$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A08FD/9F42EAD8C8AB11E9829D282FC4F9AE02/PB_di6MB3OPbPwvMJchpTOG83H0.mft File: PB_di6MB3OPbPwvMJchpTOG83H0.mft (raw, json) Hash identifier: rMV7y7T5oW6hNRaGprmcitTQL8NSlhvjI4/2Gg7ZGEs= Subject key identifier: 99:5D:8B:57:8A:E6:6B:26:F9:1A:FF:3F:BF:92:D3:34:09:E5:D7:EC Authority key identifier: 3C:1F:DD:8B:A3:01:DC:E3:DB:3F:0B:CC:25:C8:69:4C:E1:BC:DC:7D Certificate issuer: /CN=A91A08FD/serialNumber=3C1FDD8BA301DCE3DB3F0BCC25C8694CE1BCDC7D Certificate serial: 0E7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PB_di6MB3OPbPwvMJchpTOG83H0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A08FD/9F42EAD8C8AB11E9829D282FC4F9AE02/PB_di6MB3OPbPwvMJchpTOG83H0.mft Manifest number: 0E70 Signing time: Tue 22 Sep 2026 17:38:25 +0000 Manifest this update: Tue 22 Sep 2026 17:38:24 +0000 Manifest next update: Tue 29 Sep 2026 17:38:24 +0000 Files and hashes: 1: PB_di6MB3OPbPwvMJchpTOG83H0.crl (hash: MHqigkJex07/KdYOf3QbO3EGweSjjmc378RyVQN7FBo=) 2: 3802A98EC8AC11E9877DCE2FC4F9AE02.roa (hash: yYvSgR/d3pmtKa3loQQjhww8sMlH1QWIAa+l4ZsuXaI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A08FD/9F42EAD8C8AB11E9829D282FC4F9AE02/PB_di6MB3OPbPwvMJchpTOG83H0.crl rsync://rpki.apnic.net/member_repository/A91A08FD/9F42EAD8C8AB11E9829D282FC4F9AE02/PB_di6MB3OPbPwvMJchpTOG83H0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PB_di6MB3OPbPwvMJchpTOG83H0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 17:38:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3708 (0xe7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A08FD, serialNumber=3C1FDD8BA301DCE3DB3F0BCC25C8694CE1BCDC7D Validity Not Before: Sep 22 17:38:24 2026 GMT Not After : Sep 29 17:38:24 2026 GMT Subject: CN=6ab2bd11-1639 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:72:4b:fd:8a:2d:86:be:7c:bc:5e:62:86:4a: 27:42:6d:3a:19:33:76:0a:48:8a:b6:8d:3d:fe:63: 9a:3e:36:66:a9:63:c1:32:99:ba:4e:c2:f1:d5:3f: aa:8c:ea:3f:3c:68:6e:3e:7d:8d:05:ce:64:3c:2e: 35:4e:f9:d3:82:59:ab:1e:b2:99:06:b0:0a:5a:d9: a6:f5:17:e3:d8:10:23:cb:7a:98:99:41:ed:11:f0: 18:a3:ce:5d:5a:66:2a:7d:0c:4f:7d:20:a6:25:4c: 34:dc:c2:5b:06:31:44:a2:db:ce:87:11:c4:ab:1b: 79:4d:9f:8c:d4:bf:b9:e0:54:20:4f:3a:78:03:d4: cb:54:79:8d:71:9a:4b:06:63:89:94:39:31:55:d3: b3:f4:25:98:85:42:54:11:8a:cd:00:64:1d:b2:a9: 0a:89:14:e2:11:9a:2b:aa:9f:74:e1:73:c6:d8:be: af:6a:62:2e:f8:05:b0:b6:d2:80:c3:d7:28:ff:36: 0b:9d:a2:b9:87:d6:5b:66:49:de:7c:74:23:51:58: 7e:f7:53:0f:a7:52:36:f2:98:d7:71:bb:06:73:e7: e4:a2:51:b9:62:8a:d0:e7:31:0c:6d:28:80:4c:7c: f5:23:78:95:f7:d2:2b:f8:f0:4a:a9:89:6e:1a:0d: 9b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:5D:8B:57:8A:E6:6B:26:F9:1A:FF:3F:BF:92:D3:34:09:E5:D7:EC X509v3 Authority Key Identifier: