$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.mft File: PenT3_bgSP2QgUZQLk8I5Fbz2bw.mft (raw, json) Hash identifier: unDCA7kN+kob9wRksekZ2HF71u2YZAaWDrj6Zd+aww0= Subject key identifier: B8:76:4F:C9:2F:6B:21:18:BE:B6:72:74:86:CF:4E:C3:06:5E:97:50 Authority key identifier: 3D:E9:D3:DF:F6:E0:48:FD:90:81:46:50:2E:4F:08:E4:56:F3:D9:BC Certificate issuer: /CN=A91CB7AB/serialNumber=3DE9D3DFF6E048FD908146502E4F08E456F3D9BC Certificate serial: 0947 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PenT3_bgSP2QgUZQLk8I5Fbz2bw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.mft Manifest number: 08A0 Signing time: Tue 22 Sep 2026 20:59:52 +0000 Manifest this update: Tue 22 Sep 2026 20:59:51 +0000 Manifest next update: Tue 29 Sep 2026 20:59:51 +0000 Files and hashes: 1: PenT3_bgSP2QgUZQLk8I5Fbz2bw.crl (hash: HjCO7aPYaCBSukLyvbD7TUZyBcfcZu4sZxypuxkc3q8=) 2: 5B2236E6FD6D11EE951DE436C4F9AE02.roa (hash: wVxc6nx/JmhL7VCPOsNGEB8sGimUMjqS6K/WHE14sqo=) 3: 5CDB2402FD6D11EE951DE436C4F9AE02.roa (hash: GPPwnFCIcpt0RgF++70GuCleWCDXuGcVYR4o3iza94k=) 4: 0112375EA05411EDB043385AC4F9AE02.roa (hash: wt7sHeBZYX3+ynpGbSY8k/1ymNfDI2lkoFnaTMVP/Ps=) 5: E2FEA6DA3E5411EF9B398D2DC4F9AE02.roa (hash: 4maJF9WUbj7sjherc9bKMjHY3wXl4HcmhFEcf5r/F/Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.crl rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PenT3_bgSP2QgUZQLk8I5Fbz2bw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 20:59:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2375 (0x947) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB7AB, serialNumber=3DE9D3DFF6E048FD908146502E4F08E456F3D9BC Validity Not Before: Sep 22 20:59:51 2026 GMT Not After : Sep 29 20:59:51 2026 GMT Subject: CN=6ab2ec48-b019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:86:fc:39:8a:42:ac:5f:ee:19:4e:2e:ff:eb: 3e:58:a6:51:82:9f:32:85:de:12:1f:e4:61:06:d8: ef:26:f1:11:9f:b8:89:f2:1c:36:8e:3c:72:e0:77: e6:3c:69:0f:ff:ab:b2:31:a3:2b:5c:c1:65:da:e3: c9:cb:6e:52:2c:07:bb:ba:b2:da:d8:ad:e3:54:24: 57:70:ec:2f:db:98:9c:b7:6b:2a:7a:05:aa:66:74: 4b:10:18:3d:2e:0a:c8:d8:b4:e5:c7:46:86:31:0d: 62:fc:ba:57:f8:a4:86:8a:ab:fa:3d:00:bd:cd:76: 5e:5d:6e:7c:2f:e3:1c:c9:b0:c3:9b:f3:90:9e:bc: 28:2d:48:8d:c1:a9:e6:09:fb:57:1d:34:74:fd:b8: 1d:9f:fe:d6:8c:6b:fc:6c:7d:44:b7:1d:c1:8b:70: 80:79:0d:ce:b9:b8:44:c5:5e:b0:c7:7e:7d:2e:2e: f9:9c:73:ac:91:11:f8:6d:91:bd:08:7c:bf:fc:b5: c5:fa:9c:4b:35:47:07:f1:bf:ca:52:8e:e8:70:8c: 70:23:0a:72:af:34:88:4b:5a:c3:e6:98:47:20:64: 95:dd:e5:b3:08:cd:73:fe:4f:38:37:9e:9b:43:bb: 44:ac:87:2a:ab:60:66:07:e7:64:94:62:6e:36:0c: 51:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:76:4F:C9:2F:6B:21:18:BE:B6:72:74:86:CF:4E:C3:06:5E:97:50 