$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DA736/5A6D8B5C732711F0B152646FC4F9AE02/pa-pCJC_kpGBwDHwuO2xlOPhaeM.mft File: pa-pCJC_kpGBwDHwuO2xlOPhaeM.mft (raw, json) Hash identifier: 9m38x1E51nHktHLstJ5ggvI6NMpo8qhtAO0SjEiYRo4= Subject key identifier: 74:16:28:2F:EA:77:75:07:A7:22:5F:2C:30:76:15:49:70:00:5A:74 Authority key identifier: A5:AF:A9:08:90:BF:92:91:81:C0:31:F0:B8:ED:B1:94:E3:E1:69:E3 Certificate issuer: /CN=A91DA736/serialNumber=A5AFA90890BF929181C031F0B8EDB194E3E169E3 Certificate serial: D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pa-pCJC_kpGBwDHwuO2xlOPhaeM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA736/5A6D8B5C732711F0B152646FC4F9AE02/pa-pCJC_kpGBwDHwuO2xlOPhaeM.mft Manifest number: D2 Signing time: Mon 21 Sep 2026 06:40:39 +0000 Manifest this update: Mon 21 Sep 2026 06:40:39 +0000 Manifest next update: Mon 28 Sep 2026 06:40:39 +0000 Files and hashes: 1: pa-pCJC_kpGBwDHwuO2xlOPhaeM.crl (hash: 60MFnR2Q+7vVvML+Pw49lW+fYhnFNtmfxFUAyJ1+Xo0=) 2: 065E09BC732F11F09E8D4450C4F9AE02.roa (hash: lPETiWe8GHpbSTMrlHOlT/Ey7B1kvBXtUjo0VwOql0I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA736/5A6D8B5C732711F0B152646FC4F9AE02/pa-pCJC_kpGBwDHwuO2xlOPhaeM.crl rsync://rpki.apnic.net/member_repository/A91DA736/5A6D8B5C732711F0B152646FC4F9AE02/pa-pCJC_kpGBwDHwuO2xlOPhaeM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pa-pCJC_kpGBwDHwuO2xlOPhaeM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 06:40:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 212 (0xd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA736, serialNumber=A5AFA90890BF929181C031F0B8EDB194E3E169E3 Validity Not Before: Sep 21 06:40:39 2026 GMT Not After : Sep 28 06:40:39 2026 GMT Subject: CN=6ab0d167-1c5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:eb:6f:b6:8f:b9:06:13:91:05:cf:39:7d:81: 97:b7:dc:e2:a3:b3:48:78:94:8a:b2:df:09:cc:df: d9:e5:6b:15:77:35:ea:64:50:80:46:b7:f7:a7:4e: ab:44:5c:73:8d:3c:a1:ab:77:bb:57:70:f7:44:48: 67:22:f9:18:2d:15:0b:d9:f3:07:0d:f1:85:de:85: e5:16:19:52:82:6d:da:4c:40:85:03:4b:5b:65:85: e9:96:7d:7c:cd:22:06:e7:c3:5d:24:5a:08:e2:a0: b8:fe:10:fa:db:56:e3:77:90:ab:20:70:2e:30:7b: 37:a5:00:85:ab:b3:ac:2a:a5:41:a5:e7:79:a8:90: 9d:dc:98:6c:c9:3e:94:18:59:2d:a3:32:bc:8f:13: d9:8f:85:f1:66:b5:33:0d:f2:eb:cc:ef:3e:a0:61: c8:ba:b4:87:ef:93:b3:85:d3:72:9f:f3:3a:39:a0: ab:ba:f0:32:d7:d0:11:fa:12:64:bb:50:05:71:98: 4b:83:56:3a:27:68:8e:64:ae:4b:60:fb:cc:38:50: f5:ef:b6:2d:ac:ea:f6:4f:f7:cd:28:0c:56:1c:93: 95:f1:fb:85:86:69:54:4a:ea:92:39:e6:50:41:25: a8:dd:d8:38:17:af:34:b7:37:a2:8e:44:d1:ec:b0: 1c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:16:28:2F:EA:77:75:07:A7:22:5F:2C:30:76:15:49:70:00:5A:74 X509v3 Authority Key Identifier: keyid:A5:AF:A9:08:90:BF:92:91:81:C0:31:F0:B8:ED:B1:94:E3:E1:69:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA736/5A6D8B5C732711F0B152646FC4F9AE02/pa-pCJC_kpGBwDHwuO2xlOPhaeM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pa-pCJC_kpGBwDHwuO2xlOPhaeM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA736/5A6D8B5C732711F0B152646FC4F9AE02/pa-pCJC_kpGBwDHwuO2xlOPhaeM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:61:d3:05:a6:3a:f1:a4:f1:f5:be:93:a8:78:a6:69:9a:84: fb:a8:1c:92:1a:81:53:2d:56:61:82:d0:1c:74:5a:d2:ce:32: 4f:09:c4:28:2d:5c:3c:28:86:b9:11:52:d7:79:f5:c9:37:d0: c9:60:f0:bd:6c:24:e6:6c:4f:73:04:91:1d:da:2f:80:a5:16: 42:e4:82:e4:97:99:31:19:d0:9b:b1:0a:27:31:c4:96:a5:81: f7:c6:7a:72:0f:1d:46:f6:ae:b0:97:54:e4:1d:1d:cc:2a:3c: af:47:00:5c:9a:c5:32:b3:16:96:ef:fb:5a:f8:df:7e:26:8d: e8:c3:f5:a9:58:80:b7:6f:8b:0b:73:57:4f:c1:be:4f:aa:23: 1d:87:98:dd:2e:d5:4f:10:62:38:bb:cf:fe:41:4b:13:ce:a4: cc:a0:96:e4:40:7f:0f:47:38:70:36:5c:56:15:5d:57:59:ac: 4c:71:d7:57:bb:03:a4:e2:a3:cc:b9:42:e5:13:4a:b0:bd:35: fb:f8:65:4a:1e:33:2e:cc:b5:19:47:9b:e3:3f:59:ad:f8:2a: 48:31:a7:5b:d5:05:4f:8e:76:fa:ae:a4:cb:06:b8:ce:51:52: 38:25:15:02:f7:de:02:a3:88:ba:ce:cc:75:55:a0:bf:02:3b: 27:3c:2a:fe -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REE3MzYxMTAvBgNVBAUTKEE1QUZBOTA4OTBCRjkyOTE4MUMwMzFGMEI4RURCMTk0 RTNFMTY5RTMwHhcNMjYwOTIxMDY0MDM5WhcNMjYwOTI4MDY0MDM5WjAYMRYwFAYD VQQDEw02YWIwZDE2Ny0xYzVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoutvto+5BhORBc85fYGXt9zio7NIeJSKst8JzN/Z5WsVdzXqZFCARrf3p06r RFxzjTyhq3e7V3D3REhnIvkYLRUL2fMHDfGF3oXlFhlSgm3aTECFA0tbZYXpln18 zSIG58NdJFoI4qC4/hD621bjd5CrIHAuMHs3pQCFq7OsKqVBped5qJCd3JhsyT6U GFktozK8jxPZj4XxZrUzDfLrzO8+oGHIurSH75OzhdNyn/M6OaCruvAy19AR+hJk u1AFcZhLg1Y6J2iOZK5LYPvMOFD177YtrOr2T/fNKAxWHJOV8fuFhmlUSuqSOeZQ QSWo3dg4F680tzeijkTR7LAc0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHQWKC/q d3UHpyJfLDB2FUlwAFp0MB8GA1UdIwQYMBaAFKWvqQiQv5KRgcAx8LjtsZTj4Wnj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTczNi81QTZEOEI1Qzcz MjcxMUYwQjE1MjY0NkZDNEY5QUUwMi9wYS1wQ0pDX2twR0J3REh3dU8yeGxPUGhh ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3BhLXBDSkNfa3BHQndESHd1TzJ4bE9QaGFlTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTczNi81QTZEOEI1QzczMjcxMUYwQjE1MjY0NkZDNEY5QUUwMi9wYS1wQ0pDX2tw R0J3REh3dU8yeGxPUGhhZU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeGHTBaY68aTx9b6TqHimaZqE+6gckhqBUy1WYYLQHHRa0s4yTwnEKC1cPCiG uRFS13n1yTfQyWDwvWwk5mxPcwSRHdovgKUWQuSC5JeZMRnQm7EKJzHElqWB98Z6 cg8dRvausJdU5B0dzCo8r0cAXJrFMrMWlu/7WvjffiaN6MP1qViAt2+LC3NXT8G+ T6ojHYeY3S7VTxBiOLvP/kFLE86kzKCW5EB/D0c4cDZcVhVdV1msTHHXV7sDpOKj zLlC5RNKsL01+/hlSh4zLsy1GUeb4z9ZrfgqSDGnW9UFT452+q6kywa4zlFSOCUV AvfeAqOIus7MdVWgvwI7Jzwq/g== -----END CERTIFICATE-----Generated at Mon Sep 21 16:30:03 2026 by rpki-client