$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft File: PfG7945KTnVEGahIyf0My9LmpFg.mft (raw, json) Hash identifier: WEqq9C9diQE8t04txBHQm94VAf6ya31YzqnPKxNYGIE= Subject key identifier: 38:76:E3:CD:5E:A6:97:FF:F6:20:EE:A9:63:66:AC:51:83:26:30:D9 Authority key identifier: 3D:F1:BB:F7:8E:4A:4E:75:44:19:A8:48:C9:FD:0C:CB:D2:E6:A4:58 Certificate issuer: /CN=A91C1052/serialNumber=3DF1BBF78E4A4E754419A848C9FD0CCBD2E6A458 Certificate serial: 02D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfG7945KTnVEGahIyf0My9LmpFg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft Manifest number: 02C8 Signing time: Wed 23 Sep 2026 01:07:42 +0000 Manifest this update: Wed 23 Sep 2026 01:07:41 +0000 Manifest next update: Wed 30 Sep 2026 01:07:41 +0000 Files and hashes: 1: PfG7945KTnVEGahIyf0My9LmpFg.crl (hash: mJNgkN4gv3fppxlg0FJjYpHX5565XMWnN+i1Z5vJQOs=) 2: D6E2AAC0772911ED95084884C4F9AE02.roa (hash: 9uMRdpoWckw3Fu7tp6GE6C4ygIb26UeNoRv4LKPo7V0=) 3: 74A3C1988E8311ED903ADA1CC4F9AE02.roa (hash: +nejaKv7xuZCKQJRBEYk2kIxhLSRjN7BLyKcA9G8qXE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.crl rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfG7945KTnVEGahIyf0My9LmpFg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 01:07:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 725 (0x2d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1052, serialNumber=3DF1BBF78E4A4E754419A848C9FD0CCBD2E6A458 Validity Not Before: Sep 23 01:07:41 2026 GMT Not After : Sep 30 01:07:41 2026 GMT Subject: CN=6ab3265e-2a53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c7:c7:ba:8f:db:a6:10:8a:93:aa:9c:bc:7b: a0:9b:b4:01:4f:e2:5b:fe:f9:02:b2:5a:58:8c:d7: 53:e7:ba:c2:bb:09:94:36:fb:be:bb:55:0c:50:60: ab:32:69:b9:c0:49:4f:b6:c2:30:ab:cf:ae:b5:94: 00:37:2c:e5:2f:e0:ff:dc:6a:e4:53:69:a6:34:3e: b9:48:2d:78:7a:c7:a2:59:f5:30:e9:27:95:07:7d: a3:1b:d5:9e:66:c3:61:c6:0a:d7:1b:e0:d6:41:90: a6:72:f2:a9:7a:89:c0:96:00:86:f0:e3:4d:92:ee: a9:99:7b:8e:d7:14:d6:a0:e9:7e:1c:1a:20:07:d5: 2e:78:92:f8:3c:fc:cf:8b:18:e4:dc:4a:54:08:54: 3d:cd:5c:61:32:ab:af:1a:3f:ac:5f:5a:1f:76:aa: bc:b8:b5:d7:77:77:34:55:d2:31:b9:b2:f7:ad:6b: 7c:f8:2e:ae:52:5a:37:1a:a9:91:a1:d5:6a:a1:0d: 92:3f:4d:de:62:66:63:13:ea:cc:b3:7c:bd:a6:d8: c8:30:8c:ea:e9:4a:4c:eb:b1:c6:95:d5:fe:cf:c8: 45:df:0b:a3:ef:b4:36:0c:22:7e:c1:6b:25:d5:c3: d1:f5:a8:cb:f0:51:2f:d9:bd:b9:ec:de:c9:06:f8: 3d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:76:E3:CD:5E:A6:97:FF:F6:20:EE:A9:63:66:AC:51:83:26:30:D9 X509v3 Authority Key Identifier: keyid:3D:F1:BB:F7:8E:4A:4E:75:44:19:A8:48:C9:FD:0C:CB:D2:E6:A4:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfG7945KTnVEGahIyf0My9LmpFg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:cb:01:b6:00:0d:00:92:9a:21:ff:5d:cc:48:ca:76:16:3e: 56:1f:70:e3:c4:1c:d4:fe:9f:fe:c9:9a:bf:20:4b:92:0b:71: ba:8d:62:6f:6a:5f:a7:0e:c0:23:1c:62:46:bb:f4:8e:ea:7d: 1b:c0:7e:d3:d8:14:32:fc:27:6c:1a:ad:88:d4:a3:5c:83:21: d2:1e:cb:4c:e7:84:e2:3b:b9:9b:2a:5b:13:0f:0e:68:ca:3b: ca:78:1c:95:f3:04:6a:b6:4e:67:44:65:e4:0b:35:fc:d0:9a: b2:cf:44:aa:73:83:3f:c1:0d:ba:7e:b7:94:32:d9:88:86:07: d3:e6:05:fe:ae:55:fb:38:df:6b:8b:c4:07:e6:97:14:64:b2: 3e:f3:ab:90:a4:a9:8e:22:a0:f0:9d:8d:74:18:5d:46:0e:05: b5:6e:fa:ca:75:1d:54:5b:79:2a:a0:ed:4a:4a:ed:14:d6:3e: d4:02:e7:dd:05:4f:4a:b3:9f:63:82:48:59:6e:3f:e4:ff:ab: 56:33:c0:90:7d:10:1c:ce:fe:43:a4:88:61:14:2c:06:c5:77: cb:f3:02:f8:76:25:e2:b4:0b:bd:28:41:4f:fd:df:20:08:6c: c7:10:79:0a:65:1a:49:6e:85:45:e6:21:ae:7b:ac:b9:84:fa: 51:26:c4:b8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAtUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzEwNTIxMTAvBgNVBAUTKDNERjFCQkY3OEU0QTRFNzU0NDE5QTg0OEM5RkQwQ0NC RDJFNkE0NTgwHhcNMjYwOTIzMDEwNzQxWhcNMjYwOTMwMDEwNzQxWjAYMRYwFAYD VQQDEw02YWIzMjY1ZS0yYTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1cfHuo/bphCKk6qcvHugm7QBT+Jb/vkCslpYjNdT57rCuwmUNvu+u1UMUGCr Mmm5wElPtsIwq8+utZQANyzlL+D/3GrkU2mmND65SC14eseiWfUw6SeVB32jG9We ZsNhxgrXG+DWQZCmcvKpeonAlgCG8ONNku6pmXuO1xTWoOl+HBogB9UueJL4PPzP ixjk3EpUCFQ9zVxhMquvGj+sX1ofdqq8uLXXd3c0VdIxubL3rWt8+C6uUlo3GqmR odVqoQ2SP03eYmZjE+rMs3y9ptjIMIzq6UpM67HGldX+z8hF3wuj77Q2DCJ+wWsl 1cPR9ajL8FEv2b257N7JBvg9mwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDh2481e ppf/9iDuqWNmrFGDJjDZMB8GA1UdIwQYMBaAFD3xu/eOSk51RBmoSMn9DMvS5qRY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTA1Mi84MDZGQjI3Njc3 MjYxMUVEODZEMDk2ODBDNEY5QUUwMi9QZkc3OTQ1S1RuVkVHYWhJeWYwTXk5TG1w RmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BmRzc5NDVLVG5WRUdhaEl5ZjBNeTlMbXBGZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTA1Mi84MDZGQjI3Njc3MjYxMUVEODZEMDk2ODBDNEY5QUUwMi9QZkc3OTQ1S1Ru VkVHYWhJeWYwTXk5TG1wRmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMssBtgANAJKaIf9dzEjKdhY+Vh9w48Qc1P6f/smavyBLkgtxuo1ib2pfpw7A IxxiRrv0jup9G8B+09gUMvwnbBqtiNSjXIMh0h7LTOeE4ju5mypbEw8OaMo7yngc lfMEarZOZ0Rl5As1/NCass9EqnODP8ENun63lDLZiIYH0+YF/q5V+zjfa4vEB+aX FGSyPvOrkKSpjiKg8J2NdBhdRg4FtW76ynUdVFt5KqDtSkrtFNY+1ALn3QVPSrOf Y4JIWW4/5P+rVjPAkH0QHM7+Q6SIYRQsBsV3y/MC+HYl4rQLvShBT/3fIAhsxxB5 CmUaSW6FReYhrnusuYT6USbEuA== -----END CERTIFICATE-----Generated at Thu Sep 24 22:55:41 2026 by rpki-client