$ rpki-client -vvvf rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft File: QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft (raw, json) Hash identifier: s3gE/Q4DIsXWJaY+rRaBCXTUgEtncBHtYi5EUk64Tzs= Subject key identifier: 60:4C:C9:41:C8:39:B0:4C:5D:9C:B8:A3:F8:B0:17:EE:9F:F2:21:D1 Authority key identifier: 40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6 Certificate issuer: /CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6 Certificate serial: 0E49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft Manifest number: 0D28 Signing time: Sun 20 Sep 2026 18:41:51 +0000 Manifest this update: Sun 20 Sep 2026 18:41:50 +0000 Manifest next update: Sun 27 Sep 2026 18:41:50 +0000 Files and hashes: 1: QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl (hash: RCVbFK4XYsT4D4ZF+RauPYZGDymvxKntRfGT53JlFO8=) 2: 8AD3E23A17DC11EE959DE671C4F9AE02.roa (hash: PCXWhCBdOz3wuM8WU55B1FYMT0DwN0M40X705jCXOcQ=) 3: 678847C6535F11EE9BC85F83C4F9AE02.roa (hash: Z79rrvAX+MkAU7RIj82HMSiIMnnHt8DRxj3iIlw1SGs=) 4: 651E60A6535F11EE9BC85F83C4F9AE02.roa (hash: /PC8S/6p0cKFfDtq1mZfKqLDeu+/nUGuOGrYhA617sY=) 5: 6688CA76535F11EE9BC85F83C4F9AE02.roa (hash: pVH2bMGC7+464gDRV/z0xb8UJ/QPCj/ZW97Q6jJEWrE=) 6: A0F26482C9F211EF986EE370C4F9AE02.roa (hash: sHM4xXld7uDeHu4KE4YRCWi+rdXGTKPH7QzaRU3HxOU=) 7: 48E219C209C311EEA9D88A34C4F9AE02.roa (hash: SvB+QsV4btdCFW7i059dWy1bkAp62n7wxY/pgRJzLzk=) 8: 9005E6F417DC11EE959DE671C4F9AE02.roa (hash: e3i2wusdoLzTSROJLMycuqmh4b9nxg7+8W+M3MY32nk=) 9: 041A5B042C6911F098B91B76C4F9AE02.roa (hash: Nisqq4Q0qjVEubmWisYThrjO8ZKrL4odD75LU3tphLs=) 10: 8BF60AF817DC11EE959DE671C4F9AE02.roa (hash: C1CK+9M/ckvpPGWd0ysVo6YESQAEhbu/xrQHT/N9P6Q=) 11: 6BB6356086F111F19E006003A7EE528E.roa (hash: 8E4lWe8eMXTQftSqErp6AT1u7W/ptR1bQS6g7D5lpVs=) 12: 8F9A2E2817DC11EE959DE671C4F9AE02.roa (hash: uui58eIkIAuoIfjCf5IA5jNvQTdVLqnOyu4QWW+fdPU=) 13: 5CBF3F2A540B11F1B7C20C5592833773.roa (hash: 1RR4rXrGdgVkusSgQXAk0hFyo7p3RZsSCUOiYGlL9OQ=) 14: 67023924535F11EE9BC85F83C4F9AE02.roa (hash: iSPArCekR6M/cWSzzjFrByEv9qSybnPOARzA3B9QRaY=) 15: 8B707C6C17DC11EE959DE671C4F9AE02.roa (hash: uLT99LvREt6aFgLq+8J5+/4C4Z0AHsSdTIhcGHc+DZg=) 16: 8CC1AF1417DC11EE959DE671C4F9AE02.roa (hash: wyS0hB9hlamFhnUTh6Gv6KcrrBw3EQZa9bUf+tLTABQ=) 17: 8D2CC3EE17DC11EE959DE671C4F9AE02.roa (hash: aJpPvoSGRVMA94Dw8tXt33zHeGMuxciJSkooTeVqXLA=) 