$ rpki-client -vvvf rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft File: PX_qy2M6a4KTI7HplE1K-Y3do3I.mft (raw, json) Hash identifier: /1w0ClmGYz9UVAeYvLeVzxYD3yCAE3fVuKkV4HbkB7E= Subject key identifier: 90:4D:A7:83:31:BB:EB:C8:BA:D7:30:C0:DC:79:B3:18:C7:A1:26:BB Authority key identifier: 3D:7F:EA:CB:63:3A:6B:82:93:23:B1:E9:94:4D:4A:F9:8D:DD:A3:72 Certificate issuer: /CN=A9172BD3/serialNumber=3D7FEACB633A6B829323B1E9944D4AF98DDDA372 Certificate serial: 020C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PX_qy2M6a4KTI7HplE1K-Y3do3I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft Manifest number: 0202 Signing time: Sun 27 Sep 2026 03:35:46 +0000 Manifest this update: Sun 27 Sep 2026 03:35:45 +0000 Manifest next update: Sun 04 Oct 2026 03:35:45 +0000 Files and hashes: 1: PX_qy2M6a4KTI7HplE1K-Y3do3I.crl (hash: 1VmSc2mznN8yJU+Z3EIcUIhQHnR5XSagXRdmoEkf5vs=) 2: 78321A66068D11EF92608943C4F9AE02.roa (hash: 5UiyGeebz2scg4gBW5wMGNarCtgnSEGr0R8BVofACP0=) 3: 97F15FD8068D11EF839A3054C4F9AE02.roa (hash: zmOLhDjLLlYiaqwa8RVMxb2GzAY0iWJCLtJiuDqYk1M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.crl rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PX_qy2M6a4KTI7HplE1K-Y3do3I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 03:35:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 524 (0x20c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172BD3, serialNumber=3D7FEACB633A6B829323B1E9944D4AF98DDDA372 Validity Not Before: Sep 27 03:35:45 2026 GMT Not After : Oct 4 03:35:45 2026 GMT Subject: CN=6ab88f12-4821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ff:53:1c:20:3e:d5:0f:a8:90:41:8c:75:61: 8a:5b:09:10:09:b2:df:6b:bd:fe:e2:ed:b9:b7:2f: 3a:b8:90:e5:a0:15:68:4c:7d:cc:db:95:1f:28:d8: c2:9a:52:2a:f6:c9:be:30:9c:12:9a:f9:c9:63:1a: c0:a6:8a:9f:95:78:c5:ce:35:03:72:c4:53:db:a2: f9:50:6d:7e:03:d7:1a:36:ce:06:c0:4f:d5:10:9c: b6:58:ec:a8:15:cc:07:e1:f8:db:79:48:28:bd:70: be:88:70:9a:c2:4e:2a:de:22:dd:41:52:65:b9:2f: 01:68:c3:66:93:d8:7e:73:ca:74:1a:4c:c6:19:1d: 2b:a9:62:49:a7:c9:fa:3d:17:4b:04:85:a6:70:2b: 24:5a:25:ee:3b:48:74:99:a8:4f:7d:ef:e1:bc:e2: cf:4c:17:74:a8:2d:b1:af:16:1f:78:b9:bb:dc:02: bd:45:86:c4:f1:da:25:3c:45:0f:c6:62:34:e4:12: 52:51:6d:fb:6f:df:07:ee:03:6f:f0:2d:c5:d9:31: 78:44:07:64:c1:3b:d2:38:39:1e:53:40:c4:e1:bb: 44:9d:7b:ce:05:2c:99:6c:ac:14:b8:99:7a:fc:db: 74:7b:e9:54:3b:1a:bb:a1:a2:75:41:b3:bb:3c:1c: 2d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:4D:A7:83:31:BB:EB:C8:BA:D7:30:C0:DC:79:B3:18:C7:A1:26:BB X509v3 Authority Key Identifier: keyid:3D:7F:EA:CB:63:3A:6B:82:93:23:B1:E9:94:4D:4A:F9:8D:DD:A3:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PX_qy2M6a4KTI7HplE1K-Y3do3I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:c1:d5:c3:db:67:cd:3e:04:30:f4:e8:e7:2c:72:ec:43:39: 79:7a:a9:8f:c1:cf:c2:09:9c:d3:d8:3c:a2:a4:af:5d:40:38: 7b:b7:f1:0a:cc:19:0b:f2:40:d9:c8:a7:55:5b:02:61:d8:b3: a8:5c:be:ec:18:a1:d8:81:5c:66:95:b2:99:be:24:74:fe:e1: b5:56:8e:94:6c:5f:79:89:02:e9:83:d2:4a:37:50:64:43:6e: 7e:a4:6c:42:4f:19:b1:5f:6e:4a:a0:6b:38:d8:c3:64:f3:ac: a5:d2:38:da:72:82:b8:24:86:0e:f2:d3:ab:1e:02:b5:17:ba: 97:e9:f1:a4:15:21:dc:95:1d:08:0b:9e:b0:6d:e3:b8:ea:3c: b7:2d:62:6e:a3:f4:50:65:f5:a8:6e:e5:c8:db:68:be:37:7a: c8:56:06:32:bd:27:5e:fa:b1:e9:ef:e0:0c:34:b4:94:51:f3: ec:e7:84:28:d0:cb:fc:d1:d1:4c:67:a3:94:a9:a5:90:3e:13: 94:74:60:4a:38:40:8d:f8:13:ca:23:2e:4e:88:9e:43:96:cc: c6:2e:ff:3c:8e:60:a8:6e:5b:57:a0:41:65:8e:82:86:91:14: 1d:40:23:41:03:73:18:de:41:a9:da:ee:72:c0:03:57:30:3f: 73:0a:6d:03 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJCRDMxMTAvBgNVBAUTKDNEN0ZFQUNCNjMzQTZCODI5MzIzQjFFOTk0NEQ0QUY5 OEREREEzNzIwHhcNMjYwOTI3MDMzNTQ1WhcNMjYxMDA0MDMzNTQ1WjAYMRYwFAYD VQQDEw02YWI4OGYxMi00ODIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArv9THCA+1Q+okEGMdWGKWwkQCbLfa73+4u25ty86uJDloBVoTH3M25UfKNjC mlIq9sm+MJwSmvnJYxrApoqflXjFzjUDcsRT26L5UG1+A9caNs4GwE/VEJy2WOyo FcwH4fjbeUgovXC+iHCawk4q3iLdQVJluS8BaMNmk9h+c8p0GkzGGR0rqWJJp8n6 PRdLBIWmcCskWiXuO0h0mahPfe/hvOLPTBd0qC2xrxYfeLm73AK9RYbE8dolPEUP xmI05BJSUW37b98H7gNv8C3F2TF4RAdkwTvSODkeU0DE4btEnXvOBSyZbKwUuJl6 /Nt0e+lUOxq7oaJ1QbO7PBwt5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJBNp4Mx u+vIutcwwNx5sxjHoSa7MB8GA1UdIwQYMBaAFD1/6stjOmuCkyOx6ZRNSvmN3aNy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkJEMy82NEJGRjE0RUIz RjcxMUVFOTJBNDc3MTdDNEY5QUUwMi9QWF9xeTJNNmE0S1RJN0hwbEUxSy1ZM2Rv M0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BYX3F5Mk02YTRLVEk3SHBsRTFLLVkzZG8zSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkJEMy82NEJGRjE0RUIzRjcxMUVFOTJBNDc3MTdDNEY5QUUwMi9QWF9xeTJNNmE0 S1RJN0hwbEUxSy1ZM2RvM0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmMHVw9tnzT4EMPTo5yxy7EM5eXqpj8HPwgmc09g8oqSvXUA4e7fxCswZC/JA 2cinVVsCYdizqFy+7Bih2IFcZpWymb4kdP7htVaOlGxfeYkC6YPSSjdQZENufqRs Qk8ZsV9uSqBrONjDZPOspdI42nKCuCSGDvLTqx4CtRe6l+nxpBUh3JUdCAuesG3j uOo8ty1ibqP0UGX1qG7lyNtovjd6yFYGMr0nXvqx6e/gDDS0lFHz7OeEKNDL/NHR TGejlKmlkD4TlHRgSjhAjfgTyiMuToieQ5bMxi7/PI5gqG5bV6BBZY6ChpEUHUAj QQNzGN5BqdrucsADVzA/cwptAw== -----END CERTIFICATE-----Generated at Mon Sep 28 06:03:22 2026 by rpki-client