$ rpki-client -vvf rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.mft File: PXe1hqP2gsVjtkJlJiiR1NpGp6g.mft (raw, json) Hash identifier: Pb/UChyomYVvd57pYAqItXm4JtQ7vy1UPkZFu6HpURY= Subject key identifier: 46:5F:E2:A2:50:C3:67:17:11:2B:D0:D2:71:DF:9C:BE:30:E0:B0:BB Authority key identifier: 3D:77:B5:86:A3:F6:82:C5:63:B6:42:65:26:28:91:D4:DA:46:A7:A8 Certificate issuer: /CN=A91B10B9/serialNumber=3D77B586A3F682C563B64265262891D4DA46A7A8 Certificate serial: 0472 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXe1hqP2gsVjtkJlJiiR1NpGp6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.mft Manifest number: 046A Signing time: Mon 27 Jul 2026 01:11:32 +0000 Manifest this update: Mon 27 Jul 2026 01:11:31 +0000 Manifest next update: Mon 03 Aug 2026 01:11:31 +0000 Files and hashes: 1: PXe1hqP2gsVjtkJlJiiR1NpGp6g.crl (hash: ZYOx6HDnkluAbrB8M3knZAQmxItRgRstADzAhx6ygZs=) 2: BCD0F6B0A0FF11EC924D4461C4F9AE02.roa (hash: RLT4OavkIPlkhOt4yNgRmjMZlXgnd7ZiolTVU7K89ho=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.crl rsync://rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXe1hqP2gsVjtkJlJiiR1NpGp6g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 01:11:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1138 (0x472) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B10B9, serialNumber=3D77B586A3F682C563B64265262891D4DA46A7A8 Validity Not Before: Jul 27 01:11:31 2026 GMT Not After : Aug 3 01:11:31 2026 GMT Subject: CN=6a66b043-de18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:95:ec:cd:f8:d9:b2:76:13:fb:c4:54:08:12: 4d:b4:1a:b4:b4:00:6a:de:ff:7c:28:b4:17:ea:68: a2:f8:3e:6f:57:1f:e1:97:0b:8e:07:8b:58:08:85: 7a:67:c7:e5:72:b7:ba:6a:b4:40:5e:34:c2:6d:3f: 81:ec:fd:0c:2f:9f:fc:51:8f:7e:24:75:ab:48:63: 87:dc:16:b8:9e:50:0d:b2:91:cf:75:89:ea:8e:29: 4d:4a:c7:61:b7:3b:a6:ec:e3:9e:6f:a2:21:94:70: 8c:be:f4:e7:df:5d:5d:4b:79:8c:22:fd:80:b3:54: 25:31:c6:5a:d0:a4:6c:bd:57:01:95:9a:18:56:91: a8:59:6e:5d:9b:96:63:58:53:fb:e0:36:7d:d2:1c: 04:4e:10:58:f8:04:5e:16:f7:ec:ce:f9:b5:17:3a: 5e:c3:0a:c5:95:75:e2:53:16:77:bc:f9:59:e4:10: 5e:ee:47:d6:02:bf:23:d5:43:c8:6b:13:4e:6a:9a: 9d:59:ee:61:33:3b:31:5b:b6:75:17:58:c8:f8:35: 8e:5e:ef:54:73:fc:c7:94:2b:cd:21:39:96:6f:2e: 54:1f:ea:2b:0b:f1:2d:5f:d9:59:2f:67:9d:2e:98: 4a:b5:3c:e4:70:12:aa:09:e7:43:37:0d:ee:47:d8: 4d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:5F:E2:A2:50:C3:67:17:11:2B:D0:D2:71:DF:9C:BE:30:E0:B0:BB X509v3 Authority Key Identifier: keyid:3D:77:B5:86:A3:F6:82:C5:63:B6:42:65:26:28:91:D4:DA:46:A7:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXe1hqP2gsVjtkJlJiiR1NpGp6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:6b:f3:ba:21:b9:36:70:bb:93:81:b4:19:61:cf:30:3e:4a: fc:c2:87:c3:7f:05:e0:4a:0f:da:70:52:92:39:3f:11:cf:02: bc:72:f4:33:a6:58:a5:cb:a8:d1:e9:81:10:e8:9c:ed:aa:26: 31:02:88:1f:9b:42:c6:5b:d4:fb:56:4f:f8:1f:68:dc:be:6b: 1f:f4:77:14:9d:e5:5d:96:9b:f5:5e:d3:34:74:e9:89:a7:34: d1:9f:86:b7:92:c7:d8:db:d6:29:f1:68:8f:87:5a:c2:f5:40: d4:6b:59:7b:8a:b3:b5:ed:e4:95:5e:a7:a2:f0:dd:30:fb:3e: 8c:b5:e3:06:7f:85:da:56:e9:12:8a:1e:7f:f0:a2:ba:45:36: 46:23:3e:c9:9e:32:d5:24:09:9e:8a:48:d5:93:e8:c9:89:bf: 64:b2:17:9f:96:7f:6d:2b:95:a5:06:cc:8d:d6:9d:91:3e:38: 06:1c:8b:26:7a:4d:32:3d:68:60:3c:45:d2:30:b2:28:30:79: 06:9e:4f:44:f5:9e:f4:68:52:b1:e8:00:1a:c2:c2:a7:a8:bf: 8e:f4:e6:27:61:65:c1:4c:f8:d1:08:a0:ea:92:53:6e:51:c8: 74:96:cd:18:fc:94:fd:d7:ad:af:b6:d7:ae:b6:93:fc:6e:65: a2:70:71:9b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBHIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjEwQjkxMTAvBgNVBAUTKDNENzdCNTg2QTNGNjgyQzU2M0I2NDI2NTI2Mjg5MUQ0 REE0NkE3QTgwHhcNMjYwNzI3MDExMTMxWhcNMjYwODAzMDExMTMxWjAYMRYwFAYD VQQDEw02YTY2YjA0My1kZTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtJXszfjZsnYT+8RUCBJNtBq0tABq3v98KLQX6mii+D5vVx/hlwuOB4tYCIV6 Z8flcre6arRAXjTCbT+B7P0ML5/8UY9+JHWrSGOH3Ba4nlANspHPdYnqjilNSsdh tzum7OOeb6IhlHCMvvTn311dS3mMIv2As1QlMcZa0KRsvVcBlZoYVpGoWW5dm5Zj WFP74DZ90hwEThBY+AReFvfszvm1FzpewwrFlXXiUxZ3vPlZ5BBe7kfWAr8j1UPI axNOapqdWe5hMzsxW7Z1F1jI+DWOXu9Uc/zHlCvNITmWby5UH+orC/EtX9lZL2ed LphKtTzkcBKqCedDNw3uR9hNKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEZf4qJQ w2cXESvQ0nHfnL4w4LC7MB8GA1UdIwQYMBaAFD13tYaj9oLFY7ZCZSYokdTaRqeo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTBCOS9EMTNCRUFBQUEw RkIxMUVDQTVEMURGNUJDNEY5QUUwMi9QWGUxaHFQMmdzVmp0a0psSmlpUjFOcEdw NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BYZTFocVAyZ3NWanRrSmxKaWlSMU5wR3A2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTBCOS9EMTNCRUFBQUEwRkIxMUVDQTVEMURGNUJDNEY5QUUwMi9QWGUxaHFQMmdz Vmp0a0psSmlpUjFOcEdwNmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtmvzuiG5NnC7k4G0GWHPMD5K/MKHw38F4EoP2nBSkjk/Ec8CvHL0M6ZYpcuo 0emBEOic7aomMQKIH5tCxlvU+1ZP+B9o3L5rH/R3FJ3lXZab9V7TNHTpiac00Z+G t5LH2NvWKfFoj4dawvVA1GtZe4qzte3klV6novDdMPs+jLXjBn+F2lbpEooef/Ci ukU2RiM+yZ4y1SQJnopI1ZPoyYm/ZLIXn5Z/bSuVpQbMjdadkT44BhyLJnpNMj1o YDxF0jCyKDB5Bp5PRPWe9GhSsegAGsLCp6i/jvTmJ2FlwUz40Qig6pJTblHIdJbN GPyU/detr7bXrraT/G5lonBxmw== -----END CERTIFICATE-----Generated at Tue Jul 28 20:21:23 2026 by rpki-client