$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A423D/B9769BD8B09511F08C152778C4F9AE02/PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.mft File: PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.mft (raw, json) Hash identifier: E+BVEb2ziYUJT7duFAmHgUIczzNY7EUMzFwvx0gjI8I= Subject key identifier: 88:97:01:82:23:62:2B:E4:04:EB:32:02:6D:E9:1F:7F:D7:D5:22:F3 Authority key identifier: 3C:CE:EB:9D:20:59:CF:E9:F6:08:56:77:D4:B7:FA:26:4F:53:3A:0F Certificate issuer: /CN=A91A423D/serialNumber=3CCEEB9D2059CFE9F6085677D4B7FA264F533A0F Certificate serial: B6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A423D/B9769BD8B09511F08C152778C4F9AE02/PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.mft Manifest number: B0 Signing time: Mon 21 Sep 2026 07:06:44 +0000 Manifest this update: Mon 21 Sep 2026 07:06:44 +0000 Manifest next update: Mon 28 Sep 2026 07:06:44 +0000 Files and hashes: 1: PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.crl (hash: f+MZ/sE15Xj4hWp2Fi97WeKK8cY6bNoYkOEd5EO8cuU=) 2: 2ECF71C4B0A111F0B537573FC4F9AE02.roa (hash: 2OKnQg5qjmkKGEleLvBDwSd2bcC+02+QaHkt9b4fvyA=) 3: DEE9FAB2B0A011F0B752B713C4F9AE02.roa (hash: N9DbzZhWjh9222Zzdpzo8MyanGXgo1s4o7cCfBAxME8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A423D/B9769BD8B09511F08C152778C4F9AE02/PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.crl rsync://rpki.apnic.net/member_repository/A91A423D/B9769BD8B09511F08C152778C4F9AE02/PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 07:06:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 182 (0xb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A423D, serialNumber=3CCEEB9D2059CFE9F6085677D4B7FA264F533A0F Validity Not Before: Sep 21 07:06:44 2026 GMT Not After : Sep 28 07:06:44 2026 GMT Subject: CN=6ab0d784-343a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6a:81:f9:f5:f4:23:3a:23:6d:c0:b9:d8:eb: f0:cc:f1:5b:2a:25:83:1e:a3:4c:e9:c6:b1:b5:a1: 3b:95:84:9f:37:05:64:44:68:82:56:71:30:97:f0: 7d:67:2a:c4:52:2e:7f:f1:26:98:b5:85:9b:28:37: c3:4e:f0:a8:1d:5d:00:e7:d2:a3:0f:49:72:71:9c: c1:ea:48:93:9e:f4:d7:24:65:a0:5f:62:13:0d:32: 29:0f:c9:01:1e:d6:32:ca:01:f9:60:6f:08:4d:11: 24:4a:0a:42:61:fa:48:49:78:cd:95:70:33:95:8d: b2:5a:7a:f6:d0:cc:c4:06:be:ce:a1:dc:78:63:dd: 11:38:19:ea:a4:d0:c1:3e:e3:b2:fe:2d:e4:28:b2: d9:49:d9:4f:13:ce:e8:53:38:93:47:92:f0:cb:72: 14:97:98:ad:17:a1:cc:09:4b:da:d7:46:1d:33:6a: 81:83:ca:41:1d:0c:46:86:92:d5:ae:93:9c:fc:66: 94:79:0e:f1:46:80:7c:9d:cd:9d:09:f7:74:fb:a2: 92:c6:29:91:c0:95:df:dc:29:ba:15:1a:2e:b7:68: 09:29:a7:4a:bc:c4:0d:f0:81:69:3f:75:f7:9f:39: 28:ff:25:33:e5:03:13:a1:a8:34:92:e9:3f:38:8e: 12:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:97:01:82:23:62:2B:E4:04:EB:32:02:6D:E9:1F:7F:D7:D5:22:F3 X509v3 