$ rpki-client -vvvf rpki.apnic.net/member_repository/A912C3BD/1A8108F2D97F11EB9E13594FC4F9AE02/RqE3XwEj9TNI8MT5A02QQP7p08o.mft File: RqE3XwEj9TNI8MT5A02QQP7p08o.mft (raw, json) Hash identifier: TjCEQGKqbl9yKVWCi5aSlPA0Lb//39ax494e0wCEUvQ= Subject key identifier: AF:E2:D1:C8:D0:D3:E0:4F:E9:DC:56:D6:66:4D:50:9D:30:A7:28:31 Authority key identifier: 46:A1:37:5F:01:23:F5:33:48:F0:C4:F9:03:4D:90:40:FE:E9:D3:CA Certificate issuer: /CN=A912C3BD/serialNumber=46A1375F0123F53348F0C4F9034D9040FEE9D3CA Certificate serial: 0696 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RqE3XwEj9TNI8MT5A02QQP7p08o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C3BD/1A8108F2D97F11EB9E13594FC4F9AE02/RqE3XwEj9TNI8MT5A02QQP7p08o.mft Manifest number: 068A Signing time: Mon 28 Sep 2026 22:40:08 +0000 Manifest this update: Mon 28 Sep 2026 22:40:08 +0000 Manifest next update: Mon 05 Oct 2026 22:40:08 +0000 Files and hashes: 1: RqE3XwEj9TNI8MT5A02QQP7p08o.crl (hash: vkCmLGsVUSnkO2S9f95tBSmdxcx5C0VV1JVJvCcfC4w=) 2: 6079B40AD98211EBAA210852C4F9AE02.roa (hash: WcftFva1gcea7hmA7H8a9I1dKGWiCBj9X3AHkNvPmMU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C3BD/1A8108F2D97F11EB9E13594FC4F9AE02/RqE3XwEj9TNI8MT5A02QQP7p08o.crl rsync://rpki.apnic.net/member_repository/A912C3BD/1A8108F2D97F11EB9E13594FC4F9AE02/RqE3XwEj9TNI8MT5A02QQP7p08o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RqE3XwEj9TNI8MT5A02QQP7p08o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 22:40:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1686 (0x696) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C3BD, serialNumber=46A1375F0123F53348F0C4F9034D9040FEE9D3CA Validity Not Before: Sep 28 22:40:08 2026 GMT Not After : Oct 5 22:40:08 2026 GMT Subject: CN=6abaecc8-6b52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ab:1f:e0:6b:0a:f8:01:10:ea:15:b3:36:24: bb:f2:7d:03:fc:c0:55:6a:a7:0d:4e:0d:cc:d0:24: 90:1b:60:98:55:24:be:6d:86:4b:95:ef:53:f4:da: 97:33:0b:bd:ae:e2:a3:06:66:a7:c3:c8:7c:0e:a9: 49:68:ee:5a:93:90:1c:5a:2c:08:af:aa:77:5a:2f: 12:8d:14:6a:54:54:10:f1:c3:be:8a:32:28:e1:a1: 25:79:4e:82:07:ec:22:4a:d0:21:4b:51:88:e5:6b: 91:6d:20:ca:bb:c2:23:ae:a0:fe:20:ef:60:7a:d2: 31:9c:51:fd:b4:6f:06:1a:4c:f5:94:c5:70:f7:57: 30:ad:a2:10:01:7e:56:c3:c7:a4:a3:eb:b0:fc:e9: 65:85:86:2f:cb:f4:87:82:6d:24:e6:9d:f5:f9:73: 71:cf:be:3c:e5:36:42:26:46:f9:20:86:17:5c:50: 85:24:ca:27:e6:d9:12:bc:60:18:12:68:7b:61:6a: a4:24:10:50:7c:ee:6a:d9:fa:21:d9:99:b5:e0:00: 85:8f:49:6d:77:42:71:99:0e:dd:e4:0e:34:3b:5a: 36:92:61:e1:ce:7d:c8:fd:ef:b9:ef:16:50:5f:96: fe:12:b6:e7:c6:64:4b:67:93:a9:3c:d6:0e:44:f3: af:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:E2:D1:C8:D0:D3:E0:4F:E9:DC:56:D6:66:4D:50:9D:30:A7:28:31 X509v3 Authority Key Identifier: keyid:46:A1:37:5F:01:23:F5:33:48:F0:C4:F9:03:4D:90:40:FE:E9:D3:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C3BD/1A8108F2D97F11EB9E13594FC4F9AE02/RqE3XwEj9TNI8MT5A02QQP7p08o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RqE3XwEj9TNI8MT5A02QQP7p08o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C3BD/1A8108F2D97F11EB9E13594FC4F9AE02/RqE3XwEj9TNI8MT5A02QQP7p08o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:72:89:33:64:c5:9f:fe:47:3a:e1:9a:d1:30:3d:58:3c:58: 03:d3:36:a4:0e:b7:ac:fa:73:10:0d:88:42:3c:12:62:be:e5: fa:04:7e:79:c6:c6:99:0b:f3:a8:75:29:c9:f4:b7:78:f4:1e: ca:c8:c4:10:97:29:4b:f3:0f:6f:f3:a2:27:6d:a5:88:d2:10: d8:8c:18:77:27:c0:c0:c5:d2:52:b5:b6:c5:e7:76:59:5a:a6: ff:76:a2:be:a9:ad:0c:c9:61:8c:0c:55:6c:76:ea:13:af:af: 19:00:28:d9:fe:33:52:a2:fb:44:47:55:8e:38:b1:ba:51:1c: d1:fb:23:5c:88:75:18:6a:47:fd:be:eb:8e:32:cd:55:8f:78: 2d:e4:f4:ac:ab:ae:e7:a1:0f:89:a6:4f:28:3c:6a:e1:53:87: fa:60:8a:14:8d:99:f3:f2:f3:65:5a:27:ab:a1:5f:96:96:46: 38:05:cf:b3:8d:aa:d6:4c:90:5c:12:9a:7b:59:73:86:f0:d2: 1c:cf:14:46:ae:00:74:af:0b:d0:36:b9:2a:97:6b:32:db:eb: 5d:c7:a9:ad:a9:5f:64:c1:b9:c9:ba:79:49:ed:b8:84:b7:8e: 5a:7a:ed:c5:d4:73:65:69:a5:c1:5d:f9:5e:60:25:45:17:4a: 70:fc:b3:01 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBpYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkMzQkQxMTAvBgNVBAUTKDQ2QTEzNzVGMDEyM0Y1MzM0OEYwQzRGOTAzNEQ5MDQw RkVFOUQzQ0EwHhcNMjYwOTI4MjI0MDA4WhcNMjYxMDA1MjI0MDA4WjAYMRYwFAYD VQQDEw02YWJhZWNjOC02YjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw6sf4GsK+AEQ6hWzNiS78n0D/MBVaqcNTg3M0CSQG2CYVSS+bYZLle9T9NqX Mwu9ruKjBmanw8h8DqlJaO5ak5AcWiwIr6p3Wi8SjRRqVFQQ8cO+ijIo4aEleU6C B+wiStAhS1GI5WuRbSDKu8IjrqD+IO9getIxnFH9tG8GGkz1lMVw91cwraIQAX5W w8eko+uw/OllhYYvy/SHgm0k5p31+XNxz7485TZCJkb5IIYXXFCFJMon5tkSvGAY Emh7YWqkJBBQfO5q2foh2Zm14ACFj0ltd0JxmQ7d5A40O1o2kmHhzn3I/e+57xZQ X5b+ErbnxmRLZ5OpPNYORPOvywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK/i0cjQ 0+BP6dxW1mZNUJ0wpygxMB8GA1UdIwQYMBaAFEahN18BI/UzSPDE+QNNkED+6dPK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzNCRC8xQTgxMDhGMkQ5 N0YxMUVCOUUxMzU5NEZDNEY5QUUwMi9ScUUzWHdFajlUTkk4TVQ1QTAyUVFQN3Aw OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JxRTNYd0VqOVROSThNVDVBMDJRUVA3cDA4by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzNCRC8xQTgxMDhGMkQ5N0YxMUVCOUUxMzU5NEZDNEY5QUUwMi9ScUUzWHdFajlU Tkk4TVQ1QTAyUVFQN3AwOG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZ3KJM2TFn/5HOuGa0TA9WDxYA9M2pA63rPpzEA2IQjwSYr7l+gR+ecbGmQvz qHUpyfS3ePQeysjEEJcpS/MPb/OiJ22liNIQ2IwYdyfAwMXSUrW2xed2WVqm/3ai vqmtDMlhjAxVbHbqE6+vGQAo2f4zUqL7REdVjjixulEc0fsjXIh1GGpH/b7rjjLN VY94LeT0rKuu56EPiaZPKDxq4VOH+mCKFI2Z8/LzZVonq6FflpZGOAXPs42q1kyQ XBKae1lzhvDSHM8URq4AdK8L0Da5KpdrMtvrXcepralfZMG5ybp5Se24hLeOWnrt xdRzZWmlwV35XmAlRRdKcPyzAQ== -----END CERTIFICATE-----Generated at Wed Sep 30 16:20:02 2026 by rpki-client