$ rpki-client -vvvf rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.mft File: S_PofKK5q1lZdiDQT8BUEY1-09k.mft (raw, json) Hash identifier: krL8DE0g3fZNwSKSUiXo8KSpQqc632aAYvG4/u8JZLg= Subject key identifier: D6:32:3E:A5:D4:45:40:68:2B:63:AC:EF:1A:54:E2:8F:5C:27:32:C6 Authority key identifier: 4B:F3:E8:7C:A2:B9:AB:59:59:76:20:D0:4F:C0:54:11:8D:7E:D3:D9 Certificate issuer: /CN=A9191B71/serialNumber=4BF3E87CA2B9AB59597620D04FC054118D7ED3D9 Certificate serial: 043C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S_PofKK5q1lZdiDQT8BUEY1-09k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.mft Manifest number: 0430 Signing time: Sun 11 Oct 2026 00:19:46 +0000 Manifest this update: Sun 11 Oct 2026 00:19:46 +0000 Manifest next update: Sun 18 Oct 2026 00:19:46 +0000 Files and hashes: 1: S_PofKK5q1lZdiDQT8BUEY1-09k.crl (hash: yEYmCZGD+rEuL0EF6RlBNVyooEWW6S2bkfk0TnkKdcI=) 2: 5734DF38D56811EF89A7D332C4F9AE02.roa (hash: +ePsXEldU8XwZr86Pjr8gpmcjv5LOq79B94UDeNsGa8=) 3: 5A48B534C6C811ECA5A9AB33C4F9AE02.roa (hash: KxT8vQKIHFK7Gk3hZ5CxcVmRf+RluSRn51YSF+ICMIo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.crl rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S_PofKK5q1lZdiDQT8BUEY1-09k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 00:19:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1084 (0x43c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191B71, serialNumber=4BF3E87CA2B9AB59597620D04FC054118D7ED3D9 Validity Not Before: Oct 11 00:19:46 2026 GMT Not After : Oct 18 00:19:46 2026 GMT Subject: CN=6acad622-439e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:1e:6b:83:46:43:56:a8:3c:2b:d3:79:ee:75: 9a:1c:93:d9:9b:1b:c1:06:d0:20:fd:77:a8:94:7f: 59:a3:64:96:70:6d:aa:45:49:50:04:ec:14:64:d1: 22:68:64:3d:0c:87:be:53:4a:c0:5d:aa:a3:28:bd: 3e:9a:72:a4:73:5c:4c:e4:1b:91:f7:e7:fa:a2:e6: 76:59:c2:1f:66:dc:4c:7d:fe:e8:86:5b:cf:86:d4: 1d:15:e8:68:fe:70:dd:06:ef:aa:c8:ae:5b:fc:03: d8:72:92:44:8f:b2:11:48:a9:52:16:da:36:bf:12: 86:bd:27:62:c2:ad:ce:a8:5c:8a:a5:0b:f2:a1:4a: 2b:b9:d2:cd:01:7a:29:f7:17:2e:e8:b2:5b:95:01: b0:e3:b9:a1:5c:75:18:70:50:7f:a2:a6:42:95:5f: b8:0b:3e:7c:bd:e0:3b:9a:c3:ad:94:67:70:41:a9: 0e:45:ae:1e:d5:df:8f:e8:b9:14:67:ba:f5:0e:36: c0:f3:4d:0a:be:40:23:55:8d:fe:14:a1:cb:d7:ee: 19:5d:9a:73:02:08:75:25:61:14:d0:5d:55:51:b3: 50:cc:1d:92:62:47:65:3b:8b:b5:b4:bb:fa:6c:96: 34:5b:8d:65:93:3d:cb:f9:f0:5a:b4:83:6e:2a:16: 44:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:32:3E:A5:D4:45:40:68:2B:63:AC:EF:1A:54:E2:8F:5C:27:32:C6 X509v3 Authority Key Identifier: keyid:4B:F3:E8:7C:A2:B9:AB:59:59:76:20:D0:4F:C0:54:11:8D:7E:D3:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S_PofKK5q1lZdiDQT8BUEY1-09k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:18:2b:6e:c4:ad:80:1c:d4:c1:4c:f1:81:b6:5e:1b:3c:87: 2d:84:09:42:33:a8:44:ae:99:34:15:99:a6:55:70:5a:8f:99: d1:96:04:bc:f3:e4:34:af:26:33:43:cc:b3:a5:6b:5c:fc:f5: 97:2a:ad:eb:8a:75:7d:9f:92:be:b6:ed:c7:27:10:4a:94:0c: 16:7a:66:6b:77:24:52:18:4a:2e:60:c1:84:ef:4b:a2:23:fb: 20:d7:a3:c2:be:9f:23:7d:9b:2b:14:18:78:b6:18:58:6e:7f: d4:d1:d6:1c:f1:55:1a:51:68:09:bc:cb:fd:e1:b0:bc:85:4a: 9b:16:89:e2:f4:75:07:38:55:10:47:88:cb:ec:5f:3d:24:42: dd:26:1b:cd:0c:25:f8:f1:88:c1:bd:d8:0b:86:8a:14:32:b6: a0:11:ad:81:3d:8a:7e:b9:dd:2e:2f:1d:87:70:52:37:12:bc: 17:90:54:cc:61:84:da:4e:a9:01:e1:bc:8d:a9:65:ff:45:c3: 67:00:c0:14:61:57:f0:aa:c4:30:7e:04:d3:22:96:61:65:07: 8f:d3:b4:a5:02:6e:04:c6:f2:cf:c4:54:a2:d1:80:62:26:90: b4:31:ef:89:d7:13:e6:5f:1d:ed:a9:93:95:f5:52:d3:5c:c2: b2:ba:a7:2f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBDwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFCNzExMTAvBgNVBAUTKDRCRjNFODdDQTJCOUFCNTk1OTc2MjBEMDRGQzA1NDEx OEQ3RUQzRDkwHhcNMjYxMDExMDAxOTQ2WhcNMjYxMDE4MDAxOTQ2WjAYMRYwFAYD VQQDEw02YWNhZDYyMi00MzllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiR5rg0ZDVqg8K9N57nWaHJPZmxvBBtAg/XeolH9Zo2SWcG2qRUlQBOwUZNEi aGQ9DIe+U0rAXaqjKL0+mnKkc1xM5BuR9+f6ouZ2WcIfZtxMff7ohlvPhtQdFeho /nDdBu+qyK5b/APYcpJEj7IRSKlSFto2vxKGvSdiwq3OqFyKpQvyoUorudLNAXop 9xcu6LJblQGw47mhXHUYcFB/oqZClV+4Cz58veA7msOtlGdwQakORa4e1d+P6LkU Z7r1DjbA800KvkAjVY3+FKHL1+4ZXZpzAgh1JWEU0F1VUbNQzB2SYkdlO4u1tLv6 bJY0W41lkz3L+fBatINuKhZE5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNYyPqXU RUBoK2Os7xpU4o9cJzLGMB8GA1UdIwQYMBaAFEvz6HyiuatZWXYg0E/AVBGNftPZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUI3MS9CODQ5QkExMkM2 MDQxMUVDQjkwNjkxNUNDNEY5QUUwMi9TX1BvZktLNXExbFpkaURRVDhCVUVZMS0w OWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NfUG9mS0s1cTFsWmRpRFFUOEJVRVkxLTA5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUI3MS9CODQ5QkExMkM2MDQxMUVDQjkwNjkxNUNDNEY5QUUwMi9TX1BvZktLNXEx bFpkaURRVDhCVUVZMS0wOWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGxgrbsStgBzUwUzxgbZeGzyHLYQJQjOoRK6ZNBWZplVwWo+Z0ZYEvPPkNK8m M0PMs6VrXPz1lyqt64p1fZ+SvrbtxycQSpQMFnpma3ckUhhKLmDBhO9LoiP7INej wr6fI32bKxQYeLYYWG5/1NHWHPFVGlFoCbzL/eGwvIVKmxaJ4vR1BzhVEEeIy+xf PSRC3SYbzQwl+PGIwb3YC4aKFDK2oBGtgT2KfrndLi8dh3BSNxK8F5BUzGGE2k6p AeG8jall/0XDZwDAFGFX8KrEMH4E0yKWYWUHj9O0pQJuBMbyz8RUotGAYiaQtDHv idcT5l8d7amTlfVS01zCsrqnLw== -----END CERTIFICATE-----Generated at Mon Oct 12 03:36:26 2026 by rpki-client