$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.mft File: PG7AmwlfpfUTYVEIpUR8rLcasaE.mft (raw, json) Hash identifier: lnG9qeBSRYf1ET1eql4AeKQoO6gOchKAaBSorwZVnB4= Subject key identifier: F0:5F:10:CE:4B:46:79:AC:64:73:B8:13:76:B9:C1:BC:55:71:6B:0D Authority key identifier: 3C:6E:C0:9B:09:5F:A5:F5:13:61:51:08:A5:44:7C:AC:B7:1A:B1:A1 Certificate issuer: /CN=A917E4BA/serialNumber=3C6EC09B095FA5F513615108A5447CACB71AB1A1 Certificate serial: 0BB8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PG7AmwlfpfUTYVEIpUR8rLcasaE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.mft Manifest number: 0BAF Signing time: Sun 20 Sep 2026 19:01:05 +0000 Manifest this update: Sun 20 Sep 2026 19:01:05 +0000 Manifest next update: Sun 27 Sep 2026 19:01:05 +0000 Files and hashes: 1: PG7AmwlfpfUTYVEIpUR8rLcasaE.crl (hash: 5iJFTt7XLD929JvtIncr97qNqbG+ea7hlkAbTiKD+WQ=) 2: 66F91334ED4911ED9A90391BC4F9AE02.roa (hash: ZatHv2sHyWRSC6zewOoWADYzth7DnWj+eG5J7PvU3G0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.crl rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PG7AmwlfpfUTYVEIpUR8rLcasaE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 19:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3000 (0xbb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E4BA, serialNumber=3C6EC09B095FA5F513615108A5447CACB71AB1A1 Validity Not Before: Sep 20 19:01:05 2026 GMT Not After : Sep 27 19:01:05 2026 GMT Subject: CN=6ab02d71-f8f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:6b:1d:6d:b9:b1:ad:8f:b8:2e:c0:5a:44:f6: cc:21:2e:36:b7:7e:c2:86:c4:99:71:fa:d6:c4:a8: 8a:6b:06:96:b7:76:87:36:d2:56:ce:32:89:57:e2: 6d:56:12:a3:10:19:f2:f5:c6:26:ad:81:fe:4f:c7: 5c:95:af:78:83:4a:0e:55:e3:d9:71:a8:e9:da:a2: 8d:49:9e:97:09:e3:89:98:f8:e0:53:92:77:9e:8c: 98:a8:d5:39:f6:c4:78:7a:6d:03:59:af:1c:82:0d: e7:59:35:77:a5:72:06:1c:e6:84:52:9a:9c:3e:40: 83:84:78:e5:6a:53:ea:7e:bd:7d:ba:87:fb:81:ef: f7:ad:e6:e2:92:28:3c:2d:53:26:5c:93:76:dd:b1: 33:af:5c:b0:39:ba:85:88:d7:80:e5:ca:2f:d3:d6: fb:7a:c5:c1:79:aa:b9:ee:40:79:36:63:97:c5:35: bf:b1:b3:37:cd:9d:b8:85:9b:94:84:b2:37:82:9b: b5:55:4c:b1:78:0d:fb:60:3b:32:b5:ad:aa:b4:e3: 89:36:58:66:a0:3b:d8:4e:df:12:da:b2:9d:b1:9d: bf:6d:a5:d1:fb:07:f5:e3:44:bf:4c:13:8e:ae:41: d1:e8:36:3a:15:18:84:10:90:8a:ff:c7:9c:89:91: 1c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:5F:10:CE:4B:46:79:AC:64:73:B8:13:76:B9:C1:BC:55:71:6B:0D X509v3 Authority Key Identifier: