$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C8307/3432F60CBECD11EF98C74132C4F9AE02/PdCVvno70d2CniomSfx-gafv40w.mft File: PdCVvno70d2CniomSfx-gafv40w.mft (raw, json) Hash identifier: 2JZielt0QAbNsewfmv3+/pL4G0ESzGm5EvJCv8ddG2o= Subject key identifier: 39:DB:F2:FE:DC:0C:66:37:9A:1D:27:0A:D9:BD:8B:7E:EA:90:D8:28 Authority key identifier: 3D:D0:95:BE:7A:3B:D1:DD:82:9E:2A:26:49:FC:7E:81:A7:EF:E3:4C Certificate issuer: /CN=A91C8307/serialNumber=3DD095BE7A3BD1DD829E2A2649FC7E81A7EFE34C Certificate serial: 0156 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdCVvno70d2CniomSfx-gafv40w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8307/3432F60CBECD11EF98C74132C4F9AE02/PdCVvno70d2CniomSfx-gafv40w.mft Manifest number: 0152 Signing time: Mon 05 Oct 2026 05:37:54 +0000 Manifest this update: Mon 05 Oct 2026 05:37:54 +0000 Manifest next update: Mon 12 Oct 2026 05:37:54 +0000 Files and hashes: 1: PdCVvno70d2CniomSfx-gafv40w.crl (hash: YQIyu8pNqVHlj736EIY/zmnP/HWhTXe92G7jG2cAagY=) 2: DEDB3932BED411EF835BB47AC4F9AE02.roa (hash: WziZMnogtrt5ODR5BwAGdePYHn5IgubVnNvNashcDd8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8307/3432F60CBECD11EF98C74132C4F9AE02/PdCVvno70d2CniomSfx-gafv40w.crl rsync://rpki.apnic.net/member_repository/A91C8307/3432F60CBECD11EF98C74132C4F9AE02/PdCVvno70d2CniomSfx-gafv40w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdCVvno70d2CniomSfx-gafv40w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 05:37:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 342 (0x156) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8307, serialNumber=3DD095BE7A3BD1DD829E2A2649FC7E81A7EFE34C Validity Not Before: Oct 5 05:37:54 2026 GMT Not After : Oct 12 05:37:54 2026 GMT Subject: CN=6ac337b2-ac05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:8f:d7:1f:99:20:89:02:b3:4e:d1:7c:59:56: f5:35:e4:d3:a8:f4:45:d8:77:cd:e6:a1:39:fd:d9: 57:17:8d:70:c1:ca:91:e0:93:41:3d:3b:8d:61:b5: db:56:70:d7:3f:48:f9:22:b6:94:f6:dc:e0:e7:96: 4f:8d:e7:8f:80:8f:de:5f:09:cf:23:17:50:ef:64: b2:72:86:3b:3d:d9:3c:f8:6e:a7:4f:2a:5a:73:72: 88:8a:4b:07:14:10:dc:69:62:50:69:74:b0:73:85: 64:0c:6b:aa:0d:4c:f5:65:e9:2c:5e:46:ba:ba:bb: 2e:14:25:44:ad:7b:8f:7b:33:e9:b8:30:90:ba:77: ed:ac:98:76:4b:79:6b:55:1c:da:df:a3:f7:a7:a4: f2:37:39:45:4b:47:6b:0c:b4:62:11:63:75:df:ee: 56:cf:79:2e:6f:ec:f6:59:25:9f:2f:e8:41:6c:a3: 9b:43:69:af:13:a6:bd:e4:b6:da:aa:f3:6d:78:a4: 76:53:f7:ec:c8:5e:77:8d:24:b9:73:3e:f7:cf:45: c8:31:89:2b:3c:0b:8d:d1:eb:f8:6b:fa:68:d1:b4: 75:a9:47:52:47:26:23:d2:cf:16:ea:e1:07:ed:f7: d6:69:2e:a9:04:d8:bb:5d:a0:b8:03:63:ef:04:5d: b3:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:DB:F2:FE:DC:0C:66:37:9A:1D:27:0A:D9:BD:8B:7E:EA:90:D8:28 X509v3 Authority Key Identifier: