$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft File: pcmHAk0KjqwJZAn9mewy7JBHC6M.mft (raw, json) Hash identifier: LVT9uNCnC7a2N04Ch7ehaJss9CK5+b7A6HNzpGBjCMw= Subject key identifier: 74:D7:04:AE:88:4F:0B:25:0B:38:57:61:9E:15:46:21:92:29:75:7F Authority key identifier: A5:C9:87:02:4D:0A:8E:AC:09:64:09:FD:99:EC:32:EC:90:47:0B:A3 Certificate issuer: /CN=A91E4B86/serialNumber=A5C987024D0A8EAC096409FD99EC32EC90470BA3 Certificate serial: 012D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pcmHAk0KjqwJZAn9mewy7JBHC6M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft Manifest number: 0128 Signing time: Mon 21 Sep 2026 05:45:50 +0000 Manifest this update: Mon 21 Sep 2026 05:45:49 +0000 Manifest next update: Mon 28 Sep 2026 05:45:49 +0000 Files and hashes: 1: pcmHAk0KjqwJZAn9mewy7JBHC6M.crl (hash: bHr4eVuMPUCwzyMzb3yGGxpg+c81ssWLS4tliIHziu0=) 2: 4C51E1D4F7E511EF9A28D363C4F9AE02.roa (hash: pKM2r60kiKPj1EOj5o/9P1X4OcOTkc7kjSEawMzaPfo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.crl rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pcmHAk0KjqwJZAn9mewy7JBHC6M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 05:45:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 301 (0x12d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4B86, serialNumber=A5C987024D0A8EAC096409FD99EC32EC90470BA3 Validity Not Before: Sep 21 05:45:49 2026 GMT Not After : Sep 28 05:45:49 2026 GMT Subject: CN=6ab0c48e-ac73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ce:bd:97:c3:d0:ae:e8:ac:e6:dc:df:fa:32: ff:32:e6:cc:79:b0:4e:f7:db:be:ac:56:f6:24:fd: a0:65:94:03:13:de:ca:ae:d9:2f:23:58:35:01:17: de:df:a9:18:bc:2d:72:47:44:aa:3e:1c:88:1f:79: e9:36:7c:41:98:77:3d:da:47:87:b3:5d:62:0c:df: d4:37:5e:27:c1:cf:e6:2d:1e:3e:15:fa:a0:1f:a4: 42:25:5f:88:3b:d8:61:d3:fc:c2:39:97:d0:8f:7c: 07:35:0c:a0:17:be:17:2e:0e:19:53:8c:98:2b:1c: d3:92:e0:b3:cc:1a:5a:25:ed:54:ba:1c:65:1d:5c: 01:12:57:41:13:e6:51:72:d4:40:81:e8:4f:db:fb: be:dc:c3:9d:04:3d:cb:ff:eb:0b:a5:c9:5c:63:aa: 16:92:38:fb:7d:ad:a3:aa:3e:de:1c:78:e5:23:56: 96:2d:e6:c0:21:61:61:50:c9:8e:2b:f5:4f:ca:1b: 3a:3d:c1:4c:cd:6a:46:7b:9c:a1:6f:e8:37:6d:1b: bb:b8:7c:94:cd:71:64:63:47:91:6e:61:26:68:45: cf:8b:da:7b:0f:55:f0:a7:c7:8f:52:fc:a7:81:6d: 33:c2:65:b7:e2:ae:ef:cb:7f:7d:7e:bb:09:08:11: a4:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:D7:04:AE:88:4F:0B:25:0B:38:57:61:9E:15:46:21:92:29:75:7F X509v3 Authority Key Identifier: keyid:A5:C9:87:02:4D:0A:8E:AC:09:64:09:FD:99:EC:32:EC:90:47:0B:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pcmHAk0KjqwJZAn9mewy7JBHC6M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:52:47:84:91:59:78:52:14:29:a4:c7:09:d2:50:fb:d8:aa: 0e:1f:e3:c2:83:b7:3e:c3:a8:b1:5b:8c:c3:9e:44:16:81:47: f7:cf:90:a7:b6:97:71:73:a1:c2:0d:78:43:59:a2:d3:a3:36: c5:8c:a9:b6:e1:6a:e9:97:9f:7a:9d:f3:77:ed:2e:04:1f:29: 0e:ca:26:e8:ed:6f:13:eb:aa:57:3e:52:ce:de:48:ab:5d:a9: ee:91:dd:5c:82:0a:9c:52:ab:02:9a:5a:d3:a3:11:94:2e:71: 26:0f:57:dd:1b:f8:55:36:3d:26:4a:32:36:e3:b1:11:44:dc: aa:79:09:42:7c:55:f3:65:79:0c:b2:cf:3e:ea:31:77:26:ca: 24:35:a8:e4:2b:92:1e:96:e9:51:f4:f2:e2:c5:d0:90:d6:eb: 91:0a:22:39:b1:ed:26:10:8e:e0:c6:37:fb:a6:3b:c7:82:19: 31:45:c9:9f:be:23:70:1a:f2:b3:1d:29:37:a2:a1:b6:db:d4: 44:f9:2d:e6:0d:82:5d:e4:ea:50:3c:eb:d7:33:10:56:f4:2b: 4a:cc:b4:f3:0c:a3:d8:58:9d:9c:b3:32:fa:2e:22:75:05:80: 71:1c:1a:aa:01:16:83:35:d3:4f:47:c7:27:09:09:e1:78:a3: f9:ab:45:25 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRCODYxMTAvBgNVBAUTKEE1Qzk4NzAyNEQwQThFQUMwOTY0MDlGRDk5RUMzMkVD OTA0NzBCQTMwHhcNMjYwOTIxMDU0NTQ5WhcNMjYwOTI4MDU0NTQ5WjAYMRYwFAYD VQQDEw02YWIwYzQ4ZS1hYzczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnM69l8PQruis5tzf+jL/MubMebBO99u+rFb2JP2gZZQDE97KrtkvI1g1ARfe 36kYvC1yR0SqPhyIH3npNnxBmHc92keHs11iDN/UN14nwc/mLR4+FfqgH6RCJV+I O9hh0/zCOZfQj3wHNQygF74XLg4ZU4yYKxzTkuCzzBpaJe1UuhxlHVwBEldBE+ZR ctRAgehP2/u+3MOdBD3L/+sLpclcY6oWkjj7fa2jqj7eHHjlI1aWLebAIWFhUMmO K/VPyhs6PcFMzWpGe5yhb+g3bRu7uHyUzXFkY0eRbmEmaEXPi9p7D1Xwp8ePUvyn gW0zwmW34q7vy399frsJCBGkVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHTXBK6I TwslCzhXYZ4VRiGSKXV/MB8GA1UdIwQYMBaAFKXJhwJNCo6sCWQJ/ZnsMuyQRwuj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEI4Ni84OTMzMTQ4QUY3 RTMxMUVGOEFEQThBNDFDNEY5QUUwMi9wY21IQWswS2pxd0paQW45bWV3eTdKQkhD Nk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3BjbUhBazBLanF3SlpBbjltZXd5N0pCSEM2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEI4Ni84OTMzMTQ4QUY3RTMxMUVGOEFEQThBNDFDNEY5QUUwMi9wY21IQWswS2px d0paQW45bWV3eTdKQkhDNk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAF1JHhJFZeFIUKaTHCdJQ+9iqDh/jwoO3PsOosVuMw55EFoFH98+Qp7aXcXOh wg14Q1mi06M2xYyptuFq6Zefep3zd+0uBB8pDsom6O1vE+uqVz5Szt5Iq12p7pHd XIIKnFKrAppa06MRlC5xJg9X3Rv4VTY9JkoyNuOxEUTcqnkJQnxV82V5DLLPPuox dybKJDWo5CuSHpbpUfTy4sXQkNbrkQoiObHtJhCO4MY3+6Y7x4IZMUXJn74jcBry sx0pN6KhttvURPkt5g2CXeTqUDzr1zMQVvQrSsy08wyj2FidnLMy+i4idQWAcRwa qgEWgzXTT0fHJwkJ4Xij+atFJQ== -----END CERTIFICATE-----Generated at Tue Sep 22 10:49:49 2026 by rpki-client