$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.mft File: PinOb2p9uUttCRM7c_7VLd7hLas.mft (raw, json) Hash identifier: wztvgcf0EDQ/ISUBUV9UgChVO3e/mZaZjnKam1U0N84= Subject key identifier: 1C:86:9C:ED:CC:F0:96:70:07:20:12:4F:20:65:C3:AD:84:80:D4:EA Authority key identifier: 3E:29:CE:6F:6A:7D:B9:4B:6D:09:13:3B:73:FE:D5:2D:DE:E1:2D:AB Certificate issuer: /CN=A91CF285/serialNumber=3E29CE6F6A7DB94B6D09133B73FED52DDEE12DAB Certificate serial: 118A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PinOb2p9uUttCRM7c_7VLd7hLas.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.mft Manifest number: 1171 Signing time: Tue 22 Sep 2026 17:07:59 +0000 Manifest this update: Tue 22 Sep 2026 17:07:59 +0000 Manifest next update: Tue 29 Sep 2026 17:07:59 +0000 Files and hashes: 1: PinOb2p9uUttCRM7c_7VLd7hLas.crl (hash: Bwk8U+ajNa5yxf3d7JYD8ncJln5YN0QE5xQiWUaQYmk=) 2: AB731B004B2A11EFAAFCC92CC4F9AE02.roa (hash: Vx2WbMEsYUJvjxHD6WL00kPDD7uH5hiABevdW4+Xt0o=) 3: 073BC4F4ED3B11EDB5A01A46C4F9AE02.roa (hash: iQFJd86XO7yAIa5GnWERfrbSbZ5wfHcFrug+5uoA1TM=) 4: DC83478EEB0311ED875DD72EC4F9AE02.roa (hash: NK1hqtZdCO6WmHvrmwdW3dn10uFeaY5J8E6tA43KEZ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.crl rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PinOb2p9uUttCRM7c_7VLd7hLas.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 17:07:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4490 (0x118a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF285, serialNumber=3E29CE6F6A7DB94B6D09133B73FED52DDEE12DAB Validity Not Before: Sep 22 17:07:59 2026 GMT Not After : Sep 29 17:07:59 2026 GMT Subject: CN=6ab2b5ef-0a0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:4c:06:be:6c:06:72:5c:01:4a:b6:60:b7:2c: 1b:26:d0:54:a8:0c:2b:7c:38:27:cd:04:56:d6:6c: 5e:0a:73:d0:d3:eb:b6:be:dc:df:e6:2a:84:68:19: 18:34:d5:c8:05:67:0a:dd:89:08:6d:f1:d7:c4:e9: 97:67:72:da:53:57:59:d3:c2:38:f1:b6:d9:1c:23: 4c:a2:66:1f:55:56:4b:5e:20:79:00:a6:7c:72:b8: 5d:13:09:8a:63:e4:68:51:f5:cb:99:67:50:9e:f8: 73:a1:04:9c:b0:18:bc:36:55:62:2e:18:d6:c0:8e: 32:e4:f0:8d:16:64:36:c3:76:01:a0:bb:6d:af:a2: 42:63:1c:70:fb:96:e5:c2:78:96:28:63:81:34:26: 41:90:cd:ac:0f:f5:bc:0f:c3:7c:b9:ce:b5:07:98: 0c:c7:b5:b5:cd:7e:f0:e8:8c:21:d0:82:f8:c1:f5: 2d:23:a8:21:1e:88:b0:64:47:d1:53:0e:fc:e0:ba: b0:da:81:33:65:fa:18:68:2f:57:96:02:f6:3e:7d: f0:77:95:6e:24:ef:fa:96:2e:d5:14:15:00:d5:6c: 6f:76:d7:8f:da:db:ca:f6:20:57:40:0a:fe:34:59: 4f:30:e8:3b:ca:b0:71:81:92:3d:ac:db:46:44:3a: 1f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:86:9C:ED:CC:F0:96:70:07:20:12:4F:20:65:C3:AD:84:80:D4:EA X509v3 Authority Key Identifier: keyid:3E:29:CE:6F:6A:7D:B9:4B:6D:09:13:3B:73:FE:D5:2D:DE:E1:2D:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PinOb2p9uUttCRM7c_7VLd7hLas.