$ rpki-client -vvf rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft File: PX_qy2M6a4KTI7HplE1K-Y3do3I.mft (raw, json) Hash identifier: 1eUTWdTAduh9Vko3Wn3qJfdgMaO273OiZSIS5biwtQg= Subject key identifier: 96:53:D3:D4:B9:D5:CF:69:A9:F2:5D:81:EF:57:1B:66:B8:39:0B:E1 Authority key identifier: 3D:7F:EA:CB:63:3A:6B:82:93:23:B1:E9:94:4D:4A:F9:8D:DD:A3:72 Certificate issuer: /CN=A9172BD3/serialNumber=3D7FEACB633A6B829323B1E9944D4AF98DDDA372 Certificate serial: 01D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PX_qy2M6a4KTI7HplE1K-Y3do3I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft Manifest number: 01C7 Signing time: Mon 01 Jun 2026 04:35:38 +0000 Manifest this update: Mon 01 Jun 2026 04:35:38 +0000 Manifest next update: Mon 08 Jun 2026 04:35:38 +0000 Files and hashes: 1: PX_qy2M6a4KTI7HplE1K-Y3do3I.crl (hash: Px98KISyx6WhtQoAFfJ8ay7LEEuB0cP4U/MK6FVg4lw=) 2: 78321A66068D11EF92608943C4F9AE02.roa (hash: 5UiyGeebz2scg4gBW5wMGNarCtgnSEGr0R8BVofACP0=) 3: 97F15FD8068D11EF839A3054C4F9AE02.roa (hash: zmOLhDjLLlYiaqwa8RVMxb2GzAY0iWJCLtJiuDqYk1M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.crl rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PX_qy2M6a4KTI7HplE1K-Y3do3I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 04:35:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 465 (0x1d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172BD3, serialNumber=3D7FEACB633A6B829323B1E9944D4AF98DDDA372 Validity Not Before: Jun 1 04:35:38 2026 GMT Not After : Jun 8 04:35:38 2026 GMT Subject: CN=6a1d0c1a-974c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ee:0a:24:d6:7d:ce:08:46:69:1a:2c:fa:4e: a3:45:2b:9b:c7:88:ac:b1:3d:b0:6b:c7:58:99:55: 5d:24:54:3c:a0:c6:6c:05:b2:6b:84:e1:8a:63:79: cd:8b:04:1c:72:b9:fa:ba:3b:e9:e5:88:bd:17:8b: d4:b1:9f:d6:52:52:08:a1:83:78:e3:33:3c:70:b9: 8a:23:4d:66:7a:1f:b6:ee:13:19:8a:26:e8:45:9d: be:ad:56:0c:2d:c7:70:d8:9d:e0:57:70:fe:3d:d5: 6f:b7:4a:a5:9f:39:cd:1b:b7:b7:ea:5d:38:2f:da: e2:c7:31:0a:cc:c9:77:09:f3:3b:09:24:5c:48:ff: 21:62:87:e5:40:39:85:3c:18:9b:2d:9e:59:f9:a6: 07:80:5d:fd:5c:0d:be:2a:5a:d7:5a:b4:53:ab:73: b5:e5:91:88:4e:37:eb:8e:f8:50:27:22:7f:e1:ef: 36:21:15:be:42:c8:1a:68:fd:0b:6c:0c:f6:a3:d0: 3e:d0:e4:e9:2b:e3:38:92:db:31:aa:f9:48:26:32: ac:23:86:82:30:a1:98:60:f5:c6:d2:80:ec:4e:fa: 79:2f:f4:f6:61:02:5d:b6:f9:f7:5c:b9:fd:59:28: b2:62:36:4a:30:19:4d:9d:4f:12:46:62:ba:d3:62: 49:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:53:D3:D4:B9:D5:CF:69:A9:F2:5D:81:EF:57:1B:66:B8:39:0B:E1 X509v3 Authority Key Identifier: