$ rpki-client -vvvf rpki.apnic.net/member_repository/A918E8BB/509F4882A03E11F19A142C583A11F970/PbnPD6040aow-KANQnS0oBzSseg.mft File: PbnPD6040aow-KANQnS0oBzSseg.mft (raw, json) Hash identifier: bVmNYodeD5KMhfD/XRNW4S0kvG1bbV+mRNJK681H8kM= Subject key identifier: C5:66:F3:97:D3:F0:38:5D:30:63:46:DC:75:14:D8:B4:F3:B2:16:40 Authority key identifier: 3D:B9:CF:0F:AD:38:D1:AA:30:F8:A0:0D:42:74:B4:A0:1C:D2:B1:E8 Certificate issuer: /CN=A918E8BB/serialNumber=3DB9CF0FAD38D1AA30F8A00D4274B4A01CD2B1E8 Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbnPD6040aow-KANQnS0oBzSseg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E8BB/509F4882A03E11F19A142C583A11F970/PbnPD6040aow-KANQnS0oBzSseg.mft Manifest number: 10 Signing time: Mon 21 Sep 2026 09:05:40 +0000 Manifest this update: Mon 21 Sep 2026 09:05:40 +0000 Manifest next update: Mon 28 Sep 2026 09:05:40 +0000 Files and hashes: 1: PbnPD6040aow-KANQnS0oBzSseg.crl (hash: cR98KcTp54cCd8vYaBUbVbKl0Y3uG6fzQeETp8c/p2w=) 2: 040BF942A03F11F182F8557D3A11F970.roa (hash: iHoNlT/spAD2Eea17ZDNX1rjckiRNgZlmME02gc+oSc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E8BB/509F4882A03E11F19A142C583A11F970/PbnPD6040aow-KANQnS0oBzSseg.crl rsync://rpki.apnic.net/member_repository/A918E8BB/509F4882A03E11F19A142C583A11F970/PbnPD6040aow-KANQnS0oBzSseg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbnPD6040aow-KANQnS0oBzSseg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 09:05:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E8BB, serialNumber=3DB9CF0FAD38D1AA30F8A00D4274B4A01CD2B1E8 Validity Not Before: Sep 21 09:05:40 2026 GMT Not After : Sep 28 09:05:40 2026 GMT Subject: CN=6ab0f364-7b79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b9:22:19:c2:55:bd:61:f5:21:8c:14:90:4d: da:95:ad:66:75:43:b4:90:79:6c:88:fb:5b:0c:fd: b7:8f:4d:53:d5:d1:7a:12:ca:8a:ca:82:0e:8a:90: c9:89:1d:e5:d2:e9:19:44:de:a3:75:6e:15:f3:8c: 01:1f:b8:27:7e:cd:b0:3e:d6:8f:66:07:7b:e4:1b: f8:2b:55:71:27:62:cc:5a:79:e6:9f:e2:85:77:4c: a6:a5:1d:ad:8e:39:8e:d6:16:c4:ff:e0:14:2c:c0: 88:4e:ed:89:8e:d2:b1:d6:04:0f:74:f0:bf:16:7c: 2f:d9:37:d5:a1:67:e7:70:16:be:cb:f9:6b:38:d7: 34:41:42:61:b6:38:1a:31:05:60:96:4d:3c:35:3e: 2a:d6:06:25:81:d8:eb:d1:57:3d:e7:88:e5:fd:85: 8f:62:b8:10:cc:09:cf:b1:4c:94:ff:7b:c7:c4:08: ec:1e:b0:e7:a0:40:ce:db:59:eb:18:91:8e:5c:84: 75:c9:f9:b8:e4:7d:75:95:1c:dc:fd:56:9e:79:d3: c1:3c:4f:d2:90:08:11:d8:40:19:07:ad:08:19:38: e1:40:9f:75:ad:e3:17:56:6c:89:21:04:fc:55:6c: 3f:d8:58:40:3c:58:bc:e0:ab:64:f9:04:7c:85:39: 9f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:66:F3:97:D3:F0:38:5D:30:63:46:DC:75:14:D8:B4:F3:B2:16:40 X509v3 Authority Key Identifier: