$ rpki-client -vvvf rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft File: PX_qy2M6a4KTI7HplE1K-Y3do3I.mft (raw, json) Hash identifier: GV6z4vMb6zW82FnoxmDGVGsKJBBjekDVijI+DQb3CoE= Subject key identifier: AA:2B:40:22:7F:E9:63:F7:3E:50:D1:C4:B1:22:29:17:A7:90:A0:3E Authority key identifier: 3D:7F:EA:CB:63:3A:6B:82:93:23:B1:E9:94:4D:4A:F9:8D:DD:A3:72 Certificate issuer: /CN=A9172BD3/serialNumber=3D7FEACB633A6B829323B1E9944D4AF98DDDA372 Certificate serial: 0201 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PX_qy2M6a4KTI7HplE1K-Y3do3I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft Manifest number: 01F7 Signing time: Sat 05 Sep 2026 03:08:48 +0000 Manifest this update: Sat 05 Sep 2026 03:08:47 +0000 Manifest next update: Sat 12 Sep 2026 03:08:47 +0000 Files and hashes: 1: PX_qy2M6a4KTI7HplE1K-Y3do3I.crl (hash: +3TZy4KOiqXgZySAcZptI6cHtPpYwNtw4iEdpGEEPHA=) 2: 78321A66068D11EF92608943C4F9AE02.roa (hash: 5UiyGeebz2scg4gBW5wMGNarCtgnSEGr0R8BVofACP0=) 3: 97F15FD8068D11EF839A3054C4F9AE02.roa (hash: zmOLhDjLLlYiaqwa8RVMxb2GzAY0iWJCLtJiuDqYk1M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.crl rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PX_qy2M6a4KTI7HplE1K-Y3do3I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 03:08:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 513 (0x201) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172BD3, serialNumber=3D7FEACB633A6B829323B1E9944D4AF98DDDA372 Validity Not Before: Sep 5 03:08:47 2026 GMT Not After : Sep 12 03:08:47 2026 GMT Subject: CN=6a9b87c0-cb4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:18:84:b1:94:c2:a9:a9:df:e8:d6:46:68:c5: a9:06:fd:ce:0d:76:02:66:a5:30:2a:6f:b4:93:9a: 94:48:47:db:00:65:c8:fd:25:c6:f2:20:76:b5:d4: 02:d1:0b:82:6f:09:60:1a:e9:d8:eb:3a:9b:63:f9: ec:82:2c:ed:4b:ae:5c:af:51:dd:f6:01:e5:33:2a: 55:f1:4e:9d:2f:a7:b9:11:d8:ca:5a:4b:65:f1:6c: 6f:b3:6d:3d:18:64:8f:1c:07:5b:de:60:ed:57:a0: f4:7e:e8:cb:22:03:a5:48:11:3f:f8:b3:17:df:04: d0:16:10:4d:a3:b6:8b:7b:8d:9d:5c:fb:d0:32:51: b8:0c:59:b0:9d:46:29:4f:59:7a:6b:ef:7e:d0:19: 82:be:61:c0:db:b3:9d:73:b1:58:b9:e4:b5:02:be: 16:e0:e1:71:12:b6:7a:07:40:c7:d3:6e:18:f1:c6: ea:44:cc:c2:07:69:32:a3:52:4e:17:46:7e:7c:74: b3:59:37:93:c0:fd:02:c4:5d:9d:9d:23:65:65:36: 0c:af:86:dd:68:c2:b0:36:a5:6f:b6:b8:30:ad:f0: 1e:a0:64:ed:86:e3:c6:8e:0c:6d:4a:89:90:66:af: c0:ba:a1:92:c3:c7:35:3b:23:ef:06:66:79:02:a4: b3:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:2B:40:22:7F:E9:63:F7:3E:50:D1:C4:B1:22:29:17:A7:90:A0:3E X509v3 Authority Key Identifier: