$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft File: PfG7945KTnVEGahIyf0My9LmpFg.mft (raw, json) Hash identifier: Ldtc7i3oHjcE9W7y3D71RXc/eF9Y1LcQxT8CSRzZuBc= Subject key identifier: 87:91:9A:B4:48:67:27:F1:22:6A:44:53:47:98:BD:C4:31:3D:34:44 Authority key identifier: 3D:F1:BB:F7:8E:4A:4E:75:44:19:A8:48:C9:FD:0C:CB:D2:E6:A4:58 Certificate issuer: /CN=A91C1052/serialNumber=3DF1BBF78E4A4E754419A848C9FD0CCBD2E6A458 Certificate serial: 02B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfG7945KTnVEGahIyf0My9LmpFg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft Manifest number: 02A8 Signing time: Thu 23 Jul 2026 02:38:25 +0000 Manifest this update: Thu 23 Jul 2026 02:38:24 +0000 Manifest next update: Thu 30 Jul 2026 02:38:24 +0000 Files and hashes: 1: PfG7945KTnVEGahIyf0My9LmpFg.crl (hash: 5/9QqcwfrgiUztUIEZieeMQoAj7XtTPkvG3SK4qt8r8=) 2: D6E2AAC0772911ED95084884C4F9AE02.roa (hash: 9uMRdpoWckw3Fu7tp6GE6C4ygIb26UeNoRv4LKPo7V0=) 3: 74A3C1988E8311ED903ADA1CC4F9AE02.roa (hash: +nejaKv7xuZCKQJRBEYk2kIxhLSRjN7BLyKcA9G8qXE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.crl rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfG7945KTnVEGahIyf0My9LmpFg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 02:38:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 693 (0x2b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1052, serialNumber=3DF1BBF78E4A4E754419A848C9FD0CCBD2E6A458 Validity Not Before: Jul 23 02:38:24 2026 GMT Not After : Jul 30 02:38:24 2026 GMT Subject: CN=6a617ea1-eef8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:fd:80:35:19:ef:f6:15:ef:e0:55:af:a2:14: 9a:f5:aa:60:86:d4:b5:29:e5:0f:97:3e:af:49:28: 3a:f8:22:af:75:a5:c9:e5:c7:49:2e:d9:bc:78:90: 3b:c4:a9:22:5a:30:f8:54:50:ba:3b:97:2f:91:de: 32:4e:f6:a9:9d:10:33:3e:a9:8a:4f:44:e5:63:74: d6:42:65:ad:8e:7a:d4:41:82:67:48:73:aa:7a:e7: 52:b5:a9:6d:df:bd:80:6d:d1:6b:45:5b:1d:73:20: a3:0c:be:e9:4b:8c:dd:a8:58:08:4f:32:35:0d:61: 0d:d5:b9:eb:c2:5e:2b:0c:6e:94:b6:9e:df:75:24: 0a:2e:c0:11:da:42:97:8f:71:c7:98:05:f1:ae:04: 6a:36:12:ca:37:b9:90:f0:e0:bd:d5:22:28:41:f6: 77:80:63:19:5c:f8:04:93:0a:2b:72:a2:cf:11:f0: e4:58:ee:18:cb:6f:2d:97:75:16:68:22:16:b6:ee: ea:5b:06:0f:b8:77:38:64:de:32:33:3d:2b:7c:87: 9d:05:b6:9a:bb:f5:a9:71:46:07:85:00:fe:45:41: 02:e8:38:27:81:00:d9:a2:3a:10:9c:a9:ca:cc:f7: 55:e6:bc:fc:3a:0f:9f:db:8c:3d:3f:30:23:ee:bc: b2:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:91:9A:B4:48:67:27:F1:22:6A:44:53:47:98:BD:C4:31:3D:34:44 X509v3 Authority Key Identifier: keyid:3D:F1:BB:F7:8E:4A:4E:75:44:19:A8:48:C9:FD:0C:CB:D2:E6:A4:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfG7945KTnVEGahIyf0My9LmpFg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:c7:f8:cc:f7:87:d9:e5:2c:07:ef:fb:9f:6c:97:47:6b:cd: 57:e5:7f:a1:bc:87:c0:8d:90:99:5e:79:80:6e:f1:fa:11:c9: fc:73:3d:d8:51:32:a4:16:de:34:0c:1d:f4:86:72:c1:e5:0a: 4b:61:6a:1d:b5:e4:c6:67:92:ef:31:14:55:cc:a8:3e:1e:3a: 21:f1:40:a2:ae:77:91:18:c6:56:31:a5:c8:31:40:f2:1d:24: a8:b8:46:93:bf:04:db:e2:bf:41:e5:3f:e0:b1:6f:33:c1:6d: 1a:09:f1:7b:c9:ce:67:43:a5:4f:0f:08:f8:5a:7a:d2:a0:04: e9:92:47:48:f9:75:6d:97:4a:fa:1d:6c:a2:2a:d6:1a:e2:05: 54:d4:0a:c7:f2:45:54:15:0d:0b:44:bb:35:71:68:c8:66:47: 09:65:2f:ff:16:39:88:bd:c6:03:94:af:9f:ba:18:b2:38:f7: 96:47:86:68:a3:b2:31:ba:b0:c3:6e:28:d3:bf:72:32:b2:6d: f7:13:67:b9:65:fc:de:7d:4f:58:72:85:b0:07:68:67:33:9d: ee:36:df:d4:ce:30:7b:66:bd:4e:16:cf:9e:36:fc:ea:7e:ca: 73:ba:1b:57:8d:72:13:e5:f4:bc:76:fb:88:1c:af:b3:8c:b1: f5:3f:4f:47 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICArUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzEwNTIxMTAvBgNVBAUTKDNERjFCQkY3OEU0QTRFNzU0NDE5QTg0OEM5RkQwQ0NC RDJFNkE0NTgwHhcNMjYwNzIzMDIzODI0WhcNMjYwNzMwMDIzODI0WjAYMRYwFAYD VQQDEw02YTYxN2VhMS1lZWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoP2ANRnv9hXv4FWvohSa9apghtS1KeUPlz6vSSg6+CKvdaXJ5cdJLtm8eJA7 xKkiWjD4VFC6O5cvkd4yTvapnRAzPqmKT0TlY3TWQmWtjnrUQYJnSHOqeudStalt 372AbdFrRVsdcyCjDL7pS4zdqFgITzI1DWEN1bnrwl4rDG6Utp7fdSQKLsAR2kKX j3HHmAXxrgRqNhLKN7mQ8OC91SIoQfZ3gGMZXPgEkworcqLPEfDkWO4Yy28tl3UW aCIWtu7qWwYPuHc4ZN4yMz0rfIedBbaau/WpcUYHhQD+RUEC6DgngQDZojoQnKnK zPdV5rz8Og+f24w9PzAj7ryy5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIeRmrRI ZyfxImpEU0eYvcQxPTREMB8GA1UdIwQYMBaAFD3xu/eOSk51RBmoSMn9DMvS5qRY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTA1Mi84MDZGQjI3Njc3 MjYxMUVEODZEMDk2ODBDNEY5QUUwMi9QZkc3OTQ1S1RuVkVHYWhJeWYwTXk5TG1w RmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BmRzc5NDVLVG5WRUdhaEl5ZjBNeTlMbXBGZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTA1Mi84MDZGQjI3Njc3MjYxMUVEODZEMDk2ODBDNEY5QUUwMi9QZkc3OTQ1S1Ru VkVHYWhJeWYwTXk5TG1wRmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVcf4zPeH2eUsB+/7n2yXR2vNV+V/obyHwI2QmV55gG7x+hHJ/HM92FEypBbe NAwd9IZyweUKS2FqHbXkxmeS7zEUVcyoPh46IfFAoq53kRjGVjGlyDFA8h0kqLhG k78E2+K/QeU/4LFvM8FtGgnxe8nOZ0OlTw8I+Fp60qAE6ZJHSPl1bZdK+h1soirW GuIFVNQKx/JFVBUNC0S7NXFoyGZHCWUv/xY5iL3GA5Svn7oYsjj3lkeGaKOyMbqw w24o079yMrJt9xNnuWX83n1PWHKFsAdoZzOd7jbf1M4we2a9ThbPnjb86n7Kc7ob V41yE+X0vHb7iByvs4yx9T9PRw== -----END CERTIFICATE-----Generated at Fri Jul 24 14:27:47 2026 by rpki-client