$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.mft File: PinOb2p9uUttCRM7c_7VLd7hLas.mft (raw, json) Hash identifier: RJoVMcLgGtlW5VYevvLIkOWjERYePU8wFbuP+Bc4wNQ= Subject key identifier: E4:26:D4:4A:EC:E2:03:BC:23:B8:40:64:41:5C:77:4A:56:93:3C:9A Authority key identifier: 3E:29:CE:6F:6A:7D:B9:4B:6D:09:13:3B:73:FE:D5:2D:DE:E1:2D:AB Certificate issuer: /CN=A91CF285/serialNumber=3E29CE6F6A7DB94B6D09133B73FED52DDEE12DAB Certificate serial: 1189 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PinOb2p9uUttCRM7c_7VLd7hLas.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.mft Manifest number: 1170 Signing time: Sun 20 Sep 2026 17:11:12 +0000 Manifest this update: Sun 20 Sep 2026 17:11:12 +0000 Manifest next update: Sun 27 Sep 2026 17:11:12 +0000 Files and hashes: 1: PinOb2p9uUttCRM7c_7VLd7hLas.crl (hash: x8MtTfcL70Xe/aqIcKQYUuu/OZxzcU8V50pV7IYiFec=) 2: DC83478EEB0311ED875DD72EC4F9AE02.roa (hash: NK1hqtZdCO6WmHvrmwdW3dn10uFeaY5J8E6tA43KEZ0=) 3: AB731B004B2A11EFAAFCC92CC4F9AE02.roa (hash: Vx2WbMEsYUJvjxHD6WL00kPDD7uH5hiABevdW4+Xt0o=) 4: 073BC4F4ED3B11EDB5A01A46C4F9AE02.roa (hash: iQFJd86XO7yAIa5GnWERfrbSbZ5wfHcFrug+5uoA1TM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.crl rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PinOb2p9uUttCRM7c_7VLd7hLas.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4489 (0x1189) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF285, serialNumber=3E29CE6F6A7DB94B6D09133B73FED52DDEE12DAB Validity Not Before: Sep 20 17:11:12 2026 GMT Not After : Sep 27 17:11:12 2026 GMT Subject: CN=6ab013b0-8026 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:45:2c:22:7f:5d:e0:5b:28:e8:da:86:91:e5: c1:3a:d3:8a:b8:3e:73:a6:0b:ea:fb:13:39:98:a9: 38:73:d3:f0:d0:68:79:23:26:0e:1f:55:16:f1:55: 75:a2:ae:26:ed:74:78:75:31:ad:a3:ca:6e:b1:3e: 84:5b:fb:2c:47:5a:b7:7a:1a:37:74:26:c6:cd:d2: 62:e4:29:e2:01:f2:a8:77:ee:aa:92:a5:15:ff:f2: 4a:42:99:4e:53:72:4d:b1:ed:19:01:af:d4:b1:fb: 6f:7b:4d:2f:64:28:f5:9a:75:f5:05:f7:06:70:e3: ec:ac:cb:d8:67:dd:81:28:5c:fe:bf:58:0d:36:a8: 67:a2:a3:0d:c5:90:6c:68:f6:66:4d:c1:eb:f7:ec: 8d:75:10:9c:1c:81:c7:47:3f:18:e1:d1:32:40:0c: 46:3f:04:b0:a9:b6:ce:e2:ff:01:64:69:35:a0:09: f5:1f:15:a6:33:80:a5:9c:40:94:4a:0e:3c:1f:b8: 36:bc:db:40:d0:4c:90:3e:24:a6:b4:d7:ea:3c:ef: b7:71:07:c0:81:da:82:7d:19:57:1c:3a:fa:22:88: ac:53:a4:05:b2:5d:9a:76:43:e4:aa:02:8b:b6:9b: 35:38:cb:2c:6e:45:5a:be:7b:8b:69:d7:c5:f4:c7: ab:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:26:D4:4A:EC:E2:03:BC:23:B8:40:64:41:5C:77:4A:56:93:3C:9A X509v3 Authority Key Identifier: keyid:3E:29:CE:6F:6A:7D:B9:4B:6D:09:13:3B:73:FE:D5:2D:DE:E1:2D:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PinOb2p9uUttCRM7c_7VLd7hLas.