$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B9D/4CF3B3702D1211F1BFC478F598EE528E/PDiOKfqhof7qOJefIG9GaK2oyJ4.mft File: PDiOKfqhof7qOJefIG9GaK2oyJ4.mft (raw, json) Hash identifier: avckoXn9hY+VATrGkg1QRer7DprkElilFDngZ9HvkSI= Subject key identifier: D9:CB:7F:AE:0A:F5:BA:16:BA:43:BE:44:C1:45:C9:74:17:90:BC:80 Authority key identifier: 3C:38:8E:29:FA:A1:A1:FE:EA:38:97:9F:20:6F:46:68:AD:A8:C8:9E Certificate issuer: /CN=A91A4B9D/serialNumber=3C388E29FAA1A1FEEA38979F206F4668ADA8C89E Certificate serial: 3F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PDiOKfqhof7qOJefIG9GaK2oyJ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4B9D/4CF3B3702D1211F1BFC478F598EE528E/PDiOKfqhof7qOJefIG9GaK2oyJ4.mft Manifest number: 3D Signing time: Wed 22 Jul 2026 15:03:21 +0000 Manifest this update: Wed 22 Jul 2026 15:03:21 +0000 Manifest next update: Wed 29 Jul 2026 15:03:21 +0000 Files and hashes: 1: PDiOKfqhof7qOJefIG9GaK2oyJ4.crl (hash: GkUQx4nbqgSqs4VWT/2F/vRYzpm7W+nRMPm2fAu97OI=) 2: 1ECF684E387B11F1BDE8C228B8833773.roa (hash: wpIG5Mf53y4bmJfHAaok3Ne4FnPip0P/QZYb5ljnS2k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4B9D/4CF3B3702D1211F1BFC478F598EE528E/PDiOKfqhof7qOJefIG9GaK2oyJ4.crl rsync://rpki.apnic.net/member_repository/A91A4B9D/4CF3B3702D1211F1BFC478F598EE528E/PDiOKfqhof7qOJefIG9GaK2oyJ4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PDiOKfqhof7qOJefIG9GaK2oyJ4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 15:03:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4B9D, serialNumber=3C388E29FAA1A1FEEA38979F206F4668ADA8C89E Validity Not Before: Jul 22 15:03:21 2026 GMT Not After : Jul 29 15:03:21 2026 GMT Subject: CN=6a60dbb9-70ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ae:7c:17:94:e6:f6:d0:f3:8c:5d:6c:ec:46: c6:e1:0c:f7:29:3c:74:1a:b6:34:d2:41:c7:3e:85: 88:93:65:55:fa:a0:d4:58:71:97:09:e4:3e:78:7a: a1:d4:63:1a:3b:74:7b:ba:bb:dd:27:e9:83:c4:32: ce:21:8d:40:ea:4a:2c:49:5f:db:a1:d0:12:ad:ca: 47:8c:a2:93:e9:aa:ee:5f:4c:35:0f:2d:a8:54:f9: bc:46:53:48:3a:66:d0:4f:8c:47:2b:fe:c8:05:2d: 16:8e:a5:fe:4d:a8:f8:52:05:7b:2b:05:f2:d5:70: 58:d8:aa:05:d8:f3:48:ec:b7:e1:9a:34:57:ae:1b: 3f:d0:1a:8a:c5:a5:42:c8:64:a0:58:8a:3c:f1:00: 6b:1a:21:69:87:67:2a:96:e0:46:76:2b:48:de:a3: e9:44:cd:52:84:f0:50:d0:1a:b5:7d:f1:64:5c:3e: 2f:9f:22:fa:ed:35:fc:70:f1:68:28:31:d2:61:c9: 2f:f4:5f:4f:2a:77:78:a2:56:c5:a0:0a:51:01:53: 67:ea:6a:c3:ee:23:3c:66:75:26:f4:79:81:3f:00: ac:56:27:0f:71:7b:cb:b6:a9:73:67:e4:3f:ca:60: a6:c9:f4:59:13:17:d8:37:2d:18:70:15:89:1b:b7: 9e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:CB:7F:AE:0A:F5:BA:16:BA:43:BE:44:C1:45:C9:74:17:90:BC:80 X509v3 Authority Key Identifier: