$ rpki-client -vvvf rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.mft File: S_PofKK5q1lZdiDQT8BUEY1-09k.mft (raw, json) Hash identifier: Z1og/45/QFbCKYobXBu/gF5isZtPQbryt9eheqPoksY= Subject key identifier: C4:5F:79:09:89:F9:5C:71:57:3C:E1:6D:F7:FC:94:C7:E9:67:BF:92 Authority key identifier: 4B:F3:E8:7C:A2:B9:AB:59:59:76:20:D0:4F:C0:54:11:8D:7E:D3:D9 Certificate issuer: /CN=A9191B71/serialNumber=4BF3E87CA2B9AB59597620D04FC054118D7ED3D9 Certificate serial: 0434 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S_PofKK5q1lZdiDQT8BUEY1-09k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.mft Manifest number: 0428 Signing time: Fri 25 Sep 2026 00:07:15 +0000 Manifest this update: Fri 25 Sep 2026 00:07:14 +0000 Manifest next update: Fri 02 Oct 2026 00:07:14 +0000 Files and hashes: 1: S_PofKK5q1lZdiDQT8BUEY1-09k.crl (hash: qMSI+1KBvOlDWnhSkX2U624SMCmEs+LQC/sdVf7JP5M=) 2: 5734DF38D56811EF89A7D332C4F9AE02.roa (hash: +ePsXEldU8XwZr86Pjr8gpmcjv5LOq79B94UDeNsGa8=) 3: 5A48B534C6C811ECA5A9AB33C4F9AE02.roa (hash: KxT8vQKIHFK7Gk3hZ5CxcVmRf+RluSRn51YSF+ICMIo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.crl rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S_PofKK5q1lZdiDQT8BUEY1-09k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 00:07:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1076 (0x434) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191B71, serialNumber=4BF3E87CA2B9AB59597620D04FC054118D7ED3D9 Validity Not Before: Sep 25 00:07:14 2026 GMT Not After : Oct 2 00:07:14 2026 GMT Subject: CN=6ab5bb33-b59e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:40:9a:ed:da:7f:8a:02:0e:59:bf:1f:d5:cf: be:0e:9a:48:04:b7:62:b8:4e:bd:4e:1b:71:cd:8e: 70:35:95:ea:4b:89:52:be:05:31:9d:f3:d7:e5:a1: 5e:27:a0:ae:6a:58:49:df:9d:11:9c:18:ef:c4:78: 95:ae:8c:de:41:f3:89:12:0a:3c:76:41:98:18:8e: 10:f0:a1:7e:3f:45:21:4d:52:6c:77:9e:7e:ad:dd: 12:5f:49:92:5f:20:63:fe:e0:c8:33:fe:70:43:70: ed:2d:cc:65:88:e1:2a:7b:85:c7:ba:b4:dc:df:97: 53:ff:a5:aa:fe:6b:ba:61:80:60:ef:9d:3f:8e:7e: 05:bb:e4:b3:09:0a:7f:a2:5b:88:3b:9a:86:8b:0f: 19:40:37:a2:3e:c3:d9:1d:5c:68:70:50:9b:23:19: 89:87:8f:69:d5:cd:b5:22:d2:15:ca:6c:66:70:fa: 78:d5:c0:3c:29:b8:af:84:9a:d5:1d:ff:67:63:4c: cd:cd:9a:6b:79:d7:af:59:1b:ce:9f:11:d9:13:c5: f9:7b:6f:6b:c0:3a:c6:fb:da:13:49:29:f5:32:b7: 28:39:c9:11:1f:6d:6a:d8:85:51:ea:73:47:2c:31: df:1a:fe:89:e0:de:5c:e3:4b:4a:23:ef:71:3f:f6: 99:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:5F:79:09:89:F9:5C:71:57:3C:E1:6D:F7:FC:94:C7:E9:67:BF:92 X509v3 Authority Key Identifier: keyid:4B:F3:E8:7C:A2:B9:AB:59:59:76:20:D0:4F:C0:54:11:8D:7E:D3:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S_PofKK5q1lZdiDQT8BUEY1-09k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:59:ab:63:38:24:08:6e:17:b9:e5:7e:07:e8:75:1b:ca:25: 03:08:d4:3f:cc:02:f8:ac:03:10:a1:d1:0d:27:91:d2:69:4c: 6c:cb:07:c6:ad:7f:f1:a7:1f:4e:44:2d:9b:91:79:5e:26:f1: 58:4b:ed:32:3c:b9:49:44:46:97:5e:aa:46:08:5a:2d:84:2c: b9:7e:c7:85:5d:85:90:16:92:4c:5a:25:d6:2c:8c:7e:3b:27: e4:a9:50:97:f7:e2:71:4f:98:95:75:ce:be:bc:02:83:82:f2: 9c:57:e8:15:c0:2b:4b:3f:84:50:43:7a:53:7a:5d:c8:bf:02: 18:fa:d3:b2:7c:a4:63:2e:ad:3e:7c:f7:4b:77:c3:cb:e6:c4: 84:4a:98:04:8a:77:6b:32:0c:a2:81:21:69:d7:4d:e8:82:bf: 36:02:0a:2c:52:ad:ac:55:07:0f:3b:d4:8e:b0:8b:a8:ca:83: 8c:3b:93:85:5c:86:ab:45:00:ab:cc:fa:16:ef:36:02:d8:fa: 00:68:87:d8:09:04:71:6f:eb:85:58:00:7f:5b:c5:f2:01:7f: 31:db:17:c2:fd:8c:3b:90:d0:06:f9:c7:33:7b:9e:79:31:f9: 03:74:f8:d2:c9:6e:e1:65:53:63:fa:8a:8d:a7:c7:64:90:e6: dc:8e:3b:89 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBDQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFCNzExMTAvBgNVBAUTKDRCRjNFODdDQTJCOUFCNTk1OTc2MjBEMDRGQzA1NDEx OEQ3RUQzRDkwHhcNMjYwOTI1MDAwNzE0WhcNMjYxMDAyMDAwNzE0WjAYMRYwFAYD VQQDEw02YWI1YmIzMy1iNTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv0Ca7dp/igIOWb8f1c++DppIBLdiuE69ThtxzY5wNZXqS4lSvgUxnfPX5aFe J6CualhJ350RnBjvxHiVrozeQfOJEgo8dkGYGI4Q8KF+P0UhTVJsd55+rd0SX0mS XyBj/uDIM/5wQ3DtLcxliOEqe4XHurTc35dT/6Wq/mu6YYBg750/jn4Fu+SzCQp/ oluIO5qGiw8ZQDeiPsPZHVxocFCbIxmJh49p1c21ItIVymxmcPp41cA8KbivhJrV Hf9nY0zNzZpredevWRvOnxHZE8X5e29rwDrG+9oTSSn1MrcoOckRH21q2IVR6nNH LDHfGv6J4N5c40tKI+9xP/aZqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMRfeQmJ +VxxVzzhbff8lMfpZ7+SMB8GA1UdIwQYMBaAFEvz6HyiuatZWXYg0E/AVBGNftPZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUI3MS9CODQ5QkExMkM2 MDQxMUVDQjkwNjkxNUNDNEY5QUUwMi9TX1BvZktLNXExbFpkaURRVDhCVUVZMS0w OWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NfUG9mS0s1cTFsWmRpRFFUOEJVRVkxLTA5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUI3MS9CODQ5QkExMkM2MDQxMUVDQjkwNjkxNUNDNEY5QUUwMi9TX1BvZktLNXEx bFpkaURRVDhCVUVZMS0wOWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFlmrYzgkCG4XueV+B+h1G8olAwjUP8wC+KwDEKHRDSeR0mlMbMsHxq1/8acf TkQtm5F5XibxWEvtMjy5SURGl16qRghaLYQsuX7HhV2FkBaSTFol1iyMfjsn5KlQ l/ficU+YlXXOvrwCg4LynFfoFcArSz+EUEN6U3pdyL8CGPrTsnykYy6tPnz3S3fD y+bEhEqYBIp3azIMooEhaddN6IK/NgIKLFKtrFUHDzvUjrCLqMqDjDuThVyGq0UA q8z6Fu82Atj6AGiH2AkEcW/rhVgAf1vF8gF/MdsXwv2MO5DQBvnHM3ueeTH5A3T4 0slu4WVTY/qKjafHZJDm3I47iQ== -----END CERTIFICATE-----Generated at Sat Sep 26 04:46:40 2026 by rpki-client