$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4B9D/4CF3B3702D1211F1BFC478F598EE528E/PDiOKfqhof7qOJefIG9GaK2oyJ4.mft File: PDiOKfqhof7qOJefIG9GaK2oyJ4.mft (raw, json) Hash identifier: /lDgEGRQlvdaPMZMTfUAn5+zDClWaTyRzAaqx7h2cG0= Subject key identifier: 2F:22:65:7B:03:38:62:9F:4D:84:DF:E4:7B:3B:8D:B7:B0:A4:91:46 Authority key identifier: 3C:38:8E:29:FA:A1:A1:FE:EA:38:97:9F:20:6F:46:68:AD:A8:C8:9E Certificate issuer: /CN=A91A4B9D/serialNumber=3C388E29FAA1A1FEEA38979F206F4668ADA8C89E Certificate serial: 60 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PDiOKfqhof7qOJefIG9GaK2oyJ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4B9D/4CF3B3702D1211F1BFC478F598EE528E/PDiOKfqhof7qOJefIG9GaK2oyJ4.mft Manifest number: 5E Signing time: Thu 24 Sep 2026 14:59:19 +0000 Manifest this update: Thu 24 Sep 2026 14:59:18 +0000 Manifest next update: Thu 01 Oct 2026 14:59:18 +0000 Files and hashes: 1: PDiOKfqhof7qOJefIG9GaK2oyJ4.crl (hash: C6oFSr4NysiXe1qfNv31XRff6qh4qoLBYGnVSGjRXbA=) 2: 1ECF684E387B11F1BDE8C228B8833773.roa (hash: wpIG5Mf53y4bmJfHAaok3Ne4FnPip0P/QZYb5ljnS2k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4B9D/4CF3B3702D1211F1BFC478F598EE528E/PDiOKfqhof7qOJefIG9GaK2oyJ4.crl rsync://rpki.apnic.net/member_repository/A91A4B9D/4CF3B3702D1211F1BFC478F598EE528E/PDiOKfqhof7qOJefIG9GaK2oyJ4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PDiOKfqhof7qOJefIG9GaK2oyJ4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 14:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 96 (0x60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4B9D, serialNumber=3C388E29FAA1A1FEEA38979F206F4668ADA8C89E Validity Not Before: Sep 24 14:59:18 2026 GMT Not After : Oct 1 14:59:18 2026 GMT Subject: CN=6ab53ac7-6300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4c:d3:06:8d:c4:e3:b9:3d:9c:4b:34:99:b2: 10:d8:d3:59:08:d8:ef:6e:d9:6d:8b:56:ba:a2:f5: 7c:b1:81:77:66:fc:3d:df:a5:bc:ac:a6:ce:98:5c: 5e:99:ae:fb:98:66:4c:ef:95:c8:80:a5:9d:eb:6c: e7:2f:7f:00:6f:04:84:53:88:c4:e9:c0:f4:29:76: e8:d3:82:a5:3f:b7:64:b7:cc:67:28:fa:9a:3a:36: 2e:bc:b3:d4:0c:36:49:8d:6c:db:e8:f4:6e:7b:0c: 0c:13:d4:3f:c6:e3:5b:41:e7:ed:ce:c6:f3:75:ce: c3:2d:35:b8:6d:81:f1:af:3b:ed:cd:11:6c:47:46: 12:7b:a3:4b:09:ac:fc:58:2b:1a:9f:71:d1:fa:97: 8d:ae:b4:87:63:3a:13:c6:dd:e8:b1:4f:19:a1:30: bd:6d:94:6e:d6:c0:17:aa:8c:51:bd:46:5b:63:77: be:bd:bd:08:29:28:e4:c7:fe:bb:13:40:21:ba:a7: 9e:1f:ca:12:0f:19:95:87:6f:37:2f:f3:f1:8c:8f: 2d:d6:8c:e4:00:6b:eb:5a:a3:b1:94:5f:70:02:94: 47:5f:14:c5:e6:ec:11:54:1c:19:ae:5a:64:c1:24: 7d:5e:66:ee:44:c2:b8:ac:00:79:98:67:87:4d:59: 84:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:22:65:7B:03:38:62:9F:4D:84:DF:E4:7B:3B:8D:B7:B0:A4:91:46 X509v3 Authority Key Identifier: keyid:3C:38:8E:29:FA:A1:A1:FE:EA:38:97:9F:20:6F:46:68:AD:A8:C8:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4B9D/4CF3B3702D1211F1BFC478F598EE528E/PDiOKfqhof7qOJefIG9GaK2oyJ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PDiOKfqhof7qOJefIG9GaK2oyJ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B9D/4CF3B3702D1211F1BFC478F598EE528E/PDiOKfqhof7qOJefIG9GaK2oyJ4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:ac:f1:ca:a3:ae:d9:a8:ad:36:cb:6d:ef:d9:ed:e7:8e:d0: 86:0d:aa:c2:b5:cd:cd:13:1e:a1:c3:ef:4f:f9:00:14:23:de: 2e:2f:b0:45:7d:e7:f7:cc:fb:a0:43:77:4e:a7:80:61:6a:8d: 9e:e2:78:94:33:44:96:86:2a:73:2a:03:df:8c:95:92:74:b2: ca:c0:dd:59:56:bd:78:57:6a:1e:12:a4:23:b2:1e:a3:0a:12: 49:a8:25:3a:04:ee:6c:c3:27:16:e5:03:e7:fa:d7:e4:72:1a: ef:5e:e8:49:68:1a:3c:7a:71:30:65:c3:db:6e:72:e5:95:87: 01:88:78:ef:7b:f8:99:33:22:04:f6:09:cc:8c:80:7c:13:fd: a3:4e:fe:df:c2:ce:05:0f:6f:69:a4:f1:e5:05:3f:6b:f7:92: 67:f5:f5:01:e5:24:d6:fb:ea:67:1f:6f:2a:3f:2f:d0:fa:98: ec:08:f3:4c:41:50:66:6d:72:4d:58:31:45:9d:6b:e0:06:e1: 8c:be:17:f6:77:d3:13:8d:21:fe:89:e3:6d:80:6e:b8:c6:a4: 83:4d:74:04:2e:42:f5:45:6b:d1:cd:b1:95:06:2a:63:b7:ea: 9e:97:4e:e8:96:36:85:a8:3b:72:87:04:bb:0d:6e:fb:82:26: 6e:79:d4:c1 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBYDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NEI5RDExMC8GA1UEBRMoM0MzODhFMjlGQUExQTFGRUVBMzg5NzlGMjA2RjQ2NjhB REE4Qzg5RTAeFw0yNjA5MjQxNDU5MThaFw0yNjEwMDExNDU5MThaMBgxFjAUBgNV BAMTDTZhYjUzYWM3LTYzMDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5TNMGjcTjuT2cSzSZshDY01kI2O9u2W2LVrqi9XyxgXdm/D3fpbysps6YXF6Z rvuYZkzvlciApZ3rbOcvfwBvBIRTiMTpwPQpdujTgqU/t2S3zGco+po6Ni68s9QM NkmNbNvo9G57DAwT1D/G41tB5+3OxvN1zsMtNbhtgfGvO+3NEWxHRhJ7o0sJrPxY KxqfcdH6l42utIdjOhPG3eixTxmhML1tlG7WwBeqjFG9Rltjd769vQgpKOTH/rsT QCG6p54fyhIPGZWHbzcv8/GMjy3WjOQAa+tao7GUX3AClEdfFMXm7BFUHBmuWmTB JH1eZu5EwrisAHmYZ4dNWYSrAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQULyJlewM4 Yp9NhN/kezuNt7CkkUYwHwYDVR0jBBgwFoAUPDiOKfqhof7qOJefIG9GaK2oyJ4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0QjlELzRDRjNCMzcwMkQx MjExRjFCRkM0NzhGNTk4RUU1MjhFL1BEaU9LZnFob2Y3cU9KZWZJRzlHYUsyb3lK NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUERpT0tmcWhvZjdxT0plZklHOUdhSzJveUo0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0 QjlELzRDRjNCMzcwMkQxMjExRjFCRkM0NzhGNTk4RUU1MjhFL1BEaU9LZnFob2Y3 cU9KZWZJRzlHYUsyb3lKNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAlrPHKo67ZqK02y23v2e3njtCGDarCtc3NEx6hw+9P+QAUI94uL7BFfef3zPug Q3dOp4Bhao2e4niUM0SWhipzKgPfjJWSdLLKwN1ZVr14V2oeEqQjsh6jChJJqCU6 BO5swycW5QPn+tfkchrvXuhJaBo8enEwZcPbbnLllYcBiHjve/iZMyIE9gnMjIB8 E/2jTv7fws4FD29ppPHlBT9r95Jn9fUB5STW++pnH28qPy/Q+pjsCPNMQVBmbXJN WDFFnWvgBuGMvhf2d9MTjSH+ieNtgG64xqSDTXQELkL1RWvRzbGVBipjt+qel07o ljaFqDtyhwS7DW77giZuedTB -----END CERTIFICATE-----Generated at Thu Sep 24 21:44:51 2026 by rpki-client