$ rpki-client -vvf rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft File: PX_qy2M6a4KTI7HplE1K-Y3do3I.mft (raw, json) Hash identifier: iySe/1XQl6QOD+KBCWG1D5Qq3YT87tStTyNHrAcphJs= Subject key identifier: E1:2E:FF:E2:B6:66:C3:9E:A7:93:49:CD:2F:D6:A6:03:C4:C5:61:F6 Authority key identifier: 3D:7F:EA:CB:63:3A:6B:82:93:23:B1:E9:94:4D:4A:F9:8D:DD:A3:72 Certificate issuer: /CN=A9172BD3/serialNumber=3D7FEACB633A6B829323B1E9944D4AF98DDDA372 Certificate serial: 01D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PX_qy2M6a4KTI7HplE1K-Y3do3I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft Manifest number: 01CC Signing time: Sat 13 Jun 2026 03:47:25 +0000 Manifest this update: Sat 13 Jun 2026 03:47:25 +0000 Manifest next update: Sat 20 Jun 2026 03:47:25 +0000 Files and hashes: 1: PX_qy2M6a4KTI7HplE1K-Y3do3I.crl (hash: g9OO5I/gdzLc3RzEu9VQJbAI+VEtzNjjtDZ6bB+8a3g=) 2: 78321A66068D11EF92608943C4F9AE02.roa (hash: 5UiyGeebz2scg4gBW5wMGNarCtgnSEGr0R8BVofACP0=) 3: 97F15FD8068D11EF839A3054C4F9AE02.roa (hash: zmOLhDjLLlYiaqwa8RVMxb2GzAY0iWJCLtJiuDqYk1M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.crl rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PX_qy2M6a4KTI7HplE1K-Y3do3I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 470 (0x1d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172BD3, serialNumber=3D7FEACB633A6B829323B1E9944D4AF98DDDA372 Validity Not Before: Jun 13 03:47:25 2026 GMT Not After : Jun 20 03:47:25 2026 GMT Subject: CN=6a2cd2cd-f944 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4b:c1:18:9e:10:21:cf:e0:5c:57:e3:91:0b: 1c:92:6c:f2:13:90:02:8a:e9:48:d4:49:4d:40:31: 56:4f:e7:42:72:58:8e:60:cf:ef:06:5e:94:7f:94: de:ee:1c:43:c2:fb:8a:16:a8:d5:79:9f:c5:5c:f1: 32:b7:d3:ac:4f:dc:8c:1b:c8:e0:96:63:f7:8c:ee: 1e:97:5b:36:e5:a8:b6:e3:3c:77:44:51:e0:97:f1: 10:6c:54:c2:d9:df:f5:08:05:3a:b2:a2:d6:b7:c2: 6c:a2:0d:46:38:a6:54:23:1a:ec:c5:ad:d8:af:fa: 91:fb:bf:45:bb:cf:a8:1d:13:4f:ff:11:35:df:f5: 34:ce:98:aa:53:91:be:a1:21:ea:8a:0d:52:b4:bf: 08:e7:5c:af:2b:3e:4d:9e:0c:e3:60:ae:92:c4:2a: c4:42:94:7e:b4:b7:21:2a:af:4a:2a:16:4f:b8:e2: 9d:d2:f5:4e:da:64:e7:3f:82:b1:9d:a9:aa:47:06: f9:40:dc:99:71:69:ca:56:c0:54:d6:59:33:ea:5e: 77:c6:fe:d1:07:87:17:01:42:ac:0e:7a:65:43:db: ca:3f:1e:b2:a6:f8:c8:13:4f:b4:3a:d2:27:81:85: 6a:86:6d:ef:6e:fb:d4:d6:e9:8c:75:18:c5:40:27: 86:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:2E:FF:E2:B6:66:C3:9E:A7:93:49:CD:2F:D6:A6:03:C4:C5:61:F6 X509v3 Authority Key Identifier: keyid:3D:7F:EA:CB:63:3A:6B:82:93:23:B1:E9:94:4D:4A:F9:8D:DD:A3:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PX_qy2M6a4KTI7HplE1K-Y3do3I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:7e:8d:d4:e1:b4:bd:cf:16:ac:0c:f4:dc:b5:61:90:8e:7b: 35:84:6e:8a:6b:8b:28:d2:2a:79:f4:0c:2b:91:ff:02:2f:2f: 7d:19:b5:b2:80:3e:df:a1:03:33:d2:ab:f8:cb:17:13:78:03: f7:d3:b9:9a:27:ce:a3:e8:dd:76:56:a7:08:93:ba:44:5d:61: 29:b4:bb:e7:64:d0:64:0e:0f:4f:13:53:87:8b:2a:d2:af:d8: d1:e0:c5:06:a5:8b:e0:54:98:71:00:f1:17:5d:95:6c:18:d9: b0:84:72:7f:c0:b9:86:e8:63:d7:5f:9e:50:fe:c7:11:60:89: 27:e2:30:5b:8e:5d:95:a5:fb:1e:b4:d7:b7:a9:ee:ea:0e:e4: dd:6a:4b:6d:f4:0f:8f:1c:95:98:87:4c:77:e3:df:c4:6f:d2: f2:99:43:9c:b8:b8:0f:de:a9:74:6f:ec:0f:70:e5:55:5d:91: d4:77:69:fc:0b:77:6a:fe:bb:b9:7f:00:04:f1:4e:6b:55:2b: 3d:02:14:f1:5c:70:c7:58:ae:1c:69:e3:9a:07:ee:92:08:28: e0:60:40:ea:7b:e5:d6:b1:72:fe:58:96:dd:ba:f2:a5:3e:fe: f9:d3:f0:54:18:de:eb:95:15:3e:d2:b5:87:b1:b2:31:91:61: 6c:19:68:7c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJCRDMxMTAvBgNVBAUTKDNEN0ZFQUNCNjMzQTZCODI5MzIzQjFFOTk0NEQ0QUY5 OEREREEzNzIwHhcNMjYwNjEzMDM0NzI1WhcNMjYwNjIwMDM0NzI1WjAYMRYwFAYD VQQDEw02YTJjZDJjZC1mOTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq0vBGJ4QIc/gXFfjkQsckmzyE5ACiulI1ElNQDFWT+dCcliOYM/vBl6Uf5Te 7hxDwvuKFqjVeZ/FXPEyt9OsT9yMG8jglmP3jO4el1s25ai24zx3RFHgl/EQbFTC 2d/1CAU6sqLWt8Jsog1GOKZUIxrsxa3Yr/qR+79Fu8+oHRNP/xE13/U0zpiqU5G+ oSHqig1StL8I51yvKz5NngzjYK6SxCrEQpR+tLchKq9KKhZPuOKd0vVO2mTnP4Kx namqRwb5QNyZcWnKVsBU1lkz6l53xv7RB4cXAUKsDnplQ9vKPx6ypvjIE0+0OtIn gYVqhm3vbvvU1umMdRjFQCeGyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOEu/+K2 ZsOep5NJzS/WpgPExWH2MB8GA1UdIwQYMBaAFD1/6stjOmuCkyOx6ZRNSvmN3aNy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkJEMy82NEJGRjE0RUIz RjcxMUVFOTJBNDc3MTdDNEY5QUUwMi9QWF9xeTJNNmE0S1RJN0hwbEUxSy1ZM2Rv M0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BYX3F5Mk02YTRLVEk3SHBsRTFLLVkzZG8zSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkJEMy82NEJGRjE0RUIzRjcxMUVFOTJBNDc3MTdDNEY5QUUwMi9QWF9xeTJNNmE0 S1RJN0hwbEUxSy1ZM2RvM0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASH6N1OG0vc8WrAz03LVhkI57NYRuimuLKNIqefQMK5H/Ai8vfRm1soA+36ED M9Kr+MsXE3gD99O5mifOo+jddlanCJO6RF1hKbS752TQZA4PTxNTh4sq0q/Y0eDF BqWL4FSYcQDxF12VbBjZsIRyf8C5huhj11+eUP7HEWCJJ+IwW45dlaX7HrTXt6nu 6g7k3WpLbfQPjxyVmIdMd+PfxG/S8plDnLi4D96pdG/sD3DlVV2R1Hdp/At3av67 uX8ABPFOa1UrPQIU8Vxwx1iuHGnjmgfukggo4GBA6nvl1rFy/liW3brypT7++dPw VBje65UVPtK1h7GyMZFhbBlofA== -----END CERTIFICATE-----Generated at Sat Jun 13 07:35:25 2026 by rpki-client