$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CED30/BE80C6A6AE1E11EEA7EA0A77C4F9AE02/PgzfiCrujHIh1YijxSYBjh1kyWg.mft File: PgzfiCrujHIh1YijxSYBjh1kyWg.mft (raw, json) Hash identifier: y+AZa3nogNxrQOIXOAbJqOs6qi+TZ1sfcAYV90KV4fw= Subject key identifier: B0:86:6E:34:E9:D8:F4:1C:85:8B:F4:14:D9:38:5B:1A:90:D4:73:B8 Authority key identifier: 3E:0C:DF:88:2A:EE:8C:72:21:D5:88:A3:C5:26:01:8E:1D:64:C9:68 Certificate issuer: /CN=A91CED30/serialNumber=3E0CDF882AEE8C7221D588A3C526018E1D64C968 Certificate serial: 020D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PgzfiCrujHIh1YijxSYBjh1kyWg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CED30/BE80C6A6AE1E11EEA7EA0A77C4F9AE02/PgzfiCrujHIh1YijxSYBjh1kyWg.mft Manifest number: 0208 Signing time: Tue 13 Oct 2026 03:37:50 +0000 Manifest this update: Tue 13 Oct 2026 03:37:50 +0000 Manifest next update: Tue 20 Oct 2026 03:37:50 +0000 Files and hashes: 1: PgzfiCrujHIh1YijxSYBjh1kyWg.crl (hash: tUOV/8v4wF++Ka6fqQ9OTZCbKvHS5jQnx0rNefzSlo8=) 2: 41E0B402AE1F11EE96A5C977C4F9AE02.roa (hash: I3Aip9lEI/tB1p617YVnjX7fZuimKLHKae3IrKIw1Ds=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CED30/BE80C6A6AE1E11EEA7EA0A77C4F9AE02/PgzfiCrujHIh1YijxSYBjh1kyWg.crl rsync://rpki.apnic.net/member_repository/A91CED30/BE80C6A6AE1E11EEA7EA0A77C4F9AE02/PgzfiCrujHIh1YijxSYBjh1kyWg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PgzfiCrujHIh1YijxSYBjh1kyWg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Oct 2026 03:37:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 525 (0x20d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CED30, serialNumber=3E0CDF882AEE8C7221D588A3C526018E1D64C968 Validity Not Before: Oct 13 03:37:50 2026 GMT Not After : Oct 20 03:37:50 2026 GMT Subject: CN=6acda78e-19dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:19:2b:0d:c3:d6:68:18:81:46:42:13:94:d8: 48:fd:38:80:6d:19:70:8a:57:31:4e:a0:71:23:ee: 03:f1:c4:87:8d:90:5a:98:b1:52:f0:5a:ed:f7:f7: bd:c7:d7:b5:9d:e3:11:69:09:f5:b2:06:ed:39:ff: a8:16:0e:a7:4b:f3:40:89:b9:c9:a7:09:89:21:f1: 44:e7:68:a4:0b:79:2a:83:2c:67:c3:2b:c2:aa:26: 38:bf:a9:f0:b3:2f:15:ee:9d:32:8a:ae:c9:40:40: 29:ab:d7:d6:12:76:29:d4:b6:a8:8e:42:fd:60:ef: 03:9b:e8:80:18:c6:5d:db:0d:24:f7:43:45:e2:4f: 30:d4:21:3c:f7:0c:9b:5d:da:df:d3:d2:bc:c1:44: 44:af:8a:45:73:b7:c4:1f:61:e7:21:3f:3b:d1:01: a0:40:85:4e:cb:99:74:47:0c:9f:63:0d:01:75:50: f0:0f:96:41:da:d1:10:7e:95:65:cd:cb:d1:7a:d9: 80:05:bb:f9:41:01:a6:4c:89:14:6c:a1:2a:50:4f: 29:69:45:5b:bc:2a:8b:0f:bc:87:f4:72:d8:e1:76: 15:b7:22:16:f8:49:07:3a:04:b1:ec:af:56:fa:25: d9:c7:7f:fd:67:b6:28:a9:de:5a:1e:12:43:44:43: b5:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:86:6E:34:E9:D8:F4:1C:85:8B:F4:14:D9:38:5B:1A:90:D4:73:B8 X509v3 Authority Key Identifier: keyid:3E:0C:DF:88:2A:EE:8C:72:21:D5:88:A3:C5:26:01:8E:1D:64:C9:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CED30/BE80C6A6AE1E11EEA7EA0A77C4F9AE02/PgzfiCrujHIh1YijxSYBjh1kyWg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PgzfiCrujHIh1YijxSYBjh1kyWg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CED30/BE80C6A6AE1E11EEA7EA0A77C4F9AE02/PgzfiCrujHIh1YijxSYBjh1kyWg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:ca:dc:96:26:4a:97:79:34:82:6b:77:c5:c5:b0:ad:48:ef: 58:db:6a:9b:e1:00:ce:69:2a:27:03:5e:55:36:c8:fe:90:4b: 96:21:02:d5:cf:b3:21:85:95:e8:4f:36:dc:cb:ec:64:db:88: 13:e5:3c:53:74:dd:36:05:3f:00:78:ee:95:25:55:d0:d2:1b: fa:d0:1e:5c:92:47:4a:60:51:5c:0d:6c:05:2d:4f:a5:6f:1b: 20:56:0e:03:6f:1c:f6:66:f9:22:ca:11:46:99:85:a3:26:c4: b8:e5:2f:ad:10:03:a4:6d:98:8c:3d:a7:c0:81:7d:77:6b:65: 15:eb:8d:d2:76:80:59:49:18:51:f2:25:19:cf:6b:f6:86:37: 50:e5:ce:e2:8d:47:7e:97:7e:b6:60:ab:cc:f8:b4:bb:3b:f8: 78:c3:95:f0:43:c9:a1:26:09:c5:42:f9:31:9c:a5:9d:c4:68: 9f:db:22:80:8d:db:c8:e2:d6:13:a5:58:03:92:1d:dc:3f:0a: c5:3f:eb:39:93:f1:e7:8a:1e:3e:e5:e8:9d:74:db:fc:9a:ec: b1:83:31:85:3b:20:68:db:5a:c2:ee:9f:4c:05:64:68:7d:95: b4:53:ed:bb:73:e4:9e:21:d9:9d:e2:b4:35:40:2e:6a:6b:61: fb:f9:e8:13 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VEMzAxMTAvBgNVBAUTKDNFMENERjg4MkFFRThDNzIyMUQ1ODhBM0M1MjYwMThF MUQ2NEM5NjgwHhcNMjYxMDEzMDMzNzUwWhcNMjYxMDIwMDMzNzUwWjAYMRYwFAYD VQQDEw02YWNkYTc4ZS0xOWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAthkrDcPWaBiBRkITlNhI/TiAbRlwilcxTqBxI+4D8cSHjZBamLFS8Frt9/e9 x9e1neMRaQn1sgbtOf+oFg6nS/NAibnJpwmJIfFE52ikC3kqgyxnwyvCqiY4v6nw sy8V7p0yiq7JQEApq9fWEnYp1LaojkL9YO8Dm+iAGMZd2w0k90NF4k8w1CE89wyb Xdrf09K8wUREr4pFc7fEH2HnIT870QGgQIVOy5l0RwyfYw0BdVDwD5ZB2tEQfpVl zcvRetmABbv5QQGmTIkUbKEqUE8paUVbvCqLD7yH9HLY4XYVtyIW+EkHOgSx7K9W +iXZx3/9Z7Yoqd5aHhJDREO1qQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLCGbjTp 2PQchYv0FNk4WxqQ1HO4MB8GA1UdIwQYMBaAFD4M34gq7oxyIdWIo8UmAY4dZMlo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUQzMC9CRTgwQzZBNkFF MUUxMUVFQTdFQTBBNzdDNEY5QUUwMi9QZ3pmaUNydWpISWgxWWlqeFNZQmpoMWt5 V2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1BnemZpQ3J1akhJaDFZaWp4U1lCamgxa3lXZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUQzMC9CRTgwQzZBNkFFMUUxMUVFQTdFQTBBNzdDNEY5QUUwMi9QZ3pmaUNydWpI SWgxWWlqeFNZQmpoMWt5V2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJMrcliZKl3k0gmt3xcWwrUjvWNtqm+EAzmkqJwNeVTbI/pBLliEC1c+zIYWV 6E823MvsZNuIE+U8U3TdNgU/AHjulSVV0NIb+tAeXJJHSmBRXA1sBS1PpW8bIFYO A28c9mb5IsoRRpmFoybEuOUvrRADpG2YjD2nwIF9d2tlFeuN0naAWUkYUfIlGc9r 9oY3UOXO4o1Hfpd+tmCrzPi0uzv4eMOV8EPJoSYJxUL5MZylncRon9sigI3byOLW E6VYA5Id3D8KxT/rOZPx54oePuXonXTb/JrssYMxhTsgaNtawu6fTAVkaH2VtFPt u3PkniHZneK0NUAuamth+/noEw== -----END CERTIFICATE-----Generated at Wed Oct 14 04:11:55 2026 by rpki-client