$ rpki-client -vvf rpki.apnic.net/member_repository/A9173FAC/B8F5C76A101811F080BCC348C4F9AE02/PxqOo9KtxuyyNg4MN2zlWbn_cfI.mft File: PxqOo9KtxuyyNg4MN2zlWbn_cfI.mft (raw, json) Hash identifier: oFrF7YpZWxw4iTthu5USpCQIQ0+ZC5KMvSwVIUupLMs= Subject key identifier: 43:F4:CB:0D:F6:69:DC:0E:98:0E:A0:98:EB:26:AA:EC:7E:F7:76:14 Authority key identifier: 3F:1A:8E:A3:D2:AD:C6:EC:B2:36:0E:0C:37:6C:E5:59:B9:FF:71:F2 Certificate issuer: /CN=A9173FAC/serialNumber=3F1A8EA3D2ADC6ECB2360E0C376CE559B9FF71F2 Certificate serial: D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxqOo9KtxuyyNg4MN2zlWbn_cfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173FAC/B8F5C76A101811F080BCC348C4F9AE02/PxqOo9KtxuyyNg4MN2zlWbn_cfI.mft Manifest number: D3 Signing time: Thu 21 May 2026 06:47:30 +0000 Manifest this update: Thu 21 May 2026 06:47:30 +0000 Manifest next update: Thu 28 May 2026 06:47:30 +0000 Files and hashes: 1: PxqOo9KtxuyyNg4MN2zlWbn_cfI.crl (hash: wgY1+goHN4qzixgWb6usIlXu46KPZUbyUMmIChkHXUA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173FAC/B8F5C76A101811F080BCC348C4F9AE02/PxqOo9KtxuyyNg4MN2zlWbn_cfI.crl rsync://rpki.apnic.net/member_repository/A9173FAC/B8F5C76A101811F080BCC348C4F9AE02/PxqOo9KtxuyyNg4MN2zlWbn_cfI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxqOo9KtxuyyNg4MN2zlWbn_cfI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 06:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 211 (0xd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173FAC, serialNumber=3F1A8EA3D2ADC6ECB2360E0C376CE559B9FF71F2 Validity Not Before: May 21 06:47:30 2026 GMT Not After : May 28 06:47:30 2026 GMT Subject: CN=6a0eaa82-1383 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6c:61:cd:18:b4:3c:c7:87:5a:00:ff:c8:cc: c3:af:13:23:57:41:1d:03:e0:56:13:13:cb:24:13: 90:89:2b:4f:f7:d0:97:fa:33:9d:69:22:2d:e9:13: b5:db:7b:c2:ae:bb:bd:40:8c:b5:c9:f7:dd:79:88: 10:66:4d:98:7b:1e:da:49:62:6b:e1:6b:bd:82:86: 44:a3:d0:64:22:66:7a:cc:5a:08:c3:cf:b7:54:d8: b9:34:c0:9b:01:a9:4b:21:d5:ba:d7:e2:0f:c3:30: 73:e6:cb:b9:12:20:f6:2e:2b:49:52:d1:4e:4a:e5: e5:b3:9e:a1:35:1d:70:0e:d0:de:02:54:2d:e6:d2: 37:21:d3:e9:55:d6:92:0c:dd:7c:6c:4e:77:ec:72: 59:1a:19:9b:1b:5e:14:e0:50:21:67:c6:a6:9a:20: 3e:21:b1:a5:25:cd:24:1b:a2:eb:3c:03:16:6f:37: b7:68:13:4a:40:5b:2a:69:ae:e3:39:69:c7:f7:1d: 5a:ea:7a:d3:dd:21:ab:95:e5:71:b0:4e:20:9c:a2: 9f:3d:82:7f:61:8f:ba:2d:55:2a:16:d0:5a:2b:16: 91:9f:0e:0b:c2:3b:5c:d7:db:05:95:29:b0:55:d6: d5:cd:9f:80:f9:ff:8c:07:4f:25:80:73:72:62:21: d7:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:F4:CB:0D:F6:69:DC:0E:98:0E:A0:98:EB:26:AA:EC:7E:F7:76:14 X509v3 Authority Key Identifier: keyid:3F:1A:8E:A3:D2:AD:C6:EC:B2:36:0E:0C:37:6C:E5:59:B9:FF:71:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173FAC/B8F5C76A101811F080BCC348C4F9AE02/PxqOo9KtxuyyNg4MN2zlWbn_cfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxqOo9KtxuyyNg4MN2zlWbn_cfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173FAC/B8F5C76A101811F080BCC348C4F9AE02/PxqOo9KtxuyyNg4MN2zlWbn_cfI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:ec:49:79:c2:10:e7:55:76:dd:ea:ec:da:1c:57:08:f0:4d: f5:4e:fb:3e:d8:73:9c:a4:61:1d:ed:85:92:29:75:1e:31:6f: 02:12:d1:51:41:73:fd:17:25:05:0f:6c:12:22:57:88:92:a6: 8f:33:8c:b3:c8:1a:f0:7a:1f:a3:69:e2:25:c3:1d:df:02:95: 90:a8:66:47:58:68:c9:bd:ed:80:95:1c:88:28:76:09:aa:05: 34:3c:0b:96:3e:15:1e:37:1f:f7:87:db:07:7b:1a:fe:dc:d9: 3d:00:e6:2b:83:b6:9e:42:33:86:31:21:91:41:dd:db:c4:48: 04:6d:42:70:ef:f7:af:e5:22:24:ba:8f:0c:4f:c2:85:de:71: b4:47:58:60:d9:68:68:2a:93:0b:0a:7b:0e:4a:07:85:85:9c: dc:32:30:ef:57:68:de:f5:1e:68:70:ba:e8:75:48:a9:01:a3: 62:23:35:b4:57:23:fd:9b:d1:3f:2a:79:51:d0:e1:17:3d:1e: e8:c6:f2:b5:08:75:ca:2b:89:28:1c:e9:81:9a:39:56:d9:da: 80:aa:26:ee:cc:fd:b6:77:36:4c:2d:cf:8e:9e:81:89:e9:f1: 1b:82:e8:c9:7b:9d:0a:b9:50:9c:8e:74:f2:2e:4d:3c:f2:57: bf:5f:19:0c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNGQUMxMTAvBgNVBAUTKDNGMUE4RUEzRDJBREM2RUNCMjM2MEUwQzM3NkNFNTU5 QjlGRjcxRjIwHhcNMjYwNTIxMDY0NzMwWhcNMjYwNTI4MDY0NzMwWjAYMRYwFAYD VQQDEw02YTBlYWE4Mi0xMzgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqmxhzRi0PMeHWgD/yMzDrxMjV0EdA+BWExPLJBOQiStP99CX+jOdaSIt6RO1 23vCrru9QIy1yffdeYgQZk2Yex7aSWJr4Wu9goZEo9BkImZ6zFoIw8+3VNi5NMCb AalLIdW61+IPwzBz5su5EiD2LitJUtFOSuXls56hNR1wDtDeAlQt5tI3IdPpVdaS DN18bE537HJZGhmbG14U4FAhZ8ammiA+IbGlJc0kG6LrPAMWbze3aBNKQFsqaa7j OWnH9x1a6nrT3SGrleVxsE4gnKKfPYJ/YY+6LVUqFtBaKxaRnw4Lwjtc19sFlSmw VdbVzZ+A+f+MB08lgHNyYiHXZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEP0yw32 adwOmA6gmOsmqux+93YUMB8GA1UdIwQYMBaAFD8ajqPSrcbssjYODDds5Vm5/3Hy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0ZBQy9COEY1Qzc2QTEw MTgxMUYwODBCQ0MzNDhDNEY5QUUwMi9QeHFPbzlLdHh1eXlOZzRNTjJ6bFdibl9j ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1B4cU9vOUt0eHV5eU5nNE1OMnpsV2JuX2NmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0ZBQy9COEY1Qzc2QTEwMTgxMUYwODBCQ0MzNDhDNEY5QUUwMi9QeHFPbzlLdHh1 eXlOZzRNTjJ6bFdibl9jZkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEOxJecIQ51V23ers2hxXCPBN9U77PthznKRhHe2Fkil1HjFvAhLRUUFz/Rcl BQ9sEiJXiJKmjzOMs8ga8Hofo2niJcMd3wKVkKhmR1hoyb3tgJUciCh2CaoFNDwL lj4VHjcf94fbB3sa/tzZPQDmK4O2nkIzhjEhkUHd28RIBG1CcO/3r+UiJLqPDE/C hd5xtEdYYNloaCqTCwp7DkoHhYWc3DIw71do3vUeaHC66HVIqQGjYiM1tFcj/ZvR Pyp5UdDhFz0e6MbytQh1yiuJKBzpgZo5VtnagKom7sz9tnc2TC3Pjp6BienxG4Lo yXudCrlQnI508i5NPPJXv18ZDA== -----END CERTIFICATE-----Generated at Thu May 21 11:15:33 2026 by rpki-client