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:82:20:35:b6:de:c7:d6:74:96:ef:4a:b6:09:a4:1f:c1:7f: 3e:99:58:d4:99:8a:af:99:56:60:a4:7a:6a:4a:2b:67:16:63: cd:7d:2c:fe:c3:15:07:2b:48:3e:12:7c:43:ad:1c:f3:59:6c: ba:e8:2a:03:81:4d:fb:92:78:e5:08:99:a7:c0:bb:6a:fe:9b: a2:d4:24:98:a4:e4:0c:c6:7f:45:ba:15:5f:51:f2:17:90:53: 0b:9b:26:18:87:0a:3e:82:ee:74:72:5e:12:de:61:69:ad:7d: ad:0a:91:84:1f:e8:1c:3f:6b:9f:00:0c:e9:8c:af:90:48:3f: 8a:a5:0b:e0:96:42:cf:0d:97:6e:b2:76:b6:b3:74:c6:93:54: b2:79:50:f2:3a:b8:c1:06:fa:06:ac:36:9d:a9:90:e6:e3:16: 4a:f0:32:ad:1b:d4:26:33:af:d3:51:53:23:32:d7:53:b4:5a: 88:82:24:8d:3f:d5:fd:e6:00:3e:fd:33:ee:38:0d:d6:12:39: 1c:f5:00:01:29:4d:b2:36:78:da:6f:60:d9:fe:f7:58:d5:52: 94:86:90:fc:2b:97:8c:3b:8a:03:fc:71:30:48:c0:15:b1:17: b6:1c:47:55:c9:92:1e:b3:d8:9d:b1:75:71:a5:e0:61:de:08: e8:d6:7b:3a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEYowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0YyODUxMTAvBgNVBAUTKDNFMjlDRTZGNkE3REI5NEI2RDA5MTMzQjczRkVENTJE REVFMTJEQUIwHhcNMjYwOTIyMTcwNzU5WhcNMjYwOTI5MTcwNzU5WjAYMRYwFAYD VQQDEw02YWIyYjVlZi0wYTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAj0wGvmwGclwBSrZgtywbJtBUqAwrfDgnzQRW1mxeCnPQ0+u2vtzf5iqEaBkY NNXIBWcK3YkIbfHXxOmXZ3LaU1dZ08I48bbZHCNMomYfVVZLXiB5AKZ8crhdEwmK Y+RoUfXLmWdQnvhzoQScsBi8NlViLhjWwI4y5PCNFmQ2w3YBoLttr6JCYxxw+5bl wniWKGOBNCZBkM2sD/W8D8N8uc61B5gMx7W1zX7w6Iwh0IL4wfUtI6ghHoiwZEfR Uw784Lqw2oEzZfoYaC9XlgL2Pn3wd5VuJO/6li7VFBUA1WxvdteP2tvK9iBXQAr+ NFlPMOg7yrBxgZI9rNtGRDof9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFByGnO3M 8JZwByASTyBlw62EgNTqMB8GA1UdIwQYMBaAFD4pzm9qfblLbQkTO3P+1S3e4S2r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjI4NS9GRDY0RjBCODM0 MEMxMUU5OTY2QzVBNzZDNEY5QUUwMi9QaW5PYjJwOXVVdHRDUk03Y183VkxkN2hM YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Bpbk9iMnA5dVV0dENSTTdjXzdWTGQ3aExhcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjI4NS9GRDY0RjBCODM0MEMxMUU5OTY2QzVBNzZDNEY5QUUwMi9QaW5PYjJwOXVV dHRDUk03Y183VkxkN2hMYXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKYIgNbbex9Z0lu9KtgmkH8F/PplY1JmKr5lWYKR6akorZxZjzX0s/sMVBytI PhJ8Q60c81lsuugqA4FN+5J45QiZp8C7av6botQkmKTkDMZ/RboVX1HyF5BTC5sm GIcKPoLudHJeEt5haa19rQqRhB/oHD9rnwAM6YyvkEg/iqUL4JZCzw2XbrJ2trN0 xpNUsnlQ8jq4wQb6Bqw2namQ5uMWSvAyrRvUJjOv01FTIzLXU7RaiIIkjT/V/eYA Pv0z7jgN1hI5HPUAASlNsjZ42m9g2f73WNVSlIaQ/CuXjDuKA/xxMEjAFbEXthxH VcmSHrPYnbF1caXgYd4I6NZ7Og== -----END CERTIFICATE-----Generated at Wed Sep 23 23:04:51 2026 by rpki-client