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:b8:4b:92:6d:db:3e:ce:5c:24:08:17:fa:6b:ab:44:57:07: 7c:af:4b:06:ae:e5:f5:a7:e0:ea:15:f3:d8:6d:d3:85:2b:fc: 95:41:d0:e3:5d:81:94:d1:98:ee:b5:40:94:3b:c3:06:57:cb: f4:c5:a8:06:10:e7:5b:7e:7c:6a:6a:ce:d3:70:90:a2:a8:91: 4d:ba:9b:8c:67:e2:18:da:01:99:68:77:74:cf:8f:a7:ff:e6: 6a:d8:b1:de:53:35:c6:bf:45:f1:b9:96:83:b0:8a:29:d5:9a: 9a:88:1a:8d:4f:ed:27:e2:77:25:5e:d0:b6:d8:da:46:8e:15: 67:57:bd:c3:08:34:5d:f0:0d:4a:41:8b:fc:d2:70:94:d6:d1: 05:34:df:ec:95:a7:49:76:2d:55:4d:f9:f7:91:d7:be:5e:02: 61:89:02:1d:7e:b8:5d:e9:25:14:ed:54:fb:10:73:86:f2:5b: 64:f4:44:13:d1:67:16:f0:6e:a6:e7:22:19:de:aa:38:ab:c0: 3a:8a:ce:58:52:a6:81:64:2b:5f:e1:77:e7:6e:12:82:52:24: 06:c9:ff:bd:7d:5d:2d:c0:12:98:c6:bb:3a:3b:10:bf:3c:59: 61:d7:ba:55:03:9d:c7:c4:b0:a8:47:3f:e9:e1:8e:f8:35:e5: cf:9e:b6:ab -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0YyODUxMTAvBgNVBAUTKDNFMjlDRTZGNkE3REI5NEI2RDA5MTMzQjczRkVENTJE REVFMTJEQUIwHhcNMjYwOTIwMTcxMTEyWhcNMjYwOTI3MTcxMTEyWjAYMRYwFAYD VQQDEw02YWIwMTNiMC04MDI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqEUsIn9d4Fso6NqGkeXBOtOKuD5zpgvq+xM5mKk4c9Pw0Gh5IyYOH1UW8VV1 oq4m7XR4dTGto8pusT6EW/ssR1q3eho3dCbGzdJi5CniAfKod+6qkqUV//JKQplO U3JNse0ZAa/Usftve00vZCj1mnX1BfcGcOPsrMvYZ92BKFz+v1gNNqhnoqMNxZBs aPZmTcHr9+yNdRCcHIHHRz8Y4dEyQAxGPwSwqbbO4v8BZGk1oAn1HxWmM4ClnECU Sg48H7g2vNtA0EyQPiSmtNfqPO+3cQfAgdqCfRlXHDr6IoisU6QFsl2adkPkqgKL tps1OMssbkVavnuLadfF9MerrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOQm1Ers 4gO8I7hAZEFcd0pWkzyaMB8GA1UdIwQYMBaAFD4pzm9qfblLbQkTO3P+1S3e4S2r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjI4NS9GRDY0RjBCODM0 MEMxMUU5OTY2QzVBNzZDNEY5QUUwMi9QaW5PYjJwOXVVdHRDUk03Y183VkxkN2hM YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Bpbk9iMnA5dVV0dENSTTdjXzdWTGQ3aExhcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjI4NS9GRDY0RjBCODM0MEMxMUU5OTY2QzVBNzZDNEY5QUUwMi9QaW5PYjJwOXVV dHRDUk03Y183VkxkN2hMYXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAILhLkm3bPs5cJAgX+murRFcHfK9LBq7l9afg6hXz2G3ThSv8lUHQ412BlNGY 7rVAlDvDBlfL9MWoBhDnW358amrO03CQoqiRTbqbjGfiGNoBmWh3dM+Pp//matix 3lM1xr9F8bmWg7CKKdWamogajU/tJ+J3JV7QttjaRo4VZ1e9wwg0XfANSkGL/NJw lNbRBTTf7JWnSXYtVU3595HXvl4CYYkCHX64XeklFO1U+xBzhvJbZPREE9FnFvBu puciGd6qOKvAOorOWFKmgWQrX+F3524SglIkBsn/vX1dLcASmMa7OjsQvzxZYde6 VQOdx8SwqEc/6eGO+DXlz562qw== -----END CERTIFICATE-----Generated at Mon Sep 21 05:30:51 2026 by rpki-client