$ rpki-client -vvf rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.mft File: PWRH1yl0gylOzsuFOl5QCTXRuNc.mft (raw, json) Hash identifier: M+2+ETw+fU3aMNI6IVw0Abh3QoWEghovxHfpTDN2Mcc= Subject key identifier: 93:1C:9C:30:B0:B8:9B:70:AE:7F:D5:7E:EA:27:03:24:AD:F8:63:BC Authority key identifier: 3D:64:47:D7:29:74:83:29:4E:CE:CB:85:3A:5E:50:09:35:D1:B8:D7 Certificate issuer: /CN=A9170E11/serialNumber=3D6447D7297483294ECECB853A5E500935D1B8D7 Certificate serial: 0561 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PWRH1yl0gylOzsuFOl5QCTXRuNc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.mft Manifest number: 052C Signing time: Mon 27 Jul 2026 00:34:55 +0000 Manifest this update: Mon 27 Jul 2026 00:34:55 +0000 Manifest next update: Mon 03 Aug 2026 00:34:55 +0000 Files and hashes: 1: PWRH1yl0gylOzsuFOl5QCTXRuNc.crl (hash: M/PBlEmc00mwdduOPEmr6JY3Ad890iyB5H8pxRyghfY=) 2: 2CE5BE065BDA11ECAA855355C4F9AE02.roa (hash: yWnDOGXeBuapUFjfel16F3nDCGyHf2soSlsW7nZ7+cQ=) 3: 27992F96832811EFA1BAAC4FC4F9AE02.roa (hash: 0q4oZUj/sR1op8iE3N1tHBskG9i5bEl+Ec/0N0iGDjI=) 4: 18611004B42A11EC9BD3DE42C4F9AE02.roa (hash: F7zelpLk1UD+fObDTKpqTOpRawAblSrVeJkuuPP4a6c=) 5: 5997A6A624E011EDAEC0E529C4F9AE02.roa (hash: kgUDwmWc1IMp1gXUMvhqWSGJV5h+vYuf4OkX4cdGtfg=) 6: 793803867DEA11EC9FC67D66C4F9AE02.roa (hash: M0tXX+QlMHyjlPtQ7dwCZagDlP3SILPEeJfJgeWfgIw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.crl rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PWRH1yl0gylOzsuFOl5QCTXRuNc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 00:34:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1377 (0x561) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170E11, serialNumber=3D6447D7297483294ECECB853A5E500935D1B8D7 Validity Not Before: Jul 27 00:34:55 2026 GMT Not After : Aug 3 00:34:55 2026 GMT Subject: CN=6a66a7af-835a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:f7:b1:3d:24:13:54:d8:ac:ca:82:5f:c6:22: 59:16:bc:a6:1e:fa:33:7d:4b:8b:e1:9e:f2:f1:77: 19:43:ec:a4:51:f7:6b:4f:1f:5e:89:a3:71:0d:69: 7f:ab:7e:c9:ce:19:32:f2:91:2d:e1:31:c4:7a:b3: a4:16:d6:c1:fa:0a:f2:8b:05:f0:4f:74:e5:e8:25: af:29:a8:e9:e8:e2:20:0a:3e:36:db:e3:c2:5a:1e: e0:1f:87:a5:c4:f5:d5:86:0d:21:10:94:1f:34:eb: d2:ca:7e:10:19:0b:95:fb:46:ff:7c:ed:8f:ff:9a: b1:a3:74:80:53:31:86:5d:e5:32:64:ee:c1:0e:3c: e8:32:3f:57:68:d2:c1:ef:be:1d:82:97:b2:a4:07: 9b:94:53:1c:a8:25:b1:2b:0b:c8:68:b1:bb:45:53: f6:32:81:27:4b:13:33:df:32:03:2f:96:de:c0:b6: ff:f0:4e:1d:63:36:6f:7e:d5:12:46:fb:1f:30:13: db:95:1d:2a:7e:d0:24:0d:95:69:a3:4b:ab:b2:ca: 08:2a:ed:70:77:b4:0f:24:6e:6c:bb:ae:ac:8c:42: c4:f3:8c:3b:e0:04:b3:39:c4:dc:12:b7:92:41:b1: 52:c7:ff:b1:39:96:73:48:3f:96:d6:e4:1d:2e:f0: 82:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:1C:9C:30:B0:B8:9B:70:AE:7F:D5:7E:EA:27:03:24:AD:F8:63:BC X509v3 Authority Key Identifier: keyid:3D:64:47:D7:29:74:83:29:4E:CE:CB:85:3A:5E:50:09:35:D1:B8:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PWRH1yl0gylOzsuFOl5QCTXRuNc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:7a:73:17:26:a0:bf:ce:16:d8:0c:11:84:9e:64:70:89:3f: 27:2b:6a:a0:71:48:c9:2d:08:c1:2d:4d:51:01:14:e4:76:ff: e5:2b:1b:bc:93:c1:e5:40:ee:97:b0:51:eb:41:f3:a4:11:6a: ec:4f:a2:a3:ba:19:80:e9:06:aa:ee:1a:62:3d:cc:d8:9c:47: 98:42:15:9b:e6:98:55:34:5e:56:f3:c8:a0:0c:8f:13:d1:26: d2:ee:f6:e2:c8:27:ba:d5:c2:f0:1a:5b:37:74:08:2a:03:8d: 76:d5:8d:08:9f:d2:a8:d0:a7:fb:cd:df:de:e5:6c:b9:1f:c3: 94:69:78:40:72:46:3b:a1:c7:74:ee:41:94:8e:62:6d:98:da: 5e:d6:6a:45:31:c5:63:a8:ef:91:74:a0:04:98:22:69:20:9e: 18:7e:5f:5e:44:fb:29:51:b5:dd:7b:79:b3:0a:c6:3a:ad:f3: 79:93:ef:bd:34:e4:48:60:84:a4:ab:e2:27:09:f9:21:32:42: 58:85:76:ef:70:1b:84:f9:73:53:1d:9a:da:81:5a:55:8a:59: 96:7c:58:1d:1a:fa:41:ec:d5:7f:f4:33:89:ce:eb:5f:a7:a2: 9d:a7:bf:56:02:60:20:d3:d5:ff:c7:92:e0:a1:58:e3:92:94: 7f:e4:be:b9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBFMTExMTAvBgNVBAUTKDNENjQ0N0Q3Mjk3NDgzMjk0RUNFQ0I4NTNBNUU1MDA5 MzVEMUI4RDcwHhcNMjYwNzI3MDAzNDU1WhcNMjYwODAzMDAzNDU1WjAYMRYwFAYD VQQDEw02YTY2YTdhZi04MzVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+fexPSQTVNisyoJfxiJZFrymHvozfUuL4Z7y8XcZQ+ykUfdrTx9eiaNxDWl/ q37Jzhky8pEt4THEerOkFtbB+gryiwXwT3Tl6CWvKajp6OIgCj422+PCWh7gH4el xPXVhg0hEJQfNOvSyn4QGQuV+0b/fO2P/5qxo3SAUzGGXeUyZO7BDjzoMj9XaNLB 774dgpeypAeblFMcqCWxKwvIaLG7RVP2MoEnSxMz3zIDL5bewLb/8E4dYzZvftUS RvsfMBPblR0qftAkDZVpo0urssoIKu1wd7QPJG5su66sjELE84w74ASzOcTcEreS QbFSx/+xOZZzSD+W1uQdLvCC1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJMcnDCw uJtwrn/VfuonAySt+GO8MB8GA1UdIwQYMBaAFD1kR9cpdIMpTs7LhTpeUAk10bjX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEUxMS9EMDYwQzlCMjVC RDYxMUVDQUQ4MzM2NTFDNEY5QUUwMi9QV1JIMXlsMGd5bE96c3VGT2w1UUNUWFJ1 TmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BXUkgxeWwwZ3lsT3pzdUZPbDVRQ1RYUnVOYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEUxMS9EMDYwQzlCMjVCRDYxMUVDQUQ4MzM2NTFDNEY5QUUwMi9QV1JIMXlsMGd5 bE96c3VGT2w1UUNUWFJ1TmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWHpzFyagv84W2AwRhJ5kcIk/JytqoHFIyS0IwS1NUQEU5Hb/5SsbvJPB5UDu l7BR60HzpBFq7E+io7oZgOkGqu4aYj3M2JxHmEIVm+aYVTReVvPIoAyPE9Em0u72 4sgnutXC8BpbN3QIKgONdtWNCJ/SqNCn+83f3uVsuR/DlGl4QHJGO6HHdO5BlI5i bZjaXtZqRTHFY6jvkXSgBJgiaSCeGH5fXkT7KVG13Xt5swrGOq3zeZPvvTTkSGCE pKviJwn5ITJCWIV273AbhPlzUx2a2oFaVYpZlnxYHRr6QezVf/Qzic7rX6einae/ VgJgINPV/8eS4KFY45KUf+S+uQ== -----END CERTIFICATE-----Generated at Tue Jul 28 17:28:09 2026 by rpki-client