$ rpki-client -vvvf rpki.apnic.net/member_repository/A9189B41/69B7698E605911EF9C223760C4F9AE02/punLpSnAWpYkymA1SKPjFJF1jys.mft File: punLpSnAWpYkymA1SKPjFJF1jys.mft (raw, json) Hash identifier: JZz6mAX99EIjP2Vbw64bFTe5+Pgges/xAEypNj9vb8U= Subject key identifier: 8E:BE:20:19:D6:C8:90:79:83:2B:7F:92:E9:C1:70:BE:BE:B6:DB:70 Authority key identifier: A6:E9:CB:A5:29:C0:5A:96:24:CA:60:35:48:A3:E3:14:91:75:8F:2B Certificate issuer: /CN=A9189B41/serialNumber=A6E9CBA529C05A9624CA603548A3E31491758F2B Certificate serial: 0191 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/punLpSnAWpYkymA1SKPjFJF1jys.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189B41/69B7698E605911EF9C223760C4F9AE02/punLpSnAWpYkymA1SKPjFJF1jys.mft Manifest number: 0189 Signing time: Fri 25 Sep 2026 04:34:22 +0000 Manifest this update: Fri 25 Sep 2026 04:34:22 +0000 Manifest next update: Fri 02 Oct 2026 04:34:22 +0000 Files and hashes: 1: punLpSnAWpYkymA1SKPjFJF1jys.crl (hash: gM6naU5AJs82kMvPYJTccIoynJ5LyMR6K4iNAOUSYm8=) 2: 17AF252C605A11EFB7F45361C4F9AE02.roa (hash: 8DprNqSctLRq9Um1DBwsXYIm/hC+xtUbZc0GLoio6ks=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189B41/69B7698E605911EF9C223760C4F9AE02/punLpSnAWpYkymA1SKPjFJF1jys.crl rsync://rpki.apnic.net/member_repository/A9189B41/69B7698E605911EF9C223760C4F9AE02/punLpSnAWpYkymA1SKPjFJF1jys.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/punLpSnAWpYkymA1SKPjFJF1jys.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 04:34:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 401 (0x191) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189B41, serialNumber=A6E9CBA529C05A9624CA603548A3E31491758F2B Validity Not Before: Sep 25 04:34:22 2026 GMT Not After : Oct 2 04:34:22 2026 GMT Subject: CN=6ab5f9ce-0972 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d3:6e:89:25:b8:d0:2c:ee:33:4f:df:30:0d: 26:5a:12:57:43:c0:00:15:85:ed:c6:aa:ab:4f:af: 8a:0e:2e:a9:5e:e7:c9:28:08:5b:4f:b7:dc:4d:6a: d0:f5:f5:d9:9e:c1:53:b5:36:88:f1:6a:f1:d5:32: 8a:2b:c5:c7:3b:45:b7:e7:e1:12:a3:b0:31:ea:5d: 8d:e3:64:f2:68:5d:c6:89:71:66:2b:73:52:d1:8a: 9d:49:d2:2d:ab:7e:02:30:89:65:b6:e5:f8:4a:a0: 27:5f:f6:3c:68:e9:77:f3:d9:ed:a6:c2:46:fd:69: 28:db:3e:78:ed:25:88:0e:66:67:79:68:b3:a1:55: ef:e8:20:9f:cf:3a:10:bd:31:e2:7d:b5:5e:43:96: 9d:ee:39:c5:eb:17:43:ba:28:41:d6:ab:66:d5:ad: 51:13:f1:98:dc:d4:f5:3c:f3:fa:4f:bb:91:0f:f9: 00:a5:70:bb:cf:1a:7d:5a:1e:db:20:31:7f:94:e5: 21:d3:3c:26:98:c0:aa:01:28:8f:d7:17:d1:70:ed: a0:d3:50:d3:2a:40:a0:04:51:d6:ef:09:4e:19:0e: f8:ef:ae:f1:de:58:72:29:c5:f7:f2:d7:7d:70:a6: 9c:0f:97:7b:52:2a:cb:f0:1c:7f:a0:e8:1c:98:0f: 63:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:BE:20:19:D6:C8:90:79:83:2B:7F:92:E9:C1:70:BE:BE:B6:DB:70 X509v3 Authority Key Identifier: keyid:A6:E9:CB:A5:29:C0:5A:96:24:CA:60:35:48:A3:E3:14:91:75:8F:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189B41/69B7698E605911EF9C223760C4F9AE02/punLpSnAWpYkymA1SKPjFJF1jys.