$ rpki-client -vvvf rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft File: PX_qy2M6a4KTI7HplE1K-Y3do3I.mft (raw, json) Hash identifier: +2SYo6W+lzea6LPtxPkUNYnVekMshZsHN+PCozqOWfM= Subject key identifier: 7F:1A:9E:8F:1A:43:AB:78:6A:96:DD:98:AB:5E:44:CE:44:A1:42:8B Authority key identifier: 3D:7F:EA:CB:63:3A:6B:82:93:23:B1:E9:94:4D:4A:F9:8D:DD:A3:72 Certificate issuer: /CN=A9172BD3/serialNumber=3D7FEACB633A6B829323B1E9944D4AF98DDDA372 Certificate serial: 021B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PX_qy2M6a4KTI7HplE1K-Y3do3I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft Manifest number: 0211 Signing time: Tue 27 Oct 2026 03:17:12 +0000 Manifest this update: Tue 27 Oct 2026 03:17:11 +0000 Manifest next update: Tue 03 Nov 2026 03:17:11 +0000 Files and hashes: 1: PX_qy2M6a4KTI7HplE1K-Y3do3I.crl (hash: 0JBoSocWN18proUDP/nW9sm2z/P7q19zeKo8iZI7wvU=) 2: 78321A66068D11EF92608943C4F9AE02.roa (hash: 5UiyGeebz2scg4gBW5wMGNarCtgnSEGr0R8BVofACP0=) 3: 97F15FD8068D11EF839A3054C4F9AE02.roa (hash: zmOLhDjLLlYiaqwa8RVMxb2GzAY0iWJCLtJiuDqYk1M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.crl rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PX_qy2M6a4KTI7HplE1K-Y3do3I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 03:17:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 539 (0x21b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172BD3, serialNumber=3D7FEACB633A6B829323B1E9944D4AF98DDDA372 Validity Not Before: Oct 27 03:17:11 2026 GMT Not After : Nov 3 03:17:11 2026 GMT Subject: CN=6ae017b8-225e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:ee:9e:7c:38:d7:7a:22:05:d0:18:1b:be:f9: 46:56:32:3b:a3:bf:d5:e0:76:cc:de:b5:45:d3:7f: 92:ee:93:1e:b8:99:67:57:a6:9c:01:0c:f6:de:80: 9c:ef:df:82:ab:36:8f:43:60:f0:94:57:19:86:d3: 18:df:da:4f:0b:f6:d8:68:21:71:7a:65:0b:cc:48: 21:e1:66:b9:b7:8e:fc:e3:30:ae:4f:2d:4d:bd:7f: e6:bb:b5:b8:1c:b3:86:0b:69:52:d9:bb:c8:61:c7: 34:b2:5f:9e:e7:66:93:ed:8a:45:66:5b:43:e8:d7: ef:9a:33:6f:bb:04:7a:70:29:b4:3f:91:58:ad:f6: d5:e7:d1:8c:1b:08:18:21:40:ec:64:66:2c:b0:9f: bb:9d:6a:b5:1f:61:c3:76:54:e4:1a:c5:9b:af:d3: a3:ad:3c:d4:21:5f:1e:e3:8e:fc:87:89:8e:ad:91: ba:52:a4:dc:74:ad:29:fa:fd:76:84:44:ed:ee:63: 8e:ab:a6:c0:5b:cc:39:f5:5f:21:ff:65:8c:b7:2a: 19:f0:12:33:e3:da:02:93:e1:24:1d:fe:15:90:23: 5b:45:a0:0f:02:f0:b3:5a:45:d8:44:c0:13:01:44: e1:60:01:b0:76:27:76:df:ae:ed:16:f4:dc:72:ef: 32:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:1A:9E:8F:1A:43:AB:78:6A:96:DD:98:AB:5E:44:CE:44:A1:42:8B X509v3 Authority Key Identifier: keyid:3D:7F:EA:CB:63:3A:6B:82:93:23:B1:E9:94:4D:4A:F9:8D:DD:A3:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PX_qy2M6a4KTI7HplE1K-Y3do3I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:e1:53:2d:72:4a:25:3b:c2:d9:8c:b0:e8:c1:fc:b1:a5:55: 08:93:6f:4f:f3:49:52:ed:6b:ec:0a:93:5c:16:72:94:60:8b: 17:4f:20:51:69:f4:b5:96:7d:77:f8:19:d9:47:43:6c:c4:76: d8:f2:00:db:88:81:92:ff:b1:6b:7e:ee:b8:95:87:be:c8:33: 23:6d:36:25:c8:e9:0c:a9:2b:9f:f0:ed:d3:66:02:96:a3:fb: 5c:dd:24:cf:08:d4:97:0e:e4:28:0d:41:7b:60:85:90:d3:3d: 6f:2b:d6:cd:bf:e4:4b:c4:4e:d5:54:e9:c9:57:82:c8:4a:35: 5f:c0:69:da:c0:84:7f:e3:a1:21:33:ec:ff:82:69:84:43:8c: b0:2a:7b:47:de:b6:72:5b:09:95:c9:70:08:04:cb:61:ce:f5: 98:66:ec:f5:5e:a0:d2:52:ac:b9:0f:9c:52:97:df:b0:82:9f: 90:5c:a2:60:56:92:a8:fe:90:3d:9b:64:5a:5f:0a:5c:21:9f: 3e:7b:18:a4:75:d0:71:d1:5c:18:94:5c:5a:e1:d0:dd:58:5a: 8a:82:19:2a:a6:8c:2b:ea:e8:86:2b:2a:16:f0:8f:41:b9:91: 19:7e:17:91:2a:04:d2:82:7e:0c:15:75:dd:e6:a7:b3:2f:b4: 1c:e4:7d:ae -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJCRDMxMTAvBgNVBAUTKDNEN0ZFQUNCNjMzQTZCODI5MzIzQjFFOTk0NEQ0QUY5 OEREREEzNzIwHhcNMjYxMDI3MDMxNzExWhcNMjYxMTAzMDMxNzExWjAYMRYwFAYD VQQDEw02YWUwMTdiOC0yMjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6O6efDjXeiIF0BgbvvlGVjI7o7/V4HbM3rVF03+S7pMeuJlnV6acAQz23oCc 79+CqzaPQ2DwlFcZhtMY39pPC/bYaCFxemULzEgh4Wa5t4784zCuTy1NvX/mu7W4 HLOGC2lS2bvIYcc0sl+e52aT7YpFZltD6NfvmjNvuwR6cCm0P5FYrfbV59GMGwgY IUDsZGYssJ+7nWq1H2HDdlTkGsWbr9OjrTzUIV8e4478h4mOrZG6UqTcdK0p+v12 hETt7mOOq6bAW8w59V8h/2WMtyoZ8BIz49oCk+EkHf4VkCNbRaAPAvCzWkXYRMAT AUThYAGwdid2367tFvTccu8yZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH8ano8a Q6t4apbdmKteRM5EoUKLMB8GA1UdIwQYMBaAFD1/6stjOmuCkyOx6ZRNSvmN3aNy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkJEMy82NEJGRjE0RUIz RjcxMUVFOTJBNDc3MTdDNEY5QUUwMi9QWF9xeTJNNmE0S1RJN0hwbEUxSy1ZM2Rv M0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BYX3F5Mk02YTRLVEk3SHBsRTFLLVkzZG8zSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkJEMy82NEJGRjE0RUIzRjcxMUVFOTJBNDc3MTdDNEY5QUUwMi9QWF9xeTJNNmE0 S1RJN0hwbEUxSy1ZM2RvM0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiuFTLXJKJTvC2Yyw6MH8saVVCJNvT/NJUu1r7AqTXBZylGCLF08gUWn0tZZ9 d/gZ2UdDbMR22PIA24iBkv+xa37uuJWHvsgzI202JcjpDKkrn/Dt02YClqP7XN0k zwjUlw7kKA1Be2CFkNM9byvWzb/kS8RO1VTpyVeCyEo1X8Bp2sCEf+OhITPs/4Jp hEOMsCp7R962clsJlclwCATLYc71mGbs9V6g0lKsuQ+cUpffsIKfkFyiYFaSqP6Q PZtkWl8KXCGfPnsYpHXQcdFcGJRcWuHQ3VhaioIZKqaMK+rohisqFvCPQbmRGX4X kSoE0oJ+DBV13eansy+0HOR9rg== -----END CERTIFICATE-----Generated at Tue Oct 27 12:34:15 2026 by rpki-client