$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/Pgw5tVhKz65BgIE4j08KlNbajgY.mft File: Pgw5tVhKz65BgIE4j08KlNbajgY.mft (raw, json) Hash identifier: hnfiHVpaTR+nrjbjok+ayz6BSubqzoNm+pXcds+xYV0= Subject key identifier: E5:0E:98:39:3A:A3:BD:5A:60:A8:DA:56:95:4B:E5:E4:36:98:DD:69 Authority key identifier: 3E:0C:39:B5:58:4A:CF:AE:41:80:81:38:8F:4F:0A:94:D6:DA:8E:06 Certificate issuer: /CN=A91BD7A3/serialNumber=3E0C39B5584ACFAE418081388F4F0A94D6DA8E06 Certificate serial: A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pgw5tVhKz65BgIE4j08KlNbajgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/Pgw5tVhKz65BgIE4j08KlNbajgY.mft Manifest number: 9F Signing time: Fri 25 Sep 2026 07:20:56 +0000 Manifest this update: Fri 25 Sep 2026 07:20:56 +0000 Manifest next update: Fri 02 Oct 2026 07:20:56 +0000 Files and hashes: 1: Pgw5tVhKz65BgIE4j08KlNbajgY.crl (hash: Z1ob3/a/7pKF4NJcYwqvKZaFaYmmSVe42q9UW8MV22U=) 2: 132F5C52C52511F0B4A6F21BC4F9AE02.roa (hash: +oT+l8AaeCiLhYsjOPIgCUOdYkL2JAeHR0qNvNkZXgc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/Pgw5tVhKz65BgIE4j08KlNbajgY.crl rsync://rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/Pgw5tVhKz65BgIE4j08KlNbajgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pgw5tVhKz65BgIE4j08KlNbajgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 07:20:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161 (0xa1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD7A3, serialNumber=3E0C39B5584ACFAE418081388F4F0A94D6DA8E06 Validity Not Before: Sep 25 07:20:56 2026 GMT Not After : Oct 2 07:20:56 2026 GMT Subject: CN=6ab620d8-77ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:72:bd:c3:9d:8f:b6:b5:ea:9d:e5:fc:57:83: 52:db:79:d3:6a:46:98:af:01:6d:fd:49:8c:72:a0: c9:3f:c6:40:0e:e4:64:0f:42:42:13:e2:84:2f:48: 9d:26:05:b2:c3:c9:a0:30:9f:da:c8:65:38:33:26: 33:f6:ac:f9:51:c4:7d:d0:0c:16:8c:ad:2f:7c:a6: 98:69:19:3c:77:04:3c:8a:f0:9b:68:fa:a9:52:7f: 3a:c2:bb:e4:82:c8:fe:55:71:55:1a:04:47:ec:23: e7:3b:69:2b:d9:5a:13:62:7f:99:ab:fb:5a:4a:6e: 8c:4f:7e:b9:73:b7:86:b1:fb:cb:2b:00:6c:96:ad: e6:6b:52:71:f5:74:9c:1a:d4:c5:3f:54:89:39:57: a8:b8:b5:a0:8b:fc:80:58:a3:00:d6:5d:1c:f9:78: a9:ac:cc:8e:0f:9b:9e:35:93:c7:8e:af:08:dd:93: 17:71:a7:44:01:dd:ac:57:88:a6:21:90:93:d0:6d: f4:60:b7:15:3f:e0:9b:dc:22:ac:8b:c5:1f:ee:dd: d1:f4:8d:34:46:2d:79:7b:12:0d:fc:73:8a:3a:44: 49:9d:5a:81:d5:53:d5:86:1e:f4:78:fa:ea:61:2b: 01:7d:9a:73:18:e8:62:fd:7e:aa:85:4e:2d:f5:53: 29:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:0E:98:39:3A:A3:BD:5A:60:A8:DA:56:95:4B:E5:E4:36:98:DD:69 X509v3 Authority Key Identifier: keyid:3E:0C:39:B5:58:4A:CF:AE:41:80:81:38:8F:4F:0A:94:D6:DA:8E:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/Pgw5tVhKz65BgIE4j08KlNbajgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pgw5tVhKz65BgIE4j08KlNbajgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/Pgw5tVhKz65BgIE4j08KlNbajgY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:0f:93:93:69:a7:0d:95:4a:67:45:75:40:d6:9d:6b:d7:34: c9:3b:e7:c5:9e:ec:c8:4f:92:be:3a:38:cd:52:36:43:dd:9a: 05:13:be:1b:ba:2d:65:75:59:f8:cd:7c:9f:67:20:aa:14:28: 8e:c1:d7:74:63:53:5b:4b:21:e1:7e:d3:75:f7:d7:9c:db:52: 82:f2:18:1d:42:1e:ea:18:b3:36:7e:1f:ca:9b:27:8b:18:c5: 80:49:ac:d1:81:26:69:a6:a7:fa:e2:e4:a6:c1:7b:31:58:58: d8:96:91:e9:8b:a3:91:95:2c:8b:68:fb:4a:12:af:ac:36:df: 8e:73:f0:f2:20:83:38:50:36:91:53:f4:62:5e:7f:07:03:8a: 39:60:62:00:7f:da:40:d2:02:37:1c:d1:b1:92:5b:e8:ac:30: ab:e4:fe:94:53:c4:f1:8a:29:ab:f3:c2:1b:42:c4:fc:3f:f6: d8:85:91:24:56:e8:0c:5f:66:52:e6:92:ef:d8:73:56:0f:f7: 70:c8:44:b3:c5:ea:75:8e:3b:66:25:fc:cf:d5:4a:69:2a:60: b8:74:96:17:e6:b3:ed:82:d9:6a:8c:44:22:e2:d6:b3:3f:eb: 05:60:be:d7:59:11:db:86:e2:0c:75:b9:3c:03:93:d1:b6:16: 2f:82:c4:6f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQ3QTMxMTAvBgNVBAUTKDNFMEMzOUI1NTg0QUNGQUU0MTgwODEzODhGNEYwQTk0 RDZEQThFMDYwHhcNMjYwOTI1MDcyMDU2WhcNMjYxMDAyMDcyMDU2WjAYMRYwFAYD VQQDEw02YWI2MjBkOC03N2VlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA33K9w52PtrXqneX8V4NS23nTakaYrwFt/UmMcqDJP8ZADuRkD0JCE+KEL0id JgWyw8mgMJ/ayGU4MyYz9qz5UcR90AwWjK0vfKaYaRk8dwQ8ivCbaPqpUn86wrvk gsj+VXFVGgRH7CPnO2kr2VoTYn+Zq/taSm6MT365c7eGsfvLKwBslq3ma1Jx9XSc GtTFP1SJOVeouLWgi/yAWKMA1l0c+XiprMyOD5ueNZPHjq8I3ZMXcadEAd2sV4im IZCT0G30YLcVP+Cb3CKsi8Uf7t3R9I00Ri15exIN/HOKOkRJnVqB1VPVhh70ePrq YSsBfZpzGOhi/X6qhU4t9VMpIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOUOmDk6 o71aYKjaVpVL5eQ2mN1pMB8GA1UdIwQYMBaAFD4MObVYSs+uQYCBOI9PCpTW2o4G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDdBMy84RjA2MDI1QUM1 MjQxMUYwQTJBNEREMUFDNEY5QUUwMi9QZ3c1dFZoS3o2NUJnSUU0ajA4S2xOYmFq Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BndzV0VmhLejY1QmdJRTRqMDhLbE5iYWpnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDdBMy84RjA2MDI1QUM1MjQxMUYwQTJBNEREMUFDNEY5QUUwMi9QZ3c1dFZoS3o2 NUJnSUU0ajA4S2xOYmFqZ1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhg+Tk2mnDZVKZ0V1QNada9c0yTvnxZ7syE+Svjo4zVI2Q92aBRO+G7otZXVZ +M18n2cgqhQojsHXdGNTW0sh4X7TdffXnNtSgvIYHUIe6hizNn4fypsnixjFgEms 0YEmaaan+uLkpsF7MVhY2JaR6YujkZUsi2j7ShKvrDbfjnPw8iCDOFA2kVP0Yl5/ BwOKOWBiAH/aQNICNxzRsZJb6Kwwq+T+lFPE8Yopq/PCG0LE/D/22IWRJFboDF9m UuaS79hzVg/3cMhEs8XqdY47ZiX8z9VKaSpguHSWF+az7YLZaoxEIuLWsz/rBWC+ 11kR24biDHW5PAOT0bYWL4LEbw== -----END CERTIFICATE-----Generated at Fri Sep 25 23:46:19 2026 by rpki-client