$ rpki-client -vvvf rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.mft File: PuJvukvjWd6uUAeS6_940ArLdgw.mft (raw, json) Hash identifier: PPo3LMyVVzYB57lUsA3FPwQpJ9shd8PEbgIxl1DtafU= Subject key identifier: 1C:35:EE:DC:95:EC:CB:8A:28:4B:57:92:7A:B5:13:2F:9E:48:37:A7 Authority key identifier: 3E:E2:6F:BA:4B:E3:59:DE:AE:50:07:92:EB:FF:78:D0:0A:CB:76:0C Certificate issuer: /CN=A91596C4/serialNumber=3EE26FBA4BE359DEAE500792EBFF78D00ACB760C Certificate serial: 04F8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PuJvukvjWd6uUAeS6_940ArLdgw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.mft Manifest number: 04D4 Signing time: Sun 20 Sep 2026 23:36:11 +0000 Manifest this update: Sun 20 Sep 2026 23:36:10 +0000 Manifest next update: Sun 27 Sep 2026 23:36:10 +0000 Files and hashes: 1: PuJvukvjWd6uUAeS6_940ArLdgw.crl (hash: W5FqpK5VPOTeMM1BdApzhBfiMshjbWf3XAkHrH+mCn8=) 2: 0A4D6250833411ECBB74C786C4F9AE02.roa (hash: LGn5w+iTJlicKdWA6qyGgWwj55jd6LVvyCEcKfnAtIs=) 3: 09B62A48833411ECBB74C786C4F9AE02.roa (hash: 5CjAVhZ4H7jUaLeVyY5rhBjjQSwZO+qN9rQG5F9axLY=) 4: 0AE155E6833411ECBB74C786C4F9AE02.roa (hash: DF2zCDZzOfwV2Fb/7F4G0pHecJjvgJOAWTH8TiFGmoc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.crl rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PuJvukvjWd6uUAeS6_940ArLdgw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 23:36:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1272 (0x4f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91596C4, serialNumber=3EE26FBA4BE359DEAE500792EBFF78D00ACB760C Validity Not Before: Sep 20 23:36:10 2026 GMT Not After : Sep 27 23:36:10 2026 GMT Subject: CN=6ab06dea-c63a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:95:c4:f0:b9:7c:e9:31:e0:09:d8:5d:48:9b: 72:2c:98:a8:d4:2e:e3:a9:0e:ef:09:9b:0b:71:c9: de:73:b9:2c:fe:ff:d3:ab:29:1f:5b:a7:c3:f2:f1: ca:84:82:9b:fa:8b:21:57:db:96:4d:e2:68:61:27: bc:94:a4:a9:29:19:e8:e1:a8:0d:bd:af:81:af:2b: 3c:67:e5:1e:76:c5:80:87:6d:e0:9b:8e:28:3b:8c: 93:c7:18:a4:87:ee:39:01:09:2e:94:64:18:02:8d: 90:2e:fd:75:ef:58:a1:75:6c:35:0b:f2:dc:59:bb: 16:a7:56:14:84:a8:b6:40:1c:c1:80:5a:c5:04:05: 44:52:ae:a0:91:8f:41:27:47:40:0a:cb:cc:57:54: 96:88:1f:34:a2:e4:4f:c4:fd:6e:f6:63:90:c0:a9: 32:c7:76:61:dc:c0:07:26:52:65:0c:c0:37:85:47: 01:e6:d4:0c:9a:87:42:99:1c:93:32:4e:9d:35:16: b0:22:98:14:25:92:0b:9b:8d:17:cb:26:52:b8:b9: f4:b6:6c:6e:60:37:c9:9e:0c:d9:5f:41:e7:a6:81: 45:d6:db:cc:bb:f4:eb:59:3b:ac:db:da:9b:a9:1b: 9c:dd:43:e7:4c:11:b4:88:5d:85:f3:ab:8d:14:e7: c5:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:35:EE:DC:95:EC:CB:8A:28:4B:57:92:7A:B5:13:2F:9E:48:37:A7 