$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft File: ppcA540MgSrS4sEUyCxlWgrNRH8.mft (raw, json) Hash identifier: 7Oqs3hml8FgyUmEo/K7meENvmFdWxDs9pI46+vMtQhs= Subject key identifier: 33:7C:60:38:82:56:60:A6:98:62:D9:F9:92:1E:3A:16:9D:3C:63:B8 Authority key identifier: A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F Certificate issuer: /CN=A91EB2B8/serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F Certificate serial: 0468 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft Manifest number: 03D0 Signing time: Wed 23 Sep 2026 00:41:25 +0000 Manifest this update: Wed 23 Sep 2026 00:41:24 +0000 Manifest next update: Wed 30 Sep 2026 00:41:24 +0000 Files and hashes: 1: ppcA540MgSrS4sEUyCxlWgrNRH8.crl (hash: Hl9VgEgJB2spQJgGohR9k21LnAO8g6x5yGL6yFyhhY0=) 2: F1EA8F4657E911F1ACD7923C93833773.roa (hash: bWtw9F8LU24NtnpV5FCzxLT/YLwgD6y8BEgt8uAmOpo=) 3: A48D6CEEED6311EDB69EB62AC4F9AE02.roa (hash: V+41ntKJN5cZcf4m2jV7VDL18RNscYpp6FiRJv/RGZo=) 4: 20978DD270E411F08F40242AC4F9AE02.roa (hash: Tk49m1bZqNc+bpaPvPZsi9XGA6LF7Y4uynu4sPETCYw=) 5: A55DE586ED6311EDB69EB62AC4F9AE02.roa (hash: 5DPxa9zh03P/4EIxkUOZTnMchK9kaQkZ16Z7NXsueHg=) 6: 2395AD02E44911EFB4261C43C4F9AE02.roa (hash: 2Co79ynBgBkfRYtcjArTdkt2fZojdezftQg41GUn3f0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 00:41:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1128 (0x468) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB2B8, serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F Validity Not Before: Sep 23 00:41:24 2026 GMT Not After : Sep 30 00:41:24 2026 GMT Subject: CN=6ab32035-4297 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:55:6e:d8:19:77:be:26:e8:19:ea:16:64:53: 7c:0d:c1:fb:13:dc:66:11:1c:a0:6a:68:ab:6c:77: 6d:91:27:e8:2f:17:28:6c:d2:82:6a:9b:84:8d:42: d9:f9:6f:32:f3:70:e6:75:ad:fa:c5:93:7b:b3:b0: 89:0f:0a:56:0e:26:7e:05:f1:09:ae:fe:68:d4:62: 65:59:41:dd:0b:bc:5b:ac:d9:d0:c2:09:3c:42:e6: 65:f0:95:1a:c8:ee:c6:de:97:e5:e3:9c:f8:d0:78: 27:9b:e0:ba:14:a4:56:97:3f:e5:0c:29:6a:c3:68: f4:15:3e:30:f9:92:1e:13:a4:5e:4e:11:0f:fd:b8: 1d:e1:be:27:93:f9:df:03:1c:32:b9:d3:f4:92:75: ca:7c:fe:47:10:c9:63:fd:3c:57:3f:48:0e:b3:24: 65:a9:81:7a:cf:c5:49:55:70:4f:ee:90:c4:52:0f: 6a:4d:5c:44:f6:eb:02:df:4e:24:c8:02:63:a8:90: ed:03:ba:d8:d4:68:a9:5a:2c:05:62:56:17:6f:9e: 5f:31:8b:87:88:5e:3f:7d:a8:eb:ef:7d:da:05:5e: 6b:95:87:83:21:da:73:7b:bf:0d:bc:aa:d6:93:d2: cd:b4:2d:fa:5e:6d:e2:75:31:75:84:41:2e:43:65: 35:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:7C:60:38:82:56:60:A6:98:62:D9:F9:92:1E:3A:16:9D:3C:63:B8 