$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CED30/BE80C6A6AE1E11EEA7EA0A77C4F9AE02/PgzfiCrujHIh1YijxSYBjh1kyWg.mft File: PgzfiCrujHIh1YijxSYBjh1kyWg.mft (raw, json) Hash identifier: Srrpkm0DwbDQ6oeYBMAQC5W/4OiL/oqPjxs/DPHmv9M= Subject key identifier: 11:53:E6:B6:BE:A1:71:A5:B6:D9:28:1B:ED:DC:27:B0:74:17:52:42 Authority key identifier: 3E:0C:DF:88:2A:EE:8C:72:21:D5:88:A3:C5:26:01:8E:1D:64:C9:68 Certificate issuer: /CN=A91CED30/serialNumber=3E0CDF882AEE8C7221D588A3C526018E1D64C968 Certificate serial: 020C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PgzfiCrujHIh1YijxSYBjh1kyWg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CED30/BE80C6A6AE1E11EEA7EA0A77C4F9AE02/PgzfiCrujHIh1YijxSYBjh1kyWg.mft Manifest number: 0207 Signing time: Sun 11 Oct 2026 03:37:40 +0000 Manifest this update: Sun 11 Oct 2026 03:37:40 +0000 Manifest next update: Sun 18 Oct 2026 03:37:40 +0000 Files and hashes: 1: PgzfiCrujHIh1YijxSYBjh1kyWg.crl (hash: eC7IEBocfbpOI3UqE75mxCqAHjHJ3eJ2EZV9y0H9VT8=) 2: 41E0B402AE1F11EE96A5C977C4F9AE02.roa (hash: I3Aip9lEI/tB1p617YVnjX7fZuimKLHKae3IrKIw1Ds=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CED30/BE80C6A6AE1E11EEA7EA0A77C4F9AE02/PgzfiCrujHIh1YijxSYBjh1kyWg.crl rsync://rpki.apnic.net/member_repository/A91CED30/BE80C6A6AE1E11EEA7EA0A77C4F9AE02/PgzfiCrujHIh1YijxSYBjh1kyWg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PgzfiCrujHIh1YijxSYBjh1kyWg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 03:37:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 524 (0x20c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CED30, serialNumber=3E0CDF882AEE8C7221D588A3C526018E1D64C968 Validity Not Before: Oct 11 03:37:40 2026 GMT Not After : Oct 18 03:37:40 2026 GMT Subject: CN=6acb0484-2739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:07:02:c1:13:8e:6c:74:1a:6a:f1:bb:05:59: ad:9f:ca:16:23:46:aa:4c:f8:35:9b:0c:f6:03:52: d5:c9:07:14:ce:c5:43:f7:b0:b4:0f:56:12:66:66: 66:2a:8e:4c:70:ff:37:38:30:b8:84:84:0a:4c:7a: 9c:e9:1b:34:06:02:92:82:09:88:30:c5:f5:96:db: 26:16:b7:18:47:e5:1b:f5:09:a8:90:87:3b:71:1b: bb:fa:48:c4:12:6c:18:eb:65:a6:67:34:29:3d:c3: e3:d8:e0:60:9f:43:d1:e1:8f:b6:d3:1a:bd:6c:ae: 4d:2c:04:90:03:34:e5:2b:5f:39:b5:9f:d5:18:32: b4:dc:0a:11:27:21:36:6d:3f:c3:3a:3a:35:95:62: 50:cd:ef:1f:a7:2a:6a:19:76:cb:c0:d6:b4:64:4d: 68:3d:53:ef:bf:13:38:e4:e6:d7:30:d2:49:bf:3a: e8:99:69:8e:d4:44:be:8c:15:e4:14:d4:2b:cc:15: 07:e2:53:09:81:6a:b4:47:39:bb:a6:ff:24:6c:b5: 0c:81:00:d9:12:25:8d:c6:8b:48:a7:b0:a1:9b:1a: 72:a8:73:76:1a:98:ab:30:e0:9a:e2:8d:7f:19:a2: e6:ee:47:95:6b:53:52:b5:e7:83:e0:4b:cd:c1:3e: 48:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:53:E6:B6:BE:A1:71:A5:B6:D9:28:1B:ED:DC:27:B0:74:17:52:42 X509v3 Authority Key Identifier: keyid:3E:0C:DF:88:2A:EE:8C:72:21:D5:88:A3:C5:26:01:8E:1D:64:C9:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CED30/BE80C6A6AE1E11EEA7EA0A77C4F9AE02/PgzfiCrujHIh1YijxSYBjh1kyWg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PgzfiCrujHIh1YijxSYBjh1kyWg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CED30/BE80C6A6AE1E11EEA7EA0A77C4F9AE02/PgzfiCrujHIh1YijxSYBjh1kyWg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:fe:c1:39:26:34:4a:28:25:17:d7:58:d3:8c:94:36:26:38: 21:0f:05:05:0e:a9:c8:7f:92:6c:a4:b1:90:0b:db:93:9a:9f: de:83:38:2c:6b:e1:96:ea:fe:e7:91:12:26:92:a5:2a:e5:f9: df:61:74:11:33:77:86:27:d3:23:57:96:7e:be:fd:5b:72:be: 52:1c:51:c1:a3:a1:07:8c:1b:f8:34:96:5b:21:5b:a0:35:6e: 07:b5:32:2e:51:f9:74:36:20:8b:f4:53:15:a0:0a:ea:b1:7a: a4:ab:5f:31:91:c4:fe:c7:19:d0:c7:15:38:87:d0:5f:4c:ae: a4:55:58:a3:c4:d2:ac:83:c6:a3:c6:bf:89:19:63:6b:86:01: e3:f7:5e:3f:98:47:40:7d:db:58:f4:17:ba:65:d6:eb:c7:14: 05:f7:10:8a:29:47:42:16:68:cf:cb:6c:8b:fb:f6:56:05:ff: 93:4f:32:7f:e9:7f:25:29:00:a1:2c:fd:45:a2:a9:8e:46:e2: be:c7:89:c0:9e:60:11:eb:40:98:12:8f:50:51:be:36:3a:bc: c0:5e:43:72:a9:92:79:74:08:77:58:b0:ab:b6:32:e0:6d:2a: 6d:02:cd:7a:f0:81:fe:a9:66:a0:08:5a:30:f9:86:49:4e:56: 5c:24:0f:3e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VEMzAxMTAvBgNVBAUTKDNFMENERjg4MkFFRThDNzIyMUQ1ODhBM0M1MjYwMThF MUQ2NEM5NjgwHhcNMjYxMDExMDMzNzQwWhcNMjYxMDE4MDMzNzQwWjAYMRYwFAYD VQQDEw02YWNiMDQ4NC0yNzM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkAcCwROObHQaavG7BVmtn8oWI0aqTPg1mwz2A1LVyQcUzsVD97C0D1YSZmZm Ko5McP83ODC4hIQKTHqc6Rs0BgKSggmIMMX1ltsmFrcYR+Ub9QmokIc7cRu7+kjE EmwY62WmZzQpPcPj2OBgn0PR4Y+20xq9bK5NLASQAzTlK185tZ/VGDK03AoRJyE2 bT/DOjo1lWJQze8fpypqGXbLwNa0ZE1oPVPvvxM45ObXMNJJvzromWmO1ES+jBXk FNQrzBUH4lMJgWq0Rzm7pv8kbLUMgQDZEiWNxotIp7ChmxpyqHN2GpirMOCa4o1/ GaLm7keVa1NSteeD4EvNwT5ItwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBFT5ra+ oXGlttkoG+3cJ7B0F1JCMB8GA1UdIwQYMBaAFD4M34gq7oxyIdWIo8UmAY4dZMlo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUQzMC9CRTgwQzZBNkFF MUUxMUVFQTdFQTBBNzdDNEY5QUUwMi9QZ3pmaUNydWpISWgxWWlqeFNZQmpoMWt5 V2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1BnemZpQ3J1akhJaDFZaWp4U1lCamgxa3lXZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUQzMC9CRTgwQzZBNkFFMUUxMUVFQTdFQTBBNzdDNEY5QUUwMi9QZ3pmaUNydWpI SWgxWWlqeFNZQmpoMWt5V2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHv7BOSY0SiglF9dY04yUNiY4IQ8FBQ6pyH+SbKSxkAvbk5qf3oM4LGvhlur+ 55ESJpKlKuX532F0ETN3hifTI1eWfr79W3K+UhxRwaOhB4wb+DSWWyFboDVuB7Uy LlH5dDYgi/RTFaAK6rF6pKtfMZHE/scZ0McVOIfQX0yupFVYo8TSrIPGo8a/iRlj a4YB4/deP5hHQH3bWPQXumXW68cUBfcQiilHQhZoz8tsi/v2VgX/k08yf+l/JSkA oSz9RaKpjkbivseJwJ5gEetAmBKPUFG+Njq8wF5DcqmSeXQId1iwq7Yy4G0qbQLN evCB/qlmoAhaMPmGSU5WXCQPPg== -----END CERTIFICATE-----Generated at Sun Oct 11 18:40:08 2026 by rpki-client