$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft File: PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft (raw, json) Hash identifier: 3tZDMoo2DQg/I0BBISeUEwByqwe3T43+nPyKxU7vlgU= Subject key identifier: 14:80:BC:93:D3:DD:2C:6C:55:0D:D7:FD:4E:44:13:19:F0:8E:08:22 Authority key identifier: 3C:69:B9:B6:01:D2:C9:F2:A3:91:5A:6F:FB:CA:3D:AD:62:E9:92:45 Certificate issuer: /CN=A91EE09C/serialNumber=3C69B9B601D2C9F2A3915A6FFBCA3DAD62E99245 Certificate serial: 024E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft Manifest number: 021E Signing time: Thu 23 Jul 2026 04:38:28 +0000 Manifest this update: Thu 23 Jul 2026 04:38:28 +0000 Manifest next update: Thu 30 Jul 2026 04:38:28 +0000 Files and hashes: 1: PGm5tgHSyfKjkVpv-8o9rWLpkkU.crl (hash: ovV4ZCmLvWcOhq0fwGoKdKtSJJp1IeUT4gWbdfkcwyY=) 2: BBD867C86F4211F19FB8B63294A30FBC.roa (hash: Ux1LupbKKyTILVZiMV0XVF3ATA64u0d7idZqHuwcw5w=) 3: 23D4183024D711EF932FC941C4F9AE02.roa (hash: yjfhbglGwJSFqMN6zxG/h3PTnwzIZZTxeRkuErtplaI=) 4: 1D98617687B311EFB4972044C4F9AE02.roa (hash: xYBSN0t6jgjQfq0Vs3mLR1yw03FEouHpBcT56A28m1A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.crl rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:38:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 590 (0x24e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE09C, serialNumber=3C69B9B601D2C9F2A3915A6FFBCA3DAD62E99245 Validity Not Before: Jul 23 04:38:28 2026 GMT Not After : Jul 30 04:38:28 2026 GMT Subject: CN=6a619ac4-d3c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e4:3f:d5:ed:f8:26:c8:16:b7:94:14:35:8d: dd:44:37:23:03:cb:5c:87:5c:33:f3:50:a1:5c:aa: 03:77:67:22:fc:0a:36:0c:d3:27:06:5b:7f:3d:9f: 8d:2a:f9:29:da:35:0a:fa:cd:f1:59:1a:09:87:43: 1a:42:f5:17:22:2c:8b:bb:ea:76:49:56:e9:61:65: 56:fd:48:a9:57:07:65:2b:72:ae:da:82:c7:28:2a: e3:04:1e:52:1d:df:45:f1:7a:ec:86:f4:27:ff:ee: 08:dd:33:04:80:4d:cf:23:f6:61:f8:f7:36:42:7f: e0:03:b9:56:f9:82:a0:a2:05:7e:5a:f0:8e:4f:7c: 59:4b:80:5f:e4:8c:79:79:60:d2:ee:86:6a:68:20: 0b:7c:0d:3b:73:b9:03:ef:9b:ae:af:d4:d5:8f:8c: 5b:d7:f3:84:8a:b5:b6:97:dd:8b:11:98:61:e2:5a: 14:ee:65:9f:b2:55:08:94:af:6d:c2:ff:51:1b:f3: eb:0e:68:5a:ba:84:20:47:b8:f4:0f:99:74:96:e7: d6:aa:14:d5:10:4f:9c:ae:95:ee:67:64:e1:e6:a0: d9:33:bc:eb:60:37:c7:f8:7d:3d:5f:fa:e1:33:c3: b3:b3:8b:06:5f:aa:a3:09:f5:d4:95:e1:f7:81:eb: 36:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:80:BC:93:D3:DD:2C:6C:55:0D:D7:FD:4E:44:13:19:F0:8E:08:22 X509v3 Authority Key Identifier: