$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft File: PnOyvhMDe-dEOR06iZzdICuC920.mft (raw, json) Hash identifier: KHbWTG4U4V7R4Lh7kgQPlivJUQO0oT2QzQ3R+bc4AT4= Subject key identifier: 00:F8:DC:C2:F7:E6:48:5B:88:E6:FE:E7:35:31:13:79:25:57:75:59 Authority key identifier: 3E:73:B2:BE:13:03:7B:E7:44:39:1D:3A:89:9C:DD:20:2B:82:F7:6D Certificate issuer: /CN=A91E5D0C/serialNumber=3E73B2BE13037BE744391D3A899CDD202B82F76D Certificate serial: 05BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft Manifest number: 0596 Signing time: Tue 28 Jul 2026 23:56:15 +0000 Manifest this update: Tue 28 Jul 2026 23:56:14 +0000 Manifest next update: Tue 04 Aug 2026 23:56:14 +0000 Files and hashes: 1: PnOyvhMDe-dEOR06iZzdICuC920.crl (hash: /L7xZkQclvSc9ASFxihS245dBcKieT1sXbU1etLx7TQ=) 2: EFFA034837D111EC9337B812C4F9AE02.roa (hash: N/0bVIyC0MPM6KEQ2d3ilkuUkeyn80eIzEQ24nUZdi8=) 3: 9C581C28B07511EF9D153813C4F9AE02.roa (hash: arq5+h3KHX6t5y5Zj2CBCAg4COLqYpvoHOLbprQdcjc=) 4: FE76F7D8EC4A11EFA7845862C4F9AE02.roa (hash: MgGvtEJxOhpocdjEABKQeXDE9AITBRXrKCKdxOChgec=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.crl rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 23:56:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1466 (0x5ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D0C, serialNumber=3E73B2BE13037BE744391D3A899CDD202B82F76D Validity Not Before: Jul 28 23:56:14 2026 GMT Not After : Aug 4 23:56:14 2026 GMT Subject: CN=6a69419f-97fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8f:5e:1d:97:1e:ac:41:08:d3:d4:f0:77:f8: be:31:e9:0e:82:f8:29:06:f1:0d:65:16:a5:b9:b4: a9:3b:20:71:25:51:28:05:31:97:3b:3d:f8:9a:a1: 4b:24:5b:34:8e:f9:97:14:ff:a7:8d:c9:33:f9:df: a8:88:74:96:1b:06:63:c0:d7:0f:69:eb:a2:a6:cb: af:50:30:d7:52:7c:51:9d:89:6b:a2:06:13:ab:92: e0:47:fe:c7:59:5b:47:de:db:79:fa:a5:22:a7:98: e3:18:39:1f:e6:85:fd:d4:e8:49:b1:9c:61:31:56: 72:3f:f2:9c:94:0d:da:35:2d:de:50:21:f1:be:4d: 32:75:de:fa:e9:ae:87:e2:ee:08:cd:4a:49:38:05: 11:cf:96:23:e6:dc:07:35:fa:1e:96:48:03:f4:b7: 38:3a:10:65:8a:56:d8:de:af:57:13:1e:b1:71:0e: f9:3e:6e:28:c8:cc:6e:24:7a:a4:be:c9:a6:54:91: 89:48:8c:5e:a8:81:f3:88:75:cb:37:8a:39:b2:ff: 19:8e:72:ff:40:5f:d0:9e:60:d7:32:e8:bc:06:96: d0:1d:b9:a5:68:49:e7:09:6f:17:56:ee:3e:a2:0e: e8:9c:47:b4:2a:f0:24:28:33:b0:09:f8:18:55:44: 17:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:F8:DC:C2:F7:E6:48:5B:88:E6:FE:E7:35:31:13:79:25:57:75:59 X509v3 Authority Key Identifier: keyid:3E:73:B2:BE:13:03:7B:E7:44:39:1D:3A:89:9C:DD:20:2B:82:F7:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:5b:53:30:3f:9a:c2:e3:3a:16:08:d5:30:47:56:34:1d:c6: 00:5d:05:de:52:72:0f:29:75:57:3c:06:5f:02:71:5b:21:cc: ca:a4:f2:b8:39:80:66:7c:80:1b:75:25:c6:e8:03:23:cf:de: f8:3b:f3:7f:eb:b6:c5:4d:5b:c6:0b:6b:67:1a:37:9d:0c:70: 98:e0:d3:5e:5f:f9:75:a8:94:0a:b0:fa:d1:95:54:e5:72:40: e9:65:86:e9:45:87:2c:a4:73:57:e8:21:ca:6b:1b:3a:96:e3: ac:17:43:f6:04:9d:48:8d:a1:e0:6f:a7:4c:8c:f1:af:24:2e: 43:75:34:1a:a1:9e:bb:2f:57:4a:e9:50:b5:c6:24:56:f4:1d: 8d:96:ca:c3:1e:3b:e7:55:24:ce:f6:ab:40:7f:65:65:c3:13: 96:3b:fd:51:87:8e:d0:1e:81:fc:04:be:66:45:84:17:45:3f: 94:3c:95:b9:03:15:e9:b8:d3:58:78:c0:3e:ba:0c:6d:9c:03: a0:8b:f0:ea:71:22:87:13:75:85:fa:56:f6:7e:2d:64:17:39: 7b:7b:0f:5b:87:0f:c9:73:d7:64:a6:ea:2f:ab:76:13:88:b3: 94:48:58:89:4d:51:4e:76:93:b6:78:e7:5f:2a:16:0a:07:b0: 23:78:7d:3e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVEMEMxMTAvBgNVBAUTKDNFNzNCMkJFMTMwMzdCRTc0NDM5MUQzQTg5OUNERDIw MkI4MkY3NkQwHhcNMjYwNzI4MjM1NjE0WhcNMjYwODA0MjM1NjE0WjAYMRYwFAYD VQQDEw02YTY5NDE5Zi05N2ZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxI9eHZcerEEI09Twd/i+MekOgvgpBvENZRalubSpOyBxJVEoBTGXOz34mqFL JFs0jvmXFP+njckz+d+oiHSWGwZjwNcPaeuipsuvUDDXUnxRnYlrogYTq5LgR/7H WVtH3tt5+qUip5jjGDkf5oX91OhJsZxhMVZyP/KclA3aNS3eUCHxvk0ydd766a6H 4u4IzUpJOAURz5Yj5twHNfoelkgD9Lc4OhBlilbY3q9XEx6xcQ75Pm4oyMxuJHqk vsmmVJGJSIxeqIHziHXLN4o5sv8ZjnL/QF/QnmDXMui8BpbQHbmlaEnnCW8XVu4+ og7onEe0KvAkKDOwCfgYVUQXiwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAD43ML3 5khbiOb+5zUxE3klV3VZMB8GA1UdIwQYMBaAFD5zsr4TA3vnRDkdOomc3SArgvdt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUQwQy84OTFCNEVDQTMy MzYxMUVDODk4Mzg3NTZDNEY5QUUwMi9Qbk95dmhNRGUtZEVPUjA2aVp6ZElDdUM5 MjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BuT3l2aE1EZS1kRU9SMDZpWnpkSUN1QzkyMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUQwQy84OTFCNEVDQTMyMzYxMUVDODk4Mzg3NTZDNEY5QUUwMi9Qbk95dmhNRGUt ZEVPUjA2aVp6ZElDdUM5MjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjltTMD+awuM6FgjVMEdWNB3GAF0F3lJyDyl1VzwGXwJxWyHMyqTyuDmAZnyA G3UlxugDI8/e+Dvzf+u2xU1bxgtrZxo3nQxwmODTXl/5daiUCrD60ZVU5XJA6WWG 6UWHLKRzV+ghymsbOpbjrBdD9gSdSI2h4G+nTIzxryQuQ3U0GqGeuy9XSulQtcYk VvQdjZbKwx4751UkzvarQH9lZcMTljv9UYeO0B6B/AS+ZkWEF0U/lDyVuQMV6bjT WHjAProMbZwDoIvw6nEihxN1hfpW9n4tZBc5e3sPW4cPyXPXZKbqL6t2E4izlEhY iU1RTnaTtnjnXyoWCgewI3h9Pg== -----END CERTIFICATE-----Generated at Wed Jul 29 02:39:55 2026 by rpki-client