$ rpki-client -vvf rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft File: PX_qy2M6a4KTI7HplE1K-Y3do3I.mft (raw, json) Hash identifier: D3k9eIP+poIeWGIq3SY+RNnGnMxNEO94y+4v7gB0Pvs= Subject key identifier: F6:7D:20:54:DC:55:5A:B5:65:2D:06:6A:07:1D:BC:9D:60:38:21:31 Authority key identifier: 3D:7F:EA:CB:63:3A:6B:82:93:23:B1:E9:94:4D:4A:F9:8D:DD:A3:72 Certificate issuer: /CN=A9172BD3/serialNumber=3D7FEACB633A6B829323B1E9944D4AF98DDDA372 Certificate serial: 01B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PX_qy2M6a4KTI7HplE1K-Y3do3I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft Manifest number: 01AE Signing time: Fri 17 Apr 2026 03:48:54 +0000 Manifest this update: Fri 17 Apr 2026 03:48:53 +0000 Manifest next update: Fri 24 Apr 2026 03:48:53 +0000 Files and hashes: 1: PX_qy2M6a4KTI7HplE1K-Y3do3I.crl (hash: 2wPCPW3WcByhbZl77M07yFOfesmSLskC6oERA5+MDMk=) 2: 78321A66068D11EF92608943C4F9AE02.roa (hash: B+SJqxW4okca9e4x0qcp3bdPieQGRwfLcj5Bf3jCnkw=) 3: 97F15FD8068D11EF839A3054C4F9AE02.roa (hash: ZR91Xkb9WqCmTw6bc0Cn1+z+jAwWu9sevUXMNk3wUeg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.crl rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PX_qy2M6a4KTI7HplE1K-Y3do3I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 03:48:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 438 (0x1b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172BD3, serialNumber=3D7FEACB633A6B829323B1E9944D4AF98DDDA372 Validity Not Before: Apr 17 03:48:53 2026 GMT Not After : Apr 24 03:48:53 2026 GMT Subject: CN=69e1ada6-8687 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fa:47:76:90:82:b3:20:a3:70:9a:8c:30:c8: 5d:5d:5c:7d:3f:06:c3:f7:9c:e5:8d:ae:b9:82:3f: 63:11:d0:f2:34:2c:db:b0:4e:2f:3c:0a:d5:b9:66: 26:84:f5:ef:73:c0:1b:77:47:53:cb:ab:a9:bd:fa: 71:ca:99:cc:b7:d1:8f:65:ca:17:ee:c8:66:f2:eb: 1b:b0:00:ef:48:bf:20:ef:a5:7a:31:48:d9:15:ce: 52:00:d0:e5:74:6c:ce:d7:81:b5:fe:0f:22:3d:aa: 47:b8:2b:3d:a6:e5:99:67:7d:41:fd:7d:d6:c0:f1: 12:fa:f3:3b:a7:98:9d:d9:e5:15:3c:fe:8d:cb:5f: 11:ce:82:c9:ff:37:4e:74:c1:37:e4:33:f2:52:c4: cc:fc:39:fe:6e:c9:36:19:20:63:cf:fd:66:c1:51: 51:81:24:c8:f8:2a:5c:15:f1:9f:b4:7c:b0:a4:65: e3:e8:05:9b:3c:b8:c2:33:db:f5:e6:54:99:7d:71: 12:cb:5b:22:58:33:53:2e:f0:07:a1:34:68:65:e4: 65:87:e7:0b:61:cd:96:13:ae:5c:f9:3a:ba:78:c2: db:98:7b:76:73:80:d6:a7:9b:27:15:2a:d8:36:27: da:fc:ed:b9:27:6b:ff:f4:82:ef:33:67:c2:6d:b3: 49:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:7D:20:54:DC:55:5A:B5:65:2D:06:6A:07:1D:BC:9D:60:38:21:31 X509v3 Authority Key Identifier: keyid:3D:7F:EA:CB:63:3A:6B:82:93:23:B1:E9:94:4D:4A:F9:8D:DD:A3:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PX_qy2M6a4KTI7HplE1K-Y3do3I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:3f:fa:b5:e0:94:3c:56:b0:c6:ca:56:63:5e:bd:56:62:86: 6b:13:22:39:0c:10:dc:92:8e:77:1b:e0:46:29:a5:39:22:dc: d5:2c:d6:1b:46:f8:2f:3d:9c:12:b3:a4:af:26:ab:2d:6e:64: 8c:e3:f9:63:68:aa:65:5a:60:af:be:e1:27:68:ad:21:cd:7f: 12:82:c5:48:4d:a7:8a:87:8e:a1:66:2a:d3:aa:03:75:67:f2: fd:86:4f:0a:31:ef:b2:29:6e:5e:b3:9f:d1:9d:90:6a:b5:03: ac:da:b5:5b:da:93:e4:25:6f:69:71:af:08:54:73:77:e0:33: b5:ad:73:99:73:60:88:9b:52:ef:02:5f:c0:a5:21:8f:94:65: 7b:bb:18:eb:50:9e:29:de:f7:c7:c7:e0:bb:7e:0c:e3:0e:12: a5:a8:d9:25:6d:9c:41:a8:a0:b1:fe:fd:8c:9a:35:97:d2:4f: a3:30:f2:33:9b:ae:8b:be:87:10:54:b1:7f:eb:b9:10:67:7b: 04:53:68:dd:e7:55:2d:b9:fa:48:b9:6d:c3:d0:ba:49:59:8a: e2:24:2a:21:99:f7:bf:95:84:0f:0d:79:94:ea:86:9b:d3:81: 51:05:d6:54:7e:08:fb:83:d8:91:91:bd:75:65:cd:4e:31:ad: 1f:6f:c2:c4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJCRDMxMTAvBgNVBAUTKDNEN0ZFQUNCNjMzQTZCODI5MzIzQjFFOTk0NEQ0QUY5 OEREREEzNzIwHhcNMjYwNDE3MDM0ODUzWhcNMjYwNDI0MDM0ODUzWjAYMRYwFAYD VQQDEw02OWUxYWRhNi04Njg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs/pHdpCCsyCjcJqMMMhdXVx9PwbD95zlja65gj9jEdDyNCzbsE4vPArVuWYm hPXvc8Abd0dTy6upvfpxypnMt9GPZcoX7shm8usbsADvSL8g76V6MUjZFc5SANDl dGzO14G1/g8iPapHuCs9puWZZ31B/X3WwPES+vM7p5id2eUVPP6Ny18RzoLJ/zdO dME35DPyUsTM/Dn+bsk2GSBjz/1mwVFRgSTI+CpcFfGftHywpGXj6AWbPLjCM9v1 5lSZfXESy1siWDNTLvAHoTRoZeRlh+cLYc2WE65c+Tq6eMLbmHt2c4DWp5snFSrY Nifa/O25J2v/9ILvM2fCbbNJIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPZ9IFTc VVq1ZS0GagcdvJ1gOCExMB8GA1UdIwQYMBaAFD1/6stjOmuCkyOx6ZRNSvmN3aNy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkJEMy82NEJGRjE0RUIz RjcxMUVFOTJBNDc3MTdDNEY5QUUwMi9QWF9xeTJNNmE0S1RJN0hwbEUxSy1ZM2Rv M0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BYX3F5Mk02YTRLVEk3SHBsRTFLLVkzZG8zSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkJEMy82NEJGRjE0RUIzRjcxMUVFOTJBNDc3MTdDNEY5QUUwMi9QWF9xeTJNNmE0 S1RJN0hwbEUxSy1ZM2RvM0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkj/6teCUPFawxspWY169VmKGaxMiOQwQ3JKOdxvgRimlOSLc1SzWG0b4Lz2c ErOkryarLW5kjOP5Y2iqZVpgr77hJ2itIc1/EoLFSE2nioeOoWYq06oDdWfy/YZP CjHvsiluXrOf0Z2QarUDrNq1W9qT5CVvaXGvCFRzd+Azta1zmXNgiJtS7wJfwKUh j5Rle7sY61CeKd73x8fgu34M4w4SpajZJW2cQaigsf79jJo1l9JPozDyM5uui76H EFSxf+u5EGd7BFNo3edVLbn6SLltw9C6SVmK4iQqIZn3v5WEDw15lOqGm9OBUQXW VH4I+4PYkZG9dWXNTjGtH2/CxA== -----END CERTIFICATE-----Generated at Sat Apr 18 00:07:24 2026 by rpki-client