18: 8CA2C07889D111EFAFEB2609C4F9AE02.roa (hash: yc3SgJhB9U1lGAckaKIVNdgap51jHeAdYVySNP13Icc=) 19: 8F1DD9E017DC11EE959DE671C4F9AE02.roa (hash: i5ROrzKB1s+VCKVSWpJPv8NGaUfssmlckuMKuKCQzg4=) 20: 8E2676DC17DC11EE959DE671C4F9AE02.roa (hash: eh/7xK3jzeTfsbyM/J4kfcM/+VwQ8Z7/19vJJZdyK1Y=) 21: D79FB38AAB6511F1A0EA4F9E3B11F970.roa (hash: /w9cMLFs3AmXiKviME1yYbjMu1F1JmT7vGZdeuDc8m8=) 22: BB3B63A83A7011F1B365A8EDB1833773.roa (hash: rrNm2V87UUk3ZtAA1EOIUlvBXqSc+wZlGyp0mTMptsA=) 23: 8EADC8C617DC11EE959DE671C4F9AE02.roa (hash: e7VhcfQT9ruvv4CGZkrGsmAxeo+APLPyU8Ze+kwj1t4=) 24: 65A78BCE535F11EE9BC85F83C4F9AE02.roa (hash: d51m3hjXY2TezXxt2Mgw2qLO9oFLWxyGtgPvE/O7bjk=) 25: 8DB5B2BC17DC11EE959DE671C4F9AE02.roa (hash: 0NXtzAL1o+tarKa4oNc7xxhauxSJ0WEZHKYx7ZTMEWI=) 26: 67F68132535F11EE9BC85F83C4F9AE02.roa (hash: TWadmcrZewtuAgz2VI+NPqZM8R7/PZMSyZJSCwVn5T0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 18:41:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3657 (0xe49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CA78, serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6 Validity Not Before: Sep 20 18:41:50 2026 GMT Not After : Sep 27 18:41:50 2026 GMT Subject: CN=6ab028ef-7c73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:0c:43:b0:07:b0:11:5c:62:c0:03:82:00:5a: a3:21:39:77:4d:8d:ab:9e:0f:7b:0a:8a:57:76:4c: b3:46:b9:88:9b:45:fd:1a:20:41:57:9f:60:05:0f: 54:c9:8f:dc:3e:80:b4:87:b2:3a:49:4f:67:7a:6f: 36:5f:a5:de:4b:b9:df:29:6d:d7:90:e1:2e:96:0f: ae:58:56:cb:c4:4e:fd:33:9f:ff:c6:c0:3b:71:58: ce:fa:a7:75:9c:24:f5:13:b2:80:74:bc:03:5a:df: 27:7f:4f:22:cf:09:2a:82:fe:af:16:a1:70:42:01: a0:2c:04:6d:f3:2b:5b:45:a8:81:21:56:f0:66:3e: 7a:53:95:ea:c9:83:d0:39:8d:5b:1d:a5:bc:a6:91: 9e:2a:89:86:a8:99:e3:7d:06:76:3a:b9:f3:ab:87: a7:94:84:ef:29:c2:ad:38:6a:c1:60:03:8d:ad:1e: f0:3f:6b:0b:d0:30:c7:99:15:1d:59:ff:c6:d8:17: 48:64:30:d6:71:1e:00:f0:9e:17:b7:ef:ec:0e:ec: 25:0d:bb:51:d3:bf:84:47:59:b8:c8:a2:66:9a:5f: 57:99:f9:2e:1f:9b:9a:59:2d:7d:8a:0d:32:8f:4b: 7e:9a:97:75:c3:6e:4d:80:85:48:a9:32:62:fe:12: 8f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:4C:C9:41:C8:39:B0:4C:5D:9C:B8:A3:F8:B0:17:EE:9F:F2:21:D1 X509v3 Authority Key Identifier: keyid:40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:7b:69:ba:ff:88:60:08:ec:ab:2d:ff:13:a5:53:03:e5:e3: 21:fd:b1:fd:c2:f4:3a:12:3b:5b:bd:bb:36:10:8e:dc:bd:4d: 