$ rpki-client -vvvf rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.mft File: PqQ0fS2f1utqAbROVXH4iwiswls.mft (raw, json) Hash identifier: KxvLq5h8ZmOR7ExrUZQVYZGdiOwXmZo8zWECqkxWSiE= Subject key identifier: EE:3C:67:79:4C:92:92:0B:13:D4:DC:80:8C:4C:47:85:35:8B:D3:43 Authority key identifier: 3E:A4:34:7D:2D:9F:D6:EB:6A:01:B4:4E:55:71:F8:8B:08:AC:C2:5B Certificate issuer: /CN=A917BB51/serialNumber=3EA4347D2D9FD6EB6A01B44E5571F88B08ACC25B Certificate serial: 01FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqQ0fS2f1utqAbROVXH4iwiswls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.mft Manifest number: 01EC Signing time: Thu 03 Sep 2026 03:38:02 +0000 Manifest this update: Thu 03 Sep 2026 03:38:01 +0000 Manifest next update: Thu 10 Sep 2026 03:38:01 +0000 Files and hashes: 1: PqQ0fS2f1utqAbROVXH4iwiswls.crl (hash: iTDIOKengm+Fksf3QJbOCSjac+NMrpZXQ68BAaIe4tY=) 2: A9C5C1CAC4B811EE8A03D547C4F9AE02.roa (hash: RLvkJQC71Slj35G4jfs9BmOdtDEiBC1wT0j0eVVXx8E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.crl rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqQ0fS2f1utqAbROVXH4iwiswls.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Sep 2026 03:38:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 508 (0x1fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BB51, serialNumber=3EA4347D2D9FD6EB6A01B44E5571F88B08ACC25B Validity Not Before: Sep 3 03:38:01 2026 GMT Not After : Sep 10 03:38:01 2026 GMT Subject: CN=6a98eb99-d62a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b9:67:d4:87:12:c6:52:09:27:85:bb:a2:5d: 5f:df:d7:31:5b:7f:2e:2b:e0:82:e4:5e:9b:05:65: 7a:e2:84:a8:69:de:51:ae:d1:71:ce:4c:f2:c1:3b: 6f:7c:49:27:cd:03:5d:7d:f1:69:df:8c:84:93:0c: 41:53:c4:19:4f:cc:1d:d6:fa:2c:37:90:d2:aa:72: 5e:ec:2b:b8:5d:38:76:8b:b1:b3:8b:fb:10:ce:e4: ac:1d:47:0f:4b:c8:e5:55:f6:a8:04:ea:9b:ff:86: 5d:ac:d1:4b:2b:d4:43:a7:a8:42:17:76:53:1d:d8: 23:40:e0:64:56:27:d8:a3:7b:0c:bd:e3:3c:e4:46: fa:dd:ab:d8:e8:64:fd:a5:3c:71:c0:f0:06:df:6d: 83:df:21:fd:d4:80:93:56:86:db:08:6f:b1:9b:29: f6:f3:59:f1:75:d2:3e:12:9a:b1:92:2e:1c:e4:b3: 5a:d6:54:97:cb:75:69:be:af:7a:22:0b:43:b1:0e: d9:c3:d4:a8:c5:00:f3:34:46:f6:e4:73:ae:f3:97: 46:03:c6:a4:f4:c3:ad:25:be:73:38:b0:e7:97:6c: c2:70:64:83:7c:d7:48:8b:de:4b:95:92:b9:04:b8: 4e:ed:46:90:f4:9b:a8:7b:34:88:4e:17:b0:53:09: 28:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:3C:67:79:4C:92:92:0B:13:D4:DC:80:8C:4C:47:85:35:8B:D3:43 X509v3 Authority Key Identifier: keyid:3E:A4:34:7D:2D:9F:D6:EB:6A:01:B4:4E:55:71:F8:8B:08:AC:C2:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqQ0fS2f1utqAbROVXH4iwiswls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e0:76:a5:76:92:de:fb:df:0c:de:51:fe:55:f7:6c:6f:c6:4f: 8f:01:a6:ca:c9:c7:a5:a6:2a:2d:e3:21:2d:01:53:56:92:f4: c0:96:79:c9:e4:36:45:32:98:05:d7:d2:95:1a:dd:33:de:a9: 75:fe:fc:12:58:ed:7f:56:3e:f3:3e:b2:a1:6e:03:65:a1:b4: c2:3a:60:1e:8a:25:8a:db:9d:c5:62:a4:13:e7:37:f1:ca:4f: 4c:92:71:bc:76:35:98:84:e1:16:aa:44:cc:34:b7:be:fc:b0: 05:fc:c1:e1:c5:81:df:51:d0:15:72:9c:b2:d9:e1:21:9f:45: 0a:91:d7:e1:13:93:f3:24:86:42:d2:f3:f8:53:34:8d:50:91: 65:40:fc:0b:f7:a9:48:ac:be:58:8c:2a:3e:08:5e:c4:fc:84: 4c:df:92:e8:dd:ba:c6:42:6d:99:87:a0:2a:68:31:d8:d4:ca: a4:e3:08:35:6b:34:1d:9b:23:af:d2:18:d6:24:c7:84:4a:ab: 28:dc:a1:d9:97:fd:d4:c5:3d:a5:f3:2e:ab:63:d6:05:e1:3b: 41:ef:06:73:1b:7f:f3:38:2f:1b:88:14:13:ab:cd:6f:89:6d: c6:d2:ec:f8:e0:7b:6e:ef:37:89:2d:ba:34:6a:be:fb:67:54: 90:8b:71:bc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JCNTExMTAvBgNVBAUTKDNFQTQzNDdEMkQ5RkQ2RUI2QTAxQjQ0RTU1NzFGODhC MDhBQ0MyNUIwHhcNMjYwOTAzMDMzODAxWhcNMjYwOTEwMDMzODAxWjAYMRYwFAYD VQQDEw02YTk4ZWI5OS1kNjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlbln1IcSxlIJJ4W7ol1f39cxW38uK+CC5F6bBWV64oSoad5RrtFxzkzywTtv fEknzQNdffFp34yEkwxBU8QZT8wd1vosN5DSqnJe7Cu4XTh2i7Gzi/sQzuSsHUcP S8jlVfaoBOqb/4ZdrNFLK9RDp6hCF3ZTHdgjQOBkVifYo3sMveM85Eb63avY6GT9 pTxxwPAG322D3yH91ICTVobbCG+xmyn281nxddI+Epqxki4c5LNa1lSXy3Vpvq96 IgtDsQ7Zw9SoxQDzNEb25HOu85dGA8ak9MOtJb5zOLDnl2zCcGSDfNdIi95LlZK5 BLhO7UaQ9JuoezSIThewUwkowQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO48Z3lM kpILE9TcgIxMR4U1i9NDMB8GA1UdIwQYMBaAFD6kNH0tn9bragG0TlVx+IsIrMJb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkI1MS8yNUFDRjVDMEM0 QjgxMUVFQkQ3MUM0NDZDNEY5QUUwMi9QcVEwZlMyZjF1dHFBYlJPVlhINGl3aXN3 bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BxUTBmUzJmMXV0cUFiUk9WWEg0aXdpc3dscy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkI1MS8yNUFDRjVDMEM0QjgxMUVFQkQ3MUM0NDZDNEY5QUUwMi9QcVEwZlMyZjF1 dHFBYlJPVlhINGl3aXN3bHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA4HaldpLe+98M3lH+Vfdsb8ZPjwGmysnHpaYqLeMhLQFTVpL0wJZ5yeQ2RTKY BdfSlRrdM96pdf78Eljtf1Y+8z6yoW4DZaG0wjpgHoolitudxWKkE+c38cpPTJJx vHY1mIThFqpEzDS3vvywBfzB4cWB31HQFXKcstnhIZ9FCpHX4ROT8ySGQtLz+FM0 jVCRZUD8C/epSKy+WIwqPghexPyETN+S6N26xkJtmYegKmgx2NTKpOMINWs0HZsj r9IY1iTHhEqrKNyh2Zf91MU9pfMuq2PWBeE7Qe8Gcxt/8zgvG4gUE6vNb4ltxtLs +OB7bu83iS26NGq++2dUkItxvA== -----END CERTIFICATE-----Generated at Sat Sep 5 04:27:49 2026 by rpki-client