$ rpki-client -vvf rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft File: PX_qy2M6a4KTI7HplE1K-Y3do3I.mft (raw, json) Hash identifier: DfRReGGHR/ty3FlR7xTu7gDhSuOGGz0W0LRg8Eys2pM= Subject key identifier: 8D:86:AA:7C:2E:F7:EC:93:ED:40:C0:17:7B:E7:15:F1:DA:51:A8:40 Authority key identifier: 3D:7F:EA:CB:63:3A:6B:82:93:23:B1:E9:94:4D:4A:F9:8D:DD:A3:72 Certificate issuer: /CN=A9172BD3/serialNumber=3D7FEACB633A6B829323B1E9944D4AF98DDDA372 Certificate serial: 019E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PX_qy2M6a4KTI7HplE1K-Y3do3I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft Manifest number: 0196 Signing time: Mon 02 Mar 2026 01:20:20 +0000 Manifest this update: Mon 02 Mar 2026 01:20:18 +0000 Manifest next update: Mon 09 Mar 2026 01:20:18 +0000 Files and hashes: 1: PX_qy2M6a4KTI7HplE1K-Y3do3I.crl (hash: JllzY2ySEgwi45/jxNtd8oQSCntLzdHUY6Oo4Rh1FSE=) 2: 78321A66068D11EF92608943C4F9AE02.roa (hash: B+SJqxW4okca9e4x0qcp3bdPieQGRwfLcj5Bf3jCnkw=) 3: 97F15FD8068D11EF839A3054C4F9AE02.roa (hash: ZR91Xkb9WqCmTw6bc0Cn1+z+jAwWu9sevUXMNk3wUeg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.crl rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PX_qy2M6a4KTI7HplE1K-Y3do3I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:20:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 414 (0x19e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172BD3, serialNumber=3D7FEACB633A6B829323B1E9944D4AF98DDDA372 Validity Not Before: Mar 2 01:20:18 2026 GMT Not After : Mar 9 01:20:18 2026 GMT Subject: CN=69a4e5d4-303f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:0d:26:36:c0:ea:51:86:5b:0c:b6:a7:d4:85: 03:d0:a3:6f:63:8f:05:8a:dc:12:ec:0f:7e:16:82: 2b:e7:43:57:ee:e7:f1:79:49:7e:c4:d8:7b:c2:f8: 20:2f:b3:aa:10:e2:2a:cb:52:35:c0:69:67:4f:ac: 6c:2f:71:e8:d7:76:33:da:00:e2:9e:26:fe:ed:43: 0e:93:76:9b:b6:2c:0f:10:2b:50:f0:72:48:0c:5d: 1f:8f:18:ee:ae:6d:90:83:1f:d2:71:d7:e8:c4:4b: a8:a0:a4:ea:3f:89:24:d2:ba:f4:0e:0d:99:bb:18: ab:6b:5f:d4:1b:12:28:6f:14:ee:b3:24:78:7e:a3: 19:26:f1:ab:b2:53:1e:a5:87:cf:fa:20:99:71:46: 0e:06:66:ba:59:4d:4a:e6:8a:aa:ef:11:ef:e8:d6: 86:9e:e9:28:b7:f1:e9:34:88:0b:f4:2a:06:43:c9: 17:b9:d0:90:86:e7:37:9e:49:74:2f:42:cc:bb:d9: 97:ce:62:08:86:68:26:24:10:10:be:fc:36:1b:2c: a7:09:ff:1c:f8:e8:40:cc:21:81:e6:d6:33:18:13: c4:55:41:ab:64:42:1d:5c:1e:68:a2:13:14:72:db: 43:d7:8c:e6:6b:fd:df:dc:b3:8a:ac:3a:bf:87:ce: c5:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:86:AA:7C:2E:F7:EC:93:ED:40:C0:17:7B:E7:15:F1:DA:51:A8:40 X509v3 Authority Key Identifier: keyid:3D:7F:EA:CB:63:3A:6B:82:93:23:B1:E9:94:4D:4A:F9:8D:DD:A3:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PX_qy2M6a4KTI7HplE1K-Y3do3I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:75:29:f8:ce:90:bc:1e:4f:88:05:53:ef:90:d0:33:c0:7a: b1:df:19:bb:41:37:5e:5b:6a:60:28:5f:29:3c:93:31:ad:dc: 94:1c:e9:78:aa:7f:9c:ab:ea:e5:56:26:51:de:59:7e:84:0f: 9d:f5:ab:e1:0c:ab:dc:fb:ba:a5:2c:ea:a8:ef:ab:b8:50:b5: dd:45:4f:9a:c0:4f:a8:bb:69:31:85:82:7f:a3:cb:ec:da:31: 40:f2:ad:ef:2b:a6:dd:d3:2c:01:f8:c2:85:5b:37:db:7a:02: 68:3d:b5:6f:e4:4b:3f:49:31:01:e1:41:65:ba:53:d7:15:0e: 98:b3:b7:66:97:c7:10:37:b9:70:57:1b:39:92:b6:dd:5a:a6: 18:6c:a8:db:1f:60:28:3f:68:84:fd:cf:84:c1:db:c8:81:a5: be:4a:39:10:6e:55:d6:39:e8:31:6e:92:89:50:a9:73:8c:f2: fa:53:e0:b9:45:7b:c8:b8:c4:ce:f0:2c:6c:63:0a:78:9b:71: 93:19:b9:ba:eb:7d:62:97:ae:a1:fb:0d:3e:1a:c9:85:a6:c3: db:ff:80:66:18:72:52:74:38:e0:3a:08:fb:58:df:37:5d:73: 50:a7:3e:e2:ed:d2:f7:01:4d:fd:9a:3a:71:69:5a:15:bc:12: 66:e3:61:ca -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJCRDMxMTAvBgNVBAUTKDNEN0ZFQUNCNjMzQTZCODI5MzIzQjFFOTk0NEQ0QUY5 OEREREEzNzIwHhcNMjYwMzAyMDEyMDE4WhcNMjYwMzA5MDEyMDE4WjAYMRYwFAYD VQQDEw02OWE0ZTVkNC0zMDNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkg0mNsDqUYZbDLan1IUD0KNvY48FitwS7A9+FoIr50NX7ufxeUl+xNh7wvgg L7OqEOIqy1I1wGlnT6xsL3Ho13Yz2gDinib+7UMOk3abtiwPECtQ8HJIDF0fjxju rm2Qgx/ScdfoxEuooKTqP4kk0rr0Dg2Zuxira1/UGxIobxTusyR4fqMZJvGrslMe pYfP+iCZcUYOBma6WU1K5oqq7xHv6NaGnukot/HpNIgL9CoGQ8kXudCQhuc3nkl0 L0LMu9mXzmIIhmgmJBAQvvw2GyynCf8c+OhAzCGB5tYzGBPEVUGrZEIdXB5oohMU cttD14zma/3f3LOKrDq/h87F+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI2Gqnwu 9+yT7UDAF3vnFfHaUahAMB8GA1UdIwQYMBaAFD1/6stjOmuCkyOx6ZRNSvmN3aNy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkJEMy82NEJGRjE0RUIz RjcxMUVFOTJBNDc3MTdDNEY5QUUwMi9QWF9xeTJNNmE0S1RJN0hwbEUxSy1ZM2Rv M0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BYX3F5Mk02YTRLVEk3SHBsRTFLLVkzZG8zSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkJEMy82NEJGRjE0RUIzRjcxMUVFOTJBNDc3MTdDNEY5QUUwMi9QWF9xeTJNNmE0 S1RJN0hwbEUxSy1ZM2RvM0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjHUp+M6QvB5PiAVT75DQM8B6sd8Zu0E3XltqYChfKTyTMa3clBzpeKp/nKvq 5VYmUd5ZfoQPnfWr4Qyr3Pu6pSzqqO+ruFC13UVPmsBPqLtpMYWCf6PL7NoxQPKt 7yum3dMsAfjChVs323oCaD21b+RLP0kxAeFBZbpT1xUOmLO3ZpfHEDe5cFcbOZK2 3VqmGGyo2x9gKD9ohP3PhMHbyIGlvko5EG5V1jnoMW6SiVCpc4zy+lPguUV7yLjE zvAsbGMKeJtxkxm5uut9YpeuofsNPhrJhabD2/+AZhhyUnQ44DoI+1jfN11zUKc+ 4u3S9wFN/Zo6cWlaFbwSZuNhyg== -----END CERTIFICATE-----Generated at Mon Mar 2 14:09:53 2026 by rpki-client