$ rpki-client -vvf rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.mft File: PxScskgQcfFD-NFWCCear8cdEVw.mft (raw, json) Hash identifier: cCUB3CqOBioFQxTh9Oew5UDtBd4QbAr6FZ9gdgw3KcE= Subject key identifier: 59:70:26:1B:0F:81:E5:0E:0B:08:95:A8:CC:32:6F:F1:6F:0E:EB:47 Authority key identifier: 3F:14:9C:B2:48:10:71:F1:43:F8:D1:56:08:27:9A:AF:C7:1D:11:5C Certificate issuer: /CN=A911C18F/serialNumber=3F149CB2481071F143F8D15608279AAFC71D115C Certificate serial: 1FD4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxScskgQcfFD-NFWCCear8cdEVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.mft Manifest number: 1FC3 Signing time: Tue 28 Jul 2026 16:04:38 +0000 Manifest this update: Tue 28 Jul 2026 16:04:38 +0000 Manifest next update: Tue 04 Aug 2026 16:04:38 +0000 Files and hashes: 1: PxScskgQcfFD-NFWCCear8cdEVw.crl (hash: ZOAfdyLh3MFyBYtTzOXjC9VTS2iZbFWo2N8AQ5pDcxE=) 2: B3FD34B086EF11F19E006003A7EE528E.roa (hash: DhH1TgLvuwpXz9g+tXbxJism2H6panW4NjqFDkZedig=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.crl rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxScskgQcfFD-NFWCCear8cdEVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 16:04:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8148 (0x1fd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C18F, serialNumber=3F149CB2481071F143F8D15608279AAFC71D115C Validity Not Before: Jul 28 16:04:38 2026 GMT Not After : Aug 4 16:04:38 2026 GMT Subject: CN=6a68d316-1155 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:4c:6d:0d:b0:5b:d5:47:9d:0b:2b:7f:5d:76: 76:a0:7c:f9:73:10:c6:94:bf:b8:49:98:04:91:16: f3:4e:66:0c:a9:1c:c1:7b:7e:49:09:c5:bb:96:6c: e2:2a:29:82:df:f2:f0:da:73:e4:a0:b2:ce:c5:a3: bf:f8:c3:87:80:9d:74:32:a9:8a:35:ea:7d:1f:16: f5:16:34:56:06:5c:c4:5f:1a:86:cc:57:2f:8b:63: ec:52:c0:6a:a4:31:ba:64:a9:06:3a:c3:c4:cb:68: 98:dc:2b:28:d3:31:48:e0:2e:29:b7:16:17:c1:62: 85:72:b8:f8:ac:1c:bc:a5:e6:38:a3:e1:3d:83:2c: 9e:ac:5b:25:a9:b3:5c:3f:3c:27:05:ae:71:b9:1e: f3:70:4c:97:f7:24:8b:d0:3b:f9:51:90:88:d8:23: 74:cc:e3:5c:ee:f5:1f:fb:cd:bb:35:72:00:e8:62: 9f:1a:a6:2d:32:94:13:fa:f2:ba:b3:1f:e2:00:d0: bf:d6:b1:1c:2b:f2:c9:d6:aa:59:06:6c:9f:96:fd: 7f:e7:79:95:30:fc:61:c4:66:71:a5:fc:e0:9c:39: f8:bb:3e:47:0f:93:00:fc:6f:2c:43:da:a3:36:1e: cf:44:51:a5:a4:92:5e:1f:b1:8a:55:1e:d2:6f:7b: 29:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:70:26:1B:0F:81:E5:0E:0B:08:95:A8:CC:32:6F:F1:6F:0E:EB:47 X509v3 Authority Key Identifier: keyid:3F:14:9C:B2:48:10:71:F1:43:F8:D1:56:08:27:9A:AF:C7:1D:11:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxScskgQcfFD-NFWCCear8cdEVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:26:ab:3d:24:2c:7d:7f:f1:0b:0b:14:9d:95:c6:40:b2:00: 3b:f0:11:cd:72:88:4e:07:04:f5:64:f2:32:79:1f:da:e8:c0: 7a:61:6c:a6:7b:f6:25:65:66:37:b0:b3:86:24:40:a7:24:03: 11:7a:33:24:fa:3a:c9:84:f4:59:0d:a5:bb:75:ea:66:30:d0: 26:04:c4:a3:81:bf:22:fc:4f:70:3d:16:f7:c9:1a:4a:2a:7c: 28:52:21:21:ef:4a:a0:e6:73:3d:02:79:c2:3f:22:f2:98:63: 33:3b:da:08:14:13:0b:26:58:0d:b8:7c:b6:67:8a:db:84:2a: 4d:03:d8:69:8b:62:68:40:28:f9:cf:e0:ad:c6:5f:99:ab:22: 81:c4:76:c1:13:49:2e:c1:2e:82:79:d9:e9:ee:a1:7d:f8:8c: 4c:12:dc:84:67:95:87:49:9e:76:24:df:f6:51:c5:64:fd:d3: 8e:75:98:d4:5e:bb:23:e9:ac:f4:e9:55:41:d6:04:a2:3e:8f: a3:3b:7a:2d:6f:22:78:69:87:83:33:d1:0d:d7:04:c5:cc:c4: c9:53:83:2b:e8:68:24:d7:69:67:0c:9b:c7:09:af:4f:e5:6e: c9:65:e0:c7:07:15:2d:35:13:46:52:c3:fe:c5:02:1f:97:d5: 33:c2:a0:59 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICH9QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMxOEYxMTAvBgNVBAUTKDNGMTQ5Q0IyNDgxMDcxRjE0M0Y4RDE1NjA4Mjc5QUFG QzcxRDExNUMwHhcNMjYwNzI4MTYwNDM4WhcNMjYwODA0MTYwNDM4WjAYMRYwFAYD VQQDEw02YTY4ZDMxNi0xMTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzUxtDbBb1UedCyt/XXZ2oHz5cxDGlL+4SZgEkRbzTmYMqRzBe35JCcW7lmzi KimC3/Lw2nPkoLLOxaO/+MOHgJ10MqmKNep9Hxb1FjRWBlzEXxqGzFcvi2PsUsBq pDG6ZKkGOsPEy2iY3Cso0zFI4C4ptxYXwWKFcrj4rBy8peY4o+E9gyyerFslqbNc PzwnBa5xuR7zcEyX9ySL0Dv5UZCI2CN0zONc7vUf+827NXIA6GKfGqYtMpQT+vK6 sx/iANC/1rEcK/LJ1qpZBmyflv1/53mVMPxhxGZxpfzgnDn4uz5HD5MA/G8sQ9qj Nh7PRFGlpJJeH7GKVR7Sb3spBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFlwJhsP geUOCwiVqMwyb/FvDutHMB8GA1UdIwQYMBaAFD8UnLJIEHHxQ/jRVggnmq/HHRFc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzE4Ri84RTdBOUJBQzVF MTgxMUU2QUM2NkM1NTlDNEY5QUUwMi9QeFNjc2tnUWNmRkQtTkZXQ0NlYXI4Y2RF VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1B4U2Nza2dRY2ZGRC1ORldDQ2VhcjhjZEVWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzE4Ri84RTdBOUJBQzVFMTgxMUU2QUM2NkM1NTlDNEY5QUUwMi9QeFNjc2tnUWNm RkQtTkZXQ0NlYXI4Y2RFVncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAACarPSQsfX/xCwsUnZXGQLIAO/ARzXKITgcE9WTyMnkf2ujAemFspnv2JWVm N7CzhiRApyQDEXozJPo6yYT0WQ2lu3XqZjDQJgTEo4G/IvxPcD0W98kaSip8KFIh Ie9KoOZzPQJ5wj8i8phjMzvaCBQTCyZYDbh8tmeK24QqTQPYaYtiaEAo+c/grcZf masigcR2wRNJLsEugnnZ6e6hffiMTBLchGeVh0mediTf9lHFZP3TjnWY1F67I+ms 9OlVQdYEoj6Pozt6LW8ieGmHgzPRDdcExczEyVODK+hoJNdpZwybxwmvT+VuyWXg xwcVLTUTRlLD/sUCH5fVM8KgWQ== -----END CERTIFICATE-----Generated at Tue Jul 28 22:50:49 2026 by rpki-client