$ rpki-client -vvf rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.mft File: PWRH1yl0gylOzsuFOl5QCTXRuNc.mft (raw, json) Hash identifier: 63C1qRJqOTSyAVPyVFjojbC+7GJSn18vbnpmxfLe70Q= Subject key identifier: 48:39:64:32:AE:C6:1D:EE:B5:A1:48:EE:32:E3:F5:82:CA:5B:FC:3C Authority key identifier: 3D:64:47:D7:29:74:83:29:4E:CE:CB:85:3A:5E:50:09:35:D1:B8:D7 Certificate issuer: /CN=A9170E11/serialNumber=3D6447D7297483294ECECB853A5E500935D1B8D7 Certificate serial: 053F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PWRH1yl0gylOzsuFOl5QCTXRuNc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.mft Manifest number: 050A Signing time: Wed 20 May 2026 23:47:25 +0000 Manifest this update: Wed 20 May 2026 23:47:25 +0000 Manifest next update: Wed 27 May 2026 23:47:25 +0000 Files and hashes: 1: PWRH1yl0gylOzsuFOl5QCTXRuNc.crl (hash: SsAgF6/youMM6FBcmtD4N3390xDw2EeYC9w4sXd0n7A=) 2: 18611004B42A11EC9BD3DE42C4F9AE02.roa (hash: F7zelpLk1UD+fObDTKpqTOpRawAblSrVeJkuuPP4a6c=) 3: 27992F96832811EFA1BAAC4FC4F9AE02.roa (hash: 0q4oZUj/sR1op8iE3N1tHBskG9i5bEl+Ec/0N0iGDjI=) 4: 793803867DEA11EC9FC67D66C4F9AE02.roa (hash: M0tXX+QlMHyjlPtQ7dwCZagDlP3SILPEeJfJgeWfgIw=) 5: 5997A6A624E011EDAEC0E529C4F9AE02.roa (hash: kgUDwmWc1IMp1gXUMvhqWSGJV5h+vYuf4OkX4cdGtfg=) 6: 2CE5BE065BDA11ECAA855355C4F9AE02.roa (hash: yWnDOGXeBuapUFjfel16F3nDCGyHf2soSlsW7nZ7+cQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.crl rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PWRH1yl0gylOzsuFOl5QCTXRuNc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 23:47:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1343 (0x53f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170E11, serialNumber=3D6447D7297483294ECECB853A5E500935D1B8D7 Validity Not Before: May 20 23:47:25 2026 GMT Not After : May 27 23:47:25 2026 GMT Subject: CN=6a0e480d-bb62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:45:71:5a:db:32:3e:93:07:f0:2e:3e:61:d9: f6:41:5d:00:f2:bd:33:cd:ed:f3:db:29:8f:0c:33: 1f:eb:ad:93:e7:c9:4a:69:12:22:61:be:b2:d5:0e: 0c:fe:b2:90:58:b6:09:eb:40:5d:a2:c5:2a:9e:84: 02:41:40:72:65:3b:8f:e7:f4:66:16:f9:e9:fa:1c: 40:c2:71:c1:80:3c:68:06:ce:0e:d2:44:cf:23:8f: f1:d5:5a:20:31:39:62:a9:19:c7:cd:4c:c5:26:8f: 28:1e:94:b8:2c:57:bf:39:80:6c:63:5b:a7:39:ae: d0:1f:db:9c:4f:90:e1:da:c4:9f:bc:61:33:7d:2e: 51:68:11:19:25:d9:2f:3a:24:18:a1:74:71:ee:45: f9:8b:47:01:08:56:bc:96:02:52:48:19:f5:33:c4: 87:3d:01:ef:77:56:b5:35:49:e0:45:7b:9c:b8:eb: be:99:e6:3d:bb:a6:34:fe:a9:fa:06:23:fa:70:98: e6:2f:d6:2d:dc:a2:5e:ef:49:6e:54:e1:3d:ab:d7: de:84:97:4c:83:9a:9b:d4:e4:61:7b:b4:1b:15:6a: 70:a7:fc:d2:e7:e3:4b:af:01:b6:2b:8c:3e:87:ef: 76:45:86:e5:6e:04:9a:8f:1a:19:07:c8:85:55:4e: 