$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C71A5/3BFA28340A8311ED8D6D832AC4F9AE02/PykJw_UywAsCV7klbHbroxTc0A8.mft File: PykJw_UywAsCV7klbHbroxTc0A8.mft (raw, json) Hash identifier: Iq0sAs4kP5IJZcQ6cgyMPSln78wOI9ttzSasVAZiiUo= Subject key identifier: 48:57:C1:07:D4:F4:5C:0C:2A:38:83:10:D7:D9:C1:85:07:D8:87:05 Authority key identifier: 3F:29:09:C3:F5:32:C0:0B:02:57:B9:25:6C:76:EB:A3:14:DC:D0:0F Certificate issuer: /CN=A91C71A5/serialNumber=3F2909C3F532C00B0257B9256C76EBA314DCD00F Certificate serial: 0390 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PykJw_UywAsCV7klbHbroxTc0A8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C71A5/3BFA28340A8311ED8D6D832AC4F9AE02/PykJw_UywAsCV7klbHbroxTc0A8.mft Manifest number: 037F Signing time: Mon 21 Sep 2026 00:37:00 +0000 Manifest this update: Mon 21 Sep 2026 00:37:00 +0000 Manifest next update: Mon 28 Sep 2026 00:37:00 +0000 Files and hashes: 1: PykJw_UywAsCV7klbHbroxTc0A8.crl (hash: A1+6jrOrg1HlSPuFQYK8uDjtJ2cnZLlqSTe+ohKd2s8=) 2: 99A7637060B311EEBA329E54C4F9AE02.roa (hash: u53J9g3LWBwbE+O/MQz1kfSyecBSZsgL9Pb+QNj8MgE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C71A5/3BFA28340A8311ED8D6D832AC4F9AE02/PykJw_UywAsCV7klbHbroxTc0A8.crl rsync://rpki.apnic.net/member_repository/A91C71A5/3BFA28340A8311ED8D6D832AC4F9AE02/PykJw_UywAsCV7klbHbroxTc0A8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PykJw_UywAsCV7klbHbroxTc0A8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 00:36:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 912 (0x390) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C71A5, serialNumber=3F2909C3F532C00B0257B9256C76EBA314DCD00F Validity Not Before: Sep 21 00:37:00 2026 GMT Not After : Sep 28 00:37:00 2026 GMT Subject: CN=6ab07c2c-1f60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:16:28:05:1c:e1:ca:89:a8:31:7c:a4:80:59: 1e:7e:2a:67:20:01:88:9d:09:3e:9b:a1:e6:88:e5: d3:9b:b5:18:ee:1d:ac:00:68:32:1c:83:f6:91:70: da:68:ee:9f:cb:e9:fb:4c:26:be:82:72:ce:21:4c: de:a1:ce:cd:b1:50:99:45:7f:93:cd:56:5c:a0:fe: 44:54:78:f9:49:09:84:f4:07:47:d0:08:cb:30:9e: 16:6c:0c:f9:33:3e:ce:56:17:79:2f:f5:32:35:7b: e3:36:7b:ce:04:e1:0b:5e:36:3d:db:9f:76:d9:89: 62:2c:0b:c1:bb:b2:72:a0:39:15:45:36:af:16:30: bf:52:42:c9:68:83:b4:18:6a:2f:41:5a:5b:9e:8e: 1e:84:d0:9e:c9:63:a0:22:d5:09:0b:07:a5:81:e4: 22:4b:b0:f9:9e:64:fb:74:af:d0:eb:03:50:e1:57: 63:2f:1b:b2:1b:65:3f:09:17:46:fb:5d:19:9b:66: a5:97:05:41:d5:ab:47:70:f5:b5:6d:12:35:13:b7: d9:d1:a7:5d:64:70:3f:f3:da:80:07:cc:d8:70:f1: 09:cb:96:b9:d3:c4:a0:28:a4:e5:1c:96:1d:85:18: 88:8b:e2:c3:b0:0e:5c:ec:ee:92:9f:63:67:0e:95: 75:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:57:C1:07:D4:F4:5C:0C:2A:38:83:10:D7:D9:C1:85:07:D8:87:05 X509v3 Authority Key Identifier: