$ rpki-client -vvf rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft File: PX_qy2M6a4KTI7HplE1K-Y3do3I.mft (raw, json) Hash identifier: ISZHq/e9kO0d8j5zMXoMlYT3VpDOKTRa+2VQz8yetJk= Subject key identifier: A3:06:58:37:F8:11:F4:5A:71:38:07:D5:CA:4B:31:A3:29:8E:90:45 Authority key identifier: 3D:7F:EA:CB:63:3A:6B:82:93:23:B1:E9:94:4D:4A:F9:8D:DD:A3:72 Certificate issuer: /CN=A9172BD3/serialNumber=3D7FEACB633A6B829323B1E9944D4AF98DDDA372 Certificate serial: 01E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PX_qy2M6a4KTI7HplE1K-Y3do3I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft Manifest number: 01DD Signing time: Fri 17 Jul 2026 04:34:34 +0000 Manifest this update: Fri 17 Jul 2026 04:34:34 +0000 Manifest next update: Fri 24 Jul 2026 04:34:34 +0000 Files and hashes: 1: PX_qy2M6a4KTI7HplE1K-Y3do3I.crl (hash: PH5BmWutb7AOvLxX3tWmsAEZVt+vXCqkITCyuWGRChg=) 2: 97F15FD8068D11EF839A3054C4F9AE02.roa (hash: zmOLhDjLLlYiaqwa8RVMxb2GzAY0iWJCLtJiuDqYk1M=) 3: 78321A66068D11EF92608943C4F9AE02.roa (hash: 5UiyGeebz2scg4gBW5wMGNarCtgnSEGr0R8BVofACP0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.crl rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PX_qy2M6a4KTI7HplE1K-Y3do3I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 04:34:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 487 (0x1e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172BD3, serialNumber=3D7FEACB633A6B829323B1E9944D4AF98DDDA372 Validity Not Before: Jul 17 04:34:34 2026 GMT Not After : Jul 24 04:34:34 2026 GMT Subject: CN=6a59b0da-575e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:f9:b6:8f:cb:49:c4:0a:0c:71:c4:61:aa:2c: 20:1c:91:19:cc:9d:cf:51:57:a7:d0:79:09:f5:59: 56:f4:6a:32:b4:e9:9d:ef:a4:41:6e:f7:77:73:68: 8c:5f:04:a3:a4:61:4d:63:3c:a7:df:ff:f5:04:26: 3e:a8:f7:ba:df:9b:3e:e9:74:ea:da:33:06:f7:00: a7:e1:12:b1:71:2d:69:66:e5:a4:6d:10:94:15:5b: 57:5b:f7:1c:ad:3a:dd:4a:dd:bc:52:c3:c1:1d:2c: da:69:c2:9f:56:0a:d5:46:1f:35:57:0a:b0:73:70: 95:bb:c1:ac:61:35:d9:e7:63:cf:ec:d2:f2:8a:a5: 80:f7:38:39:0e:66:27:e5:c8:1a:f7:73:fd:9e:3f: a2:a0:94:e3:6c:b4:16:0f:8b:6f:30:21:30:33:3c: db:cb:ed:eb:9a:f8:86:f6:dd:8e:94:e7:b4:bb:b0: 8c:e0:e0:55:f6:8d:2a:9f:ca:0b:ac:db:22:14:54: df:33:a6:13:65:b2:34:0a:fa:1d:a3:22:c6:ca:36: 9e:bc:08:a6:00:f0:01:3d:e8:f4:fe:f7:c3:d8:b4: e7:5b:30:73:81:e6:48:c6:cd:9b:93:83:c5:3b:0f: 6f:df:1a:ef:96:32:8f:05:74:1d:83:de:3a:df:2b: 3f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:06:58:37:F8:11:F4:5A:71:38:07:D5:CA:4B:31:A3:29:8E:90:45 X509v3 Authority Key Identifier: keyid:3D:7F:EA:CB:63:3A:6B:82:93:23:B1:E9:94:4D:4A:F9:8D:DD:A3:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PX_qy2M6a4KTI7HplE1K-Y3do3I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:d2:cd:ae:75:8a:04:bd:02:ca:48:3c:29:74:03:9e:ec:6a: 32:fc:5f:92:cc:7d:c8:4a:43:1b:60:d8:42:70:e7:07:08:ef: 1d:6e:6b:cc:d2:f9:10:39:10:37:03:f7:20:8d:69:f5:b7:6a: 7b:4e:7a:0d:42:51:46:cc:ad:c6:21:dd:8c:8c:94:92:e7:a1: 0a:c1:7e:ea:e0:a4:03:b5:f7:33:76:f8:c8:56:55:27:49:04: 2c:55:17:3d:de:10:ac:27:43:fa:6c:c5:a0:a5:89:6f:fe:1f: 4e:be:36:ca:d7:ad:e4:2b:75:eb:e2:9d:5d:bb:f6:f9:bc:5f: 00:4d:f0:ae:03:b4:56:c2:e7:20:4c:c8:1f:9c:5a:00:1e:4b: 66:c9:6f:86:f6:97:0d:3a:1f:00:4e:f7:5c:91:ec:02:8c:0a: 8f:61:56:97:3e:c1:10:6c:cf:66:8a:7b:17:9d:a9:db:03:b3: 3e:91:a9:48:b6:df:4c:1e:0f:5b:41:54:0e:ac:a1:fa:33:63: d3:e5:a2:39:6a:95:44:58:73:e4:d4:e9:81:a3:a2:f2:fe:85: ba:f3:83:aa:c8:c9:d5:a1:20:59:03:cb:bc:80:2b:5f:1e:64: 1f:e2:93:b4:b1:80:19:f9:7d:a2:77:a5:9a:e6:54:06:9d:34: f6:0e:74:50 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJCRDMxMTAvBgNVBAUTKDNEN0ZFQUNCNjMzQTZCODI5MzIzQjFFOTk0NEQ0QUY5 OEREREEzNzIwHhcNMjYwNzE3MDQzNDM0WhcNMjYwNzI0MDQzNDM0WjAYMRYwFAYD VQQDEw02YTU5YjBkYS01NzVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6/m2j8tJxAoMccRhqiwgHJEZzJ3PUVen0HkJ9VlW9GoytOmd76RBbvd3c2iM XwSjpGFNYzyn3//1BCY+qPe635s+6XTq2jMG9wCn4RKxcS1pZuWkbRCUFVtXW/cc rTrdSt28UsPBHSzaacKfVgrVRh81Vwqwc3CVu8GsYTXZ52PP7NLyiqWA9zg5DmYn 5cga93P9nj+ioJTjbLQWD4tvMCEwMzzby+3rmviG9t2OlOe0u7CM4OBV9o0qn8oL rNsiFFTfM6YTZbI0CvodoyLGyjaevAimAPABPej0/vfD2LTnWzBzgeZIxs2bk4PF Ow9v3xrvljKPBXQdg9463ys/bwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKMGWDf4 EfRacTgH1cpLMaMpjpBFMB8GA1UdIwQYMBaAFD1/6stjOmuCkyOx6ZRNSvmN3aNy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkJEMy82NEJGRjE0RUIz RjcxMUVFOTJBNDc3MTdDNEY5QUUwMi9QWF9xeTJNNmE0S1RJN0hwbEUxSy1ZM2Rv M0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BYX3F5Mk02YTRLVEk3SHBsRTFLLVkzZG8zSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkJEMy82NEJGRjE0RUIzRjcxMUVFOTJBNDc3MTdDNEY5QUUwMi9QWF9xeTJNNmE0 S1RJN0hwbEUxSy1ZM2RvM0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAg9LNrnWKBL0Cykg8KXQDnuxqMvxfksx9yEpDG2DYQnDnBwjvHW5rzNL5EDkQ NwP3II1p9bdqe056DUJRRsytxiHdjIyUkuehCsF+6uCkA7X3M3b4yFZVJ0kELFUX Pd4QrCdD+mzFoKWJb/4fTr42ytet5Ct16+KdXbv2+bxfAE3wrgO0VsLnIEzIH5xa AB5LZslvhvaXDTofAE73XJHsAowKj2FWlz7BEGzPZop7F52p2wOzPpGpSLbfTB4P W0FUDqyh+jNj0+WiOWqVRFhz5NTpgaOi8v6FuvODqsjJ1aEgWQPLvIArXx5kH+KT tLGAGfl9onelmuZUBp009g50UA== -----END CERTIFICATE-----Generated at Sat Jul 18 09:31:32 2026 by rpki-client