keyid:3C:38:8E:29:FA:A1:A1:FE:EA:38:97:9F:20:6F:46:68:AD:A8:C8:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4B9D/4CF3B3702D1211F1BFC478F598EE528E/PDiOKfqhof7qOJefIG9GaK2oyJ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PDiOKfqhof7qOJefIG9GaK2oyJ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B9D/4CF3B3702D1211F1BFC478F598EE528E/PDiOKfqhof7qOJefIG9GaK2oyJ4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:93:0e:30:eb:65:b8:5f:98:55:25:8b:22:f2:ec:9a:06:93: 34:83:25:78:11:83:b6:cf:1b:07:53:7a:3e:ef:76:99:65:c4: 72:75:7e:16:ec:93:46:e2:ef:8c:a2:bc:83:a5:46:41:87:bc: b1:1f:6d:4c:fe:a2:82:3c:82:e3:3f:4c:e7:c7:96:84:5f:ba: 97:08:c7:1a:7d:fe:a4:10:03:12:66:52:a0:f5:14:fa:de:e0: b7:32:ec:a6:c8:c7:d7:b3:1c:1b:6a:34:98:54:06:84:78:45: ae:4d:6f:a4:fe:44:af:7d:3b:7f:90:f9:87:b6:78:24:f6:82: e9:a0:f9:de:7d:87:9d:8b:7c:1a:61:cd:51:57:6e:fa:e5:a9: 3f:9e:6e:30:0d:51:a6:d4:51:4d:14:0d:e7:28:58:22:0d:b8: dc:98:43:c7:d6:61:80:21:6d:cc:ad:8a:a5:c4:c2:31:65:f5: 66:bb:cc:75:c1:37:dd:24:ef:5c:8b:23:d3:db:fc:5c:40:ce: 9d:da:34:5e:a9:a5:07:fe:7a:c3:86:b4:77:af:c7:46:fe:d1: 64:07:2d:f6:6d:45:55:44:01:59:e8:22:5f:92:d6:b8:a1:c2: 5b:7d:bb:42:2f:22:fb:5f:1c:ec:9c:6d:39:bd:89:c0:82:0e: e5:00:af:42 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NEI5RDExMC8GA1UEBRMoM0MzODhFMjlGQUExQTFGRUVBMzg5NzlGMjA2RjQ2NjhB REE4Qzg5RTAeFw0yNjA3MjIxNTAzMjFaFw0yNjA3MjkxNTAzMjFaMBgxFjAUBgNV BAMTDTZhNjBkYmI5LTcwZWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSrnwXlOb20POMXWzsRsbhDPcpPHQatjTSQcc+hYiTZVX6oNRYcZcJ5D54eqHU Yxo7dHu6u90n6YPEMs4hjUDqSixJX9uh0BKtykeMopPpqu5fTDUPLahU+bxGU0g6 ZtBPjEcr/sgFLRaOpf5NqPhSBXsrBfLVcFjYqgXY80jst+GaNFeuGz/QGorFpULI ZKBYijzxAGsaIWmHZyqW4EZ2K0jeo+lEzVKE8FDQGrV98WRcPi+fIvrtNfxw8Wgo MdJhyS/0X08qd3iiVsWgClEBU2fqasPuIzxmdSb0eYE/AKxWJw9xe8u2qXNn5D/K YKbJ9FkTF9g3LRhwFYkbt55rAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU2ct/rgr1 uha6Q75EwUXJdBeQvIAwHwYDVR0jBBgwFoAUPDiOKfqhof7qOJefIG9GaK2oyJ4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0QjlELzRDRjNCMzcwMkQx MjExRjFCRkM0NzhGNTk4RUU1MjhFL1BEaU9LZnFob2Y3cU9KZWZJRzlHYUsyb3lK NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUERpT0tmcWhvZjdxT0plZklHOUdhSzJveUo0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0 QjlELzRDRjNCMzcwMkQxMjExRjFCRkM0NzhGNTk4RUU1MjhFL1BEaU9LZnFob2Y3 cU9KZWZJRzlHYUsyb3lKNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQASkw4w62W4X5hVJYsi8uyaBpM0gyV4EYO2zxsHU3o+73aZZcRydX4W7JNG4u+M oryDpUZBh7yxH21M/qKCPILjP0znx5aEX7qXCMcaff6kEAMSZlKg9RT63uC3Muym yMfXsxwbajSYVAaEeEWuTW+k/kSvfTt/kPmHtngk9oLpoPnefYedi3waYc1RV276 5ak/nm4wDVGm1FFNFA3nKFgiDbjcmEPH1mGAIW3MrYqlxMIxZfVmu8x1wTfdJO9c iyPT2/xcQM6d2jReqaUH/nrDhrR3r8dG/tFkBy32bUVVRAFZ6CJfkta4ocJbfbtC LyL7XxzsnG05vYnAgg7lAK9C -----END CERTIFICATE-----Generated at Fri Jul 24 10:02:52 2026 by rpki-client