:26:F1:02:ED:8A:47:5A:4B:FB:C9:42:A1:DF:32:8A Certificate issuer: /CN=A91629F2/serialNumber=3F30FF1BBB26F102ED8A475A4BFBC942A1DF328A Certificate serial: 48 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzD_G7sm8QLtikdaS_vJQqHfMoo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91629F2/E183CEC44C0411F18A6F8D79A1833773/PzD_G7sm8QLtikdaS_vJQqHfMoo.mft Manifest number: 47 Signing time: Wed 23 Sep 2026 08:10:29 +0000 Manifest this update: Wed 23 Sep 2026 08:10:29 +0000 Manifest next update: Wed 30 Sep 2026 08:10:29 +0000 Files and hashes: 1: PzD_G7sm8QLtikdaS_vJQqHfMoo.crl (hash: X5XtoZCo50VMRNDLQzcQZmWAokGQbjyeXlbBg1sqbtE=) 2: 94B0F0DE4C0B11F1996C5785A4833773.roa (hash: 01xIz/rgNcJT7guVWtVDsLnpVBDWMjTBSig7MAakmHY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91629F2/E183CEC44C0411F18A6F8D79A1833773/PzD_G7sm8QLtikdaS_vJQqHfMoo.crl rsync://rpki.apnic.net/member_repository/A91629F2/E183CEC44C0411F18A6F8D79A1833773/PzD_G7sm8QLtikdaS_vJQqHfMoo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzD_G7sm8QLtikdaS_vJQqHfMoo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 08:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91629F2, serialNumber=3F30FF1BBB26F102ED8A475A4BFBC942A1DF328A Validity Not Before: Sep 23 08:10:29 2026 GMT Not After : Sep 30 08:10:29 2026 GMT Subject: CN=6ab38975-0eee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c8:6c:7b:f7:2c:6b:c6:ec:d3:b2:fb:bb:e4: 84:c1:05:84:d2:8e:6e:7e:87:9f:f0:a4:c9:dc:23: e9:09:a3:c2:cb:af:6f:fa:37:2c:6f:3a:fa:6d:27: 35:7f:d4:ca:ec:cf:d2:e5:90:7c:bd:60:60:a0:dc: 26:8c:8d:d0:da:6b:fe:19:3a:36:4b:75:a7:42:9e: 53:77:fe:da:2f:67:7e:00:3f:50:78:90:f6:d9:75: 30:d8:14:14:f3:8d:eb:2f:67:fa:f5:48:76:09:c6: 35:8c:3d:c7:2f:26:34:d3:1a:9a:0a:47:a5:dd:80: 90:4e:0b:33:f1:f6:8d:87:7a:4c:9c:87:d7:fe:64: 69:89:f0:9e:d5:ae:31:d9:e2:26:b7:88:bf:43:71: 65:f0:7a:d0:0c:fe:5c:27:5d:68:15:48:7b:e9:ac: 1b:c4:8a:c2:c1:72:3d:be:5f:6c:0a:cc:29:e8:28: 44:50:24:bc:79:3b:c6:59:95:35:63:58:79:3a:78: 9c:19:2c:27:94:08:78:73:08:be:d2:f0:1b:70:d7: 3a:6d:7f:3a:c6:5d:3e:4e:72:5c:31:ee:0e:f0:c3: d8:f0:9e:5f:f2:e5:fd:c5:b3:15:d6:10:b9:69:36: 5e:5c:e4:2d:0d:60:30:26:c5:47:d6:9f:eb:e6:52: cc:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:31:7C:31:26:38:55:BB:D1:A3:38:B4:A1:CD:61:64:DF:A2:D5:F7 X509v3 Authority Key Identifier: keyid:3F:30:FF:1B:BB:26:F1:02:ED:8A:47:5A:4B:FB:C9:42:A1:DF:32:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91629F2/E183CEC44C0411F18A6F8D79A1833773/PzD_G7sm8QLtikdaS_vJQqHfMoo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzD_G7sm8QLtikdaS_vJQqHfMoo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91629F2/E183CEC44C0411F18A6F8D79A1833773/PzD_G7sm8QLtikdaS_vJQqHfMoo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:fc:bc:d0:ca:c8:7e:9a:31:3f:d5:8e:9e:f5:28:2d:1e:07: e0:ca:8e:e6:0f:13:1d:58:85:8b:26:93:6e:2f:c2:cc:43:67: fd:e5:a9:86:68:04:c2:bc:a8:48:c8:b0:9e:1a:2b:3f:a0:75: 13:c1:ef:f7:0a:b8:25:a9:55:e4:64:ea:72:f1:e5:87:24:27: 46:b3:a5:eb:04:01:cd:00:7c:fd:b8:13:6a:97:fc:55:ae:e2: d5:f6:36:fb:4b:d0:9b:84:69:c3:d9:af:16:07:1b:83:8d:e3: 4a:72:64:91:1c:6d:02:52:8a:cc:38:9b:9f:87:1b:be:54:00: 92:3f:fc:7d:f9:70:32:79:3f:f0:5e:c5:63:51:16:f8:e0:f4: 2a:de:3d:30:f6:88:ed:b6:08:08:ea:28:29:c7:d1:e6:8f:09: 02:f5:a5:03:2c:da:ea:11:5c:54:18:ea:ce:1e:64:17:8a:0b: 70:47:2a:dd:ae:b4:9a:d5:22:53:1d:cc:e2:1a:d2:86:22:6d: e4:5d:d3:48:32:ac:fa:45:0c:d9:c7:ae:14:ac:88:82:cc:c5: 34:3d:fa:21:f3:fc:36:a0:9d:a9:d1:43:a0:eb:ad:66:04:cf: ec:07:0e:f0:42:7b:e6:41:a2:e9:64:13:c0:74:7d:67:95:4c: 15:b3:df:0d -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MjlGMjExMC8GA1UEBRMoM0YzMEZGMUJCQjI2RjEwMkVEOEE0NzVBNEJGQkM5NDJB MURGMzI4QTAeFw0yNjA5MjMwODEwMjlaFw0yNjA5MzAwODEwMjlaMBgxFjAUBgNV BAMTDTZhYjM4OTc1LTBlZWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCmyGx79yxrxuzTsvu75ITBBYTSjm5+h5/wpMncI+kJo8LLr2/6NyxvOvptJzV/ 1Mrsz9LlkHy9YGCg3CaMjdDaa/4ZOjZLdadCnlN3/tovZ34AP1B4kPbZdTDYFBTz jesvZ/r1SHYJxjWMPccvJjTTGpoKR6XdgJBOCzPx9o2Hekych9f+ZGmJ8J7VrjHZ 4ia3iL9DcWXwetAM/lwnXWgVSHvprBvEisLBcj2+X2wKzCnoKERQJLx5O8ZZlTVj WHk6eJwZLCeUCHhzCL7S8Btw1zptfzrGXT5Oclwx7g7ww9jwnl/y5f3FsxXWELlp Nl5c5C0NYDAmxUfWn+vmUsy3AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUOjF8MSY4 VbvRozi0oc1hZN+i1fcwHwYDVR0jBBgwFoAUPzD/G7sm8QLtikdaS/vJQqHfMoow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYyOUYyL0UxODNDRUM0NEMw NDExRjE4QTZGOEQ3OUExODMzNzczL1B6RF9HN3NtOFFMdGlrZGFTX3ZKUXFIZk1v by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUHpEX0c3c204UUx0aWtkYVNfdkpRcUhmTW9vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYy OUYyL0UxODNDRUM0NEMwNDExRjE4QTZGOEQ3OUExODMzNzczL1B6RF9HN3NtOFFM dGlrZGFTX3ZKUXFIZk1vby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBz/LzQysh+mjE/1Y6e9SgtHgfgyo7mDxMdWIWLJpNuL8LMQ2f95amGaATCvKhI yLCeGis/oHUTwe/3CrglqVXkZOpy8eWHJCdGs6XrBAHNAHz9uBNql/xVruLV9jb7 S9CbhGnD2a8WBxuDjeNKcmSRHG0CUorMOJufhxu+VACSP/x9+XAyeT/wXsVjURb4 4PQq3j0w9ojttggI6igpx9HmjwkC9aUDLNrqEVxUGOrOHmQXigtwRyrdrrSa1SJT HcziGtKGIm3kXdNIMqz6RQzZx64UrIiCzMU0Pfoh8/w2oJ2p0UOg661mBM/sBw7w QnvmQaLpZBPAdH1nlUwVs98N -----END CERTIFICATE-----Generated at Thu Sep 24 06:54:28 2026 by rpki-client