keyid:3C:6E:C0:9B:09:5F:A5:F5:13:61:51:08:A5:44:7C:AC:B7:1A:B1:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PG7AmwlfpfUTYVEIpUR8rLcasaE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:5f:bf:1b:7a:6f:3e:91:9e:66:e3:f6:f2:c2:47:06:b4:f8: dd:55:c4:60:ac:16:3f:b0:74:a8:1d:db:04:fe:8e:0c:46:2c: f4:4e:83:0a:a3:0d:6d:10:ec:2d:6b:5b:5e:9c:e2:7f:23:fc: d1:41:36:a4:39:b8:d3:a3:27:92:0c:14:66:82:99:49:27:99: e6:49:e0:1d:4f:ac:00:de:27:9e:37:89:dd:10:92:37:09:e7: 18:a2:42:57:15:c2:38:78:f4:f5:c8:6c:1d:7a:90:72:b9:3b: 8b:ab:e2:8d:9a:27:8b:e1:2f:38:12:db:44:32:b1:45:88:7d: 13:f7:9b:f1:ec:a2:de:14:09:f5:6d:50:5e:7e:d4:2a:ee:f6: 36:14:4d:ae:11:e5:b8:0f:6b:8f:14:f2:39:c7:4c:96:e4:e2: 72:2d:26:5a:b6:97:76:c7:32:92:39:02:6f:ed:5d:ff:43:f1: 2d:6d:11:97:4a:72:b7:21:1d:57:2d:fb:1f:65:de:c6:40:98: 51:68:0e:1c:af:c9:09:9f:49:fa:44:6c:b8:3a:7d:f1:03:b2: 0e:cd:32:0c:37:c0:00:ec:b6:f1:5d:61:32:db:e5:72:2e:52: b1:87:29:84:64:e0:32:f3:87:c0:de:50:aa:96:01:bb:dc:53: b2:e3:b0:8c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC7gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U0QkExMTAvBgNVBAUTKDNDNkVDMDlCMDk1RkE1RjUxMzYxNTEwOEE1NDQ3Q0FD QjcxQUIxQTEwHhcNMjYwOTIwMTkwMTA1WhcNMjYwOTI3MTkwMTA1WjAYMRYwFAYD VQQDEw02YWIwMmQ3MS1mOGY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApGsdbbmxrY+4LsBaRPbMIS42t37ChsSZcfrWxKiKawaWt3aHNtJWzjKJV+Jt VhKjEBny9cYmrYH+T8dcla94g0oOVePZcajp2qKNSZ6XCeOJmPjgU5J3noyYqNU5 9sR4em0DWa8cgg3nWTV3pXIGHOaEUpqcPkCDhHjlalPqfr19uof7ge/3rebikig8 LVMmXJN23bEzr1ywObqFiNeA5cov09b7esXBeaq57kB5NmOXxTW/sbM3zZ24hZuU hLI3gpu1VUyxeA37YDsyta2qtOOJNlhmoDvYTt8S2rKdsZ2/baXR+wf140S/TBOO rkHR6DY6FRiEEJCK/8eciZEcswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPBfEM5L RnmsZHO4E3a5wbxVcWsNMB8GA1UdIwQYMBaAFDxuwJsJX6X1E2FRCKVEfKy3GrGh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTRCQS9DOTUyQUM5RTUy REMxMUVBODI2MDFCMEZDNEY5QUUwMi9QRzdBbXdsZnBmVVRZVkVJcFVSOHJMY2Fz YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1BHN0Ftd2xmcGZVVFlWRUlwVVI4ckxjYXNhRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTRCQS9DOTUyQUM5RTUyREMxMUVBODI2MDFCMEZDNEY5QUUwMi9QRzdBbXdsZnBm VVRZVkVJcFVSOHJMY2FzYUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbV+/G3pvPpGeZuP28sJHBrT43VXEYKwWP7B0qB3bBP6ODEYs9E6DCqMNbRDs LWtbXpzifyP80UE2pDm406MnkgwUZoKZSSeZ5kngHU+sAN4nnjeJ3RCSNwnnGKJC VxXCOHj09chsHXqQcrk7i6vijZoni+EvOBLbRDKxRYh9E/eb8eyi3hQJ9W1QXn7U Ku72NhRNrhHluA9rjxTyOcdMluTici0mWraXdscykjkCb+1d/0PxLW0Rl0pytyEd Vy37H2XexkCYUWgOHK/JCZ9J+kRsuDp98QOyDs0yDDfAAOy28V1hMtvlci5SsYcp hGTgMvOHwN5QqpYBu9xTsuOwjA== -----END CERTIFICATE-----Generated at Tue Sep 22 07:18:39 2026 by rpki-client