X509v3 Authority Key Identifier: keyid:3E:E2:6F:BA:4B:E3:59:DE:AE:50:07:92:EB:FF:78:D0:0A:CB:76:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PuJvukvjWd6uUAeS6_940ArLdgw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:ce:68:9e:60:3c:87:95:5f:f1:4f:ec:c9:c9:0a:cc:54:cf: 68:0b:07:4c:c3:cb:99:ce:bf:7e:3c:cf:b5:8f:dd:ff:58:0c: c8:50:bc:a6:c2:65:de:4d:84:44:8f:e4:33:2c:67:e3:ae:1c: d6:3f:1d:a2:d2:fb:ca:98:df:62:80:a4:bc:82:7c:38:82:df: 6d:d5:ae:50:cc:1e:66:c3:00:e5:da:f1:3c:8c:0f:2c:af:2e: fc:50:e0:0c:99:14:2b:7e:67:c1:78:cc:97:77:4d:9d:de:0f: 71:ab:c4:ce:63:b1:ac:9f:80:fa:cc:1f:f3:19:a2:8e:6b:8b: 5a:ba:89:1f:75:6a:5e:ac:1d:57:2e:6c:f1:ee:be:06:3e:b4: 9c:c0:e7:f1:52:3b:83:c7:c0:61:30:5f:d7:44:36:6d:84:d1: 17:81:a1:e9:59:70:03:f9:fb:b0:b4:ce:15:bf:df:9a:13:56: d8:e6:8a:35:4a:ef:f3:cb:ba:86:2c:23:d8:96:ae:20:5f:4b: cd:1d:6d:11:f8:94:92:63:fe:40:08:31:96:9d:3f:70:76:7d: 24:86:00:50:89:4d:cf:bf:8b:a7:f4:c6:5a:df:a8:49:4b:34: cf:c2:d1:c5:fa:32:55:78:4d:f3:3f:99:cb:91:45:e2:0a:c0: 50:59:5b:87 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTk2QzQxMTAvBgNVBAUTKDNFRTI2RkJBNEJFMzU5REVBRTUwMDc5MkVCRkY3OEQw MEFDQjc2MEMwHhcNMjYwOTIwMjMzNjEwWhcNMjYwOTI3MjMzNjEwWjAYMRYwFAYD VQQDEw02YWIwNmRlYS1jNjNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxpXE8Ll86THgCdhdSJtyLJio1C7jqQ7vCZsLccnec7ks/v/TqykfW6fD8vHK hIKb+oshV9uWTeJoYSe8lKSpKRno4agNva+Brys8Z+UedsWAh23gm44oO4yTxxik h+45AQkulGQYAo2QLv1171ihdWw1C/LcWbsWp1YUhKi2QBzBgFrFBAVEUq6gkY9B J0dACsvMV1SWiB80ouRPxP1u9mOQwKkyx3Zh3MAHJlJlDMA3hUcB5tQMmodCmRyT Mk6dNRawIpgUJZILm40XyyZSuLn0tmxuYDfJngzZX0HnpoFF1tvMu/TrWTus29qb qRuc3UPnTBG0iF2F86uNFOfF1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBw17tyV 7MuKKEtXknq1Ey+eSDenMB8GA1UdIwQYMBaAFD7ib7pL41nerlAHkuv/eNAKy3YM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTZDNC9GM0RERUVERTgz MzAxMUVDOEZGMzkzODNDNEY5QUUwMi9QdUp2dWt2aldkNnVVQWVTNl85NDBBckxk Z3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1B1SnZ1a3ZqV2Q2dVVBZVM2Xzk0MEFyTGRndy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTZDNC9GM0RERUVERTgzMzAxMUVDOEZGMzkzODNDNEY5QUUwMi9QdUp2dWt2aldk NnVVQWVTNl85NDBBckxkZ3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdM5onmA8h5Vf8U/syckKzFTPaAsHTMPLmc6/fjzPtY/d/1gMyFC8psJl3k2E RI/kMyxn464c1j8dotL7ypjfYoCkvIJ8OILfbdWuUMweZsMA5drxPIwPLK8u/FDg DJkUK35nwXjMl3dNnd4PcavEzmOxrJ+A+swf8xmijmuLWrqJH3VqXqwdVy5s8e6+ Bj60nMDn8VI7g8fAYTBf10Q2bYTRF4Gh6VlwA/n7sLTOFb/fmhNW2OaKNUrv88u6 hiwj2JauIF9LzR1tEfiUkmP+QAgxlp0/cHZ9JIYAUIlNz7+Lp/TGWt+oSUs0z8LR xfoyVXhN8z+Zy5FF4grAUFlbhw== -----END CERTIFICATE-----Generated at Tue Sep 22 16:53:07 2026 by rpki-client