$ rpki-client -vvf rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft File: PX_qy2M6a4KTI7HplE1K-Y3do3I.mft (raw, json) Hash identifier: cw/0xJW76o1mBVG2Ilba8hNb78+TLb2GLPS8OXWAd1I= Subject key identifier: 87:D1:4E:96:E8:D3:2F:38:83:E6:D1:C2:9A:A2:2E:61:CE:E7:A0:DE Authority key identifier: 3D:7F:EA:CB:63:3A:6B:82:93:23:B1:E9:94:4D:4A:F9:8D:DD:A3:72 Certificate issuer: /CN=A9172BD3/serialNumber=3D7FEACB633A6B829323B1E9944D4AF98DDDA372 Certificate serial: 01B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PX_qy2M6a4KTI7HplE1K-Y3do3I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft Manifest number: 01A8 Signing time: Sun 05 Apr 2026 03:38:15 +0000 Manifest this update: Sun 05 Apr 2026 03:38:14 +0000 Manifest next update: Sun 12 Apr 2026 03:38:14 +0000 Files and hashes: 1: PX_qy2M6a4KTI7HplE1K-Y3do3I.crl (hash: JKklKjihI4je/7/c7Yci8KAP4tqJkA9pw8Vlt8ZlWws=) 2: 97F15FD8068D11EF839A3054C4F9AE02.roa (hash: ZR91Xkb9WqCmTw6bc0Cn1+z+jAwWu9sevUXMNk3wUeg=) 3: 78321A66068D11EF92608943C4F9AE02.roa (hash: B+SJqxW4okca9e4x0qcp3bdPieQGRwfLcj5Bf3jCnkw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.crl rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PX_qy2M6a4KTI7HplE1K-Y3do3I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 03:38:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 432 (0x1b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172BD3, serialNumber=3D7FEACB633A6B829323B1E9944D4AF98DDDA372 Validity Not Before: Apr 5 03:38:14 2026 GMT Not After : Apr 12 03:38:14 2026 GMT Subject: CN=69d1d926-0bf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:89:24:2e:8c:5f:85:80:0e:67:b7:54:9d:08: 9d:e8:8e:51:3d:6e:11:ce:ff:75:04:f2:81:87:61: 03:9b:86:5b:84:eb:e5:b1:59:5d:b3:21:a6:c6:9c: 5f:9c:60:80:eb:2e:a8:ac:ce:43:a9:be:84:58:8d: 20:88:8e:b7:de:ab:83:e8:bd:40:9d:da:4a:f3:17: 07:3a:2b:13:c6:ad:c0:48:08:3a:a1:82:33:5f:7e: fe:88:ce:df:b1:e2:91:60:57:5b:ca:14:5d:b4:f1: 8b:02:61:3c:cb:c8:8d:83:ee:94:e4:8e:fe:56:5c: 21:21:a9:53:28:a9:d2:72:18:48:7c:b5:e4:ba:51: f3:66:85:8d:4f:a2:8a:8f:b5:04:06:ba:d4:5a:7a: 8e:9b:a4:7a:d7:37:7c:67:34:fd:6f:e4:dd:8f:fc: e1:20:f1:8a:9f:0c:a7:d9:55:e7:d4:40:34:81:36: 28:c0:a9:f3:5c:e7:b4:e5:3d:94:51:8a:07:48:a5: 0c:21:e9:71:5c:10:53:f8:1d:9e:e8:09:d9:e3:89: 06:ea:71:c8:37:a0:bf:cd:6e:1d:d3:ae:0d:00:cd: 00:28:91:68:47:84:31:2c:2b:26:f9:ea:74:0e:da: 06:a1:9d:59:fa:f1:71:85:4c:fc:3d:7b:12:51:4e: bd:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:D1:4E:96:E8:D3:2F:38:83:E6:D1:C2:9A:A2:2E:61:CE:E7:A0:DE X509v3 Authority Key Identifier: keyid:3D:7F:EA:CB:63:3A:6B:82:93:23:B1:E9:94:4D:4A:F9:8D:DD:A3:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PX_qy2M6a4KTI7HplE1K-Y3do3I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d6:9a:50:fa:c4:f3:8c:e6:3e:72:c2:16:dd:f8:95:e2:f5:9b: 23:92:97:ad:5c:05:8d:8d:77:a2:d7:1a:4a:6f:71:bc:64:fa: 7c:05:bc:0e:eb:5d:a1:a5:27:75:e0:d6:e9:0d:fa:c6:ff:01: e7:5c:c7:df:df:75:be:bf:a2:ff:1b:9f:6d:00:69:6a:34:35: b9:df:59:c4:b2:3c:16:39:54:15:2f:b1:90:6b:bb:1b:3e:78: 33:ae:d3:c0:28:66:d1:77:39:ae:f3:56:96:7f:dc:f8:7b:5f: b1:96:f7:f3:15:11:66:c8:bf:58:2a:b2:96:55:d4:bf:e6:65: e0:20:d7:f5:0c:ce:26:a1:ee:e4:24:44:47:34:f8:cb:67:dc: 0b:d5:9e:7f:21:33:2e:c9:14:e9:f7:09:41:d5:35:5f:3b:51: da:00:68:6e:93:a3:e7:be:4e:bf:53:88:38:08:72:ff:a8:40: 1c:57:e2:e3:da:79:59:c7:8f:21:8a:58:01:06:4c:bf:59:3d: 34:8b:65:02:28:8d:d8:62:05:eb:4d:8b:ef:9c:96:51:1f:a6: 35:a7:79:02:a4:f0:ba:b5:ce:d6:1b:15:59:2a:08:13:17:89: ce:13:6b:5f:9e:9a:31:e1:81:3a:07:cf:99:99:b2:7f:95:a6: f2:f2:93:22 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJCRDMxMTAvBgNVBAUTKDNEN0ZFQUNCNjMzQTZCODI5MzIzQjFFOTk0NEQ0QUY5 OEREREEzNzIwHhcNMjYwNDA1MDMzODE0WhcNMjYwNDEyMDMzODE0WjAYMRYwFAYD VQQDEw02OWQxZDkyNi0wYmYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoYkkLoxfhYAOZ7dUnQid6I5RPW4Rzv91BPKBh2EDm4ZbhOvlsVldsyGmxpxf nGCA6y6orM5Dqb6EWI0giI633quD6L1AndpK8xcHOisTxq3ASAg6oYIzX37+iM7f seKRYFdbyhRdtPGLAmE8y8iNg+6U5I7+VlwhIalTKKnSchhIfLXkulHzZoWNT6KK j7UEBrrUWnqOm6R61zd8ZzT9b+Tdj/zhIPGKnwyn2VXn1EA0gTYowKnzXOe05T2U UYoHSKUMIelxXBBT+B2e6AnZ44kG6nHIN6C/zW4d064NAM0AKJFoR4QxLCsm+ep0 DtoGoZ1Z+vFxhUz8PXsSUU69swIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIfRTpbo 0y84g+bRwpqiLmHO56DeMB8GA1UdIwQYMBaAFD1/6stjOmuCkyOx6ZRNSvmN3aNy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkJEMy82NEJGRjE0RUIz RjcxMUVFOTJBNDc3MTdDNEY5QUUwMi9QWF9xeTJNNmE0S1RJN0hwbEUxSy1ZM2Rv M0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BYX3F5Mk02YTRLVEk3SHBsRTFLLVkzZG8zSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkJEMy82NEJGRjE0RUIzRjcxMUVFOTJBNDc3MTdDNEY5QUUwMi9QWF9xeTJNNmE0 S1RJN0hwbEUxSy1ZM2RvM0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA1ppQ+sTzjOY+csIW3fiV4vWbI5KXrVwFjY13otcaSm9xvGT6fAW8DutdoaUn deDW6Q36xv8B51zH3991vr+i/xufbQBpajQ1ud9ZxLI8FjlUFS+xkGu7Gz54M67T wChm0Xc5rvNWln/c+HtfsZb38xURZsi/WCqyllXUv+Zl4CDX9QzOJqHu5CRERzT4 y2fcC9WefyEzLskU6fcJQdU1XztR2gBobpOj575Ov1OIOAhy/6hAHFfi49p5WceP IYpYAQZMv1k9NItlAiiN2GIF602L75yWUR+mNad5AqTwurXO1hsVWSoIExeJzhNr X56aMeGBOgfPmZmyf5Wm8vKTIg== -----END CERTIFICATE-----Generated at Mon Apr 6 09:58:06 2026 by rpki-client