X509v3 Authority Key Identifier: keyid:3D:E9:D3:DF:F6:E0:48:FD:90:81:46:50:2E:4F:08:E4:56:F3:D9:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PenT3_bgSP2QgUZQLk8I5Fbz2bw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:49:ac:9a:a7:14:cc:8c:1a:ad:5f:2f:b8:10:c6:6a:68:20: 1e:d4:7a:45:eb:ab:45:12:ab:3a:75:0a:ee:56:6e:2c:ae:14: a3:52:53:dc:64:78:58:06:e7:fb:74:49:d1:de:23:76:f4:20: 37:6c:dc:c4:9f:7e:24:59:be:73:06:d5:b6:ba:23:db:2a:89: 4e:99:37:86:28:12:ef:35:15:fe:b6:7a:9f:4c:fe:8c:a7:7f: 6a:41:75:04:6b:24:00:63:87:9c:3a:f7:61:a0:21:e8:8c:b9: 64:b2:22:b5:86:75:11:8f:76:72:e8:8d:ce:3c:53:0f:67:c4: ed:cf:f5:c1:c2:86:d5:b0:46:81:1a:da:d4:25:80:d6:7d:3a: 16:23:42:5a:a7:45:8a:2a:d8:1f:e1:de:9f:22:e5:41:90:22: 01:8d:a6:7b:c9:e6:c4:b7:16:36:1c:a4:d0:65:58:36:a5:ba: 16:48:d5:b7:79:32:8e:4f:a9:ec:a9:3c:e1:cc:1e:9f:aa:85: d0:c5:0b:56:04:b4:28:37:3d:a8:98:1c:be:b6:64:e7:f7:69: 1f:84:e5:8d:bf:13:00:f0:19:80:39:f8:4e:f0:95:fc:e8:a3: 9b:ca:c1:0a:70:86:ff:d5:92:80:73:f0:21:ed:95:93:17:4e: 14:1d:02:89 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I3QUIxMTAvBgNVBAUTKDNERTlEM0RGRjZFMDQ4RkQ5MDgxNDY1MDJFNEYwOEU0 NTZGM0Q5QkMwHhcNMjYwOTIyMjA1OTUxWhcNMjYwOTI5MjA1OTUxWjAYMRYwFAYD VQQDEw02YWIyZWM0OC1iMDE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwob8OYpCrF/uGU4u/+s+WKZRgp8yhd4SH+RhBtjvJvERn7iJ8hw2jjxy4Hfm PGkP/6uyMaMrXMFl2uPJy25SLAe7urLa2K3jVCRXcOwv25ict2sqegWqZnRLEBg9 LgrI2LTlx0aGMQ1i/LpX+KSGiqv6PQC9zXZeXW58L+McybDDm/OQnrwoLUiNwanm CftXHTR0/bgdn/7WjGv8bH1Etx3Bi3CAeQ3OubhExV6wx359Li75nHOskRH4bZG9 CHy//LXF+pxLNUcH8b/KUo7ocIxwIwpyrzSIS1rD5phHIGSV3eWzCM1z/k84N56b Q7tErIcqq2BmB+dklGJuNgxReQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLh2T8kv ayEYvrZydIbPTsMGXpdQMB8GA1UdIwQYMBaAFD3p09/24Ej9kIFGUC5PCORW89m8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjdBQi81Njc4NjU2ODQw MDkxMUVCQTM3NDIyNUJDNEY5QUUwMi9QZW5UM19iZ1NQMlFnVVpRTGs4STVGYnoy YncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BlblQzX2JnU1AyUWdVWlFMazhJNUZiejJidy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjdBQi81Njc4NjU2ODQwMDkxMUVCQTM3NDIyNUJDNEY5QUUwMi9QZW5UM19iZ1NQ MlFnVVpRTGs4STVGYnoyYncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARUmsmqcUzIwarV8vuBDGamggHtR6ReurRRKrOnUK7lZuLK4Uo1JT3GR4WAbn +3RJ0d4jdvQgN2zcxJ9+JFm+cwbVtroj2yqJTpk3higS7zUV/rZ6n0z+jKd/akF1 BGskAGOHnDr3YaAh6Iy5ZLIitYZ1EY92cuiNzjxTD2fE7c/1wcKG1bBGgRra1CWA 1n06FiNCWqdFiirYH+HenyLlQZAiAY2me8nmxLcWNhyk0GVYNqW6FkjVt3kyjk+p 7Kk84cwen6qF0MULVgS0KDc9qJgcvrZk5/dpH4Tljb8TAPAZgDn4TvCV/Oijm8rB CnCG/9WSgHPwIe2VkxdOFB0CiQ== -----END CERTIFICATE-----Generated at Thu Sep 24 17:36:09 2026 by rpki-client