$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.mft File: pnTGcB4rDOPRB-nyNsVc7-aHaPE.mft (raw, json) Hash identifier: nUocawL8mK5n6MIinrxxokSfSxBc9tAdQSmAk2QeMC0= Subject key identifier: 61:4C:FE:37:F3:6D:E7:86:CC:A9:E7:21:46:67:D1:CC:F7:C2:A1:9A Authority key identifier: A6:74:C6:70:1E:2B:0C:E3:D1:07:E9:F2:36:C5:5C:EF:E6:87:68:F1 Certificate issuer: /CN=A91DD902/serialNumber=A674C6701E2B0CE3D107E9F236C55CEFE68768F1 Certificate serial: 029A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnTGcB4rDOPRB-nyNsVc7-aHaPE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.mft Manifest number: 0293 Signing time: Wed 23 Sep 2026 01:35:20 +0000 Manifest this update: Wed 23 Sep 2026 01:35:20 +0000 Manifest next update: Wed 30 Sep 2026 01:35:20 +0000 Files and hashes: 1: pnTGcB4rDOPRB-nyNsVc7-aHaPE.crl (hash: c3REWxS/2THlbJhJQpStimZi1nLgL1UOtcKilXk0K5E=) 2: 33A48584C92911EDAE3AB84EC4F9AE02.roa (hash: oPoTgdYw+Xp4zsCLRgOst4RRIJvgrTE9ExRg+Am+0NI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.crl rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnTGcB4rDOPRB-nyNsVc7-aHaPE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 01:35:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 666 (0x29a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD902, serialNumber=A674C6701E2B0CE3D107E9F236C55CEFE68768F1 Validity Not Before: Sep 23 01:35:20 2026 GMT Not After : Sep 30 01:35:20 2026 GMT Subject: CN=6ab32cd8-4de1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:93:85:3d:87:92:0d:2b:86:9c:ef:d7:bd:67: 38:de:83:72:14:c4:60:d5:ec:89:34:33:4a:53:53: 5c:b1:27:54:83:52:38:3a:75:fc:26:b0:4d:c8:ef: b3:08:03:a3:2d:1e:fb:e1:9b:e7:50:d1:03:ad:10: e2:62:dc:ac:b6:07:96:85:ee:05:28:67:b1:e2:f0: 09:8c:ff:54:97:a2:17:41:d4:ed:28:bd:62:c4:23: 6f:10:4f:bd:d6:a0:64:19:01:b8:c2:0c:4a:00:cd: 95:fe:51:e0:08:ad:27:42:b4:38:c8:27:b6:f8:8f: be:29:89:22:44:81:e2:6c:8e:55:6a:6e:59:37:e8: 3b:0f:88:25:87:d2:c5:92:5e:37:7e:be:bc:fe:31: 8d:9f:d3:ac:b6:dc:0c:91:ee:01:ed:da:04:7e:25: fb:a1:2d:0f:67:06:2c:b9:bd:0e:12:fe:09:54:eb: b4:c2:bd:72:ee:56:a7:57:59:58:e9:9b:d5:4f:d1: ab:9b:01:6f:36:20:f7:c2:ee:96:46:d7:1a:a7:e9: d3:62:49:03:c7:6c:5c:ee:b6:fe:bb:4c:bc:eb:fe: 6c:81:df:83:8a:d9:f6:50:60:f0:6b:9a:f9:90:94: c3:02:66:31:1d:d2:d7:25:5a:e3:54:6e:ae:52:5e: a5:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:4C:FE:37:F3:6D:E7:86:CC:A9:E7:21:46:67:D1:CC:F7:C2:A1:9A X509v3 Authority Key Identifier: keyid:A6:74:C6:70:1E:2B:0C:E3:D1:07:E9:F2:36:C5:5C:EF:E6:87:68:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnTGcB4rDOPRB-nyNsVc7-aHaPE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:9d:0f:eb:69:0f:3b:86:34:97:2e:df:fe:4a:88:87:e5:c2: b4:44:3f:83:63:e3:95:40:68:f8:7a:fd:fe:8f:53:98:83:0a: 4f:d4:13:81:2c:94:0a:64:f7:98:0d:f1:b4:3b:7c:81:8f:31: 71:c8:c7:8c:14:86:d1:2d:50:1d:8d:3c:2e:32:84:4e:16:e0: e5:33:b8:36:d3:13:7c:b1:a5:12:cd:89:de:11:01:e9:62:37: 58:cf:cb:df:a7:dc:7a:fe:d0:81:fc:cc:00:29:76:75:14:50: 95:06:52:6d:dc:6f:44:77:91:e0:39:e6:13:7f:0b:c6:73:b8: aa:c0:a7:c6:f8:b9:aa:05:51:0d:42:f6:74:74:7a:aa:df:3c: 30:91:67:12:82:18:99:a6:fe:83:cc:c1:b3:1a:c1:1b:35:80: 9b:95:f2:3d:ae:62:2e:83:42:34:26:a1:44:d7:76:7a:d6:b5: 39:24:70:5b:25:53:05:8c:15:8b:d7:04:9b:a5:a9:26:ee:13: 8e:46:52:ed:2f:a7:37:a4:c7:fe:6a:00:97:b5:54:0c:ae:ec: 9a:3f:da:c7:38:f7:c7:1a:a6:9e:46:68:8d:b0:ba:1e:2b:f0: 76:73:5c:07:0b:71:37:c2:39:ba:43:ea:91:e3:74:7f:fb:15: 9b:a5:be:a3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQ5MDIxMTAvBgNVBAUTKEE2NzRDNjcwMUUyQjBDRTNEMTA3RTlGMjM2QzU1Q0VG RTY4NzY4RjEwHhcNMjYwOTIzMDEzNTIwWhcNMjYwOTMwMDEzNTIwWjAYMRYwFAYD VQQDEw02YWIzMmNkOC00ZGUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAppOFPYeSDSuGnO/XvWc43oNyFMRg1eyJNDNKU1NcsSdUg1I4OnX8JrBNyO+z CAOjLR774ZvnUNEDrRDiYtystgeWhe4FKGex4vAJjP9Ul6IXQdTtKL1ixCNvEE+9 1qBkGQG4wgxKAM2V/lHgCK0nQrQ4yCe2+I++KYkiRIHibI5Vam5ZN+g7D4glh9LF kl43fr68/jGNn9OsttwMke4B7doEfiX7oS0PZwYsub0OEv4JVOu0wr1y7lanV1lY 6ZvVT9GrmwFvNiD3wu6WRtcap+nTYkkDx2xc7rb+u0y86/5sgd+Ditn2UGDwa5r5 kJTDAmYxHdLXJVrjVG6uUl6lfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGFM/jfz beeGzKnnIUZn0cz3wqGaMB8GA1UdIwQYMBaAFKZ0xnAeKwzj0Qfp8jbFXO/mh2jx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDkwMi81NzBCM0Y4RUM5 MjYxMUVEQUYyQjlENERDNEY5QUUwMi9wblRHY0I0ckRPUFJCLW55TnNWYzctYUhh UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BuVEdjQjRyRE9QUkItbnlOc1ZjNy1hSGFQRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDkwMi81NzBCM0Y4RUM5MjYxMUVEQUYyQjlENERDNEY5QUUwMi9wblRHY0I0ckRP UFJCLW55TnNWYzctYUhhUEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlp0P62kPO4Y0ly7f/kqIh+XCtEQ/g2PjlUBo+Hr9/o9TmIMKT9QTgSyUCmT3 mA3xtDt8gY8xccjHjBSG0S1QHY08LjKEThbg5TO4NtMTfLGlEs2J3hEB6WI3WM/L 36fcev7QgfzMACl2dRRQlQZSbdxvRHeR4DnmE38LxnO4qsCnxvi5qgVRDUL2dHR6 qt88MJFnEoIYmab+g8zBsxrBGzWAm5XyPa5iLoNCNCahRNd2eta1OSRwWyVTBYwV i9cEm6WpJu4TjkZS7S+nN6TH/moAl7VUDK7smj/axzj3xxqmnkZojbC6HivwdnNc BwtxN8I5ukPqkeN0f/sVm6W+ow== -----END CERTIFICATE-----Generated at Wed Sep 23 23:49:35 2026 by rpki-client