1f:96:ef:0b:bb:4f:f6:6c:1b:d4:ce:4b:fa:93:12:df:1a:1b: 16:5b:12:f1:9b:a8:80:d0:97:a0:d9:cd:74:ba:64:46:a5:8a: 94:66:b5:bb:51:7d:c2:59:b8:34:1b:8e:31:45:3e:4a:85:ec: 82:87:a3:91:ab:1b:3c:24:a5:9a:2e:79:5c:48:c1:da:56:b3: 71:76:9b:96:45:28:a5:c3:d5:10:12:26:cd:19:b0:94:9e:58: 1b:06:f2:3e:94:0c:71:eb:d3:75:6f:cc:56:53:b6:78:e4:c2: b8:6e:94:99:93:a5:ee:c2:a6:b2:bb:7f:19:c7:26:4c:bf:af: 3b:b0:af:11:16:62:57:f5:4c:30:d3:3c:e4:f0:00:3a:2d:71: 79:83:2c:ec:70:53:32:a7:0c:16:06:30:86:8e:bb:b6:61:ce: b7:24:77:ae:f4:6d:76:79:a3:bd:22:2d:20:3f:a3:f2:29:39: e5:73:1f:cc:a4:38:59:00:96:b3:2f:fa:f6:a3:c2:f1:4f:e2: de:60:bb:9e:32:33:9a:be:22:8d:82:c7:a5:58:ff:5d:6e:12: 20:95:b2:fd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDkkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUNBNzgxMTAvBgNVBAUTKDQwNTYyQzE0M0EyOUNCMTlDNzBGRkM5Qjk5QjYwQkJF Q0QxRDczQjYwHhcNMjYwOTIwMTg0MTUwWhcNMjYwOTI3MTg0MTUwWjAYMRYwFAYD VQQDEw02YWIwMjhlZi03YzczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1QxDsAewEVxiwAOCAFqjITl3TY2rng97CopXdkyzRrmIm0X9GiBBV59gBQ9U yY/cPoC0h7I6SU9nem82X6XeS7nfKW3XkOEulg+uWFbLxE79M5//xsA7cVjO+qd1 nCT1E7KAdLwDWt8nf08izwkqgv6vFqFwQgGgLARt8ytbRaiBIVbwZj56U5XqyYPQ OY1bHaW8ppGeKomGqJnjfQZ2Ornzq4enlITvKcKtOGrBYAONrR7wP2sL0DDHmRUd Wf/G2BdIZDDWcR4A8J4Xt+/sDuwlDbtR07+ER1m4yKJmml9XmfkuH5uaWS19ig0y j0t+mpd1w25NgIVIqTJi/hKPIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGBMyUHI ObBMXZy4o/iwF+6f8iHRMB8GA1UdIwQYMBaAFEBWLBQ6KcsZxw/8m5m2C77NHXO2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0E3OC9CRTg4NDZEMjM1 RDgxMUVBQTczMEVDNDZDNEY5QUUwMi9RRllzRkRvcHl4bkhEX3libWJZTHZzMGRj N1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FGWXNGRG9weXhuSERfeWJtYllMdnMwZGM3WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Q0E3OC9CRTg4NDZEMjM1RDgxMUVBQTczMEVDNDZDNEY5QUUwMi9RRllzRkRvcHl4 bkhEX3libWJZTHZzMGRjN1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABHtpuv+IYAjsqy3/E6VTA+XjIf2x/cL0OhI7W727NhCO3L1NH5bvC7tP9mwb 1M5L+pMS3xobFlsS8ZuogNCXoNnNdLpkRqWKlGa1u1F9wlm4NBuOMUU+SoXsgoej kasbPCSlmi55XEjB2lazcXablkUopcPVEBImzRmwlJ5YGwbyPpQMcevTdW/MVlO2 eOTCuG6UmZOl7sKmsrt/GccmTL+vO7CvERZiV/VMMNM85PAAOi1xeYMs7HBTMqcM FgYwho67tmHOtyR3rvRtdnmjvSItID+j8ik55XMfzKQ4WQCWsy/69qPC8U/i3mC7 njIzmr4ijYLHpVj/XW4SIJWy/Q== -----END CERTIFICATE-----Generated at Tue Sep 22 01:51:42 2026 by rpki-client