keyid:3D:7F:EA:CB:63:3A:6B:82:93:23:B1:E9:94:4D:4A:F9:8D:DD:A3:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PX_qy2M6a4KTI7HplE1K-Y3do3I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:68:e3:f6:06:5f:f0:34:c2:65:a1:fb:f8:51:92:b1:6e:0f: 97:de:a2:57:fc:bd:63:5d:1c:ee:45:65:cf:32:8e:00:1e:67: ed:f3:67:ed:d6:a3:d6:5a:5b:6b:9e:85:2d:c1:67:82:68:53: 18:99:96:1a:f3:7d:ba:f1:78:f7:10:51:87:ee:e7:4a:bb:63: c2:95:4d:75:a8:55:26:84:71:b3:64:88:ea:3b:7b:bd:b5:bc: aa:b4:fd:89:7a:d3:1e:92:02:26:fa:84:9c:6a:f7:99:9c:0e: c3:db:2a:a4:c0:b9:ab:5f:ef:66:6e:03:ab:69:af:34:01:d3: 17:55:e7:f8:1d:75:5f:3d:15:fd:ed:00:43:28:1f:41:5d:db: 36:46:de:8f:f0:3b:b5:e3:3b:82:f8:38:c3:73:7a:bc:8d:8c: e3:d4:05:e9:95:de:36:56:74:3a:1d:12:4d:53:91:80:6c:bf: 35:35:a7:4c:3c:fb:ee:3b:72:a5:6f:9e:d3:92:dc:f5:80:56: 09:a8:63:1f:ac:c4:64:af:08:40:e2:2f:b4:55:10:58:86:ae: cb:06:d8:76:c8:be:ab:f1:a3:5d:fa:8c:51:1e:4d:a1:90:31: 80:fe:e8:e9:e3:d5:a4:cc:c7:15:3c:d4:fe:d0:c0:ad:40:95: 69:33:1d:68 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJCRDMxMTAvBgNVBAUTKDNEN0ZFQUNCNjMzQTZCODI5MzIzQjFFOTk0NEQ0QUY5 OEREREEzNzIwHhcNMjYwOTA1MDMwODQ3WhcNMjYwOTEyMDMwODQ3WjAYMRYwFAYD VQQDEw02YTliODdjMC1jYjRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlRiEsZTCqanf6NZGaMWpBv3ODXYCZqUwKm+0k5qUSEfbAGXI/SXG8iB2tdQC 0QuCbwlgGunY6zqbY/nsgiztS65cr1Hd9gHlMypV8U6dL6e5EdjKWktl8Wxvs209 GGSPHAdb3mDtV6D0fujLIgOlSBE/+LMX3wTQFhBNo7aLe42dXPvQMlG4DFmwnUYp T1l6a+9+0BmCvmHA27Odc7FYueS1Ar4W4OFxErZ6B0DH024Y8cbqRMzCB2kyo1JO F0Z+fHSzWTeTwP0CxF2dnSNlZTYMr4bdaMKwNqVvtrgwrfAeoGTthuPGjgxtSomQ Zq/AuqGSw8c1OyPvBmZ5AqSztwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKorQCJ/ 6WP3PlDRxLEiKRenkKA+MB8GA1UdIwQYMBaAFD1/6stjOmuCkyOx6ZRNSvmN3aNy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkJEMy82NEJGRjE0RUIz RjcxMUVFOTJBNDc3MTdDNEY5QUUwMi9QWF9xeTJNNmE0S1RJN0hwbEUxSy1ZM2Rv M0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BYX3F5Mk02YTRLVEk3SHBsRTFLLVkzZG8zSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkJEMy82NEJGRjE0RUIzRjcxMUVFOTJBNDc3MTdDNEY5QUUwMi9QWF9xeTJNNmE0 S1RJN0hwbEUxSy1ZM2RvM0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAimjj9gZf8DTCZaH7+FGSsW4Pl96iV/y9Y10c7kVlzzKOAB5n7fNn7daj1lpb a56FLcFngmhTGJmWGvN9uvF49xBRh+7nSrtjwpVNdahVJoRxs2SI6jt7vbW8qrT9 iXrTHpICJvqEnGr3mZwOw9sqpMC5q1/vZm4Dq2mvNAHTF1Xn+B11Xz0V/e0AQygf QV3bNkbej/A7teM7gvg4w3N6vI2M49QF6ZXeNlZ0Oh0STVORgGy/NTWnTDz77jty pW+e05Lc9YBWCahjH6zEZK8IQOIvtFUQWIauywbYdsi+q/GjXfqMUR5NoZAxgP7o 6ePVpMzHFTzU/tDArUCVaTMdaA== -----END CERTIFICATE-----Generated at Sat Sep 5 06:29:26 2026 by rpki-client