$ rpki-client -vvvf rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft File: PX_qy2M6a4KTI7HplE1K-Y3do3I.mft (raw, json) Hash identifier: wJInaBqzpwVTDB4oT7hgJnzGBoENHsve3JJm5YM4L3Y= Subject key identifier: CF:A8:D3:60:AA:F2:12:D8:94:F9:B8:A0:09:06:FE:F9:2E:4A:24:7B Authority key identifier: 3D:7F:EA:CB:63:3A:6B:82:93:23:B1:E9:94:4D:4A:F9:8D:DD:A3:72 Certificate issuer: /CN=A9172BD3/serialNumber=3D7FEACB633A6B829323B1E9944D4AF98DDDA372 Certificate serial: 0200 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PX_qy2M6a4KTI7HplE1K-Y3do3I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft Manifest number: 01F6 Signing time: Thu 03 Sep 2026 03:29:42 +0000 Manifest this update: Thu 03 Sep 2026 03:29:42 +0000 Manifest next update: Thu 10 Sep 2026 03:29:42 +0000 Files and hashes: 1: PX_qy2M6a4KTI7HplE1K-Y3do3I.crl (hash: 8Y1t07WYNVeYaVMlRmVPgB7CNmzu09QGQ1l0VgIvtVQ=) 2: 97F15FD8068D11EF839A3054C4F9AE02.roa (hash: zmOLhDjLLlYiaqwa8RVMxb2GzAY0iWJCLtJiuDqYk1M=) 3: 78321A66068D11EF92608943C4F9AE02.roa (hash: 5UiyGeebz2scg4gBW5wMGNarCtgnSEGr0R8BVofACP0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.crl rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PX_qy2M6a4KTI7HplE1K-Y3do3I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Sep 2026 03:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 512 (0x200) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172BD3, serialNumber=3D7FEACB633A6B829323B1E9944D4AF98DDDA372 Validity Not Before: Sep 3 03:29:42 2026 GMT Not After : Sep 10 03:29:42 2026 GMT Subject: CN=6a98e9a6-efe7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:fd:49:81:92:6c:66:ca:22:cf:5c:d8:23:49: 02:fe:12:82:ed:08:c1:dd:7b:e4:41:43:ff:20:fd: 8b:f8:37:2a:9a:95:24:4a:df:d0:8b:c5:a5:6d:dc: c3:28:68:d4:b6:e2:dd:a3:4f:69:b4:ce:fb:8f:ea: 11:c6:fa:68:c0:11:27:d7:87:31:43:ee:12:d8:56: 07:1c:6a:1f:ac:fd:0a:bc:ef:6d:c8:c2:cb:a3:b4: 8f:a7:53:d8:5a:09:1b:10:0a:85:3b:05:45:f1:30: b8:cd:b0:39:6f:b2:75:95:a8:3f:58:03:b0:ca:85: 62:6b:ad:3f:84:ef:26:02:c2:dd:21:be:28:1c:fa: ac:a4:ba:1a:04:12:02:2c:f5:0d:7c:f6:f3:b5:14: 56:e4:53:df:d0:b6:b9:8a:24:0e:b3:19:ad:30:3d: 29:ce:ce:b2:a7:9d:f7:ea:e7:33:45:9a:7c:cf:8e: 74:ae:78:d5:d3:93:ae:50:cf:84:f0:37:a6:03:7a: c0:b0:69:18:82:cc:45:11:7b:2e:8f:cb:6d:2e:f8: 97:4a:ed:3a:ce:dd:05:ff:4a:b7:18:0e:03:22:c1: 07:cb:8d:b5:19:b5:0a:b7:a6:44:f9:72:6d:6d:49: 92:3a:54:04:89:bf:25:09:79:68:b1:b3:77:b7:a9: 09:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:A8:D3:60:AA:F2:12:D8:94:F9:B8:A0:09:06:FE:F9:2E:4A:24:7B X509v3 Authority Key Identifier: keyid:3D:7F:EA:CB:63:3A:6B:82:93:23:B1:E9:94:4D:4A:F9:8D:DD:A3:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PX_qy2M6a4KTI7HplE1K-Y3do3I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:ff:57:46:7f:6f:1e:93:17:ee:af:ac:9b:98:11:02:19:73: 98:fd:b9:37:60:29:3d:76:8a:06:0b:41:d4:00:a4:ec:8f:59: 39:ab:f2:81:7b:2b:19:26:4e:e8:de:07:78:0e:14:c1:84:2d: c4:ae:c9:af:36:7a:b8:97:6f:05:35:77:5c:c6:77:09:7e:f9: 44:57:36:fc:c1:c7:13:7c:8f:5f:45:c3:37:1e:d4:1d:f5:ad: de:79:95:87:44:f0:c0:86:ae:5c:69:18:5d:91:3b:25:74:66: ff:57:6b:39:3f:e7:83:dd:8a:55:e5:75:8a:5b:73:5f:8f:b6: ad:31:10:c1:c2:bd:83:8c:2e:5c:27:3a:d2:61:01:ab:08:33: 93:0f:66:e6:df:bf:4d:6b:f7:08:94:80:64:b9:f6:29:3d:3d: f5:b7:c9:f0:67:b3:38:9e:63:31:2a:13:d7:9a:d9:cc:42:04: 49:2d:ea:0b:78:67:26:d3:e1:f4:c4:71:17:39:81:3c:54:14: fc:15:15:7b:3e:11:b0:c8:bd:34:01:28:bd:e4:29:ac:e9:ec: f9:62:42:3b:96:a6:48:c4:4e:28:fe:9b:6f:0f:e0:ab:36:97: 40:36:b2:fc:e7:50:9c:85:10:fc:af:4b:4e:2c:f7:56:c3:2e: 13:8b:65:04 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJCRDMxMTAvBgNVBAUTKDNEN0ZFQUNCNjMzQTZCODI5MzIzQjFFOTk0NEQ0QUY5 OEREREEzNzIwHhcNMjYwOTAzMDMyOTQyWhcNMjYwOTEwMDMyOTQyWjAYMRYwFAYD VQQDEw02YTk4ZTlhNi1lZmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyv1JgZJsZsoiz1zYI0kC/hKC7QjB3XvkQUP/IP2L+DcqmpUkSt/Qi8WlbdzD KGjUtuLdo09ptM77j+oRxvpowBEn14cxQ+4S2FYHHGofrP0KvO9tyMLLo7SPp1PY WgkbEAqFOwVF8TC4zbA5b7J1lag/WAOwyoVia60/hO8mAsLdIb4oHPqspLoaBBIC LPUNfPbztRRW5FPf0La5iiQOsxmtMD0pzs6yp5336uczRZp8z450rnjV05OuUM+E 8DemA3rAsGkYgsxFEXsuj8ttLviXSu06zt0F/0q3GA4DIsEHy421GbUKt6ZE+XJt bUmSOlQEib8lCXlosbN3t6kJwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM+o02Cq 8hLYlPm4oAkG/vkuSiR7MB8GA1UdIwQYMBaAFD1/6stjOmuCkyOx6ZRNSvmN3aNy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkJEMy82NEJGRjE0RUIz RjcxMUVFOTJBNDc3MTdDNEY5QUUwMi9QWF9xeTJNNmE0S1RJN0hwbEUxSy1ZM2Rv M0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BYX3F5Mk02YTRLVEk3SHBsRTFLLVkzZG8zSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkJEMy82NEJGRjE0RUIzRjcxMUVFOTJBNDc3MTdDNEY5QUUwMi9QWF9xeTJNNmE0 S1RJN0hwbEUxSy1ZM2RvM0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcf9XRn9vHpMX7q+sm5gRAhlzmP25N2ApPXaKBgtB1ACk7I9ZOavygXsrGSZO 6N4HeA4UwYQtxK7JrzZ6uJdvBTV3XMZ3CX75RFc2/MHHE3yPX0XDNx7UHfWt3nmV h0TwwIauXGkYXZE7JXRm/1drOT/ng92KVeV1iltzX4+2rTEQwcK9g4wuXCc60mEB qwgzkw9m5t+/TWv3CJSAZLn2KT099bfJ8GezOJ5jMSoT15rZzEIESS3qC3hnJtPh 9MRxFzmBPFQU/BUVez4RsMi9NAEoveQprOns+WJCO5amSMROKP6bbw/gqzaXQDay /OdQnIUQ/K9LTiz3VsMuE4tlBA== -----END CERTIFICATE-----Generated at Sat Sep 5 04:31:18 2026 by rpki-client