keyid:3D:D0:95:BE:7A:3B:D1:DD:82:9E:2A:26:49:FC:7E:81:A7:EF:E3:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8307/3432F60CBECD11EF98C74132C4F9AE02/PdCVvno70d2CniomSfx-gafv40w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdCVvno70d2CniomSfx-gafv40w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8307/3432F60CBECD11EF98C74132C4F9AE02/PdCVvno70d2CniomSfx-gafv40w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:51:f3:f8:6a:0f:24:1f:f2:2d:1f:de:db:21:5c:74:05:af: 28:2f:d5:b5:0a:1c:9e:3b:39:83:e0:d4:6e:86:c0:63:0a:48: 5a:0d:75:ef:e8:82:f1:42:d8:c6:18:d9:28:78:9b:58:25:8c: 45:53:3f:96:dc:99:ea:4e:52:ce:70:d8:0d:47:3f:14:a1:9c: 3d:d8:3b:9b:53:a8:7c:6b:dd:f5:34:09:b6:0d:7d:48:5a:30: c8:1e:bb:4c:ef:8c:71:08:10:38:a4:ee:28:a9:5c:79:e4:41: 90:a5:bb:77:ee:95:4e:d7:f7:05:08:97:c5:c6:5d:fd:74:53: 72:d1:e0:76:3e:63:5e:56:9d:a9:91:71:55:ba:e4:dd:b9:e2: 41:8e:7c:1f:4d:83:a8:57:e8:ae:75:73:71:08:22:c3:2f:11: d7:72:0b:8f:b3:f8:9b:2e:b0:1b:f9:35:f4:22:88:61:1d:46: 48:f6:1c:e9:45:f7:7d:f7:86:7d:2f:51:f3:8b:11:da:13:4d: 96:b7:ab:53:c2:70:78:dc:8f:aa:b1:2e:3b:aa:9e:fe:6e:cd: 52:f2:84:e1:8f:a3:cb:74:32:69:f4:8e:e9:c6:73:05:4a:d8: 1a:2c:c2:f5:e5:31:dc:fd:3d:c9:c6:22:01:7e:bf:69:6f:6a: 5b:64:7f:92 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzgzMDcxMTAvBgNVBAUTKDNERDA5NUJFN0EzQkQxREQ4MjlFMkEyNjQ5RkM3RTgx QTdFRkUzNEMwHhcNMjYxMDA1MDUzNzU0WhcNMjYxMDEyMDUzNzU0WjAYMRYwFAYD VQQDEw02YWMzMzdiMi1hYzA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkY/XH5kgiQKzTtF8WVb1NeTTqPRF2HfN5qE5/dlXF41wwcqR4JNBPTuNYbXb VnDXP0j5IraU9tzg55ZPjeePgI/eXwnPIxdQ72SycoY7Pdk8+G6nTypac3KIiksH FBDcaWJQaXSwc4VkDGuqDUz1ZeksXka6ursuFCVErXuPezPpuDCQunftrJh2S3lr VRza36P3p6TyNzlFS0drDLRiEWN13+5Wz3kub+z2WSWfL+hBbKObQ2mvE6a95Lba qvNteKR2U/fsyF53jSS5cz73z0XIMYkrPAuN0ev4a/po0bR1qUdSRyYj0s8W6uEH 7ffWaS6pBNi7XaC4A2PvBF2z2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDnb8v7c DGY3mh0nCtm9i37qkNgoMB8GA1UdIwQYMBaAFD3Qlb56O9Hdgp4qJkn8foGn7+NM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODMwNy8zNDMyRjYwQ0JF Q0QxMUVGOThDNzQxMzJDNEY5QUUwMi9QZENWdm5vNzBkMkNuaW9tU2Z4LWdhZnY0 MHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BkQ1Z2bm83MGQyQ25pb21TZngtZ2FmdjQwdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODMwNy8zNDMyRjYwQ0JFQ0QxMUVGOThDNzQxMzJDNEY5QUUwMi9QZENWdm5vNzBk MkNuaW9tU2Z4LWdhZnY0MHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPlHz+GoPJB/yLR/e2yFcdAWvKC/VtQocnjs5g+DUbobAYwpIWg117+iC8ULY xhjZKHibWCWMRVM/ltyZ6k5SznDYDUc/FKGcPdg7m1OofGvd9TQJtg19SFowyB67 TO+McQgQOKTuKKlceeRBkKW7d+6VTtf3BQiXxcZd/XRTctHgdj5jXladqZFxVbrk 3bniQY58H02DqFfornVzcQgiwy8R13ILj7P4my6wG/k19CKIYR1GSPYc6UX3ffeG fS9R84sR2hNNlrerU8JweNyPqrEuO6qe/m7NUvKE4Y+jy3QyafSO6cZzBUrYGizC 9eUx3P09ycYiAX6/aW9qW2R/kg== -----END CERTIFICATE-----Generated at Mon Oct 5 17:49:50 2026 by rpki-client