$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft File: PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft (raw, json) Hash identifier: L9aL0TUTAsqoggUp6PqKlG77Bc9DJC/uppBWYnlOe+o= Subject key identifier: F1:CE:E6:0C:3D:50:28:71:6E:12:B7:72:82:17:BF:96:8A:E2:83:CF Authority key identifier: 3C:69:B9:B6:01:D2:C9:F2:A3:91:5A:6F:FB:CA:3D:AD:62:E9:92:45 Certificate issuer: /CN=A91EE09C/serialNumber=3C69B9B601D2C9F2A3915A6FFBCA3DAD62E99245 Certificate serial: 0277 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft Manifest number: 0247 Signing time: Sun 11 Oct 2026 03:26:29 +0000 Manifest this update: Sun 11 Oct 2026 03:26:28 +0000 Manifest next update: Sun 18 Oct 2026 03:26:28 +0000 Files and hashes: 1: PGm5tgHSyfKjkVpv-8o9rWLpkkU.crl (hash: fugus2zmzkzP1duIKLFqcT8Y1rzAfQQesQrizIGMdik=) 2: BBD867C86F4211F19FB8B63294A30FBC.roa (hash: Ux1LupbKKyTILVZiMV0XVF3ATA64u0d7idZqHuwcw5w=) 3: 1D98617687B311EFB4972044C4F9AE02.roa (hash: xYBSN0t6jgjQfq0Vs3mLR1yw03FEouHpBcT56A28m1A=) 4: 23D4183024D711EF932FC941C4F9AE02.roa (hash: yjfhbglGwJSFqMN6zxG/h3PTnwzIZZTxeRkuErtplaI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.crl rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 03:26:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 631 (0x277) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE09C, serialNumber=3C69B9B601D2C9F2A3915A6FFBCA3DAD62E99245 Validity Not Before: Oct 11 03:26:28 2026 GMT Not After : Oct 18 03:26:28 2026 GMT Subject: CN=6acb01e5-1f4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:67:f6:92:62:71:d4:da:56:16:32:ec:d7:f3: 85:d7:19:13:c6:6c:e8:8a:2f:c8:46:d6:33:dd:e3: b7:43:98:3d:1e:9b:ba:39:90:fc:b9:f0:29:62:99: e0:ef:5e:7c:58:5f:b4:59:b2:56:19:2a:83:3c:06: 78:e7:3b:2b:21:27:39:4c:4f:91:d5:42:de:fe:f4: 44:93:7c:54:39:6e:f6:bc:d6:8b:14:c7:12:75:a3: 1d:de:c7:16:49:55:09:ad:b2:26:9c:94:5a:b9:fd: b3:04:76:4d:a7:8f:94:c9:4e:7a:d8:2a:84:5d:67: d1:b3:97:49:b4:b8:f6:46:65:59:ce:72:05:19:2a: 3d:42:83:3b:28:44:e9:b1:6d:25:d4:5c:2e:25:2e: 1b:df:d8:35:ad:38:4f:80:2e:0a:b4:d3:35:e5:30: 6c:21:f5:f9:1b:06:6c:d4:dd:6a:95:03:31:ff:43: e0:2c:0b:08:e6:1a:4e:26:19:6c:89:37:63:ec:b7: 46:74:1c:d0:a7:13:9d:8b:9c:81:1f:fb:e6:1f:a9: bf:8f:dd:12:ff:a8:6c:9f:ff:b1:0c:df:a4:6e:db: f4:b5:75:b3:84:6c:3e:ab:0c:b9:b1:53:c6:ba:cf: 00:dd:20:a1:1c:c6:39:d5:bf:e2:6e:c7:d1:88:bb: 83:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:CE:E6:0C:3D:50:28:71:6E:12:B7:72:82:17:BF:96:8A:E2:83:CF X509v3 Authority Key Identifier: keyid:3C:69:B9:B6:01:D2:C9:F2:A3:91:5A:6F:FB:CA:3D:AD:62:E9:92:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:bf:13:59:5f:9f:8d:87:a3:1c:9e:80:59:55:a2:22:96:3d: b5:79:d3:be:74:6c:5f:91:12:78:e5:19:47:42:13:87:d7:7a: e7:c5:b8:86:e7:e2:e6:9a:96:74:91:59:f0:cf:db:40:d4:67: a6:da:2b:78:08:5b:39:fc:3b:6e:3b:32:69:cf:97:6f:46:0b: 61:8f:7a:12:67:5a:03:11:27:8d:ae:89:d7:38:4e:6d:d2:64: a4:ac:67:a9:54:d4:6d:68:83:6e:02:80:a4:c8:97:7c:c0:f8: 42:61:ba:43:9a:a0:ac:d3:1d:69:16:b5:97:a7:99:36:5c:b2: 3c:07:c8:1f:19:3b:d7:4b:52:00:d4:0b:6a:f6:77:98:fd:6e: d5:86:fe:bb:a7:6d:e9:2e:ae:27:0b:21:21:71:be:af:6c:8b: eb:cb:25:f8:ca:7f:a0:73:bd:60:3d:05:f1:cb:15:16:a6:5a: 1c:12:82:c9:35:b7:4a:b0:4f:c0:19:ba:86:c2:6b:91:45:15: 3c:00:3b:1a:f8:a4:98:87:b9:04:23:61:d7:3e:55:46:0a:72: 4a:2a:b7:b3:39:15:1b:45:2e:66:b5:d8:f6:92:56:f5:c9:3f: ad:a1:3c:63:80:5a:d2:90:f1:b7:fe:46:c5:b3:f5:e2:b3:2a: be:f8:86:20 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAncwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUUwOUMxMTAvBgNVBAUTKDNDNjlCOUI2MDFEMkM5RjJBMzkxNUE2RkZCQ0EzREFE NjJFOTkyNDUwHhcNMjYxMDExMDMyNjI4WhcNMjYxMDE4MDMyNjI4WjAYMRYwFAYD VQQDEw02YWNiMDFlNS0xZjRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Wf2kmJx1NpWFjLs1/OF1xkTxmzoii/IRtYz3eO3Q5g9Hpu6OZD8ufApYpng 7158WF+0WbJWGSqDPAZ45zsrISc5TE+R1ULe/vREk3xUOW72vNaLFMcSdaMd3scW SVUJrbImnJRauf2zBHZNp4+UyU562CqEXWfRs5dJtLj2RmVZznIFGSo9QoM7KETp sW0l1FwuJS4b39g1rThPgC4KtNM15TBsIfX5GwZs1N1qlQMx/0PgLAsI5hpOJhls iTdj7LdGdBzQpxOdi5yBH/vmH6m/j90S/6hsn/+xDN+kbtv0tXWzhGw+qwy5sVPG us8A3SChHMY51b/ibsfRiLuDswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPHO5gw9 UChxbhK3coIXv5aK4oPPMB8GA1UdIwQYMBaAFDxpubYB0snyo5Fab/vKPa1i6ZJF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTA5Qy9FRUY3NjJDMDkw NzUxMUVFODdEMjY2ODBDNEY5QUUwMi9QR201dGdIU3lmS2prVnB2LThvOXJXTHBr a1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BHbTV0Z0hTeWZLamtWcHYtOG85cldMcGtrVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RTA5Qy9FRUY3NjJDMDkwNzUxMUVFODdEMjY2ODBDNEY5QUUwMi9QR201dGdIU3lm S2prVnB2LThvOXJXTHBra1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZL8TWV+fjYejHJ6AWVWiIpY9tXnTvnRsX5ESeOUZR0ITh9d658W4hufi5pqW dJFZ8M/bQNRnptoreAhbOfw7bjsyac+Xb0YLYY96EmdaAxEnja6J1zhObdJkpKxn qVTUbWiDbgKApMiXfMD4QmG6Q5qgrNMdaRa1l6eZNlyyPAfIHxk710tSANQLavZ3 mP1u1Yb+u6dt6S6uJwshIXG+r2yL68sl+Mp/oHO9YD0F8csVFqZaHBKCyTW3SrBP wBm6hsJrkUUVPAA7GvikmIe5BCNh1z5VRgpySiq3szkVG0UuZrXY9pJW9ck/raE8 Y4Ba0pDxt/5GxbP14rMqvviGIA== -----END CERTIFICATE-----Generated at Sun Oct 11 17:03:42 2026 by rpki-client