$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A423D/B9769BD8B09511F08C152778C4F9AE02/PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.mft File: PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.mft (raw, json) Hash identifier: HGL+4ZbWoX/72GFhdFxWHcfMzgRxTiCo2GIHgnlM+Yg= Subject key identifier: 04:4C:40:69:77:E5:4E:49:98:31:AF:E4:E8:5E:BB:06:A7:5E:11:9A Authority key identifier: 3C:CE:EB:9D:20:59:CF:E9:F6:08:56:77:D4:B7:FA:26:4F:53:3A:0F Certificate issuer: /CN=A91A423D/serialNumber=3CCEEB9D2059CFE9F6085677D4B7FA264F533A0F Certificate serial: B7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A423D/B9769BD8B09511F08C152778C4F9AE02/PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.mft Manifest number: B1 Signing time: Wed 23 Sep 2026 06:51:27 +0000 Manifest this update: Wed 23 Sep 2026 06:51:26 +0000 Manifest next update: Wed 30 Sep 2026 06:51:26 +0000 Files and hashes: 1: PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.crl (hash: V82jNkStOcewUm6eNcb3RXNIjmrcoDWPk7drLaE1ZZ4=) 2: 2ECF71C4B0A111F0B537573FC4F9AE02.roa (hash: 2OKnQg5qjmkKGEleLvBDwSd2bcC+02+QaHkt9b4fvyA=) 3: DEE9FAB2B0A011F0B752B713C4F9AE02.roa (hash: N9DbzZhWjh9222Zzdpzo8MyanGXgo1s4o7cCfBAxME8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A423D/B9769BD8B09511F08C152778C4F9AE02/PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.crl rsync://rpki.apnic.net/member_repository/A91A423D/B9769BD8B09511F08C152778C4F9AE02/PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 06:51:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 183 (0xb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A423D, serialNumber=3CCEEB9D2059CFE9F6085677D4B7FA264F533A0F Validity Not Before: Sep 23 06:51:26 2026 GMT Not After : Sep 30 06:51:26 2026 GMT Subject: CN=6ab376ef-23b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:09:31:9e:b6:1a:b2:e7:77:cb:e8:7d:ae:53: 58:01:84:f4:65:fe:48:9b:b3:eb:08:e7:e3:30:e4: b9:7e:e1:f8:65:c5:fe:e0:f0:29:a6:bd:4e:97:7c: 06:aa:ac:a0:19:70:14:bb:fe:ff:08:36:93:d0:64: ec:35:9c:8e:ab:b5:06:7e:38:b9:d7:cb:34:20:0e: 4d:ed:b5:86:8d:06:7e:53:97:8c:55:c8:79:70:9c: 39:99:6c:62:43:6c:42:69:86:12:0a:b5:93:cf:b3: c2:cf:6a:39:82:85:cb:dd:16:14:24:10:ae:2c:32: 70:82:a5:46:a4:ef:3e:9b:4f:70:0e:f4:f7:21:c7: 36:09:e9:c1:a6:e2:17:ac:05:fc:89:eb:3c:ee:63: 69:51:67:ac:18:6b:04:4e:cc:e7:f0:e4:8b:ca:ef: 58:d1:a0:5d:8d:f9:cc:f3:ca:6b:23:9d:72:ad:96: c1:16:c1:85:1e:fa:9a:7a:76:44:d8:13:dc:ed:84: 99:22:da:ed:c8:5f:e4:a7:80:85:b1:11:86:22:70: ec:61:a1:11:9c:d6:09:20:e0:fe:9d:04:76:9b:ad: 42:95:58:90:6d:4a:3e:58:be:a1:c6:17:40:79:57: bd:04:e2:32:c0:96:22:f1:06:60:36:b2:46:68:f1: 32:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:4C:40:69:77:E5:4E:49:98:31:AF:E4:E8:5E:BB:06:A7:5E:11:9A X509v3 