$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft File: PfG7945KTnVEGahIyf0My9LmpFg.mft (raw, json) Hash identifier: 4HZEQAuJxytBJDknhpYiijyW9jjj4wFm8MELMye6mus= Subject key identifier: AD:F3:90:0E:C3:9F:5C:0E:F3:28:B1:FE:9D:A4:5D:4E:2C:E1:01:97 Authority key identifier: 3D:F1:BB:F7:8E:4A:4E:75:44:19:A8:48:C9:FD:0C:CB:D2:E6:A4:58 Certificate issuer: /CN=A91C1052/serialNumber=3DF1BBF78E4A4E754419A848C9FD0CCBD2E6A458 Certificate serial: 02D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfG7945KTnVEGahIyf0My9LmpFg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft Manifest number: 02C7 Signing time: Mon 21 Sep 2026 01:18:20 +0000 Manifest this update: Mon 21 Sep 2026 01:18:20 +0000 Manifest next update: Mon 28 Sep 2026 01:18:20 +0000 Files and hashes: 1: PfG7945KTnVEGahIyf0My9LmpFg.crl (hash: wKk9oyKNFsiidAoIecVGPTg81BI8r29BpFXfhiwgZAs=) 2: 74A3C1988E8311ED903ADA1CC4F9AE02.roa (hash: +nejaKv7xuZCKQJRBEYk2kIxhLSRjN7BLyKcA9G8qXE=) 3: D6E2AAC0772911ED95084884C4F9AE02.roa (hash: 9uMRdpoWckw3Fu7tp6GE6C4ygIb26UeNoRv4LKPo7V0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.crl rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfG7945KTnVEGahIyf0My9LmpFg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 01:18:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 724 (0x2d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1052, serialNumber=3DF1BBF78E4A4E754419A848C9FD0CCBD2E6A458 Validity Not Before: Sep 21 01:18:20 2026 GMT Not After : Sep 28 01:18:20 2026 GMT Subject: CN=6ab085dc-2871 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9d:be:98:a1:ad:53:36:75:83:73:b3:f0:93: d6:93:cd:2b:b3:13:83:b4:03:d5:2e:c0:9e:dc:db: d2:87:af:9a:d3:f2:42:9b:2e:a4:c5:09:3b:e0:11: 38:4b:31:f7:b1:47:5e:d9:9e:bb:f3:0f:2c:e3:ea: ea:b9:3d:12:5a:58:43:86:b9:2f:88:4a:7d:41:57: 31:5a:3e:cc:31:4c:34:10:38:19:e7:5d:5d:a7:66: 2a:33:53:10:27:3c:17:c6:ee:a6:4d:df:89:00:d9: b0:1e:9b:67:f2:7e:a2:da:1e:b5:6f:db:99:0e:28: 57:a3:8a:82:65:2e:bb:a2:80:f6:38:3f:10:66:b0: 79:d8:f1:29:a4:d1:37:7d:48:3c:7d:b2:29:c9:b0: 91:fb:9d:92:4d:c5:11:33:1d:cb:fc:4e:55:5b:c2: 97:9a:34:de:b9:35:58:59:46:01:30:81:65:e3:58: 11:26:e3:d4:4a:8b:ef:04:6b:11:ee:ca:fa:b9:5a: 66:42:9f:c2:56:d3:17:f0:46:fd:e5:dd:97:0e:40: 6e:05:f0:9c:cd:b8:31:b5:49:56:a0:fa:34:96:75: 2c:5d:ec:aa:03:f9:9f:33:8f:46:4c:b0:83:fe:3b: f7:3a:65:8a:4e:a9:02:31:41:29:97:0f:a2:63:a8: b3:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:F3:90:0E:C3:9F:5C:0E:F3:28:B1:FE:9D:A4:5D:4E:2C:E1:01:97 X509v3 Authority Key Identifier: keyid:3D:F1:BB:F7:8E:4A:4E:75:44:19:A8:48:C9:FD:0C:CB:D2:E6:A4:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfG7945KTnVEGahIyf0My9LmpFg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:a7:b4:ca:4b:e2:d0:d3:53:2c:f3:e3:b4:c4:a1:f1:eb:17: 24:28:49:82:85:4a:94:4d:d8:0c:a6:2c:a4:24:b1:96:39:e4: 14:e9:6b:d3:6b:77:9d:99:5d:26:7d:03:2e:d0:ab:fe:35:ed: 07:8f:19:9a:f0:a1:00:d8:71:2e:90:06:22:cf:37:2b:33:e0: 98:8b:3f:b5:81:36:2f:e9:a0:01:f1:cb:97:c7:00:e0:6e:81: c4:6d:76:6c:42:1d:eb:d2:fa:d9:80:a4:3f:f2:eb:8b:c3:ba: d9:8a:08:a4:31:d5:1a:52:de:c1:ba:40:98:29:31:55:18:f1: 73:cd:0d:ff:92:3a:87:67:3f:d1:17:65:99:04:4f:bd:a2:a6: 01:45:38:74:97:9f:13:0a:e7:d4:f4:60:cf:84:8c:06:bc:28: b8:25:d7:fe:0e:0c:b6:45:6a:34:71:68:68:98:e1:a0:1f:01: a7:28:1f:e9:4e:de:a8:41:f4:e2:97:47:cb:ea:18:16:ad:aa: 2d:27:31:df:88:58:28:f7:ae:71:14:3c:6b:18:4e:21:ae:5f: fd:78:39:e7:1a:bf:54:0a:12:e9:7c:45:b0:7b:1d:7c:e0:fe: 2f:e4:1e:d0:eb:17:c9:62:7f:2a:22:aa:28:ab:1c:20:19:2c: 95:6c:8e:8b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAtQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzEwNTIxMTAvBgNVBAUTKDNERjFCQkY3OEU0QTRFNzU0NDE5QTg0OEM5RkQwQ0NC RDJFNkE0NTgwHhcNMjYwOTIxMDExODIwWhcNMjYwOTI4MDExODIwWjAYMRYwFAYD VQQDEw02YWIwODVkYy0yODcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAup2+mKGtUzZ1g3Oz8JPWk80rsxODtAPVLsCe3NvSh6+a0/JCmy6kxQk74BE4 SzH3sUde2Z678w8s4+rquT0SWlhDhrkviEp9QVcxWj7MMUw0EDgZ511dp2YqM1MQ JzwXxu6mTd+JANmwHptn8n6i2h61b9uZDihXo4qCZS67ooD2OD8QZrB52PEppNE3 fUg8fbIpybCR+52STcURMx3L/E5VW8KXmjTeuTVYWUYBMIFl41gRJuPUSovvBGsR 7sr6uVpmQp/CVtMX8Eb95d2XDkBuBfCczbgxtUlWoPo0lnUsXeyqA/mfM49GTLCD /jv3OmWKTqkCMUEplw+iY6izFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK3zkA7D n1wO8yix/p2kXU4s4QGXMB8GA1UdIwQYMBaAFD3xu/eOSk51RBmoSMn9DMvS5qRY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTA1Mi84MDZGQjI3Njc3 MjYxMUVEODZEMDk2ODBDNEY5QUUwMi9QZkc3OTQ1S1RuVkVHYWhJeWYwTXk5TG1w RmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BmRzc5NDVLVG5WRUdhaEl5ZjBNeTlMbXBGZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTA1Mi84MDZGQjI3Njc3MjYxMUVEODZEMDk2ODBDNEY5QUUwMi9QZkc3OTQ1S1Ru VkVHYWhJeWYwTXk5TG1wRmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPKe0ykvi0NNTLPPjtMSh8esXJChJgoVKlE3YDKYspCSxljnkFOlr02t3nZld Jn0DLtCr/jXtB48ZmvChANhxLpAGIs83KzPgmIs/tYE2L+mgAfHLl8cA4G6BxG12 bEId69L62YCkP/Lri8O62YoIpDHVGlLewbpAmCkxVRjxc80N/5I6h2c/0RdlmQRP vaKmAUU4dJefEwrn1PRgz4SMBrwouCXX/g4MtkVqNHFoaJjhoB8Bpygf6U7eqEH0 4pdHy+oYFq2qLScx34hYKPeucRQ8axhOIa5f/Xg55xq/VAoS6XxFsHsdfOD+L+Qe 0OsXyWJ/KiKqKKscIBkslWyOiw== -----END CERTIFICATE-----Generated at Tue Sep 22 23:43:10 2026 by rpki-client