$ rpki-client -vvvf rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.mft File: Q2ssXwP5HKdBxqJJ3AFabVRKYqY.mft (raw, json) Hash identifier: QYUamlTPBh99dayINhIivnbk3d7gGjDeRRFJ/xGUO08= Subject key identifier: E5:63:31:4B:45:24:2B:F4:6D:6A:FF:33:58:AF:67:D3:93:A9:A9:54 Authority key identifier: 43:6B:2C:5F:03:F9:1C:A7:41:C6:A2:49:DC:01:5A:6D:54:4A:62:A6 Certificate issuer: /CN=A911647C/serialNumber=436B2C5F03F91CA741C6A249DC015A6D544A62A6 Certificate serial: 0BE1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.mft Manifest number: 0B1E Signing time: Tue 22 Sep 2026 19:20:56 +0000 Manifest this update: Tue 22 Sep 2026 19:20:55 +0000 Manifest next update: Tue 29 Sep 2026 19:20:55 +0000 Files and hashes: 1: Q2ssXwP5HKdBxqJJ3AFabVRKYqY.crl (hash: jxD84J/F5GISgSlKxlxYaRbkJMeOTzPCv7bB5h/HLyo=) 2: 0EA44D4E5ADD11EBB9CEE568C4F9AE02.roa (hash: GKBnrOK5UbpE6Y1zn126/+tVLBVe3fXMAkHrduoxCcI=) 3: C3E2252E205F11EE8117111CC4F9AE02.roa (hash: wpGRFC6+DwJQoD/Bm6hMgYO5Gr04EgHxiy8sbfP7iA8=) 4: 84023C06D24611EABDDF5344C4F9AE02.roa (hash: LpUWhMMembbOWPh50IbGhsLcg7v+awk6J0ISPizwZwo=) 5: 553170245AC511EBA052F663C4F9AE02.roa (hash: NBDkJIuqHlF4I8cMlSivAAbBMzPvILaMaBqKjeLV/KQ=) 6: 61EFB2ACAC3611EDA5995F3FC4F9AE02.roa (hash: wZo18R1LnD+2k6h4J7pMIrHXFSVwyqxLJaqUcBl2koQ=) 7: DCF88EAE5ED811EBAB677671C4F9AE02.roa (hash: SkOhlI1Sq/LIctQQV3ASYYQ+aRYJDMBcBGKvl4fYf/A=) 8: 0DE32D9C2B1E11F0AFEB852DC4F9AE02.roa (hash: GhZxcNMvyQlSrFSWmku1+ahVlAxZoEGclnQbU2Qrymw=) 9: 8626FFC65AE511EBA452D33EC4F9AE02.roa (hash: sw6eH1M5hEn6a0pc3B0uLVLZCRXvmEkQN01rQxgEvj0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.crl rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 19:20:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3041 (0xbe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911647C, serialNumber=436B2C5F03F91CA741C6A249DC015A6D544A62A6 Validity Not Before: Sep 22 19:20:55 2026 GMT Not After : Sep 29 19:20:55 2026 GMT Subject: CN=6ab2d518-17ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:69:64:b1:df:dc:bc:f1:ff:4c:1c:c6:75:f8: 58:52:1b:67:64:9d:3d:98:82:47:d5:7b:d6:d5:1f: 10:11:47:dc:9c:1e:c7:18:bd:9b:1c:e2:7d:05:d3: b3:52:20:34:d9:a9:6d:7d:b9:1c:52:6c:c2:67:54: 91:b6:33:88:de:ba:66:29:b2:39:bc:bc:aa:16:be: 61:8e:bd:d5:d5:a8:66:95:36:69:e0:5a:60:d6:5b: 3c:80:dc:21:4a:2c:e9:79:e7:30:91:f1:0e:a8:2c: ee:7c:cf:7c:8a:44:53:ce:4c:4f:2e:b7:a7:5b:83: 3a:8e:8c:92:8b:9e:5f:29:4e:a2:e7:bb:8f:26:bd: 4b:e1:1b:f2:9d:b7:9f:85:7d:b1:9f:ed:13:be:74: 84:89:ec:06:a0:a5:bd:36:a3:4e:5f:75:c4:2d:6b: 6e:75:8b:39:eb:39:ff:18:fd:9d:4f:2b:da:2f:63: 0a:97:b6:cd:64:d6:76:77:4e:d0:dd:b2:bc:fe:0b: 0b:32:6a:2d:41:c3:8a:40:23:82:95:29:a5:e3:e8: d3:6b:74:be:14:d6:87:22:d8:6a:ee:db:c4:25:1b: 28:47:33:ec:e9:4f:29:db:08:bc:d5:1c:75:fb:3d: f1:2a:db:f7:8b:d3:9a:6a:08:4a:3c:c8:bc:c9:5c: 7e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:63:31:4B:45:24:2B:F4:6D:6A:FF:33:58:AF:67:D3:93:A9:A9:54 X509v3 Authority Key Identifier: keyid:43:6B:2C:5F:03:F9:1C:A7:41:C6:A2:49:DC:01:5A:6D:54:4A:62:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:d3:fc:2f:48:20:65:94:57:cf:4b:86:4d:e3:3b:49:d6:97: 11:e4:d1:93:c6:32:80:11:7f:f9:48:13:cb:3b:6c:a4:2a:be: d0:62:4c:c4:d9:fe:39:88:63:24:15:97:6b:81:6f:c0:52:8a: ce:bb:f9:e8:a1:68:e4:5d:0a:c8:ab:26:a9:a4:a4:99:37:7d: 06:ad:12:79:ba:70:3c:af:30:1a:1a:e4:f6:f7:5c:97:cd:f7: 89:5c:35:52:3a:d5:e6:ae:cf:f7:a7:fa:55:b1:9b:f3:1b:59: 51:20:24:0e:62:76:74:4f:bf:ca:25:94:52:8d:22:e1:e2:9a: 77:68:6d:e4:73:d3:30:54:f0:55:04:79:cc:65:7d:d5:4b:cd: 58:63:6f:8c:6d:ea:96:9a:30:ca:45:12:53:e0:d9:95:5e:65: 85:80:3c:3c:0d:ef:9c:16:ff:f4:61:a3:f9:d6:f4:16:00:ad: 12:2e:cb:a7:22:6c:38:df:12:a3:18:80:e8:d2:7b:ea:d0:ed: 95:b5:99:ed:77:ab:22:4d:10:32:f9:74:eb:58:db:4d:83:b3: 78:89:a2:f9:02:85:42:94:47:8a:17:7e:5f:99:fe:8c:2b:0a: 56:c2:88:b3:15:17:48:df:94:45:97:cc:0a:c3:ee:d4:44:70: 6c:3b:7f:60 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC+EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY0N0MxMTAvBgNVBAUTKDQzNkIyQzVGMDNGOTFDQTc0MUM2QTI0OURDMDE1QTZE NTQ0QTYyQTYwHhcNMjYwOTIyMTkyMDU1WhcNMjYwOTI5MTkyMDU1WjAYMRYwFAYD VQQDEw02YWIyZDUxOC0xN2FkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmmlksd/cvPH/TBzGdfhYUhtnZJ09mIJH1XvW1R8QEUfcnB7HGL2bHOJ9BdOz UiA02altfbkcUmzCZ1SRtjOI3rpmKbI5vLyqFr5hjr3V1ahmlTZp4Fpg1ls8gNwh SizpeecwkfEOqCzufM98ikRTzkxPLrenW4M6joySi55fKU6i57uPJr1L4Rvynbef hX2xn+0TvnSEiewGoKW9NqNOX3XELWtudYs56zn/GP2dTyvaL2MKl7bNZNZ2d07Q 3bK8/gsLMmotQcOKQCOClSml4+jTa3S+FNaHIthq7tvEJRsoRzPs6U8p2wi81Rx1 +z3xKtv3i9OaaghKPMi8yVx+fQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOVjMUtF JCv0bWr/M1ivZ9OTqalUMB8GA1UdIwQYMBaAFENrLF8D+RynQcaiSdwBWm1USmKm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjQ3Qy80MzdDQzQwNjg1 MTMxMUVBQUEwQjBBN0ZDNEY5QUUwMi9RMnNzWHdQNUhLZEJ4cUpKM0FGYWJWUktZ cVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Eyc3NYd1A1SEtkQnhxSkozQUZhYlZSS1lxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjQ3Qy80MzdDQzQwNjg1MTMxMUVBQUEwQjBBN0ZDNEY5QUUwMi9RMnNzWHdQNUhL ZEJ4cUpKM0FGYWJWUktZcVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAk9P8L0ggZZRXz0uGTeM7SdaXEeTRk8YygBF/+UgTyztspCq+0GJMxNn+OYhj JBWXa4FvwFKKzrv56KFo5F0KyKsmqaSkmTd9Bq0SebpwPK8wGhrk9vdcl833iVw1 UjrV5q7P96f6VbGb8xtZUSAkDmJ2dE+/yiWUUo0i4eKad2ht5HPTMFTwVQR5zGV9 1UvNWGNvjG3qlpowykUSU+DZlV5lhYA8PA3vnBb/9GGj+db0FgCtEi7LpyJsON8S oxiA6NJ76tDtlbWZ7XerIk0QMvl061jbTYOzeImi+QKFQpRHihd+X5n+jCsKVsKI sxUXSN+URZfMCsPu1ERwbDt/YA== -----END CERTIFICATE-----Generated at Wed Sep 23 02:28:51 2026 by rpki-client