$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4A13/BB6C9B54B98011EDA37B1B65C4F9AE02/pfsx1NUSX3yarlADNaSA_HeQjxU.mft File: pfsx1NUSX3yarlADNaSA_HeQjxU.mft (raw, json) Hash identifier: QnQ/1T410DeUpi9KkEjifLnRsG2MoqlB1eEEq6KJwoU= Subject key identifier: 04:ED:24:9E:1B:47:4C:94:47:88:1B:DF:F6:4E:BB:B7:5E:9C:C6:26 Authority key identifier: A5:FB:31:D4:D5:12:5F:7C:9A:AE:50:03:35:A4:80:FC:77:90:8F:15 Certificate issuer: /CN=A91A4A13/serialNumber=A5FB31D4D5125F7C9AAE500335A480FC77908F15 Certificate serial: 02A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfsx1NUSX3yarlADNaSA_HeQjxU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4A13/BB6C9B54B98011EDA37B1B65C4F9AE02/pfsx1NUSX3yarlADNaSA_HeQjxU.mft Manifest number: 02A1 Signing time: Sun 27 Sep 2026 01:55:46 +0000 Manifest this update: Sun 27 Sep 2026 01:55:45 +0000 Manifest next update: Sun 04 Oct 2026 01:55:45 +0000 Files and hashes: 1: pfsx1NUSX3yarlADNaSA_HeQjxU.crl (hash: 1FqgvPtu4db45gphlrgMuTmrZP9y+p3wF7mjUfgdQ3k=) 2: A8D327E4BBC711ED8DF23C40C4F9AE02.roa (hash: BbJgy4+r5xqumD47JYCsm8jlMt7XgJ8HLQRHYGqlUlQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4A13/BB6C9B54B98011EDA37B1B65C4F9AE02/pfsx1NUSX3yarlADNaSA_HeQjxU.crl rsync://rpki.apnic.net/member_repository/A91A4A13/BB6C9B54B98011EDA37B1B65C4F9AE02/pfsx1NUSX3yarlADNaSA_HeQjxU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfsx1NUSX3yarlADNaSA_HeQjxU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 01:55:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 681 (0x2a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4A13, serialNumber=A5FB31D4D5125F7C9AAE500335A480FC77908F15 Validity Not Before: Sep 27 01:55:45 2026 GMT Not After : Oct 4 01:55:45 2026 GMT Subject: CN=6ab877a1-25dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:0b:9d:be:c3:c5:43:6c:52:f7:66:e8:b8:74: 7a:3d:0d:8e:14:f9:39:40:1e:51:7c:1b:bb:f9:97: 84:5e:05:1e:f8:df:b1:cc:d0:13:8d:6d:ab:a3:43: 00:7f:bc:c5:bf:c0:12:90:ee:d1:e0:e6:5b:c3:17: 6f:e1:3e:20:36:8d:68:c1:8b:10:8d:d6:5c:65:24: 04:7c:e9:08:ed:7d:cf:53:57:84:03:f1:f3:6c:20: 37:fc:91:7c:2a:75:4c:cf:86:e5:c3:6f:25:11:d2: b6:5e:3b:9f:74:c7:92:20:17:56:ba:4f:26:33:66: 7c:5c:da:d7:87:6e:82:b2:8c:32:67:40:28:27:ab: 6e:e8:6b:f5:12:96:b3:b3:95:a5:e9:c8:9e:b1:e3: 60:26:d8:1f:cc:28:ae:4f:b0:26:d5:dc:80:fa:69: 0a:b5:17:c6:6e:86:8b:b4:a2:b7:9f:5f:de:ba:c5: 67:e2:e2:47:0c:f6:93:61:c4:82:7f:dc:90:2f:12: 34:d8:9d:c9:3b:06:97:84:c8:b5:13:ed:51:72:42: db:53:a6:de:11:ba:77:70:3e:f6:80:fa:dd:c6:df: 44:79:8c:38:83:86:cf:a5:d5:24:ed:b4:1c:be:d3: 59:c5:1c:58:7d:24:8f:25:21:7a:3c:2f:e1:eb:d8: db:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:ED:24:9E:1B:47:4C:94:47:88:1B:DF:F6:4E:BB:B7:5E:9C:C6:26 X509v3 Authority Key Identifier: keyid:A5:FB:31:D4:D5:12:5F:7C:9A:AE:50:03:35:A4:80:FC:77:90:8F:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4A13/BB6C9B54B98011EDA37B1B65C4F9AE02/pfsx1NUSX3yarlADNaSA_HeQjxU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfsx1NUSX3yarlADNaSA_HeQjxU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4A13/BB6C9B54B98011EDA37B1B65C4F9AE02/pfsx1NUSX3yarlADNaSA_HeQjxU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:98:44:4f:c9:3e:6e:2c:6a:eb:46:bb:0d:5e:00:ad:b0:b2: d7:05:e4:5a:fb:f9:40:97:b4:df:45:56:21:5f:c8:66:66:b5: f0:d0:48:94:1a:fc:e6:85:1e:25:8e:8f:ae:a0:a9:02:86:df: 27:ab:29:5e:2e:05:bd:4c:22:b5:51:07:e5:43:13:4d:f5:ef: 56:21:ce:a5:6a:be:d8:ea:49:42:50:90:1b:53:8c:44:84:16: cd:56:39:28:5a:04:11:39:8e:80:cc:48:9e:9a:1f:ba:a1:ce: 9f:54:ee:69:47:d0:dc:40:fa:0e:28:9a:6f:64:3f:92:44:88: f2:8e:15:8d:58:9e:40:e6:77:ed:70:c2:ba:00:fd:0d:c3:7b: 44:c8:e9:36:b9:e7:c7:a6:4d:d6:22:62:94:d2:5b:8e:45:33: 06:d3:64:f0:40:57:1f:5c:fd:0a:34:4c:4a:6a:66:f1:fe:02: 26:48:66:e9:72:05:54:17:bd:20:6b:d7:9e:23:7a:aa:b1:b2: 5e:4f:65:e3:56:25:87:25:c6:c5:2c:bd:95:60:0e:e6:4b:96: e0:48:e3:72:20:09:38:46:ee:74:63:93:b6:7d:ec:b1:bb:81: 60:16:fc:68:98:d8:97:69:5e:02:53:af:16:3f:39:2c:b6:71: 2a:0b:ca:a4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRBMTMxMTAvBgNVBAUTKEE1RkIzMUQ0RDUxMjVGN0M5QUFFNTAwMzM1QTQ4MEZD Nzc5MDhGMTUwHhcNMjYwOTI3MDE1NTQ1WhcNMjYxMDA0MDE1NTQ1WjAYMRYwFAYD VQQDEw02YWI4NzdhMS0yNWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzAudvsPFQ2xS92bouHR6PQ2OFPk5QB5RfBu7+ZeEXgUe+N+xzNATjW2ro0MA f7zFv8ASkO7R4OZbwxdv4T4gNo1owYsQjdZcZSQEfOkI7X3PU1eEA/HzbCA3/JF8 KnVMz4blw28lEdK2XjufdMeSIBdWuk8mM2Z8XNrXh26CsowyZ0AoJ6tu6Gv1Epaz s5Wl6cieseNgJtgfzCiuT7Am1dyA+mkKtRfGboaLtKK3n1/eusVn4uJHDPaTYcSC f9yQLxI02J3JOwaXhMi1E+1RckLbU6beEbp3cD72gPrdxt9EeYw4g4bPpdUk7bQc vtNZxRxYfSSPJSF6PC/h69jbuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFATtJJ4b R0yUR4gb3/ZOu7denMYmMB8GA1UdIwQYMBaAFKX7MdTVEl98mq5QAzWkgPx3kI8V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEExMy9CQjZDOUI1NEI5 ODAxMUVEQTM3QjFCNjVDNEY5QUUwMi9wZnN4MU5VU1gzeWFybEFETmFTQV9IZVFq eFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Bmc3gxTlVTWDN5YXJsQUROYVNBX0hlUWp4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEExMy9CQjZDOUI1NEI5ODAxMUVEQTM3QjFCNjVDNEY5QUUwMi9wZnN4MU5VU1gz eWFybEFETmFTQV9IZVFqeFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOZhET8k+bixq60a7DV4ArbCy1wXkWvv5QJe030VWIV/IZma18NBIlBr85oUe JY6PrqCpAobfJ6spXi4FvUwitVEH5UMTTfXvViHOpWq+2OpJQlCQG1OMRIQWzVY5 KFoEETmOgMxInpofuqHOn1TuaUfQ3ED6Diiab2Q/kkSI8o4VjVieQOZ37XDCugD9 DcN7RMjpNrnnx6ZN1iJilNJbjkUzBtNk8EBXH1z9CjRMSmpm8f4CJkhm6XIFVBe9 IGvXniN6qrGyXk9l41YlhyXGxSy9lWAO5kuW4EjjciAJOEbudGOTtn3ssbuBYBb8 aJjYl2leAlOvFj85LLZxKgvKpA== -----END CERTIFICATE-----Generated at Sun Sep 27 10:33:32 2026 by rpki-client