keyid:3D:7F:EA:CB:63:3A:6B:82:93:23:B1:E9:94:4D:4A:F9:8D:DD:A3:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PX_qy2M6a4KTI7HplE1K-Y3do3I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:2e:11:d6:56:60:ae:88:b6:33:cf:d7:72:9c:3c:16:e0:a7: 9b:44:80:8b:e0:71:5a:69:69:c0:53:67:d9:5e:ad:ad:57:18: 30:62:09:e2:20:f0:f9:d8:91:c1:f9:0c:f6:d9:93:68:d2:36: e9:24:6b:f7:8a:fe:fc:ce:61:db:ec:f9:5f:9f:16:8f:54:3e: 25:58:76:70:6a:35:6f:14:fe:64:e4:2b:e9:4c:cb:08:df:60: 7c:fb:5c:3d:05:41:10:08:46:24:2f:33:f1:ce:8d:d9:3c:44: 9a:e1:5d:bb:e5:85:9f:19:eb:4b:10:54:4c:c2:3a:1c:9e:d6: 93:f5:8b:d8:c2:40:c1:26:ff:5f:5a:6d:cb:6c:55:a3:08:78: 9b:d8:c6:5a:57:15:90:09:98:1d:5a:ec:d1:f1:8f:52:8d:4f: 7c:f8:97:22:8e:3f:8d:50:7e:32:e4:29:e0:b1:7d:8b:0a:45: ed:04:30:1a:af:8a:22:19:8b:a2:e0:3a:5f:85:26:b8:2f:3b: e4:73:5d:ad:3e:17:c4:a4:c8:5f:9a:1a:e0:47:d2:21:8f:e4: 46:65:e7:68:15:b9:bd:84:2e:5b:a2:f6:22:83:2d:1b:27:50: 5d:aa:34:13:23:c2:fa:0b:52:1b:ea:ef:16:f9:44:af:d8:36: d9:b5:ae:55 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJCRDMxMTAvBgNVBAUTKDNEN0ZFQUNCNjMzQTZCODI5MzIzQjFFOTk0NEQ0QUY5 OEREREEzNzIwHhcNMjYwNjAxMDQzNTM4WhcNMjYwNjA4MDQzNTM4WjAYMRYwFAYD VQQDEw02YTFkMGMxYS05NzRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw+4KJNZ9zghGaRos+k6jRSubx4issT2wa8dYmVVdJFQ8oMZsBbJrhOGKY3nN iwQccrn6ujvp5Yi9F4vUsZ/WUlIIoYN44zM8cLmKI01meh+27hMZiiboRZ2+rVYM Lcdw2J3gV3D+PdVvt0qlnznNG7e36l04L9rixzEKzMl3CfM7CSRcSP8hYoflQDmF PBibLZ5Z+aYHgF39XA2+KlrXWrRTq3O15ZGITjfrjvhQJyJ/4e82IRW+QsgaaP0L bAz2o9A+0OTpK+M4ktsxqvlIJjKsI4aCMKGYYPXG0oDsTvp5L/T2YQJdtvn3XLn9 WSiyYjZKMBlNnU8SRmK602JJPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJZT09S5 1c9pqfJdge9XG2a4OQvhMB8GA1UdIwQYMBaAFD1/6stjOmuCkyOx6ZRNSvmN3aNy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkJEMy82NEJGRjE0RUIz RjcxMUVFOTJBNDc3MTdDNEY5QUUwMi9QWF9xeTJNNmE0S1RJN0hwbEUxSy1ZM2Rv M0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BYX3F5Mk02YTRLVEk3SHBsRTFLLVkzZG8zSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkJEMy82NEJGRjE0RUIzRjcxMUVFOTJBNDc3MTdDNEY5QUUwMi9QWF9xeTJNNmE0 S1RJN0hwbEUxSy1ZM2RvM0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgS4R1lZgroi2M8/Xcpw8FuCnm0SAi+BxWmlpwFNn2V6trVcYMGIJ4iDw+diR wfkM9tmTaNI26SRr94r+/M5h2+z5X58Wj1Q+JVh2cGo1bxT+ZOQr6UzLCN9gfPtc PQVBEAhGJC8z8c6N2TxEmuFdu+WFnxnrSxBUTMI6HJ7Wk/WL2MJAwSb/X1pty2xV owh4m9jGWlcVkAmYHVrs0fGPUo1PfPiXIo4/jVB+MuQp4LF9iwpF7QQwGq+KIhmL ouA6X4UmuC875HNdrT4XxKTIX5oa4EfSIY/kRmXnaBW5vYQuW6L2IoMtGydQXao0 EyPC+gtSG+rvFvlEr9g22bWuVQ== -----END CERTIFICATE-----Generated at Tue Jun 2 22:28:07 2026 by rpki-client