X509v3 Authority Key Identifier: keyid:A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:ba:39:e6:7b:9f:ac:37:1e:29:ee:cf:3c:cf:89:df:2e:86: a1:96:dd:b6:0e:8c:54:9c:73:42:7e:21:e2:51:34:e0:9d:f3: 2e:9d:e1:a7:c6:31:48:dd:15:d7:82:9d:1c:d0:12:1b:0a:3d: c2:e6:20:fa:c1:e1:31:a9:a5:7c:c6:b4:e1:9f:5f:fa:19:bc: 32:09:f0:ac:e8:7f:40:6b:eb:31:77:17:85:7d:fe:10:ab:59: 19:2f:24:08:f7:53:7f:af:83:03:1c:84:3d:77:3b:fd:d8:d5: f0:4a:02:99:0c:40:a7:f5:53:c8:fc:14:32:f0:c0:db:c1:87: a0:18:f7:fb:ba:3e:31:2e:aa:d7:e7:63:7a:a4:d5:60:31:eb: a9:16:66:d7:43:62:1b:57:a3:77:e9:55:86:05:23:4a:8f:52: 40:ae:c5:5c:f8:3b:57:9c:a3:03:9e:b4:0b:3c:89:f6:7d:1c: 9f:71:aa:56:46:38:1f:0c:42:e1:0c:a8:a8:50:a3:91:00:1c: 0b:7e:19:a2:f7:70:ad:b4:30:2b:f4:10:22:85:6e:4f:05:2d: d8:31:2e:c4:be:58:ff:b2:7c:ba:05:28:66:a2:2e:1d:3c:4c: 3b:87:7b:52:66:77:b9:06:01:bd:15:36:57:c8:ed:0c:6a:d9: 54:76:37:e0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBGgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUIyQjgxMTAvBgNVBAUTKEE2OTcwMEU3OEQwQzgxMkFEMkUyQzExNEM4MkM2NTVB MEFDRDQ0N0YwHhcNMjYwOTIzMDA0MTI0WhcNMjYwOTMwMDA0MTI0WjAYMRYwFAYD VQQDEw02YWIzMjAzNS00Mjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwVVu2Bl3viboGeoWZFN8DcH7E9xmERygamirbHdtkSfoLxcobNKCapuEjULZ +W8y83Dmda36xZN7s7CJDwpWDiZ+BfEJrv5o1GJlWUHdC7xbrNnQwgk8QuZl8JUa yO7G3pfl45z40Hgnm+C6FKRWlz/lDClqw2j0FT4w+ZIeE6ReThEP/bgd4b4nk/nf AxwyudP0knXKfP5HEMlj/TxXP0gOsyRlqYF6z8VJVXBP7pDEUg9qTVxE9usC304k yAJjqJDtA7rY1GipWiwFYlYXb55fMYuHiF4/fajr733aBV5rlYeDIdpze78NvKrW k9LNtC36Xm3idTF1hEEuQ2U1ZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDN8YDiC VmCmmGLZ+ZIeOhadPGO4MB8GA1UdIwQYMBaAFKaXAOeNDIEq0uLBFMgsZVoKzUR/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjJCOC8zRjQ0Q0JBRTJG NEQxMUVEOEY1QTZBNjRDNEY5QUUwMi9wcGNBNTQwTWdTclM0c0VVeUN4bFdnck5S SDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BwY0E1NDBNZ1NyUzRzRVV5Q3hsV2dyTlJIOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjJCOC8zRjQ0Q0JBRTJGNEQxMUVEOEY1QTZBNjRDNEY5QUUwMi9wcGNBNTQwTWdT clM0c0VVeUN4bFdnck5SSDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADbo55nufrDceKe7PPM+J3y6GoZbdtg6MVJxzQn4h4lE04J3zLp3hp8YxSN0V 14KdHNASGwo9wuYg+sHhMamlfMa04Z9f+hm8MgnwrOh/QGvrMXcXhX3+EKtZGS8k CPdTf6+DAxyEPXc7/djV8EoCmQxAp/VTyPwUMvDA28GHoBj3+7o+MS6q1+djeqTV YDHrqRZm10NiG1ejd+lVhgUjSo9SQK7FXPg7V5yjA560CzyJ9n0cn3GqVkY4HwxC 4QyoqFCjkQAcC34ZovdwrbQwK/QQIoVuTwUt2DEuxL5Y/7J8ugUoZqIuHTxMO4d7 UmZ3uQYBvRU2V8jtDGrZVHY34A== -----END CERTIFICATE-----Generated at Wed Sep 23 08:27:14 2026 by rpki-client