$ rpki-client -vvvf rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.mft File: PWRH1yl0gylOzsuFOl5QCTXRuNc.mft (raw, json) Hash identifier: TsHHjfVYjzZR4/vWN8yx5Aoefc6fFD/sw4dZIlrczu4= Subject key identifier: 8B:36:29:10:CF:69:74:28:32:CF:60:60:DC:03:31:A4:34:0B:B9:61 Authority key identifier: 3D:64:47:D7:29:74:83:29:4E:CE:CB:85:3A:5E:50:09:35:D1:B8:D7 Certificate issuer: /CN=A9170E11/serialNumber=3D6447D7297483294ECECB853A5E500935D1B8D7 Certificate serial: 0575 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PWRH1yl0gylOzsuFOl5QCTXRuNc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.mft Manifest number: 0540 Signing time: Wed 02 Sep 2026 23:30:24 +0000 Manifest this update: Wed 02 Sep 2026 23:30:24 +0000 Manifest next update: Wed 09 Sep 2026 23:30:24 +0000 Files and hashes: 1: PWRH1yl0gylOzsuFOl5QCTXRuNc.crl (hash: GTGvBlDTXFpsL05C1iCvn/5kpC3LjhTcBdy1rdhaOVk=) 2: 18611004B42A11EC9BD3DE42C4F9AE02.roa (hash: F7zelpLk1UD+fObDTKpqTOpRawAblSrVeJkuuPP4a6c=) 3: 793803867DEA11EC9FC67D66C4F9AE02.roa (hash: M0tXX+QlMHyjlPtQ7dwCZagDlP3SILPEeJfJgeWfgIw=) 4: 2CE5BE065BDA11ECAA855355C4F9AE02.roa (hash: yWnDOGXeBuapUFjfel16F3nDCGyHf2soSlsW7nZ7+cQ=) 5: 5997A6A624E011EDAEC0E529C4F9AE02.roa (hash: kgUDwmWc1IMp1gXUMvhqWSGJV5h+vYuf4OkX4cdGtfg=) 6: 27992F96832811EFA1BAAC4FC4F9AE02.roa (hash: 0q4oZUj/sR1op8iE3N1tHBskG9i5bEl+Ec/0N0iGDjI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.crl rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PWRH1yl0gylOzsuFOl5QCTXRuNc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Sep 2026 23:30:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1397 (0x575) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170E11, serialNumber=3D6447D7297483294ECECB853A5E500935D1B8D7 Validity Not Before: Sep 2 23:30:24 2026 GMT Not After : Sep 9 23:30:24 2026 GMT Subject: CN=6a98b190-ff32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:58:65:c0:8b:78:b8:d7:be:fb:dc:85:4a:91: b2:ff:08:e3:f5:af:3f:7c:27:b7:e9:10:d8:25:17: 56:f2:04:5f:24:26:8b:3c:9e:7b:6e:01:21:03:f5: 40:7c:28:99:8a:41:9d:7f:cd:61:11:fd:f8:4e:f1: 8d:86:d8:76:6f:b1:e5:93:76:49:1c:55:8a:c4:6d: ee:0f:be:92:d3:1f:b3:f9:a2:c7:c6:38:df:da:94: 9b:41:42:86:9a:7a:37:79:82:87:8d:43:30:ee:fe: ef:74:83:dd:49:82:06:f7:4e:5b:b2:77:d6:0c:8f: 38:70:ca:ca:74:5d:78:8e:80:90:0c:03:27:2c:dd: 65:aa:a8:a0:c7:96:dc:6e:77:59:48:e3:de:40:84: 06:d1:39:0b:8f:9d:64:72:78:04:64:33:46:5e:e3: 70:68:b8:7c:1d:91:75:f8:0f:4a:67:63:c1:c6:8c: c6:72:05:37:8b:cb:94:59:dd:83:62:79:04:9d:77: cf:39:b4:e1:30:81:0a:e9:1c:d8:82:72:2c:ed:e6: 9a:2e:2f:cd:e2:ea:3d:b9:0c:2b:ed:d2:0b:1c:0e: a3:e3:6a:1f:3b:72:d7:fa:d0:40:50:96:9a:74:e4: 75:ae:53:86:c7:55:25:c4:50:8e:8c:bf:ad:8c:01: dc:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:36:29:10:CF:69:74:28:32:CF:60:60:DC:03:31:A4:34:0B:B9:61 X509v3 Authority Key Identifier: keyid:3D:64:47:D7:29:74:83:29:4E:CE:CB:85:3A:5E:50:09:35:D1:B8:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PWRH1yl0gylOzsuFOl5QCTXRuNc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:0b:17:ef:8c:0d:ae:76:3a:44:dc:86:5a:fa:14:46:8f:c3: b6:7b:12:4d:d6:b7:9e:f4:ec:ec:33:87:f5:18:16:6b:f6:aa: 79:9e:b5:6d:59:3d:c0:f2:3a:bc:a6:e5:3e:7c:06:cc:e0:04: 29:bb:e1:56:07:ef:3c:23:4f:df:30:b3:5b:1b:fe:39:f8:cb: 77:ce:be:ac:ba:fa:e6:c7:23:d7:4d:30:e7:bd:67:35:8b:9f: 7e:84:d6:05:9d:03:93:50:16:ef:4f:62:1a:0c:dc:58:39:88: 76:5d:26:a7:31:b6:da:22:9f:39:26:f2:18:7b:68:d7:8d:e4: 9f:05:5e:18:6e:1d:f8:a8:85:ae:13:4f:ce:c0:ab:7b:67:4c: e1:93:da:23:9d:5a:19:3d:33:c4:4c:82:43:27:58:13:87:42: 83:43:0f:3a:55:70:9d:9a:c7:85:8e:9f:cb:b4:2f:e2:a2:b3: 11:8d:79:02:bd:4b:ce:5f:ef:e3:6f:e2:78:4a:0b:ba:cf:a4: a2:c4:b6:0c:71:33:24:a2:17:7a:31:9d:fb:95:3f:ee:21:ec: 16:37:b3:f1:f0:92:c8:bd:19:55:19:34:67:91:e6:d0:65:5d: c2:65:1d:76:18:61:23:d3:7d:66:ae:ed:83:83:0d:6a:27:e4: 8f:ff:7b:f6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBXUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBFMTExMTAvBgNVBAUTKDNENjQ0N0Q3Mjk3NDgzMjk0RUNFQ0I4NTNBNUU1MDA5 MzVEMUI4RDcwHhcNMjYwOTAyMjMzMDI0WhcNMjYwOTA5MjMzMDI0WjAYMRYwFAYD VQQDEw02YTk4YjE5MC1mZjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvlhlwIt4uNe++9yFSpGy/wjj9a8/fCe36RDYJRdW8gRfJCaLPJ57bgEhA/VA fCiZikGdf81hEf34TvGNhth2b7Hlk3ZJHFWKxG3uD76S0x+z+aLHxjjf2pSbQUKG mno3eYKHjUMw7v7vdIPdSYIG905bsnfWDI84cMrKdF14joCQDAMnLN1lqqigx5bc bndZSOPeQIQG0TkLj51kcngEZDNGXuNwaLh8HZF1+A9KZ2PBxozGcgU3i8uUWd2D YnkEnXfPObThMIEK6RzYgnIs7eaaLi/N4uo9uQwr7dILHA6j42ofO3LX+tBAUJaa dOR1rlOGx1UlxFCOjL+tjAHcLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIs2KRDP aXQoMs9gYNwDMaQ0C7lhMB8GA1UdIwQYMBaAFD1kR9cpdIMpTs7LhTpeUAk10bjX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEUxMS9EMDYwQzlCMjVC RDYxMUVDQUQ4MzM2NTFDNEY5QUUwMi9QV1JIMXlsMGd5bE96c3VGT2w1UUNUWFJ1 TmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BXUkgxeWwwZ3lsT3pzdUZPbDVRQ1RYUnVOYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEUxMS9EMDYwQzlCMjVCRDYxMUVDQUQ4MzM2NTFDNEY5QUUwMi9QV1JIMXlsMGd5 bE96c3VGT2w1UUNUWFJ1TmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhgsX74wNrnY6RNyGWvoURo/DtnsSTda3nvTs7DOH9RgWa/aqeZ61bVk9wPI6 vKblPnwGzOAEKbvhVgfvPCNP3zCzWxv+OfjLd86+rLr65scj100w571nNYuffoTW BZ0Dk1AW709iGgzcWDmIdl0mpzG22iKfOSbyGHto143knwVeGG4d+KiFrhNPzsCr e2dM4ZPaI51aGT0zxEyCQydYE4dCg0MPOlVwnZrHhY6fy7Qv4qKzEY15Ar1Lzl/v 42/ieEoLus+kosS2DHEzJKIXejGd+5U/7iHsFjez8fCSyL0ZVRk0Z5Hm0GVdwmUd dhhhI9N9Zq7tg4MNaifkj/979g== -----END CERTIFICATE-----Generated at Fri Sep 4 22:29:07 2026 by rpki-client