$ rpki-client -vvvf rpki.apnic.net/member_repository/A9178F3F/47C8BE507F4611F19147BB5D95A30FBC/PkEPPHi3zvQgcVmBdk5xnuGbZkU.mft File: PkEPPHi3zvQgcVmBdk5xnuGbZkU.mft (raw, json) Hash identifier: Uv21bNQKxTN1gPzsOTHnOoLL00Y0AXP5T/p1Dkl+OYg= Subject key identifier: 86:B5:2E:CB:E6:14:E6:17:F1:C2:9A:16:50:B9:88:F7:A8:2C:D4:7E Authority key identifier: 3E:41:0F:3C:78:B7:CE:F4:20:71:59:81:76:4E:71:9E:E1:9B:66:45 Certificate issuer: /CN=A9178F3F/serialNumber=3E410F3C78B7CEF420715981764E719EE19B6645 Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PkEPPHi3zvQgcVmBdk5xnuGbZkU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178F3F/47C8BE507F4611F19147BB5D95A30FBC/PkEPPHi3zvQgcVmBdk5xnuGbZkU.mft Manifest number: 28 Signing time: Fri 25 Sep 2026 08:55:16 +0000 Manifest this update: Fri 25 Sep 2026 08:55:15 +0000 Manifest next update: Fri 02 Oct 2026 08:55:15 +0000 Files and hashes: 1: PkEPPHi3zvQgcVmBdk5xnuGbZkU.crl (hash: 7rLTMiPgbagtifn2WXRBunKd9QVcP7Tz8dvcv0qoSZo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178F3F/47C8BE507F4611F19147BB5D95A30FBC/PkEPPHi3zvQgcVmBdk5xnuGbZkU.crl rsync://rpki.apnic.net/member_repository/A9178F3F/47C8BE507F4611F19147BB5D95A30FBC/PkEPPHi3zvQgcVmBdk5xnuGbZkU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PkEPPHi3zvQgcVmBdk5xnuGbZkU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 08:55:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178F3F, serialNumber=3E410F3C78B7CEF420715981764E719EE19B6645 Validity Not Before: Sep 25 08:55:15 2026 GMT Not After : Oct 2 08:55:15 2026 GMT Subject: CN=6ab636f4-b6d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6c:60:83:d6:ad:e8:09:c7:ec:da:42:48:1a: 16:37:e5:6f:25:83:1b:fa:04:6e:b6:c8:74:bc:ca: 1a:24:a6:be:a4:27:1e:82:b0:29:40:aa:0e:e9:31: 61:88:f8:45:f1:b9:68:35:56:4c:a4:38:e1:ea:96: 9f:aa:65:73:61:6e:fe:dc:5d:fd:36:10:ec:93:28: e5:88:ca:60:cd:0b:40:53:a6:1d:0d:19:d6:c0:de: f0:ef:88:ad:88:e5:5f:11:84:af:d0:83:10:41:04: d8:c0:c5:0e:e0:f0:27:d3:70:c8:3e:87:28:96:f8: ed:c2:94:74:05:f1:0f:98:78:1a:67:e2:c0:6d:db: 63:9d:f6:d3:e2:cb:a6:aa:22:27:3c:ae:9b:46:4b: 9d:76:ab:7c:38:4a:60:7d:90:a3:4a:84:6a:9f:d4: eb:1a:ee:63:70:86:6d:bc:18:e7:8c:63:fe:46:de: 4d:30:53:bb:33:f9:df:50:78:03:78:95:c6:03:51: 99:c3:c1:b0:07:40:5b:1c:b5:21:80:a7:d4:f2:52: a1:6c:b9:1c:90:13:f2:7f:aa:94:93:74:97:70:83: d0:6a:a1:1b:74:0c:d3:c8:06:22:8d:f0:e8:4d:87: 44:94:36:a0:5c:46:bb:3d:9e:41:31:d2:17:f8:79: a8:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:B5:2E:CB:E6:14:E6:17:F1:C2:9A:16:50:B9:88:F7:A8:2C:D4:7E X509v3 Authority Key Identifier: keyid:3E:41:0F:3C:78:B7:CE:F4:20:71:59:81:76:4E:71:9E:E1:9B:66:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178F3F/47C8BE507F4611F19147BB5D95A30FBC/PkEPPHi3zvQgcVmBdk5xnuGbZkU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PkEPPHi3zvQgcVmBdk5xnuGbZkU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178F3F/47C8BE507F4611F19147BB5D95A30FBC/PkEPPHi3zvQgcVmBdk5xnuGbZkU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:1f:22:5b:fd:08:a1:04:cf:6a:31:a0:f8:f5:20:13:c3:55: 7a:60:03:18:62:c6:ff:11:5b:7f:76:f0:2c:5d:1b:6e:7b:21: d3:37:15:b0:6f:cd:ce:28:9c:78:dc:fd:34:cf:2e:0c:ba:e1: e9:42:73:3e:0a:4a:cd:7d:ed:bb:65:22:4d:09:1d:3d:fb:21: 0e:a1:e9:75:37:8e:dc:98:ec:44:1d:e9:c4:d8:bc:35:6b:a0: 94:84:42:ec:20:20:de:75:f0:73:dd:30:b1:10:8e:04:78:bc: a1:8d:ae:7e:83:d8:85:ce:b7:a4:ff:2b:82:f0:5f:be:27:cc: ac:fb:7a:88:55:83:df:99:6c:a9:bd:6a:ef:5c:84:69:e0:15: 89:26:cb:a3:ab:36:c2:4f:9f:ff:de:4f:91:93:3a:06:a3:47: fb:d6:a5:4a:d0:e8:7a:80:d4:26:96:f3:53:53:f0:dd:78:e3: 98:7e:15:ec:63:e6:20:ad:14:d2:63:7a:1f:f1:96:2c:2d:fc: 73:c0:49:f7:a0:ed:e6:a5:b9:d8:a4:95:eb:e8:78:bc:30:5f: e1:da:60:7d:45:f4:a0:d6:5a:8d:18:b5:3a:cb:c8:85:0c:c8: 78:d8:62:dc:35:6f:61:e1:2b:25:4d:cc:e1:70:8b:7d:e2:af: 84:47:b5:f2 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 OEYzRjExMC8GA1UEBRMoM0U0MTBGM0M3OEI3Q0VGNDIwNzE1OTgxNzY0RTcxOUVF MTlCNjY0NTAeFw0yNjA5MjUwODU1MTVaFw0yNjEwMDIwODU1MTVaMBgxFjAUBgNV BAMTDTZhYjYzNmY0LWI2ZDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxbGCD1q3oCcfs2kJIGhY35W8lgxv6BG62yHS8yhokpr6kJx6CsClAqg7pMWGI +EXxuWg1VkykOOHqlp+qZXNhbv7cXf02EOyTKOWIymDNC0BTph0NGdbA3vDviK2I 5V8RhK/QgxBBBNjAxQ7g8CfTcMg+hyiW+O3ClHQF8Q+YeBpn4sBt22Od9tPiy6aq Iic8rptGS512q3w4SmB9kKNKhGqf1Osa7mNwhm28GOeMY/5G3k0wU7sz+d9QeAN4 lcYDUZnDwbAHQFsctSGAp9TyUqFsuRyQE/J/qpSTdJdwg9BqoRt0DNPIBiKN8OhN h0SUNqBcRrs9nkEx0hf4eagHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUhrUuy+YU 5hfxwpoWULmI96gs1H4wHwYDVR0jBBgwFoAUPkEPPHi3zvQgcVmBdk5xnuGbZkUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc4RjNGLzQ3QzhCRTUwN0Y0 NjExRjE5MTQ3QkI1RDk1QTMwRkJDL1BrRVBQSGkzenZRZ2NWbUJkazV4bnVHYlpr VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUGtFUFBIaTN6dlFnY1ZtQmRrNXhudUdiWmtVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc4 RjNGLzQ3QzhCRTUwN0Y0NjExRjE5MTQ3QkI1RDk1QTMwRkJDL1BrRVBQSGkzenZR Z2NWbUJkazV4bnVHYlprVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBIHyJb/QihBM9qMaD49SATw1V6YAMYYsb/EVt/dvAsXRtueyHTNxWwb83OKJx4 3P00zy4MuuHpQnM+CkrNfe27ZSJNCR09+yEOoel1N47cmOxEHenE2Lw1a6CUhELs ICDedfBz3TCxEI4EeLyhja5+g9iFzrek/yuC8F++J8ys+3qIVYPfmWypvWrvXIRp 4BWJJsujqzbCT5//3k+RkzoGo0f71qVK0Oh6gNQmlvNTU/DdeOOYfhXsY+YgrRTS Y3of8ZYsLfxzwEn3oO3mpbnYpJXr6Hi8MF/h2mB9RfSg1lqNGLU6y8iFDMh42GLc NW9h4SslTczhcIt94q+ER7Xy -----END CERTIFICATE-----Generated at Fri Sep 25 17:52:57 2026 by rpki-client