$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.mft File: PG7AmwlfpfUTYVEIpUR8rLcasaE.mft (raw, json) Hash identifier: Jll5iQErdXvn6yh3kqjXQNJKY93CP+RdN6jEBo35SBM= Subject key identifier: A6:C2:FC:07:22:01:7C:B4:41:5E:AB:3A:D6:57:71:A0:DA:E2:98:FB Authority key identifier: 3C:6E:C0:9B:09:5F:A5:F5:13:61:51:08:A5:44:7C:AC:B7:1A:B1:A1 Certificate issuer: /CN=A917E4BA/serialNumber=3C6EC09B095FA5F513615108A5447CACB71AB1A1 Certificate serial: 0BBA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PG7AmwlfpfUTYVEIpUR8rLcasaE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.mft Manifest number: 0BB1 Signing time: Thu 24 Sep 2026 19:01:11 +0000 Manifest this update: Thu 24 Sep 2026 19:01:11 +0000 Manifest next update: Thu 01 Oct 2026 19:01:11 +0000 Files and hashes: 1: PG7AmwlfpfUTYVEIpUR8rLcasaE.crl (hash: vG6wDEul9Hgo8KS7L7Ezetzo4ykgYhJ6BOl1JJRcMU8=) 2: 66F91334ED4911ED9A90391BC4F9AE02.roa (hash: ZatHv2sHyWRSC6zewOoWADYzth7DnWj+eG5J7PvU3G0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.crl rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PG7AmwlfpfUTYVEIpUR8rLcasaE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 19:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3002 (0xbba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E4BA, serialNumber=3C6EC09B095FA5F513615108A5447CACB71AB1A1 Validity Not Before: Sep 24 19:01:11 2026 GMT Not After : Oct 1 19:01:11 2026 GMT Subject: CN=6ab57377-69a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1d:b6:b0:c2:6e:11:9f:43:58:1b:a2:fc:eb: 8b:f2:06:3c:1d:bd:e8:51:ea:ea:fd:fd:41:93:5a: 56:df:a9:4b:ed:39:fc:1f:cb:ca:df:9e:ff:83:56: 20:18:13:bd:7e:80:bc:0a:bf:8a:35:96:9b:da:ec: 8f:4c:2f:62:7d:5b:b3:b1:d1:18:11:54:5a:3a:8c: 0f:ff:91:8b:31:89:40:29:1b:8d:b2:ed:85:1f:16: da:f0:f1:e0:0c:96:f9:f7:41:42:fd:fd:88:a4:3e: a3:73:f1:d6:81:33:b6:cd:8d:9b:15:b8:af:94:04: e9:48:30:b1:cd:61:07:43:19:23:43:25:9e:eb:f7: de:c3:53:dc:22:29:c4:5c:71:13:67:54:d1:26:cd: 7d:45:c3:06:ed:6c:6a:7f:6e:8d:54:fe:9c:21:ac: c6:5d:f5:45:fb:18:ea:17:04:ee:ba:3c:e2:b3:ba: 69:68:df:f3:19:7d:42:21:a8:6f:ab:ad:30:ed:bd: 23:e1:9f:d8:16:c0:dc:86:fd:30:9e:8e:6b:72:8a: 90:e3:8b:6b:4e:46:ce:a6:9b:b9:ab:ba:8e:d7:c3: 01:11:24:5b:cf:a5:32:2d:10:55:bc:d3:03:ae:14: 07:47:34:01:9a:1d:ed:d6:4a:dc:a1:6c:40:08:b9: d6:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:C2:FC:07:22:01:7C:B4:41:5E:AB:3A:D6:57:71:A0:DA:E2:98:FB X509v3 Authority Key Identifier: keyid:3C:6E:C0:9B:09:5F:A5:F5:13:61:51:08:A5:44:7C:AC:B7:1A:B1:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PG7AmwlfpfUTYVEIpUR8rLcasaE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:34:e1:5c:57:75:77:e1:7b:cc:a2:d1:d8:ea:a3:e2:24:b3: 58:b4:86:25:7f:d7:cf:39:08:9c:ca:c9:1a:93:d6:0d:70:f3: dd:40:e9:60:f1:b1:a5:b6:c8:be:e4:82:c7:e1:3b:66:3e:92: f9:91:db:ef:a0:40:a8:c3:f6:cd:df:59:6e:8d:d9:96:26:8f: ff:b1:32:60:0d:30:19:1d:28:3f:27:59:7b:c1:e5:b7:f2:8e: 31:85:8a:89:7b:14:b8:d8:a5:94:8a:d1:d3:ed:c0:4f:1d:2a: ab:96:95:e6:28:7a:41:ff:85:e9:5e:5c:cb:50:6a:89:0a:da: 99:75:2c:6c:36:87:95:16:12:69:af:24:26:16:78:7a:71:13: 70:75:f2:b6:b0:9e:d9:08:7e:67:13:18:30:2c:97:b3:ac:8e: 19:65:ef:60:62:8a:7a:50:f2:1c:fc:b9:44:cd:da:35:52:d1: 51:9a:3e:c1:e3:7c:3d:13:55:01:97:41:23:5b:62:8d:f6:89: bc:cb:27:08:0a:38:67:f9:dd:6a:5a:31:6e:cc:19:94:19:0a: 98:4c:b0:ca:13:24:02:5d:63:b6:94:18:c6:cf:cf:ba:8f:8a: e2:44:3c:f4:c4:d5:84:17:e3:91:2a:c0:2d:6c:5b:27:e7:e7: 11:bb:71:61 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC7owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U0QkExMTAvBgNVBAUTKDNDNkVDMDlCMDk1RkE1RjUxMzYxNTEwOEE1NDQ3Q0FD QjcxQUIxQTEwHhcNMjYwOTI0MTkwMTExWhcNMjYxMDAxMTkwMTExWjAYMRYwFAYD VQQDEw02YWI1NzM3Ny02OWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAth22sMJuEZ9DWBui/OuL8gY8Hb3oUerq/f1Bk1pW36lL7Tn8H8vK357/g1Yg GBO9foC8Cr+KNZab2uyPTC9ifVuzsdEYEVRaOowP/5GLMYlAKRuNsu2FHxba8PHg DJb590FC/f2IpD6jc/HWgTO2zY2bFbivlATpSDCxzWEHQxkjQyWe6/few1PcIinE XHETZ1TRJs19RcMG7Wxqf26NVP6cIazGXfVF+xjqFwTuujzis7ppaN/zGX1CIahv q60w7b0j4Z/YFsDchv0wno5rcoqQ44trTkbOppu5q7qO18MBESRbz6UyLRBVvNMD rhQHRzQBmh3t1krcoWxACLnWOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKbC/Aci AXy0QV6rOtZXcaDa4pj7MB8GA1UdIwQYMBaAFDxuwJsJX6X1E2FRCKVEfKy3GrGh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTRCQS9DOTUyQUM5RTUy REMxMUVBODI2MDFCMEZDNEY5QUUwMi9QRzdBbXdsZnBmVVRZVkVJcFVSOHJMY2Fz YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1BHN0Ftd2xmcGZVVFlWRUlwVVI4ckxjYXNhRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTRCQS9DOTUyQUM5RTUyREMxMUVBODI2MDFCMEZDNEY5QUUwMi9QRzdBbXdsZnBm VVRZVkVJcFVSOHJMY2FzYUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgDThXFd1d+F7zKLR2Oqj4iSzWLSGJX/XzzkInMrJGpPWDXDz3UDpYPGxpbbI vuSCx+E7Zj6S+ZHb76BAqMP2zd9Zbo3ZliaP/7EyYA0wGR0oPydZe8Hlt/KOMYWK iXsUuNillIrR0+3ATx0qq5aV5ih6Qf+F6V5cy1BqiQramXUsbDaHlRYSaa8kJhZ4 enETcHXytrCe2Qh+ZxMYMCyXs6yOGWXvYGKKelDyHPy5RM3aNVLRUZo+weN8PRNV AZdBI1tijfaJvMsnCAo4Z/ndaloxbswZlBkKmEywyhMkAl1jtpQYxs/Puo+K4kQ8 9MTVhBfjkSrALWxbJ+fnEbtxYQ== -----END CERTIFICATE-----Generated at Sat Sep 26 14:27:28 2026 by rpki-client