$ rpki-client -vvf rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft File: PX_qy2M6a4KTI7HplE1K-Y3do3I.mft (raw, json) Hash identifier: K/NoLPhzw4v8xByMTkZ5Q8FMag/v7iSu6cTo0lO5nRw= Subject key identifier: 3A:EE:A9:BA:2A:A7:6A:8D:3C:1B:62:0F:4E:57:BC:B4:D8:A8:B9:C1 Authority key identifier: 3D:7F:EA:CB:63:3A:6B:82:93:23:B1:E9:94:4D:4A:F9:8D:DD:A3:72 Certificate issuer: /CN=A9172BD3/serialNumber=3D7FEACB633A6B829323B1E9944D4AF98DDDA372 Certificate serial: 01EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PX_qy2M6a4KTI7HplE1K-Y3do3I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft Manifest number: 01E2 Signing time: Mon 27 Jul 2026 05:11:10 +0000 Manifest this update: Mon 27 Jul 2026 05:11:10 +0000 Manifest next update: Mon 03 Aug 2026 05:11:10 +0000 Files and hashes: 1: PX_qy2M6a4KTI7HplE1K-Y3do3I.crl (hash: Vp2GZ49pKFIPbVLV6Fuh4d7exO4eQBBj1gXMbG7s6mk=) 2: 78321A66068D11EF92608943C4F9AE02.roa (hash: 5UiyGeebz2scg4gBW5wMGNarCtgnSEGr0R8BVofACP0=) 3: 97F15FD8068D11EF839A3054C4F9AE02.roa (hash: zmOLhDjLLlYiaqwa8RVMxb2GzAY0iWJCLtJiuDqYk1M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.crl rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PX_qy2M6a4KTI7HplE1K-Y3do3I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 05:11:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 492 (0x1ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172BD3, serialNumber=3D7FEACB633A6B829323B1E9944D4AF98DDDA372 Validity Not Before: Jul 27 05:11:10 2026 GMT Not After : Aug 3 05:11:10 2026 GMT Subject: CN=6a66e86e-7373 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:fd:df:cb:01:8f:c8:f1:46:bc:55:ab:27:50: 93:65:04:81:ed:35:c6:6d:43:09:61:52:f0:b9:7d: 45:23:97:a2:55:2e:eb:a7:eb:8e:63:d8:eb:7c:51: 5b:ae:db:2d:58:5f:c1:a6:31:64:73:dd:23:a9:84: 05:d2:45:6a:15:f6:19:04:8c:9e:25:66:ac:13:e7: b4:7f:9c:32:9d:58:89:a9:23:e7:d9:67:9e:55:63: 06:34:1f:9a:78:6c:62:99:54:93:d8:8c:0b:f6:0f: 16:9e:0e:1c:2f:92:c1:e4:87:37:2c:52:03:c4:62: 59:bf:9e:b0:70:0d:64:6c:64:f4:66:74:43:f8:12: 58:e1:ba:ab:04:f3:77:fe:87:64:77:23:32:81:99: 0a:47:b2:16:bc:70:b4:52:12:62:64:70:e7:1e:38: 9c:da:25:bb:4b:23:68:5b:a5:ab:62:3d:da:92:d3: ce:ad:7b:75:4b:54:1b:aa:68:76:fa:7d:2e:58:be: ce:40:14:32:a2:46:7a:fc:25:00:bc:72:50:ae:8e: 50:38:47:c6:d7:bb:5a:29:4e:a6:4c:75:13:66:3f: 9a:be:f6:c8:2b:6f:d2:9a:dd:2a:10:eb:bb:f8:97: 4d:ac:04:1b:07:a0:e1:66:c1:88:21:22:32:9b:de: b9:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:EE:A9:BA:2A:A7:6A:8D:3C:1B:62:0F:4E:57:BC:B4:D8:A8:B9:C1 X509v3 Authority Key Identifier: keyid:3D:7F:EA:CB:63:3A:6B:82:93:23:B1:E9:94:4D:4A:F9:8D:DD:A3:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PX_qy2M6a4KTI7HplE1K-Y3do3I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:cb:44:bc:fb:0c:cb:dd:f4:fb:5d:bf:ef:07:c9:4b:fa:ba: 27:bc:75:e8:6d:19:2d:9b:5c:64:2b:8a:6f:d9:39:c8:46:c3: 49:fa:28:7e:46:a5:ca:13:dc:30:94:1f:89:7d:7f:b0:ae:e3: 6f:74:27:9a:21:82:ae:64:b4:59:a6:de:ee:e4:83:2e:8c:32: bb:df:89:0c:51:1b:c2:86:bc:c0:8e:34:b6:3e:36:a6:53:bd: e0:c0:48:13:1a:c6:0b:40:7c:ae:0a:99:6e:a3:f4:63:2d:18: cd:9b:e1:1c:b2:59:cc:49:f1:98:81:69:65:15:31:38:49:dc: c0:33:5f:77:a1:89:ad:9b:01:d7:99:04:5f:cf:c7:1a:86:0e: 6a:ec:f5:67:f2:da:77:31:4e:c9:35:61:23:24:15:e3:fb:f2: ab:c9:de:78:7f:66:6c:90:4e:87:c5:4f:ac:72:04:a3:aa:dc: dd:0f:14:54:77:27:04:5b:74:96:39:cf:2f:04:37:e1:c7:3d: ad:17:e2:9e:f6:10:75:d0:28:55:e2:a9:43:71:51:e6:14:0a: be:05:fb:6b:c4:00:b8:e3:1d:48:9e:93:00:86:01:62:ae:f0: d6:8f:d8:b6:1e:9f:da:ab:34:38:a5:83:5f:f2:1b:8b:45:72: 10:3f:4f:30 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJCRDMxMTAvBgNVBAUTKDNEN0ZFQUNCNjMzQTZCODI5MzIzQjFFOTk0NEQ0QUY5 OEREREEzNzIwHhcNMjYwNzI3MDUxMTEwWhcNMjYwODAzMDUxMTEwWjAYMRYwFAYD VQQDEw02YTY2ZTg2ZS03MzczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiv3fywGPyPFGvFWrJ1CTZQSB7TXGbUMJYVLwuX1FI5eiVS7rp+uOY9jrfFFb rtstWF/BpjFkc90jqYQF0kVqFfYZBIyeJWasE+e0f5wynViJqSPn2WeeVWMGNB+a eGximVST2IwL9g8Wng4cL5LB5Ic3LFIDxGJZv56wcA1kbGT0ZnRD+BJY4bqrBPN3 /odkdyMygZkKR7IWvHC0UhJiZHDnHjic2iW7SyNoW6WrYj3aktPOrXt1S1Qbqmh2 +n0uWL7OQBQyokZ6/CUAvHJQro5QOEfG17taKU6mTHUTZj+avvbIK2/Smt0qEOu7 +JdNrAQbB6DhZsGIISIym9657wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDruqboq p2qNPBtiD05XvLTYqLnBMB8GA1UdIwQYMBaAFD1/6stjOmuCkyOx6ZRNSvmN3aNy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkJEMy82NEJGRjE0RUIz RjcxMUVFOTJBNDc3MTdDNEY5QUUwMi9QWF9xeTJNNmE0S1RJN0hwbEUxSy1ZM2Rv M0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BYX3F5Mk02YTRLVEk3SHBsRTFLLVkzZG8zSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkJEMy82NEJGRjE0RUIzRjcxMUVFOTJBNDc3MTdDNEY5QUUwMi9QWF9xeTJNNmE0 S1RJN0hwbEUxSy1ZM2RvM0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGctEvPsMy930+12/7wfJS/q6J7x16G0ZLZtcZCuKb9k5yEbDSfoofkalyhPc MJQfiX1/sK7jb3QnmiGCrmS0Wabe7uSDLowyu9+JDFEbwoa8wI40tj42plO94MBI ExrGC0B8rgqZbqP0Yy0YzZvhHLJZzEnxmIFpZRUxOEncwDNfd6GJrZsB15kEX8/H GoYOauz1Z/LadzFOyTVhIyQV4/vyq8neeH9mbJBOh8VPrHIEo6rc3Q8UVHcnBFt0 ljnPLwQ34cc9rRfinvYQddAoVeKpQ3FR5hQKvgX7a8QAuOMdSJ6TAIYBYq7w1o/Y th6f2qs0OKWDX/Ibi0VyED9PMA== -----END CERTIFICATE-----Generated at Tue Jul 28 23:48:13 2026 by rpki-client