$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.mft File: PenT3_bgSP2QgUZQLk8I5Fbz2bw.mft (raw, json) Hash identifier: UcGypAtLtD3ZS+T/vjtgIpp0kPHQ1CPMwKZ1jv74neM= Subject key identifier: 0C:63:E1:A0:50:E1:9A:EF:ED:95:C5:38:44:EB:CF:F3:30:9A:98:63 Authority key identifier: 3D:E9:D3:DF:F6:E0:48:FD:90:81:46:50:2E:4F:08:E4:56:F3:D9:BC Certificate issuer: /CN=A91CB7AB/serialNumber=3DE9D3DFF6E048FD908146502E4F08E456F3D9BC Certificate serial: 0927 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PenT3_bgSP2QgUZQLk8I5Fbz2bw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.mft Manifest number: 0880 Signing time: Wed 22 Jul 2026 21:53:55 +0000 Manifest this update: Wed 22 Jul 2026 21:53:54 +0000 Manifest next update: Wed 29 Jul 2026 21:53:54 +0000 Files and hashes: 1: PenT3_bgSP2QgUZQLk8I5Fbz2bw.crl (hash: 70Ok4iy7EShfRNzPs5rNGMB36dIN2fBtfX10ZkabkdE=) 2: 5B2236E6FD6D11EE951DE436C4F9AE02.roa (hash: wVxc6nx/JmhL7VCPOsNGEB8sGimUMjqS6K/WHE14sqo=) 3: E2FEA6DA3E5411EF9B398D2DC4F9AE02.roa (hash: 4maJF9WUbj7sjherc9bKMjHY3wXl4HcmhFEcf5r/F/Q=) 4: 0112375EA05411EDB043385AC4F9AE02.roa (hash: wt7sHeBZYX3+ynpGbSY8k/1ymNfDI2lkoFnaTMVP/Ps=) 5: 5CDB2402FD6D11EE951DE436C4F9AE02.roa (hash: GPPwnFCIcpt0RgF++70GuCleWCDXuGcVYR4o3iza94k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.crl rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PenT3_bgSP2QgUZQLk8I5Fbz2bw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 21:53:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2343 (0x927) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB7AB, serialNumber=3DE9D3DFF6E048FD908146502E4F08E456F3D9BC Validity Not Before: Jul 22 21:53:54 2026 GMT Not After : Jul 29 21:53:54 2026 GMT Subject: CN=6a613bf2-df4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:00:ba:f0:67:db:1b:d3:88:05:5d:0a:c5:db: d9:5c:f6:7e:29:f2:fd:9c:99:20:13:ef:3f:bf:ab: c3:ba:87:95:df:f9:f8:a8:8a:4f:27:9d:1d:e8:01: da:03:86:51:1f:0b:4b:96:09:b0:b6:20:d4:fd:a0: 7e:0c:79:69:45:b8:79:4a:40:81:99:83:25:ac:c5: bc:83:7b:54:d4:fd:e2:54:42:3f:0d:ab:3d:1b:39: e0:23:e0:c7:3d:62:c4:1c:3c:31:30:83:9f:c9:c9: a8:39:30:3a:f0:ee:2f:a9:a6:a1:9f:ef:7f:f8:b6: 41:db:14:31:a8:a4:16:aa:87:a3:31:88:cd:d7:9c: 1a:60:fd:1a:d1:6a:cd:91:98:c7:26:d4:49:b2:ea: e6:d7:a6:1c:6b:ab:55:02:c5:6c:ed:8e:eb:e0:79: b0:d7:c6:8f:73:68:40:a0:5f:aa:e9:a0:cf:da:76: 50:29:48:dd:f0:c2:aa:6f:be:32:aa:51:f9:27:2b: d9:03:22:4f:a5:21:50:c9:f5:c1:a1:21:04:7d:81: dc:12:ba:50:78:cc:28:86:40:89:41:f9:fa:91:55: dc:b9:b2:69:fb:d8:23:0d:2d:82:f7:c0:8a:a2:fb: 11:b8:df:6b:fc:de:67:d4:30:be:be:c0:f0:12:78: 45:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:63:E1:A0:50:E1:9A:EF:ED:95:C5:38:44:EB:CF:F3:30:9A:98:63 