$ rpki-client -vvvf rpki.apnic.net/member_repository/A9173FAC/B8F5C76A101811F080BCC348C4F9AE02/PxqOo9KtxuyyNg4MN2zlWbn_cfI.mft File: PxqOo9KtxuyyNg4MN2zlWbn_cfI.mft (raw, json) Hash identifier: UP0mqQZvV2cboXTjIo96prePD3i7CzJt20lhX2PSH3U= Subject key identifier: 6C:02:55:E3:B0:D3:68:B6:68:91:9C:00:AB:04:5B:5E:82:4F:05:EC Authority key identifier: 3F:1A:8E:A3:D2:AD:C6:EC:B2:36:0E:0C:37:6C:E5:59:B9:FF:71:F2 Certificate issuer: /CN=A9173FAC/serialNumber=3F1A8EA3D2ADC6ECB2360E0C376CE559B9FF71F2 Certificate serial: 0112 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxqOo9KtxuyyNg4MN2zlWbn_cfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173FAC/B8F5C76A101811F080BCC348C4F9AE02/PxqOo9KtxuyyNg4MN2zlWbn_cfI.mft Manifest number: 0112 Signing time: Mon 21 Sep 2026 05:58:01 +0000 Manifest this update: Mon 21 Sep 2026 05:58:01 +0000 Manifest next update: Mon 28 Sep 2026 05:58:01 +0000 Files and hashes: 1: PxqOo9KtxuyyNg4MN2zlWbn_cfI.crl (hash: HC/xXHZh84feRIJs07lS6mu9jJPla2mAeluvKGppIKQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173FAC/B8F5C76A101811F080BCC348C4F9AE02/PxqOo9KtxuyyNg4MN2zlWbn_cfI.crl rsync://rpki.apnic.net/member_repository/A9173FAC/B8F5C76A101811F080BCC348C4F9AE02/PxqOo9KtxuyyNg4MN2zlWbn_cfI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxqOo9KtxuyyNg4MN2zlWbn_cfI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 05:58:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 274 (0x112) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173FAC, serialNumber=3F1A8EA3D2ADC6ECB2360E0C376CE559B9FF71F2 Validity Not Before: Sep 21 05:58:01 2026 GMT Not After : Sep 28 05:58:01 2026 GMT Subject: CN=6ab0c769-aba2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:05:40:44:73:f3:af:0e:03:13:30:50:87:02: 2a:9c:2b:b5:6f:31:42:fc:8f:af:4f:9b:69:d0:cb: e5:33:65:16:a5:2e:ab:19:0a:e0:d0:d1:e7:c7:6c: ce:8b:dd:b1:a3:f6:bb:85:f2:ec:98:e7:e5:6f:36: 49:cf:a1:30:3c:d8:47:d0:4b:71:4f:f1:97:ac:c8: d8:37:b1:27:dd:10:eb:19:7e:f2:9d:8e:dc:0f:f9: c3:4e:e8:5e:98:e1:1c:ac:17:96:70:c4:dc:7f:00: 52:41:b1:94:59:64:37:01:cf:d6:d7:04:68:f8:e4: 9a:ce:e5:11:d9:39:c5:46:ae:51:e8:e3:ec:bd:29: 08:7f:90:4c:11:65:18:f1:b0:65:11:71:c3:50:d9: 8a:8c:5f:72:79:30:2f:9a:56:7b:12:58:a4:8f:6b: f2:4c:ff:a3:22:40:bb:ab:7e:55:ea:2d:0f:22:2d: f1:71:0a:ca:c2:38:e7:b2:b5:eb:f3:00:03:7c:dd: 83:44:38:d7:da:13:75:2b:dd:0b:a8:6d:e9:55:7c: 4d:d7:0c:f7:91:06:49:32:81:55:63:ce:4a:13:91: bd:55:ef:0e:54:06:8f:17:c6:da:50:7a:ea:a3:49: 72:bd:aa:e1:fe:a3:49:42:58:af:56:31:8b:db:26: 39:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:02:55:E3:B0:D3:68:B6:68:91:9C:00:AB:04:5B:5E:82:4F:05:EC X509v3 Authority Key Identifier: keyid:3F:1A:8E:A3:D2:AD:C6:EC:B2:36:0E:0C:37:6C:E5:59:B9:FF:71:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173FAC/B8F5C76A101811F080BCC348C4F9AE02/PxqOo9KtxuyyNg4MN2zlWbn_cfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxqOo9KtxuyyNg4MN2zlWbn_cfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173FAC/B8F5C76A101811F080BCC348C4F9AE02/PxqOo9KtxuyyNg4MN2zlWbn_cfI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:e7:a3:04:40:c2:86:c6:d0:44:17:1f:cf:f3:19:78:ac:7b: 0d:a6:bb:ac:3d:4d:c2:eb:d0:aa:08:9b:4b:50:86:52:84:b2: df:74:88:73:60:31:0e:9c:6e:ec:92:1a:53:de:4a:f1:d4:30: af:c0:fc:c7:81:19:40:dc:eb:65:b2:cc:e6:4d:07:df:00:5e: 67:72:c1:f7:19:aa:01:ed:c1:13:d5:2c:3b:04:d5:3d:05:19: 88:ca:83:99:dd:37:93:b5:00:3d:0e:8a:c8:c6:5f:0f:db:e5: c4:0b:7d:31:b7:cf:2a:ca:e2:2c:b4:1b:a4:7a:bd:64:75:20: de:9a:d0:95:4b:79:39:35:96:ad:90:47:8e:43:11:b6:e5:8a: 63:08:7c:d7:76:a3:22:8d:30:e0:43:aa:73:00:7a:64:3e:75: 1c:72:e3:8c:c4:b1:fc:4a:0d:41:e0:e5:ba:ef:79:7f:56:74: bb:7d:2d:39:72:bf:aa:34:95:57:7e:f6:8b:fd:96:44:42:66: 4d:fa:30:de:f6:c1:d6:48:e5:b7:0a:7c:5b:e2:a9:6c:54:e2: b7:49:85:51:b5:20:ba:10:12:20:ed:f0:2c:91:5d:47:61:44: c3:07:3e:a8:02:03:20:ae:f9:1d:ef:c6:8d:87:66:c6:2f:aa: df:6b:d5:b0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICARIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNGQUMxMTAvBgNVBAUTKDNGMUE4RUEzRDJBREM2RUNCMjM2MEUwQzM3NkNFNTU5 QjlGRjcxRjIwHhcNMjYwOTIxMDU1ODAxWhcNMjYwOTI4MDU1ODAxWjAYMRYwFAYD VQQDEw02YWIwYzc2OS1hYmEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAygVARHPzrw4DEzBQhwIqnCu1bzFC/I+vT5tp0MvlM2UWpS6rGQrg0NHnx2zO i92xo/a7hfLsmOflbzZJz6EwPNhH0EtxT/GXrMjYN7En3RDrGX7ynY7cD/nDTuhe mOEcrBeWcMTcfwBSQbGUWWQ3Ac/W1wRo+OSazuUR2TnFRq5R6OPsvSkIf5BMEWUY 8bBlEXHDUNmKjF9yeTAvmlZ7Elikj2vyTP+jIkC7q35V6i0PIi3xcQrKwjjnsrXr 8wADfN2DRDjX2hN1K90LqG3pVXxN1wz3kQZJMoFVY85KE5G9Ve8OVAaPF8baUHrq o0lyvarh/qNJQlivVjGL2yY5HwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGwCVeOw 02i2aJGcAKsEW16CTwXsMB8GA1UdIwQYMBaAFD8ajqPSrcbssjYODDds5Vm5/3Hy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0ZBQy9COEY1Qzc2QTEw MTgxMUYwODBCQ0MzNDhDNEY5QUUwMi9QeHFPbzlLdHh1eXlOZzRNTjJ6bFdibl9j ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1B4cU9vOUt0eHV5eU5nNE1OMnpsV2JuX2NmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0ZBQy9COEY1Qzc2QTEwMTgxMUYwODBCQ0MzNDhDNEY5QUUwMi9QeHFPbzlLdHh1 eXlOZzRNTjJ6bFdibl9jZkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYuejBEDChsbQRBcfz/MZeKx7Daa7rD1NwuvQqgibS1CGUoSy33SIc2AxDpxu 7JIaU95K8dQwr8D8x4EZQNzrZbLM5k0H3wBeZ3LB9xmqAe3BE9UsOwTVPQUZiMqD md03k7UAPQ6KyMZfD9vlxAt9MbfPKsriLLQbpHq9ZHUg3prQlUt5OTWWrZBHjkMR tuWKYwh813ajIo0w4EOqcwB6ZD51HHLjjMSx/EoNQeDluu95f1Z0u30tOXK/qjSV V372i/2WREJmTfow3vbB1kjltwp8W+KpbFTit0mFUbUguhASIO3wLJFdR2FEwwc+ qAIDIK75He/GjYdmxi+q32vVsA== -----END CERTIFICATE-----Generated at Tue Sep 22 22:00:23 2026 by rpki-client