$ rpki-client -vvf rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.mft File: PWRH1yl0gylOzsuFOl5QCTXRuNc.mft (raw, json) Hash identifier: qLjLsUHKwhMaIhXPOh+UP65lKTout8XmsQs54OTmDOs= Subject key identifier: CB:6F:15:23:CB:40:9F:BA:46:4C:98:6B:16:4D:66:52:DF:00:3C:5C Authority key identifier: 3D:64:47:D7:29:74:83:29:4E:CE:CB:85:3A:5E:50:09:35:D1:B8:D7 Certificate issuer: /CN=A9170E11/serialNumber=3D6447D7297483294ECECB853A5E500935D1B8D7 Certificate serial: 055F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PWRH1yl0gylOzsuFOl5QCTXRuNc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.mft Manifest number: 052A Signing time: Thu 23 Jul 2026 00:25:24 +0000 Manifest this update: Thu 23 Jul 2026 00:25:23 +0000 Manifest next update: Thu 30 Jul 2026 00:25:23 +0000 Files and hashes: 1: PWRH1yl0gylOzsuFOl5QCTXRuNc.crl (hash: KIZXccIowqMcARBdeZvs+U3THQGIYhJSGFEW0wQWtOA=) 2: 5997A6A624E011EDAEC0E529C4F9AE02.roa (hash: kgUDwmWc1IMp1gXUMvhqWSGJV5h+vYuf4OkX4cdGtfg=) 3: 793803867DEA11EC9FC67D66C4F9AE02.roa (hash: M0tXX+QlMHyjlPtQ7dwCZagDlP3SILPEeJfJgeWfgIw=) 4: 2CE5BE065BDA11ECAA855355C4F9AE02.roa (hash: yWnDOGXeBuapUFjfel16F3nDCGyHf2soSlsW7nZ7+cQ=) 5: 27992F96832811EFA1BAAC4FC4F9AE02.roa (hash: 0q4oZUj/sR1op8iE3N1tHBskG9i5bEl+Ec/0N0iGDjI=) 6: 18611004B42A11EC9BD3DE42C4F9AE02.roa (hash: F7zelpLk1UD+fObDTKpqTOpRawAblSrVeJkuuPP4a6c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.crl rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PWRH1yl0gylOzsuFOl5QCTXRuNc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 00:25:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1375 (0x55f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170E11, serialNumber=3D6447D7297483294ECECB853A5E500935D1B8D7 Validity Not Before: Jul 23 00:25:23 2026 GMT Not After : Jul 30 00:25:23 2026 GMT Subject: CN=6a615f74-d522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2b:fd:d2:27:21:c0:1e:6f:34:d9:99:32:54: f4:3c:8d:4c:aa:4a:0c:1f:4b:d8:d4:dd:58:2d:39: 1b:aa:98:80:7a:75:ee:f0:c7:76:35:8c:b9:fb:76: fe:76:00:12:db:5a:fd:d1:d1:7c:98:5e:99:c1:10: c9:ee:98:a4:66:8d:72:e5:3a:27:aa:96:73:b7:54: 4f:ca:da:b4:fb:0b:33:50:f1:a8:57:35:95:a8:2b: ff:44:55:c2:4a:ca:d7:d2:6a:87:66:76:62:4a:48: 1a:19:fd:bb:7b:56:09:e1:a3:9e:09:0a:05:a7:dc: d3:c3:c6:16:62:a8:12:55:e2:66:c8:84:23:56:de: be:ff:4b:e8:59:a9:1f:41:59:23:95:14:75:90:ef: db:29:ad:82:f0:d6:2a:a2:d6:ac:a7:46:c9:b5:1c: fe:34:2f:dd:eb:91:6b:02:22:36:ec:6a:ce:f4:25: ae:02:c4:ba:7a:51:db:b2:7d:6d:06:3a:77:a7:98: c8:cd:fe:db:78:cd:f8:5c:ce:0e:9e:10:a0:22:ef: 4a:5d:e8:bc:8d:65:80:6d:72:41:9f:fa:54:98:02: f7:91:77:dd:6e:1d:5d:27:bd:5f:60:92:fc:b3:fb: b7:78:0f:0f:ba:a1:49:ea:f0:14:2c:37:d0:9c:3a: cb:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:6F:15:23:CB:40:9F:BA:46:4C:98:6B:16:4D:66:52:DF:00:3C:5C X509v3 Authority Key Identifier: keyid:3D:64:47:D7:29:74:83:29:4E:CE:CB:85:3A:5E:50:09:35:D1:B8:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PWRH1yl0gylOzsuFOl5QCTXRuNc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:19:3b:74:47:5c:a2:81:3f:dc:7b:f5:c0:f3:d1:3a:3f:47: 2c:47:54:9b:08:c2:ff:bd:50:cb:df:af:2c:4b:9c:72:52:ba: 0a:5d:e9:d7:5a:f3:36:db:a1:34:ab:45:91:74:30:b9:a1:57: 96:16:4b:c9:d8:3a:5b:a0:df:c9:cf:69:74:d4:d6:3b:f5:61: 3c:94:85:68:f6:b7:93:48:1d:28:a9:c1:e3:60:e3:9a:b5:32: 46:c5:b2:01:7c:60:f3:47:85:27:dd:1b:b6:96:64:f8:1c:97: 82:6e:16:59:c4:14:33:6c:33:c0:b4:0f:7d:c9:5c:99:c9:ee: ba:8c:59:d7:59:97:10:89:d6:f1:d5:8d:86:98:29:f8:76:aa: 84:3f:c2:ec:6c:1e:94:3c:3f:f0:b1:c8:04:79:49:7a:64:86: 24:db:79:98:9f:b3:ef:75:9b:15:e5:2e:e8:a5:8d:f5:94:68: a8:c7:f7:93:32:9f:3a:67:e5:04:97:af:8d:1b:54:21:63:d2: 15:92:c0:3d:26:97:34:c1:c3:7b:76:3d:81:fc:f3:86:bb:5b: 18:f0:9f:21:fd:b2:2d:b2:dc:a1:88:fd:de:86:57:f1:66:3d: 3d:fc:cc:4b:f4:af:6e:4d:ec:2e:80:d3:58:4d:e5:98:3f:a0: e8:5c:fe:cf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBFMTExMTAvBgNVBAUTKDNENjQ0N0Q3Mjk3NDgzMjk0RUNFQ0I4NTNBNUU1MDA5 MzVEMUI4RDcwHhcNMjYwNzIzMDAyNTIzWhcNMjYwNzMwMDAyNTIzWjAYMRYwFAYD VQQDEw02YTYxNWY3NC1kNTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsiv90ichwB5vNNmZMlT0PI1MqkoMH0vY1N1YLTkbqpiAenXu8Md2NYy5+3b+ dgAS21r90dF8mF6ZwRDJ7pikZo1y5TonqpZzt1RPytq0+wszUPGoVzWVqCv/RFXC SsrX0mqHZnZiSkgaGf27e1YJ4aOeCQoFp9zTw8YWYqgSVeJmyIQjVt6+/0voWakf QVkjlRR1kO/bKa2C8NYqotasp0bJtRz+NC/d65FrAiI27GrO9CWuAsS6elHbsn1t Bjp3p5jIzf7beM34XM4OnhCgIu9KXei8jWWAbXJBn/pUmAL3kXfdbh1dJ71fYJL8 s/u3eA8PuqFJ6vAULDfQnDrLHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMtvFSPL QJ+6RkyYaxZNZlLfADxcMB8GA1UdIwQYMBaAFD1kR9cpdIMpTs7LhTpeUAk10bjX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEUxMS9EMDYwQzlCMjVC RDYxMUVDQUQ4MzM2NTFDNEY5QUUwMi9QV1JIMXlsMGd5bE96c3VGT2w1UUNUWFJ1 TmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BXUkgxeWwwZ3lsT3pzdUZPbDVRQ1RYUnVOYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEUxMS9EMDYwQzlCMjVCRDYxMUVDQUQ4MzM2NTFDNEY5QUUwMi9QV1JIMXlsMGd5 bE96c3VGT2w1UUNUWFJ1TmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALhk7dEdcooE/3Hv1wPPROj9HLEdUmwjC/71Qy9+vLEucclK6Cl3p11rzNtuh NKtFkXQwuaFXlhZLydg6W6Dfyc9pdNTWO/VhPJSFaPa3k0gdKKnB42DjmrUyRsWy AXxg80eFJ90btpZk+ByXgm4WWcQUM2wzwLQPfclcmcnuuoxZ11mXEInW8dWNhpgp +HaqhD/C7GwelDw/8LHIBHlJemSGJNt5mJ+z73WbFeUu6KWN9ZRoqMf3kzKfOmfl BJevjRtUIWPSFZLAPSaXNMHDe3Y9gfzzhrtbGPCfIf2yLbLcoYj93oZX8WY9PfzM S/Svbk3sLoDTWE3lmD+g6Fz+zw== -----END CERTIFICATE-----Generated at Thu Jul 23 21:56:40 2026 by rpki-client