keyid:3C:69:B9:B6:01:D2:C9:F2:A3:91:5A:6F:FB:CA:3D:AD:62:E9:92:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:a7:07:f2:c8:3e:c8:59:d0:ee:f7:b9:95:f0:37:99:b5:d3: 78:a6:37:c5:da:88:04:28:40:34:3e:f7:fd:13:28:46:99:e4: a5:bd:22:82:93:a0:bc:ea:84:86:6a:dc:2f:40:06:94:58:11: 24:f4:83:34:09:25:d7:cc:a7:ef:06:c7:04:d1:eb:63:60:03: 91:3c:ae:43:e6:5b:5d:a3:01:94:d6:44:c3:d5:bb:54:6b:cb: b8:4e:a5:29:f0:25:c1:0a:72:b9:75:15:a6:51:86:47:a4:d8: a2:5b:3d:65:b1:b9:a3:74:38:eb:41:61:02:21:e3:59:77:ac: 8b:72:ce:71:39:0a:6e:bd:48:46:e0:9a:f3:d1:76:ec:1c:ce: d5:98:2f:80:2d:d4:7e:54:47:7f:7b:d3:d4:06:48:90:bd:79: 6e:9d:10:86:49:a7:7c:22:ca:07:8b:61:49:5a:52:3e:b0:55: dd:3a:5d:dc:14:89:73:86:0e:af:a8:d4:64:4c:ec:9f:aa:50: 93:49:c2:73:b5:c4:45:dd:9b:fd:4d:1c:ad:52:18:0d:f0:eb: ce:42:cc:65:5d:2d:ff:1f:4e:38:d2:0e:b2:14:9f:37:86:1c: 43:16:9a:5d:25:f4:29:6e:86:0e:56:91:dc:22:cf:6d:d1:d0: 1b:d6:86:7a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAk4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUUwOUMxMTAvBgNVBAUTKDNDNjlCOUI2MDFEMkM5RjJBMzkxNUE2RkZCQ0EzREFE NjJFOTkyNDUwHhcNMjYwNzIzMDQzODI4WhcNMjYwNzMwMDQzODI4WjAYMRYwFAYD VQQDEw02YTYxOWFjNC1kM2M3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApOQ/1e34JsgWt5QUNY3dRDcjA8tch1wz81ChXKoDd2ci/Ao2DNMnBlt/PZ+N Kvkp2jUK+s3xWRoJh0MaQvUXIiyLu+p2SVbpYWVW/UipVwdlK3Ku2oLHKCrjBB5S Hd9F8XrshvQn/+4I3TMEgE3PI/Zh+Pc2Qn/gA7lW+YKgogV+WvCOT3xZS4Bf5Ix5 eWDS7oZqaCALfA07c7kD75uur9TVj4xb1/OEirW2l92LEZhh4loU7mWfslUIlK9t wv9RG/PrDmhauoQgR7j0D5l0lufWqhTVEE+crpXuZ2Th5qDZM7zrYDfH+H09X/rh M8Ozs4sGX6qjCfXUleH3ges2GQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBSAvJPT 3SxsVQ3X/U5EExnwjggiMB8GA1UdIwQYMBaAFDxpubYB0snyo5Fab/vKPa1i6ZJF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTA5Qy9FRUY3NjJDMDkw NzUxMUVFODdEMjY2ODBDNEY5QUUwMi9QR201dGdIU3lmS2prVnB2LThvOXJXTHBr a1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BHbTV0Z0hTeWZLamtWcHYtOG85cldMcGtrVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RTA5Qy9FRUY3NjJDMDkwNzUxMUVFODdEMjY2ODBDNEY5QUUwMi9QR201dGdIU3lm S2prVnB2LThvOXJXTHBra1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAt6cH8sg+yFnQ7ve5lfA3mbXTeKY3xdqIBChAND73/RMoRpnkpb0igpOgvOqE hmrcL0AGlFgRJPSDNAkl18yn7wbHBNHrY2ADkTyuQ+ZbXaMBlNZEw9W7VGvLuE6l KfAlwQpyuXUVplGGR6TYols9ZbG5o3Q460FhAiHjWXesi3LOcTkKbr1IRuCa89F2 7BzO1ZgvgC3UflRHf3vT1AZIkL15bp0QhkmnfCLKB4thSVpSPrBV3Tpd3BSJc4YO r6jUZEzsn6pQk0nCc7XERd2b/U0crVIYDfDrzkLMZV0t/x9OONIOshSfN4YcQxaa XSX0KW6GDlaR3CLPbdHQG9aGeg== -----END CERTIFICATE-----Generated at Thu Jul 23 23:24:12 2026 by rpki-client