keyid:3D:B9:CF:0F:AD:38:D1:AA:30:F8:A0:0D:42:74:B4:A0:1C:D2:B1:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E8BB/509F4882A03E11F19A142C583A11F970/PbnPD6040aow-KANQnS0oBzSseg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbnPD6040aow-KANQnS0oBzSseg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E8BB/509F4882A03E11F19A142C583A11F970/PbnPD6040aow-KANQnS0oBzSseg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:06:38:f5:0d:7d:a8:f8:3a:ee:b6:55:27:58:72:59:20:16: a9:b3:7f:04:43:be:35:4f:04:8a:74:47:43:79:18:db:84:79: 09:53:27:d6:28:8a:49:69:62:2c:2c:9c:52:f1:77:cc:81:c1: f1:b2:42:15:3d:3b:c2:e1:83:4e:24:d6:17:be:b9:33:63:93: f3:7e:1e:e0:99:c0:73:43:76:28:73:66:b6:9c:d8:d5:cb:6b: 95:58:2f:3d:9f:bb:2d:4a:8c:81:40:15:0d:53:c4:95:a0:ac: 1a:18:f7:4d:a4:ef:1b:18:ec:c3:85:00:01:bf:3b:37:ab:85: de:a1:79:75:da:8e:53:79:2a:77:ba:42:72:9b:3b:3c:f3:19: 01:5c:1e:bc:56:43:a1:79:e1:90:0a:8a:28:ed:bd:47:18:9a: 60:da:9f:96:e6:b8:62:f5:2b:9b:95:6b:c9:d5:03:66:1a:96: 83:92:39:ee:c3:36:78:fc:42:33:0b:2b:7a:33:aa:ed:11:dd: 6d:fa:45:a7:b1:5e:c9:78:06:90:e3:80:71:c9:aa:57:53:8e: 6e:1f:ee:eb:9c:bb:4c:7d:b2:08:2c:12:e2:f8:d2:18:d1:26: 27:1a:03:46:71:71:0c:09:f6:76:13:5e:00:4e:30:4b:a8:27: 29:90:35:8f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RThCQjExMC8GA1UEBRMoM0RCOUNGMEZBRDM4RDFBQTMwRjhBMDBENDI3NEI0QTAx Q0QyQjFFODAeFw0yNjA5MjEwOTA1NDBaFw0yNjA5MjgwOTA1NDBaMBgxFjAUBgNV BAMTDTZhYjBmMzY0LTdiNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCiuSIZwlW9YfUhjBSQTdqVrWZ1Q7SQeWyI+1sM/bePTVPV0XoSyorKgg6KkMmJ HeXS6RlE3qN1bhXzjAEfuCd+zbA+1o9mB3vkG/grVXEnYsxaeeaf4oV3TKalHa2O OY7WFsT/4BQswIhO7YmO0rHWBA908L8WfC/ZN9WhZ+dwFr7L+Ws41zRBQmG2OBox BWCWTTw1PirWBiWB2OvRVz3niOX9hY9iuBDMCc+xTJT/e8fECOwesOegQM7bWesY kY5chHXJ+bjkfXWVHNz9Vp5508E8T9KQCBHYQBkHrQgZOOFAn3Wt4xdWbIkhBPxV bD/YWEA8WLzgq2T5BHyFOZ+pAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUxWbzl9Pw OF0wY0bcdRTYtPOyFkAwHwYDVR0jBBgwFoAUPbnPD6040aow+KANQnS0oBzSsegw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThFOEJCLzUwOUY0ODgyQTAz RTExRjE5QTE0MkM1ODNBMTFGOTcwL1BiblBENjA0MGFvdy1LQU5RblMwb0J6U3Nl Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUGJuUEQ2MDQwYW93LUtBTlFuUzBvQnpTc2VnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThF OEJCLzUwOUY0ODgyQTAzRTExRjE5QTE0MkM1ODNBMTFGOTcwL1BiblBENjA0MGFv dy1LQU5RblMwb0J6U3NlZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAxBjj1DX2o+DrutlUnWHJZIBaps38EQ741TwSKdEdDeRjbhHkJUyfWKIpJaWIs LJxS8XfMgcHxskIVPTvC4YNOJNYXvrkzY5Pzfh7gmcBzQ3Yoc2a2nNjVy2uVWC89 n7stSoyBQBUNU8SVoKwaGPdNpO8bGOzDhQABvzs3q4XeoXl12o5TeSp3ukJymzs8 8xkBXB68VkOheeGQCooo7b1HGJpg2p+W5rhi9SublWvJ1QNmGpaDkjnuwzZ4/EIz Cyt6M6rtEd1t+kWnsV7JeAaQ44BxyapXU45uH+7rnLtMfbIILBLi+NIY0SYnGgNG cXEMCfZ2E14ATjBLqCcpkDWP -----END CERTIFICATE-----Generated at Tue Sep 22 22:45:47 2026 by rpki-client