$ rpki-client -vvvf rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft File: PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft (raw, json) Hash identifier: AETN2ROICZoe4LgnijNbASpcYASrxH6CSZailcFKf3M= Subject key identifier: A8:0A:41:C1:AF:74:28:ED:A2:52:5C:B3:66:A4:B6:A9:DD:A1:71:CA Authority key identifier: 3E:93:58:DC:F2:C5:3F:66:21:05:2B:3A:A8:52:45:4E:2F:B3:1C:18 Certificate issuer: /CN=A9122B0D/serialNumber=3E9358DCF2C53F6621052B3AA852454E2FB31C18 Certificate serial: 02AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PpNY3PLFP2YhBSs6qFJFTi-zHBg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft Manifest number: 029C Signing time: Sun 11 Oct 2026 02:14:58 +0000 Manifest this update: Sun 11 Oct 2026 02:14:57 +0000 Manifest next update: Sun 18 Oct 2026 02:14:57 +0000 Files and hashes: 1: PpNY3PLFP2YhBSs6qFJFTi-zHBg.crl (hash: Vz7XUbw9qqLVNsH3ai8I+Wps4k1K8hxLfKp0erFUQCA=) 2: B2B63A82700311F1A845E35993A30FBC.roa (hash: GsHylxWmgU2d57aIkeGHod0v/td+O9Y0O73X5akYUUE=) 3: 7EBC5A18700311F18820273A93A30FBC.roa (hash: DtLfgJelfww9oIvfomUx8toqllrQvLO5uOciU7srb3E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.crl rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PpNY3PLFP2YhBSs6qFJFTi-zHBg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 02:14:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 682 (0x2aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122B0D, serialNumber=3E9358DCF2C53F6621052B3AA852454E2FB31C18 Validity Not Before: Oct 11 02:14:57 2026 GMT Not After : Oct 18 02:14:57 2026 GMT Subject: CN=6acaf122-4058 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:80:48:a8:1a:23:bd:86:27:b9:d2:75:ac:cc: a9:71:8e:78:81:63:66:7a:ee:f6:c3:5a:de:17:d5: f4:5a:3b:03:97:bd:ee:72:04:93:2f:3f:94:5d:59: 2e:ec:fe:5a:2d:9b:2d:e6:6b:c8:80:e0:69:9f:be: 70:27:4f:da:c0:6b:c8:c2:22:31:4d:dd:a3:76:24: 18:b5:10:92:0a:dd:8d:ad:c8:14:e6:80:ee:cc:1c: be:2b:c1:9b:15:c4:17:e1:12:49:25:56:9e:27:b4: 8c:9c:f4:95:23:8d:a9:2e:21:5c:8b:c4:7a:80:00: 5d:78:9b:11:7d:86:71:14:4e:a5:5d:08:9d:a9:66: 43:c1:f5:69:92:d2:4d:99:6f:bb:47:c5:80:08:df: 0c:4a:9e:93:f0:7e:8e:d6:45:35:92:fa:7c:ee:05: 7f:bd:fe:c8:65:c6:9c:83:48:f3:cb:d3:d8:32:51: c3:f1:87:50:c8:56:78:ae:b7:72:fb:1d:0c:a5:fd: f8:b1:0a:19:54:c6:eb:0d:08:0e:55:9a:79:46:13: 0f:4f:22:39:35:95:cd:81:95:ba:97:e8:ba:42:94: d3:cf:df:78:98:6b:60:b4:34:d2:75:04:1a:84:fd: 87:a6:9d:d1:68:e8:91:eb:52:c6:da:5c:40:65:e5: 2c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:0A:41:C1:AF:74:28:ED:A2:52:5C:B3:66:A4:B6:A9:DD:A1:71:CA X509v3 Authority Key Identifier: keyid:3E:93:58:DC:F2:C5:3F:66:21:05:2B:3A:A8:52:45:4E:2F:B3:1C:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PpNY3PLFP2YhBSs6qFJFTi-zHBg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:e1:7d:b9:d1:bb:80:4f:46:2c:72:ed:8e:fe:41:4e:81:ae: 3a:9b:09:d1:44:a4:5b:fa:eb:e3:5b:ae:c4:5b:d8:a6:0c:a0: 2b:01:f2:20:8e:3b:98:56:5f:4e:1e:c3:96:24:71:3f:89:9f: fb:63:fb:98:9c:7b:84:ba:c5:1a:19:2c:46:5e:60:d7:23:75: 5d:34:3b:30:58:52:39:87:42:c8:fd:1e:02:99:fa:bb:f4:2d: 54:da:1e:f0:7a:76:8a:e5:7e:38:90:a7:8f:cc:9e:ed:fc:3c: b4:55:d8:c3:0b:57:25:dd:b6:21:a2:08:52:10:ec:0d:1a:b7: 53:36:e5:0d:c7:9d:f9:3b:16:2c:b0:16:e3:1b:e6:6d:93:f4: ab:2a:e1:bb:f0:42:70:d3:e8:96:db:51:05:b5:88:e6:ed:9e: 90:b4:35:7f:8b:73:80:f9:75:5c:2f:42:9e:9a:14:43:09:af: db:52:e6:73:ec:50:4a:a9:c2:b2:7b:a4:b7:64:b5:0e:71:10: ec:48:80:2d:24:ff:ca:ff:d7:18:bf:51:41:3e:0b:2d:14:d9: 34:46:d8:ed:ac:e7:02:69:c8:21:1e:7a:23:d1:c6:6f:dc:c7: 2b:cb:31:2e:ad:d5:ad:f3:ce:c0:39:39:16:9d:11:c4:28:f6: 56:f2:67:9d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJCMEQxMTAvBgNVBAUTKDNFOTM1OERDRjJDNTNGNjYyMTA1MkIzQUE4NTI0NTRF MkZCMzFDMTgwHhcNMjYxMDExMDIxNDU3WhcNMjYxMDE4MDIxNDU3WjAYMRYwFAYD VQQDEw02YWNhZjEyMi00MDU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsYBIqBojvYYnudJ1rMypcY54gWNmeu72w1reF9X0WjsDl73ucgSTLz+UXVku 7P5aLZst5mvIgOBpn75wJ0/awGvIwiIxTd2jdiQYtRCSCt2NrcgU5oDuzBy+K8Gb FcQX4RJJJVaeJ7SMnPSVI42pLiFci8R6gABdeJsRfYZxFE6lXQidqWZDwfVpktJN mW+7R8WACN8MSp6T8H6O1kU1kvp87gV/vf7IZcacg0jzy9PYMlHD8YdQyFZ4rrdy +x0Mpf34sQoZVMbrDQgOVZp5RhMPTyI5NZXNgZW6l+i6QpTTz994mGtgtDTSdQQa hP2Hpp3RaOiR61LG2lxAZeUsQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKgKQcGv dCjtolJcs2aktqndoXHKMB8GA1UdIwQYMBaAFD6TWNzyxT9mIQUrOqhSRU4vsxwY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkIwRC85MDlCNzlGMEU1 MkIxMUVEQjJFQjY1ODVDNEY5QUUwMi9QcE5ZM1BMRlAyWWhCU3M2cUZKRlRpLXpI QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BwTlkzUExGUDJZaEJTczZxRkpGVGktekhCZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkIwRC85MDlCNzlGMEU1MkIxMUVEQjJFQjY1ODVDNEY5QUUwMi9QcE5ZM1BMRlAy WWhCU3M2cUZKRlRpLXpIQmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZeF9udG7gE9GLHLtjv5BToGuOpsJ0USkW/rr41uuxFvYpgygKwHyII47mFZf Th7DliRxP4mf+2P7mJx7hLrFGhksRl5g1yN1XTQ7MFhSOYdCyP0eApn6u/QtVNoe 8Hp2iuV+OJCnj8ye7fw8tFXYwwtXJd22IaIIUhDsDRq3UzblDced+TsWLLAW4xvm bZP0qyrhu/BCcNPolttRBbWI5u2ekLQ1f4tzgPl1XC9CnpoUQwmv21Lmc+xQSqnC snukt2S1DnEQ7EiALST/yv/XGL9RQT4LLRTZNEbY7aznAmnIIR56I9HGb9zHK8sx Lq3VrfPOwDk5Fp0RxCj2VvJnnQ== -----END CERTIFICATE-----Generated at Mon Oct 12 02:08:59 2026 by rpki-client