keyid:3F:29:09:C3:F5:32:C0:0B:02:57:B9:25:6C:76:EB:A3:14:DC:D0:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C71A5/3BFA28340A8311ED8D6D832AC4F9AE02/PykJw_UywAsCV7klbHbroxTc0A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PykJw_UywAsCV7klbHbroxTc0A8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C71A5/3BFA28340A8311ED8D6D832AC4F9AE02/PykJw_UywAsCV7klbHbroxTc0A8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:2e:fa:d4:3d:20:80:15:8f:0a:9c:54:65:b7:46:c4:20:8f: 75:3f:61:da:9b:0e:5f:3a:0e:89:1e:a9:d3:a1:f0:e8:df:2a: 6a:19:80:7e:15:c8:1c:4b:3d:80:2d:a9:90:ea:99:22:d2:83: 9a:3e:47:8e:79:84:e2:fe:1b:d7:be:0c:5d:b7:8f:00:74:f2: f9:d2:62:7d:77:59:86:4f:d1:14:cf:bf:bd:81:6e:f6:ab:11: 81:29:b7:d2:e7:75:c6:51:6a:64:89:5b:d7:31:b1:33:a3:7d: 9d:05:1e:0b:43:d4:a8:e0:2e:64:b8:93:6c:a9:e4:e3:6d:6c: 30:db:8e:ad:67:c9:15:0b:94:38:6a:39:1b:07:58:fc:24:98: b5:7e:2c:8d:f5:60:c4:fd:19:15:d6:65:49:43:cb:7d:f0:01: a3:44:13:e5:86:c8:57:5a:8b:fc:68:ca:cb:93:27:89:6f:56: 47:03:4b:05:74:73:c2:fb:37:d3:2b:1c:60:47:9f:9a:c4:bd: f2:6c:e1:e0:bd:00:e3:c3:f2:2b:32:88:91:74:f5:e6:1a:d8: df:78:6d:98:48:aa:91:78:88:82:07:18:55:db:68:06:22:56: 5d:ca:52:b8:ea:12:56:5b:98:f5:f9:ba:da:66:87:8b:b9:46: c6:4e:b6:c4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA5AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzcxQTUxMTAvBgNVBAUTKDNGMjkwOUMzRjUzMkMwMEIwMjU3QjkyNTZDNzZFQkEz MTREQ0QwMEYwHhcNMjYwOTIxMDAzNzAwWhcNMjYwOTI4MDAzNzAwWjAYMRYwFAYD VQQDEw02YWIwN2MyYy0xZjYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtRYoBRzhyomoMXykgFkefipnIAGInQk+m6HmiOXTm7UY7h2sAGgyHIP2kXDa aO6fy+n7TCa+gnLOIUzeoc7NsVCZRX+TzVZcoP5EVHj5SQmE9AdH0AjLMJ4WbAz5 Mz7OVhd5L/UyNXvjNnvOBOELXjY925922YliLAvBu7JyoDkVRTavFjC/UkLJaIO0 GGovQVpbno4ehNCeyWOgItUJCwelgeQiS7D5nmT7dK/Q6wNQ4VdjLxuyG2U/CRdG +10Zm2allwVB1atHcPW1bRI1E7fZ0addZHA/89qAB8zYcPEJy5a508SgKKTlHJYd hRiIi+LDsA5c7O6Sn2NnDpV15wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEhXwQfU 9FwMKjiDENfZwYUH2IcFMB8GA1UdIwQYMBaAFD8pCcP1MsALAle5JWx266MU3NAP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzFBNS8zQkZBMjgzNDBB ODMxMUVEOEQ2RDgzMkFDNEY5QUUwMi9QeWtKd19VeXdBc0NWN2tsYkhicm94VGMw QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1B5a0p3X1V5d0FzQ1Y3a2xiSGJyb3hUYzBBOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzFBNS8zQkZBMjgzNDBBODMxMUVEOEQ2RDgzMkFDNEY5QUUwMi9QeWtKd19VeXdB c0NWN2tsYkhicm94VGMwQTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALi761D0ggBWPCpxUZbdGxCCPdT9h2psOXzoOiR6p06Hw6N8qahmAfhXIHEs9 gC2pkOqZItKDmj5HjnmE4v4b174MXbePAHTy+dJifXdZhk/RFM+/vYFu9qsRgSm3 0ud1xlFqZIlb1zGxM6N9nQUeC0PUqOAuZLiTbKnk421sMNuOrWfJFQuUOGo5GwdY /CSYtX4sjfVgxP0ZFdZlSUPLffABo0QT5YbIV1qL/GjKy5MniW9WRwNLBXRzwvs3 0yscYEefmsS98mzh4L0A48PyKzKIkXT15hrY33htmEiqkXiIggcYVdtoBiJWXcpS uOoSVluY9fm62maHi7lGxk62xA== -----END CERTIFICATE-----Generated at Mon Sep 21 17:56:53 2026 by rpki-client