keyid:3C:1F:DD:8B:A3:01:DC:E3:DB:3F:0B:CC:25:C8:69:4C:E1:BC:DC:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A08FD/9F42EAD8C8AB11E9829D282FC4F9AE02/PB_di6MB3OPbPwvMJchpTOG83H0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PB_di6MB3OPbPwvMJchpTOG83H0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A08FD/9F42EAD8C8AB11E9829D282FC4F9AE02/PB_di6MB3OPbPwvMJchpTOG83H0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:12:8d:dc:af:45:f5:02:f4:9b:4c:7f:27:d4:66:14:e1:b1: 6e:0d:d9:7d:07:18:a2:95:7f:2d:74:db:64:e9:43:6c:1c:29: 21:ba:87:c2:45:c0:84:1f:fc:8f:5c:13:96:a6:ba:3f:1d:67: 7f:7c:1d:f4:3f:92:9d:e8:2d:60:09:a5:2d:08:71:f6:dc:44: a4:74:0c:9b:e5:0b:62:25:66:8f:c8:5a:d6:cc:b3:28:32:2e: 06:82:d7:08:a9:14:83:6f:8f:c0:e1:a5:a7:10:eb:73:5c:49: 20:ff:10:7d:de:a3:52:60:5c:93:95:c6:ce:c7:eb:91:e1:1a: 12:ee:ad:3c:9c:64:e9:4e:90:92:24:95:25:fc:68:4a:0f:08: 00:e3:32:30:6f:2c:74:a8:23:ec:73:42:4f:39:f6:e0:06:4d: 10:9d:ae:49:65:a9:6a:d3:53:bc:b4:a2:39:fe:e4:63:37:a1: 30:15:48:20:5a:e6:ff:78:b0:79:6a:3d:c9:35:ca:ce:8d:80: a9:71:0f:29:a6:77:17:3c:3d:10:57:d3:64:f5:d5:d6:d8:f7: 54:35:b7:a7:05:b4:57:9e:2f:cc:b6:c8:34:b7:f1:75:08:b0: ad:5b:9a:3a:3f:72:0c:a6:22:f2:81:33:f5:49:6e:f8:41:96: 38:2c:9d:6d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDnwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA4RkQxMTAvBgNVBAUTKDNDMUZERDhCQTMwMURDRTNEQjNGMEJDQzI1Qzg2OTRD RTFCQ0RDN0QwHhcNMjYwOTIyMTczODI0WhcNMjYwOTI5MTczODI0WjAYMRYwFAYD VQQDEw02YWIyYmQxMS0xNjM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA03JL/Yothr58vF5ihkonQm06GTN2CkiKto09/mOaPjZmqWPBMpm6TsLx1T+q jOo/PGhuPn2NBc5kPC41TvnTglmrHrKZBrAKWtmm9Rfj2BAjy3qYmUHtEfAYo85d WmYqfQxPfSCmJUw03MJbBjFEotvOhxHEqxt5TZ+M1L+54FQgTzp4A9TLVHmNcZpL BmOJlDkxVdOz9CWYhUJUEYrNAGQdsqkKiRTiEZorqp904XPG2L6vamIu+AWwttKA w9co/zYLnaK5h9ZbZknefHQjUVh+91MPp1I28pjXcbsGc+fkolG5YorQ5zEMbSiA THz1I3iV99Ir+PBKqYluGg2bCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJldi1eK 5msm+Rr/P7+S0zQJ5dfsMB8GA1UdIwQYMBaAFDwf3YujAdzj2z8LzCXIaUzhvNx9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDhGRC85RjQyRUFEOEM4 QUIxMUU5ODI5RDI4MkZDNEY5QUUwMi9QQl9kaTZNQjNPUGJQd3ZNSmNocFRPRzgz SDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BCX2RpNk1CM09QYlB3dk1KY2hwVE9HODNIMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDhGRC85RjQyRUFEOEM4QUIxMUU5ODI5RDI4MkZDNEY5QUUwMi9QQl9kaTZNQjNP UGJQd3ZNSmNocFRPRzgzSDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmBKN3K9F9QL0m0x/J9RmFOGxbg3ZfQcYopV/LXTbZOlDbBwpIbqHwkXAhB/8 j1wTlqa6Px1nf3wd9D+SnegtYAmlLQhx9txEpHQMm+ULYiVmj8ha1syzKDIuBoLX CKkUg2+PwOGlpxDrc1xJIP8Qfd6jUmBck5XGzsfrkeEaEu6tPJxk6U6QkiSVJfxo Sg8IAOMyMG8sdKgj7HNCTzn24AZNEJ2uSWWpatNTvLSiOf7kYzehMBVIIFrm/3iw eWo9yTXKzo2AqXEPKaZ3Fzw9EFfTZPXV1tj3VDW3pwW0V54vzLbINLfxdQiwrVua Oj9yDKYi8oEz9Ulu+EGWOCydbQ== -----END CERTIFICATE-----Generated at Wed Sep 23 23:06:09 2026 by rpki-client