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/punLpSnAWpYkymA1SKPjFJF1jys.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189B41/69B7698E605911EF9C223760C4F9AE02/punLpSnAWpYkymA1SKPjFJF1jys.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:76:a7:0d:7a:7b:d1:7b:55:57:07:b7:11:b3:1c:5f:a1:fe: e8:a9:46:4b:85:a8:32:ce:de:64:1a:c6:3b:d0:7b:c9:69:5b: ce:ad:67:c7:09:e4:03:a6:13:a3:de:39:e9:86:00:57:45:25: 4c:8a:8e:b2:88:65:72:4f:db:c6:15:bc:4f:83:cc:b3:76:e9: 7a:0d:24:ca:2a:b9:00:a3:d8:56:d9:4e:db:67:4c:cb:62:36: 4d:17:9a:81:48:51:6c:3b:01:58:d0:20:c2:b8:48:c6:0e:3a: f1:f7:cb:41:17:ba:2c:05:18:38:ca:d7:54:5c:d7:92:fb:c3: e1:a2:9f:ff:b1:5f:f9:28:4a:89:19:3f:38:e3:cb:ed:6f:a4: 0c:89:4e:4d:b3:b5:d3:99:bc:5e:e3:ea:19:dc:75:63:6b:1d: 1b:1a:53:3d:45:74:a8:b9:e1:12:3d:3f:c7:6b:a0:f5:bb:24: 16:f0:84:c8:db:a2:d7:6a:68:85:8c:35:d6:77:ff:50:ec:5a: c1:fe:9d:2e:0b:35:9e:16:ae:77:26:0d:79:5b:3e:a9:bf:f8: 63:3c:38:fd:96:9c:69:39:08:b3:0e:17:cc:6d:f6:40:51:ea: a1:71:64:d0:47:5b:83:ac:36:ab:87:44:0b:37:49:0c:14:83: 69:91:9f:a4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODlCNDExMTAvBgNVBAUTKEE2RTlDQkE1MjlDMDVBOTYyNENBNjAzNTQ4QTNFMzE0 OTE3NThGMkIwHhcNMjYwOTI1MDQzNDIyWhcNMjYxMDAyMDQzNDIyWjAYMRYwFAYD VQQDEw02YWI1ZjljZS0wOTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA19NuiSW40CzuM0/fMA0mWhJXQ8AAFYXtxqqrT6+KDi6pXufJKAhbT7fcTWrQ 9fXZnsFTtTaI8Wrx1TKKK8XHO0W35+ESo7Ax6l2N42TyaF3GiXFmK3NS0YqdSdIt q34CMIlltuX4SqAnX/Y8aOl389ntpsJG/Wko2z547SWIDmZneWizoVXv6CCfzzoQ vTHifbVeQ5ad7jnF6xdDuihB1qtm1a1RE/GY3NT1PPP6T7uRD/kApXC7zxp9Wh7b IDF/lOUh0zwmmMCqASiP1xfRcO2g01DTKkCgBFHW7wlOGQ74767x3lhyKcX38td9 cKacD5d7UirL8Bx/oOgcmA9jbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI6+IBnW yJB5gyt/kunBcL6+tttwMB8GA1UdIwQYMBaAFKbpy6UpwFqWJMpgNUij4xSRdY8r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUI0MS82OUI3Njk4RTYw NTkxMUVGOUMyMjM3NjBDNEY5QUUwMi9wdW5McFNuQVdwWWt5bUExU0tQakZKRjFq eXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3B1bkxwU25BV3BZa3ltQTFTS1BqRkpGMWp5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OUI0MS82OUI3Njk4RTYwNTkxMUVGOUMyMjM3NjBDNEY5QUUwMi9wdW5McFNuQVdw WWt5bUExU0tQakZKRjFqeXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAN3anDXp70XtVVwe3EbMcX6H+6KlGS4WoMs7eZBrGO9B7yWlbzq1nxwnkA6YT o9456YYAV0UlTIqOsohlck/bxhW8T4PMs3bpeg0kyiq5AKPYVtlO22dMy2I2TRea gUhRbDsBWNAgwrhIxg468ffLQRe6LAUYOMrXVFzXkvvD4aKf/7Ff+ShKiRk/OOPL 7W+kDIlOTbO105m8XuPqGdx1Y2sdGxpTPUV0qLnhEj0/x2ug9bskFvCEyNui12po hYw11nf/UOxawf6dLgs1nhaudyYNeVs+qb/4Yzw4/ZacaTkIsw4XzG32QFHqoXFk 0Edbg6w2q4dECzdJDBSDaZGfpA== -----END CERTIFICATE-----Generated at Sat Sep 26 08:49:10 2026 by rpki-client