$ rpki-client -vvf rpki.apnic.net/member_repository/A918BB6D/880D6CACE91B11F0A7541612736F56BC/PNmBJcGXpVFDEgG3kG1QS7iySt4.mft File: PNmBJcGXpVFDEgG3kG1QS7iySt4.mft (raw, json) Hash identifier: fTd6JNftHdFAxOEsLOwYwbfcE+oipEryEIDVHX3V9Hw= Subject key identifier: 4A:5D:BD:18:EE:EE:DA:18:5E:A7:F4:1A:46:8A:43:FA:71:87:DE:7B Authority key identifier: 3C:D9:81:25:C1:97:A5:51:43:12:01:B7:90:6D:50:4B:B8:B2:4A:DE Certificate issuer: /CN=A918BB6D/serialNumber=3CD98125C197A551431201B7906D504BB8B24ADE Certificate serial: 6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNmBJcGXpVFDEgG3kG1QS7iySt4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BB6D/880D6CACE91B11F0A7541612736F56BC/PNmBJcGXpVFDEgG3kG1QS7iySt4.mft Manifest number: 6D Signing time: Mon 27 Jul 2026 10:12:19 +0000 Manifest this update: Mon 27 Jul 2026 10:12:18 +0000 Manifest next update: Mon 03 Aug 2026 10:12:18 +0000 Files and hashes: 1: PNmBJcGXpVFDEgG3kG1QS7iySt4.crl (hash: HbHfi9eZqG18AWTCRxu8gV0nivhiaWlyGbwBt4TyFts=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BB6D/880D6CACE91B11F0A7541612736F56BC/PNmBJcGXpVFDEgG3kG1QS7iySt4.crl rsync://rpki.apnic.net/member_repository/A918BB6D/880D6CACE91B11F0A7541612736F56BC/PNmBJcGXpVFDEgG3kG1QS7iySt4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNmBJcGXpVFDEgG3kG1QS7iySt4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 10:12:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109 (0x6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BB6D, serialNumber=3CD98125C197A551431201B7906D504BB8B24ADE Validity Not Before: Jul 27 10:12:18 2026 GMT Not After : Aug 3 10:12:18 2026 GMT Subject: CN=6a672f03-4228 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f4:8f:1b:ab:d5:63:b3:7b:f2:bc:04:10:2a: 0c:99:67:4c:0c:e9:06:38:5d:9d:da:ae:3e:c9:d8: c1:c4:32:10:03:ad:d8:67:ed:c0:03:4d:65:19:12: 54:1c:c6:80:b1:cc:84:fc:59:b2:e2:de:0e:fa:25: 8b:2a:57:38:45:9f:98:13:65:55:8a:ac:1b:e0:29: 42:61:d4:91:82:d0:7e:dc:51:49:f5:a1:c2:2c:bd: 3a:55:47:33:96:2c:b4:30:ba:b0:f5:f8:bb:2d:98: 7b:a2:37:a6:38:7f:b0:e6:69:16:a0:8c:93:8c:0a: 39:6f:5e:b6:f5:e1:f8:ef:2a:fe:63:99:6a:47:63: 95:f8:db:79:af:a4:a3:a7:91:3f:7c:fe:5a:6e:62: 12:70:c3:e4:32:e3:b3:cb:47:6a:a3:af:d1:db:0c: 98:c0:71:53:58:51:11:e3:88:79:49:3d:62:1a:5f: 0c:0e:b9:40:93:15:d2:cd:6b:ad:c7:1e:5f:fe:df: 05:1e:4c:4e:58:50:5b:c1:35:f5:01:67:df:39:e9: 12:92:20:95:22:9e:29:3a:11:39:ce:e6:c9:8b:9d: 2f:72:ab:85:b1:50:c0:cb:99:61:5d:58:09:c1:18: 25:a2:19:a7:b1:8f:62:35:2e:4f:ae:ff:d6:1c:79: f6:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:5D:BD:18:EE:EE:DA:18:5E:A7:F4:1A:46:8A:43:FA:71:87:DE:7B X509v3 Authority Key Identifier: keyid:3C:D9:81:25:C1:97:A5:51:43:12:01:B7:90:6D:50:4B:B8:B2:4A:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BB6D/880D6CACE91B11F0A7541612736F56BC/PNmBJcGXpVFDEgG3kG1QS7iySt4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNmBJcGXpVFDEgG3kG1QS7iySt4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BB6D/880D6CACE91B11F0A7541612736F56BC/PNmBJcGXpVFDEgG3kG1QS7iySt4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:60:34:67:9d:9f:42:94:1a:6a:04:13:0e:cc:ee:b6:cb:87: e5:68:9b:fc:4d:84:b4:50:c6:19:10:b7:17:87:f8:ca:16:dd: 9d:1b:16:98:ff:b6:f9:b0:88:72:74:a5:74:34:06:5e:7b:19: c6:33:fc:e5:1c:68:84:eb:66:5e:c8:d2:17:10:58:8b:bd:89: 53:c7:8e:27:c6:52:bc:b7:ea:09:0c:01:66:b0:48:cb:a9:25: f6:8d:c8:62:e8:3d:e4:58:28:8d:3e:c7:8b:47:ef:01:27:bf: 3f:9d:47:9b:aa:8e:80:ca:2d:ca:6c:e1:f7:77:8c:80:ec:16: d0:28:87:05:1d:0b:da:87:ae:c2:a1:db:06:5b:7a:77:ac:79: 17:f4:e9:fc:a6:f7:8f:23:c0:05:4b:1f:b1:34:93:2f:02:47: e3:8e:ef:bc:8c:cd:03:a9:eb:b9:75:5f:49:a6:77:a2:10:14: fc:a3:37:4b:f4:5c:5d:21:d8:e1:52:ce:cc:34:0a:08:98:ad: 22:45:22:ae:c5:5a:3e:f1:8a:13:68:18:1b:38:25:77:47:9b: 83:c4:08:32:d2:99:62:34:1d:03:3e:a2:0e:c3:7a:be:46:51: 90:d6:68:25:17:44:ef:14:29:08:0d:0c:93:4f:0c:40:68:78: 1b:34:95:cf -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBbTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 QkI2RDExMC8GA1UEBRMoM0NEOTgxMjVDMTk3QTU1MTQzMTIwMUI3OTA2RDUwNEJC OEIyNEFERTAeFw0yNjA3MjcxMDEyMThaFw0yNjA4MDMxMDEyMThaMBgxFjAUBgNV BAMTDTZhNjcyZjAzLTQyMjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDC9I8bq9Vjs3vyvAQQKgyZZ0wM6QY4XZ3arj7J2MHEMhADrdhn7cADTWUZElQc xoCxzIT8WbLi3g76JYsqVzhFn5gTZVWKrBvgKUJh1JGC0H7cUUn1ocIsvTpVRzOW LLQwurD1+LstmHuiN6Y4f7DmaRagjJOMCjlvXrb14fjvKv5jmWpHY5X423mvpKOn kT98/lpuYhJww+Qy47PLR2qjr9HbDJjAcVNYURHjiHlJPWIaXwwOuUCTFdLNa63H Hl/+3wUeTE5YUFvBNfUBZ9856RKSIJUinik6ETnO5smLnS9yq4WxUMDLmWFdWAnB GCWiGaexj2I1Lk+u/9YcefafAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUSl29GO7u 2hhep/QaRopD+nGH3nswHwYDVR0jBBgwFoAUPNmBJcGXpVFDEgG3kG1QS7iySt4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThCQjZELzg4MEQ2Q0FDRTkx QjExRjBBNzU0MTYxMjczNkY1NkJDL1BObUJKY0dYcFZGREVnRzNrRzFRUzdpeVN0 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUE5tQkpjR1hwVkZERWdHM2tHMVFTN2l5U3Q0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThC QjZELzg4MEQ2Q0FDRTkxQjExRjBBNzU0MTYxMjczNkY1NkJDL1BObUJKY0dYcFZG REVnRzNrRzFRUzdpeVN0NC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBTYDRnnZ9ClBpqBBMOzO62y4flaJv8TYS0UMYZELcXh/jKFt2dGxaY/7b5sIhy dKV0NAZeexnGM/zlHGiE62ZeyNIXEFiLvYlTx44nxlK8t+oJDAFmsEjLqSX2jchi 6D3kWCiNPseLR+8BJ78/nUebqo6Ayi3KbOH3d4yA7BbQKIcFHQvah67CodsGW3p3 rHkX9On8pvePI8AFSx+xNJMvAkfjju+8jM0Dqeu5dV9JpneiEBT8ozdL9FxdIdjh Us7MNAoImK0iRSKuxVo+8YoTaBgbOCV3R5uDxAgy0pliNB0DPqIOw3q+RlGQ1mgl F0TvFCkIDQyTTwxAaHgbNJXP -----END CERTIFICATE-----Generated at Tue Jul 28 18:41:11 2026 by rpki-client