Authority Key Identifier: keyid:3C:CE:EB:9D:20:59:CF:E9:F6:08:56:77:D4:B7:FA:26:4F:53:3A:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A423D/B9769BD8B09511F08C152778C4F9AE02/PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A423D/B9769BD8B09511F08C152778C4F9AE02/PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:35:cc:68:5a:a5:36:03:33:d2:85:9a:0b:6d:da:5a:4d:4c: 97:fb:06:84:04:f1:92:4e:c6:11:dd:fb:58:e2:57:47:3e:3f: da:ff:8a:a8:70:2a:7d:f8:6c:83:42:c3:bc:38:73:10:e9:64: ba:36:32:10:64:dd:9f:f4:55:86:ec:55:6b:6e:92:d2:a0:28: dd:8f:96:ea:8f:ad:de:60:4d:66:2c:dd:2b:d6:4b:fc:3a:e4: 26:83:66:b5:dc:e9:79:f1:aa:6b:a8:0c:50:3b:18:0b:69:69: 5e:47:e9:4e:76:f2:5a:0b:1e:39:bb:23:cc:3a:a4:28:09:89: d4:09:d6:10:72:8e:f3:8d:98:12:d0:4b:74:2c:67:25:7a:71: 4e:5d:8f:7f:61:64:ae:e0:7d:c5:97:82:30:8c:45:fa:4c:70: 31:96:46:05:ca:4a:5c:3e:df:40:53:4d:7d:53:0d:23:95:9a: 61:ce:a1:39:e8:4c:95:15:3e:81:cb:92:34:ab:34:dc:1c:6c: bc:b6:52:00:c2:3b:a0:a7:46:c1:5e:ad:29:f5:87:c2:a8:3f: 71:7a:e2:6f:08:e4:86:95:65:d1:28:27:d1:2f:03:09:dd:70: b9:90:17:a2:72:a1:50:c0:9b:23:5f:f5:01:d4:1f:b2:27:3c: b7:89:a0:4f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICALcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQyM0QxMTAvBgNVBAUTKDNDQ0VFQjlEMjA1OUNGRTlGNjA4NTY3N0Q0QjdGQTI2 NEY1MzNBMEYwHhcNMjYwOTIzMDY1MTI2WhcNMjYwOTMwMDY1MTI2WjAYMRYwFAYD VQQDEw02YWIzNzZlZi0yM2I2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlwkxnrYasud3y+h9rlNYAYT0Zf5Im7PrCOfjMOS5fuH4ZcX+4PAppr1Ol3wG qqygGXAUu/7/CDaT0GTsNZyOq7UGfji518s0IA5N7bWGjQZ+U5eMVch5cJw5mWxi Q2xCaYYSCrWTz7PCz2o5goXL3RYUJBCuLDJwgqVGpO8+m09wDvT3Icc2CenBpuIX rAX8ies87mNpUWesGGsETszn8OSLyu9Y0aBdjfnM88prI51yrZbBFsGFHvqaenZE 2BPc7YSZItrtyF/kp4CFsRGGInDsYaERnNYJIOD+nQR2m61ClViQbUo+WL6hxhdA eVe9BOIywJYi8QZgNrJGaPEybwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFARMQGl3 5U5JmDGv5OheuwanXhGaMB8GA1UdIwQYMBaAFDzO650gWc/p9ghWd9S3+iZPUzoP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDIzRC9COTc2OUJEOEIw OTUxMUYwOEMxNTI3NzhDNEY5QUUwMi9QTTdyblNCWnotbjJDRlozMUxmNkprOVRP ZzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1BNN3JuU0Jaei1uMkNGWjMxTGY2Sms5VE9nOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDIzRC9COTc2OUJEOEIwOTUxMUYwOEMxNTI3NzhDNEY5QUUwMi9QTTdyblNCWnot bjJDRlozMUxmNkprOVRPZzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZzXMaFqlNgMz0oWaC23aWk1Ml/sGhATxkk7GEd37WOJXRz4/2v+KqHAqffhs g0LDvDhzEOlkujYyEGTdn/RVhuxVa26S0qAo3Y+W6o+t3mBNZizdK9ZL/DrkJoNm tdzpefGqa6gMUDsYC2lpXkfpTnbyWgseObsjzDqkKAmJ1AnWEHKO842YEtBLdCxn JXpxTl2Pf2FkruB9xZeCMIxF+kxwMZZGBcpKXD7fQFNNfVMNI5WaYc6hOehMlRU+ gcuSNKs03BxsvLZSAMI7oKdGwV6tKfWHwqg/cXribwjkhpVl0Sgn0S8DCd1wuZAX onKhUMCbI1/1AdQfsic8t4mgTw== -----END CERTIFICATE-----Generated at Fri Sep 25 07:00:36 2026 by rpki-client