X509v3 Authority Key Identifier: keyid:3D:E9:D3:DF:F6:E0:48:FD:90:81:46:50:2E:4F:08:E4:56:F3:D9:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PenT3_bgSP2QgUZQLk8I5Fbz2bw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:27:dd:83:97:15:94:0e:7f:e3:af:be:d3:eb:af:3e:30:1a: 46:79:c3:c8:ec:67:df:c9:e7:d5:9a:2a:85:62:10:fc:0a:46: 1d:c6:cb:93:62:db:a0:34:c0:b6:c1:80:3e:9c:35:e7:51:e9: f7:1f:d3:13:92:f7:75:96:e4:c3:1f:42:f6:12:c7:aa:ea:07: 64:d2:d7:ba:04:42:ec:fb:c6:75:e6:2d:ae:b7:62:ef:80:91: 6c:5f:0c:0b:ff:b1:d1:5b:89:43:1f:cb:46:30:39:3d:d2:cf: fc:7b:f8:19:c2:56:a7:c9:44:f3:22:4d:4a:9e:5c:67:ed:c8: 26:da:5a:c6:77:9a:05:37:dd:ec:13:39:38:1a:ac:7c:a4:fa: 3a:a3:3a:7d:ab:4b:7d:d1:ec:99:08:04:21:b1:d8:86:72:a1: 20:cd:cd:a2:79:8f:60:1e:cb:b6:2c:c8:6f:f4:01:be:7d:94: ff:77:69:24:91:69:d0:d0:bb:6d:d6:42:5f:05:8d:f1:64:60: ab:19:b9:fd:e6:07:8e:50:76:bd:48:54:8a:03:d2:9e:f5:a3: 1b:26:67:32:16:88:cd:8b:f4:1a:c7:4d:ec:a7:47:29:6f:8a: 7a:04:19:43:32:83:87:e9:46:07:1e:4a:97:d2:09:09:4a:c2: 9d:d4:30:39 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I3QUIxMTAvBgNVBAUTKDNERTlEM0RGRjZFMDQ4RkQ5MDgxNDY1MDJFNEYwOEU0 NTZGM0Q5QkMwHhcNMjYwNzIyMjE1MzU0WhcNMjYwNzI5MjE1MzU0WjAYMRYwFAYD VQQDEw02YTYxM2JmMi1kZjRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAigC68GfbG9OIBV0KxdvZXPZ+KfL9nJkgE+8/v6vDuoeV3/n4qIpPJ50d6AHa A4ZRHwtLlgmwtiDU/aB+DHlpRbh5SkCBmYMlrMW8g3tU1P3iVEI/Das9GzngI+DH PWLEHDwxMIOfycmoOTA68O4vqaahn+9/+LZB2xQxqKQWqoejMYjN15waYP0a0WrN kZjHJtRJsurm16Yca6tVAsVs7Y7r4Hmw18aPc2hAoF+q6aDP2nZQKUjd8MKqb74y qlH5JyvZAyJPpSFQyfXBoSEEfYHcErpQeMwohkCJQfn6kVXcubJp+9gjDS2C98CK ovsRuN9r/N5n1DC+vsDwEnhFiwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAxj4aBQ 4Zrv7ZXFOETrz/MwmphjMB8GA1UdIwQYMBaAFD3p09/24Ej9kIFGUC5PCORW89m8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjdBQi81Njc4NjU2ODQw MDkxMUVCQTM3NDIyNUJDNEY5QUUwMi9QZW5UM19iZ1NQMlFnVVpRTGs4STVGYnoy YncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BlblQzX2JnU1AyUWdVWlFMazhJNUZiejJidy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjdBQi81Njc4NjU2ODQwMDkxMUVCQTM3NDIyNUJDNEY5QUUwMi9QZW5UM19iZ1NQ MlFnVVpRTGs4STVGYnoyYncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATCfdg5cVlA5/46++0+uvPjAaRnnDyOxn38nn1ZoqhWIQ/ApGHcbLk2LboDTA tsGAPpw151Hp9x/TE5L3dZbkwx9C9hLHquoHZNLXugRC7PvGdeYtrrdi74CRbF8M C/+x0VuJQx/LRjA5PdLP/Hv4GcJWp8lE8yJNSp5cZ+3IJtpaxneaBTfd7BM5OBqs fKT6OqM6fatLfdHsmQgEIbHYhnKhIM3NonmPYB7LtizIb/QBvn2U/3dpJJFp0NC7 bdZCXwWN8WRgqxm5/eYHjlB2vUhUigPSnvWjGyZnMhaIzYv0GsdN7KdHKW+KegQZ QzKDh+lGBx5Kl9IJCUrCndQwOQ== -----END CERTIFICATE-----Generated at Thu Jul 23 22:51:07 2026 by rpki-client