$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.mft File: pnTGcB4rDOPRB-nyNsVc7-aHaPE.mft (raw, json) Hash identifier: fdFHCdhaUMKuBlNjdCwWd1rXF2lzEPGgHDrrnY7GWzU= Subject key identifier: 1C:A0:C7:2B:19:19:5A:52:32:C2:91:F5:35:72:24:64:B4:A4:97:65 Authority key identifier: A6:74:C6:70:1E:2B:0C:E3:D1:07:E9:F2:36:C5:5C:EF:E6:87:68:F1 Certificate issuer: /CN=A91DD902/serialNumber=A674C6701E2B0CE3D107E9F236C55CEFE68768F1 Certificate serial: 02B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnTGcB4rDOPRB-nyNsVc7-aHaPE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.mft Manifest number: 02AB Signing time: Mon 09 Nov 2026 01:37:29 +0000 Manifest this update: Mon 09 Nov 2026 01:37:28 +0000 Manifest next update: Mon 16 Nov 2026 01:37:28 +0000 Files and hashes: 1: pnTGcB4rDOPRB-nyNsVc7-aHaPE.crl (hash: +qL/DoJfIFuz50xrNqBc3Qzfe+eOHdUaTPHkCc8mhHQ=) 2: 33A48584C92911EDAE3AB84EC4F9AE02.roa (hash: oPoTgdYw+Xp4zsCLRgOst4RRIJvgrTE9ExRg+Am+0NI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.crl rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnTGcB4rDOPRB-nyNsVc7-aHaPE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 01:37:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 690 (0x2b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD902, serialNumber=A674C6701E2B0CE3D107E9F236C55CEFE68768F1 Validity Not Before: Nov 9 01:37:28 2026 GMT Not After : Nov 16 01:37:28 2026 GMT Subject: CN=6af123d8-67b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:37:a2:99:bf:ba:ee:33:1c:da:b1:4e:d6:5b: 44:0d:b8:b3:10:9a:6a:ad:99:43:60:3e:a8:37:8d: 35:e6:46:14:70:36:ac:3b:06:4e:95:69:ca:fc:fe: 67:b4:53:e8:08:4f:85:95:e1:07:58:7c:2d:3b:4e: 27:9f:4d:b9:6d:7d:08:2b:a3:d5:db:70:25:c6:d9: f9:65:be:f8:0e:14:6e:b3:d9:03:9d:2e:1f:a3:4d: 70:56:6f:a6:ce:f5:a5:7e:68:1d:b9:2e:3a:19:f5: 5a:e0:e0:98:cb:38:96:71:1d:12:94:18:84:54:59: 20:47:7d:09:f2:2b:d3:45:dc:9a:00:5c:61:ba:cd: 79:14:d0:41:f4:84:cf:3b:a3:2a:d1:ec:aa:c0:8f: d0:5a:10:be:ea:2e:ad:e4:7d:9c:02:a8:0f:9e:09: e3:77:a3:c8:84:31:8e:69:b2:dc:5f:95:4f:fa:59: 3f:7c:4c:03:7a:88:5e:44:e8:8a:48:fb:d8:1d:db: 10:c5:7a:99:99:24:72:9a:a3:ea:51:60:5e:7d:4a: 14:b0:b1:69:15:7d:e2:4f:b1:68:b9:29:d6:da:f0: 0b:3e:3f:24:56:83:9f:d9:fc:77:17:94:52:b8:d9: 9c:c1:06:d9:1e:bc:3c:f7:30:b1:91:24:c2:08:cc: 3c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:A0:C7:2B:19:19:5A:52:32:C2:91:F5:35:72:24:64:B4:A4:97:65 X509v3 Authority Key Identifier: keyid:A6:74:C6:70:1E:2B:0C:E3:D1:07:E9:F2:36:C5:5C:EF:E6:87:68:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnTGcB4rDOPRB-nyNsVc7-aHaPE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:0f:4d:3e:89:cd:6f:c8:21:4d:65:28:74:df:4b:26:a6:14: 44:68:bd:bd:66:1c:70:e3:09:5e:68:7c:5b:4c:22:fe:d7:0a: 3f:46:86:08:e7:dc:ad:3d:e2:ec:1b:df:49:df:7b:71:68:94: b1:12:b8:9e:17:ef:72:9d:99:83:f6:7c:05:32:d5:21:fc:c3: f8:3b:03:ae:f8:a7:45:e9:f7:4f:6d:bb:30:74:4e:ce:c2:b5: cf:65:67:88:1c:41:ca:a3:38:20:30:d2:80:39:74:62:9e:3f: 6e:e1:cf:3b:48:88:80:f0:9c:83:9a:07:6a:22:ec:86:5e:04: 0b:9a:0e:ec:f8:00:5b:06:85:e9:58:78:a6:f5:88:61:80:69: ca:d7:1a:1e:b2:06:bf:d1:9b:d4:fd:e1:d2:2e:3a:5b:66:54: 63:b2:2a:8b:90:d9:04:b7:3f:54:31:3e:c3:40:8b:53:2f:54: 4f:28:c6:31:d3:a5:56:77:70:8d:d9:8d:6a:e7:b8:0e:2a:da: ef:9f:d6:67:51:d4:33:91:e8:39:08:6f:bd:59:41:76:68:8d: a5:66:a7:2a:8f:48:68:71:04:ca:0b:47:b1:cb:e0:e3:31:fa: ff:ac:ad:0f:47:f9:e9:9e:3e:ac:d6:ae:ba:1a:bb:d3:fa:3f: 47:a4:52:9e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICArIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQ5MDIxMTAvBgNVBAUTKEE2NzRDNjcwMUUyQjBDRTNEMTA3RTlGMjM2QzU1Q0VG RTY4NzY4RjEwHhcNMjYxMTA5MDEzNzI4WhcNMjYxMTE2MDEzNzI4WjAYMRYwFAYD VQQDEw02YWYxMjNkOC02N2I4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwDeimb+67jMc2rFO1ltEDbizEJpqrZlDYD6oN4015kYUcDasOwZOlWnK/P5n tFPoCE+FleEHWHwtO04nn025bX0IK6PV23Alxtn5Zb74DhRus9kDnS4fo01wVm+m zvWlfmgduS46GfVa4OCYyziWcR0SlBiEVFkgR30J8ivTRdyaAFxhus15FNBB9ITP O6Mq0eyqwI/QWhC+6i6t5H2cAqgPngnjd6PIhDGOabLcX5VP+lk/fEwDeoheROiK SPvYHdsQxXqZmSRymqPqUWBefUoUsLFpFX3iT7FouSnW2vALPj8kVoOf2fx3F5RS uNmcwQbZHrw89zCxkSTCCMw8AQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBygxysZ GVpSMsKR9TVyJGS0pJdlMB8GA1UdIwQYMBaAFKZ0xnAeKwzj0Qfp8jbFXO/mh2jx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDkwMi81NzBCM0Y4RUM5 MjYxMUVEQUYyQjlENERDNEY5QUUwMi9wblRHY0I0ckRPUFJCLW55TnNWYzctYUhh UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BuVEdjQjRyRE9QUkItbnlOc1ZjNy1hSGFQRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDkwMi81NzBCM0Y4RUM5MjYxMUVEQUYyQjlENERDNEY5QUUwMi9wblRHY0I0ckRP UFJCLW55TnNWYzctYUhhUEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMA9NPonNb8ghTWUodN9LJqYURGi9vWYccOMJXmh8W0wi/tcKP0aGCOfcrT3i 7BvfSd97cWiUsRK4nhfvcp2Zg/Z8BTLVIfzD+DsDrvinRen3T227MHROzsK1z2Vn iBxByqM4IDDSgDl0Yp4/buHPO0iIgPCcg5oHaiLshl4EC5oO7PgAWwaF6Vh4pvWI YYBpytcaHrIGv9Gb1P3h0i46W2ZUY7Iqi5DZBLc/VDE+w0CLUy9UTyjGMdOlVndw jdmNaue4Dira75/WZ1HUM5HoOQhvvVlBdmiNpWanKo9IaHEEygtHscvg4zH6/6yt D0f56Z4+rNauuhq70/o/R6RSng== -----END CERTIFICATE-----Generated at Tue Nov 10 06:29:17 2026 by rpki-client