$ rpki-client -vvf rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft File: PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft (raw, json) Hash identifier: 3iNjhJbdKdSP4LT8Lp4OxGjzcA1YpQOt6G5G3A9M2XU= Subject key identifier: E8:F9:BD:C9:09:FC:CA:79:61:44:21:D9:D4:46:14:2F:37:C8:28:43 Authority key identifier: 3C:65:15:24:B4:F9:1A:35:0D:1E:CF:BB:A6:6C:AB:D1:B4:8F:B7:C5 Certificate issuer: /CN=A914D2E1/serialNumber=3C651524B4F91A350D1ECFBBA66CABD1B48FB7C5 Certificate serial: 0296 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGUVJLT5GjUNHs-7pmyr0bSPt8U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft Manifest number: 028D Signing time: Mon 27 Jul 2026 03:17:14 +0000 Manifest this update: Mon 27 Jul 2026 03:17:13 +0000 Manifest next update: Mon 03 Aug 2026 03:17:13 +0000 Files and hashes: 1: PGUVJLT5GjUNHs-7pmyr0bSPt8U.crl (hash: VarsaMKF6SMb36V+j+YwPkQVLWixvDGM91+0cN/0QkM=) 2: BCB2FFCEBA7211EDB0F5AE53C4F9AE02.roa (hash: 4pifmUBWRDqIs1AxU08rq2Ecl41mBJPR1UbVv8BwJA8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.crl rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGUVJLT5GjUNHs-7pmyr0bSPt8U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 03:17:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 662 (0x296) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D2E1, serialNumber=3C651524B4F91A350D1ECFBBA66CABD1B48FB7C5 Validity Not Before: Jul 27 03:17:13 2026 GMT Not After : Aug 3 03:17:13 2026 GMT Subject: CN=6a66cdba-6947 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:54:30:08:2f:c9:2f:41:de:67:44:f2:b0:ca: 28:df:c5:21:a9:e6:39:85:fa:8f:b8:4d:16:84:6e: d9:c4:2e:f6:3f:90:09:bb:e7:77:ab:4d:47:e1:3c: cd:6e:1a:ac:c4:3c:db:5c:3b:c1:9d:7a:93:97:4b: de:9a:4e:ff:5b:d7:43:a9:42:8c:73:b5:36:5d:e6: 8d:2a:56:9a:8a:e3:95:f2:9f:f1:21:71:3d:a7:62: 7d:b6:37:3e:1a:41:8d:b7:b5:c5:5d:91:8d:cd:3d: 83:4e:4d:69:30:98:ac:67:37:c2:9a:76:fc:f5:f0: 4f:a1:9c:81:f1:99:c0:62:ee:d2:83:2d:6d:b9:f3: a8:86:45:3b:c1:c4:c0:74:ad:65:15:9a:5a:1a:9e: a6:06:fd:74:18:10:ae:9c:0b:83:48:61:52:9b:f3: 74:f3:e1:f9:03:bb:41:60:1b:0a:39:27:8a:cd:3a: 10:bf:65:bd:46:47:c7:4e:5a:c0:04:a3:6d:b1:99: e1:77:54:c8:c7:19:ec:8a:d7:eb:b2:a7:f7:d4:e0: c5:49:5e:07:38:02:98:2e:eb:00:c2:9a:74:5b:83: c2:35:25:bd:59:e9:d2:b8:6d:ca:de:4c:e9:86:8e: 4f:a0:11:b3:e0:dd:24:d7:95:df:a1:a4:ec:99:f9: ba:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:F9:BD:C9:09:FC:CA:79:61:44:21:D9:D4:46:14:2F:37:C8:28:43 X509v3 Authority Key Identifier: keyid:3C:65:15:24:B4:F9:1A:35:0D:1E:CF:BB:A6:6C:AB:D1:B4:8F:B7:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGUVJLT5GjUNHs-7pmyr0bSPt8U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:8f:c6:e8:4a:cd:7d:83:fd:57:6b:9e:6d:0a:5c:26:a3:56: ce:bb:42:c3:90:a6:54:79:3f:ae:3e:f1:bf:05:fc:c9:81:80: 04:88:ad:e7:d3:ba:c9:22:91:5d:83:e2:30:d8:8f:b2:c0:a4: 9b:65:e7:75:88:1d:f0:11:12:c6:d6:a5:fe:0f:12:f2:4d:6e: a1:7f:77:e2:62:7a:ef:ab:3d:c4:cf:3d:9e:22:54:31:cb:80: 23:e4:7a:30:57:82:83:05:2c:05:33:4e:1a:f6:91:b1:65:35: e5:08:c8:d9:88:1d:08:c7:e2:ac:4e:32:fc:6c:50:ca:11:3c: 1a:ca:73:aa:fd:47:b8:12:c8:d8:c5:db:df:0a:84:62:23:08: 33:18:ad:8d:bf:51:76:74:08:dc:6b:79:17:8c:ed:2b:55:c8: 27:a9:bf:d4:9e:67:dc:ef:60:68:53:97:22:8f:de:19:54:b0: ee:84:37:8e:9f:c9:ad:3e:af:db:db:f3:35:5a:5c:a0:b4:c9: a5:94:c7:70:e9:81:62:5a:cb:52:39:df:36:92:75:49:76:2e: c7:e0:e7:a0:fd:36:26:7b:74:d5:8b:78:a4:ee:83:4f:d0:6f: 27:17:22:e9:a4:fe:fc:74:0c:18:12:0c:6f:04:36:15:7e:0e: 68:5f:5d:4c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQyRTExMTAvBgNVBAUTKDNDNjUxNTI0QjRGOTFBMzUwRDFFQ0ZCQkE2NkNBQkQx QjQ4RkI3QzUwHhcNMjYwNzI3MDMxNzEzWhcNMjYwODAzMDMxNzEzWjAYMRYwFAYD VQQDEw02YTY2Y2RiYS02OTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxVQwCC/JL0HeZ0TysMoo38UhqeY5hfqPuE0WhG7ZxC72P5AJu+d3q01H4TzN bhqsxDzbXDvBnXqTl0vemk7/W9dDqUKMc7U2XeaNKlaaiuOV8p/xIXE9p2J9tjc+ GkGNt7XFXZGNzT2DTk1pMJisZzfCmnb89fBPoZyB8ZnAYu7Sgy1tufOohkU7wcTA dK1lFZpaGp6mBv10GBCunAuDSGFSm/N08+H5A7tBYBsKOSeKzToQv2W9RkfHTlrA BKNtsZnhd1TIxxnsitfrsqf31ODFSV4HOAKYLusAwpp0W4PCNSW9WenSuG3K3kzp ho5PoBGz4N0k15XfoaTsmfm6GwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOj5vckJ /Mp5YUQh2dRGFC83yChDMB8GA1UdIwQYMBaAFDxlFSS0+Ro1DR7Pu6Zsq9G0j7fF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDJFMS9EQTg2QjYxNkJB NkUxMUVEQjlDRUE0M0FDNEY5QUUwMi9QR1VWSkxUNUdqVU5Icy03cG15cjBiU1B0 OFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BHVVZKTFQ1R2pVTkhzLTdwbXlyMGJTUHQ4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDJFMS9EQTg2QjYxNkJBNkUxMUVEQjlDRUE0M0FDNEY5QUUwMi9QR1VWSkxUNUdq VU5Icy03cG15cjBiU1B0OFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYo/G6ErNfYP9V2uebQpcJqNWzrtCw5CmVHk/rj7xvwX8yYGABIit59O6ySKR XYPiMNiPssCkm2XndYgd8BESxtal/g8S8k1uoX934mJ676s9xM89niJUMcuAI+R6 MFeCgwUsBTNOGvaRsWU15QjI2YgdCMfirE4y/GxQyhE8Gspzqv1HuBLI2MXb3wqE YiMIMxitjb9RdnQI3Gt5F4ztK1XIJ6m/1J5n3O9gaFOXIo/eGVSw7oQ3jp/JrT6v 29vzNVpcoLTJpZTHcOmBYlrLUjnfNpJ1SXYux+DnoP02Jnt01Yt4pO6DT9BvJxci 6aT+/HQMGBIMbwQ2FX4OaF9dTA== -----END CERTIFICATE-----Generated at Tue Jul 28 19:48:13 2026 by rpki-client