6d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:39:64:32:AE:C6:1D:EE:B5:A1:48:EE:32:E3:F5:82:CA:5B:FC:3C X509v3 Authority Key Identifier: keyid:3D:64:47:D7:29:74:83:29:4E:CE:CB:85:3A:5E:50:09:35:D1:B8:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PWRH1yl0gylOzsuFOl5QCTXRuNc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:7b:1f:08:eb:1d:70:c4:03:c1:4c:37:ad:8c:78:a9:47:78: 7f:68:19:6d:cf:21:7a:12:ca:bf:9e:49:46:33:d4:e4:b6:8f: 56:dc:0d:f7:50:50:10:43:9a:7c:4b:0e:55:ac:e9:22:18:4f: e3:68:f7:7e:d9:72:b9:55:35:1e:54:c7:aa:34:ea:73:75:14: ee:71:2e:24:a0:b4:78:07:5d:43:41:14:b5:3e:e2:b4:64:f9: 1f:b6:01:41:e8:62:22:da:15:dd:7f:06:de:5e:03:40:ab:34: 1a:97:4a:6e:c4:c3:9f:16:a8:d1:5b:c4:1a:8d:4c:43:02:d4: 41:08:79:f6:46:c7:ab:4b:7c:c7:b0:a8:74:a3:ec:6f:06:e0: 40:1e:a8:2c:f0:72:70:44:38:76:e6:9f:dc:4f:b1:70:41:ff: fe:5e:5f:c4:59:15:9c:9a:e9:bb:c7:b4:89:55:93:dd:79:6a: 21:7e:56:81:86:e3:2f:42:12:60:d6:30:7f:ec:a9:4d:ba:ac: 44:de:f0:8d:29:1c:f0:bc:a3:4b:f7:b8:16:29:67:66:00:bf: 51:d4:ce:02:f2:51:18:02:06:39:3c:92:99:26:87:9c:29:6e: 25:6d:21:af:2e:09:76:f7:fe:dd:10:15:8a:7a:6a:82:56:bc: e6:e6:14:49 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBFMTExMTAvBgNVBAUTKDNENjQ0N0Q3Mjk3NDgzMjk0RUNFQ0I4NTNBNUU1MDA5 MzVEMUI4RDcwHhcNMjYwNTIwMjM0NzI1WhcNMjYwNTI3MjM0NzI1WjAYMRYwFAYD VQQDEw02YTBlNDgwZC1iYjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzUVxWtsyPpMH8C4+Ydn2QV0A8r0zze3z2ymPDDMf662T58lKaRIiYb6y1Q4M /rKQWLYJ60BdosUqnoQCQUByZTuP5/RmFvnp+hxAwnHBgDxoBs4O0kTPI4/x1Vog MTliqRnHzUzFJo8oHpS4LFe/OYBsY1unOa7QH9ucT5Dh2sSfvGEzfS5RaBEZJdkv OiQYoXRx7kX5i0cBCFa8lgJSSBn1M8SHPQHvd1a1NUngRXucuOu+meY9u6Y0/qn6 BiP6cJjmL9Yt3KJe70luVOE9q9fehJdMg5qb1ORhe7QbFWpwp/zS5+NLrwG2K4w+ h+92RYblbgSajxoZB8iFVU5t7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEg5ZDKu xh3utaFI7jLj9YLKW/w8MB8GA1UdIwQYMBaAFD1kR9cpdIMpTs7LhTpeUAk10bjX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEUxMS9EMDYwQzlCMjVC RDYxMUVDQUQ4MzM2NTFDNEY5QUUwMi9QV1JIMXlsMGd5bE96c3VGT2w1UUNUWFJ1 TmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BXUkgxeWwwZ3lsT3pzdUZPbDVRQ1RYUnVOYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEUxMS9EMDYwQzlCMjVCRDYxMUVDQUQ4MzM2NTFDNEY5QUUwMi9QV1JIMXlsMGd5 bE96c3VGT2w1UUNUWFJ1TmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADHsfCOsdcMQDwUw3rYx4qUd4f2gZbc8hehLKv55JRjPU5LaPVtwN91BQEEOa fEsOVazpIhhP42j3ftlyuVU1HlTHqjTqc3UU7nEuJKC0eAddQ0EUtT7itGT5H7YB QehiItoV3X8G3l4DQKs0GpdKbsTDnxao0VvEGo1MQwLUQQh59kbHq0t8x7CodKPs bwbgQB6oLPBycEQ4duaf3E+xcEH//l5fxFkVnJrpu8e0iVWT3XlqIX5WgYbjL0IS YNYwf+ypTbqsRN7wjSkc8LyjS/e4FilnZgC/UdTOAvJRGAIGOTySmSaHnCluJW0h ry4Jdvf+3RAVinpqgla85uYUSQ== -----END CERTIFICATE-----Generated at Thu May 21 10:28:38 2026 by rpki-client