Authority Key Identifier: keyid:3C:CE:EB:9D:20:59:CF:E9:F6:08:56:77:D4:B7:FA:26:4F:53:3A:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A423D/B9769BD8B09511F08C152778C4F9AE02/PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A423D/B9769BD8B09511F08C152778C4F9AE02/PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:fe:bb:4e:5a:43:9d:1a:f2:4d:c3:29:dd:e5:b2:d3:c7:f1: 00:52:c8:3c:7c:b7:d6:44:01:09:eb:52:af:cf:20:a1:f2:7b: af:0e:07:f7:c4:0c:1d:fe:55:05:1b:2a:c9:18:54:1d:a9:b7: e6:91:42:0e:01:1d:3b:03:6f:06:ee:26:54:0b:a3:d4:66:33: fb:32:3d:35:50:a1:77:df:ee:d1:ea:63:61:f6:4d:ce:bf:0d: 4a:30:9b:87:00:09:e9:97:b1:91:5b:45:38:89:8f:00:66:8d: 6a:a8:43:d7:68:be:90:c7:4d:e3:28:2d:25:a8:df:8f:5c:2e: f2:15:6b:01:17:3c:5d:72:cc:bd:87:21:3c:ef:5a:9c:4d:11: 27:e9:39:6e:0b:6d:8c:f4:4f:c2:20:70:21:53:7a:9c:5f:6d: f1:0e:70:d0:7e:3a:79:4a:2a:01:ef:52:bc:94:01:11:35:21: 19:80:98:ca:ec:d6:a0:fa:a5:3d:a2:27:e6:14:ec:d1:f7:53: 51:24:e5:12:8f:43:aa:e0:19:c7:14:28:3e:4d:25:b0:47:9b: ab:d7:82:10:c4:d6:97:f6:34:01:52:75:5f:62:76:01:25:ad: 8c:a2:02:fe:92:ef:f7:fb:41:a3:d1:24:c4:b1:e7:ef:fc:16: 37:62:20:ab -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICALYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQyM0QxMTAvBgNVBAUTKDNDQ0VFQjlEMjA1OUNGRTlGNjA4NTY3N0Q0QjdGQTI2 NEY1MzNBMEYwHhcNMjYwOTIxMDcwNjQ0WhcNMjYwOTI4MDcwNjQ0WjAYMRYwFAYD VQQDEw02YWIwZDc4NC0zNDNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtWqB+fX0IzojbcC52OvwzPFbKiWDHqNM6caxtaE7lYSfNwVkRGiCVnEwl/B9 ZyrEUi5/8SaYtYWbKDfDTvCoHV0A59KjD0lycZzB6kiTnvTXJGWgX2ITDTIpD8kB HtYyygH5YG8ITREkSgpCYfpISXjNlXAzlY2yWnr20MzEBr7Oodx4Y90ROBnqpNDB PuOy/i3kKLLZSdlPE87oUziTR5Lwy3IUl5itF6HMCUva10YdM2qBg8pBHQxGhpLV rpOc/GaUeQ7xRoB8nc2dCfd0+6KSximRwJXf3Cm6FRout2gJKadKvMQN8IFpP3X3 nzko/yUz5QMToag0kuk/OI4SxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIiXAYIj YivkBOsyAm3pH3/X1SLzMB8GA1UdIwQYMBaAFDzO650gWc/p9ghWd9S3+iZPUzoP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDIzRC9COTc2OUJEOEIw OTUxMUYwOEMxNTI3NzhDNEY5QUUwMi9QTTdyblNCWnotbjJDRlozMUxmNkprOVRP ZzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1BNN3JuU0Jaei1uMkNGWjMxTGY2Sms5VE9nOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDIzRC9COTc2OUJEOEIwOTUxMUYwOEMxNTI3NzhDNEY5QUUwMi9QTTdyblNCWnot bjJDRlozMUxmNkprOVRPZzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALv67TlpDnRryTcMp3eWy08fxAFLIPHy31kQBCetSr88gofJ7rw4H98QMHf5V BRsqyRhUHam35pFCDgEdOwNvBu4mVAuj1GYz+zI9NVChd9/u0epjYfZNzr8NSjCb hwAJ6ZexkVtFOImPAGaNaqhD12i+kMdN4ygtJajfj1wu8hVrARc8XXLMvYchPO9a nE0RJ+k5bgttjPRPwiBwIVN6nF9t8Q5w0H46eUoqAe9SvJQBETUhGYCYyuzWoPql PaIn5hTs0fdTUSTlEo9DquAZxxQoPk0lsEebq9eCEMTWl/Y0AVJ1X2J2ASWtjKIC /pLv9/tBo9EkxLHn7/wWN2Igqw== -----END CERTIFICATE-----Generated at Tue Sep 22 11:29:50 2026 by rpki-client