$ rpki-client -vvvf rpki.apnic.net/member_repository/A913AE23/301A1E4A2C6C11EFA346942DC4F9AE02/QeHsF957pw-MEkF3aWN3AjclGd4.mft File: QeHsF957pw-MEkF3aWN3AjclGd4.mft (raw, json) Hash identifier: N4pBty1lgWBLeAF0dyjRYdUaOEaqF7iwhIUgi0B+MjU= Subject key identifier: AA:01:EC:D7:B1:57:5D:31:20:1A:A3:EA:3E:C3:1A:E8:CC:4C:7A:88 Authority key identifier: 41:E1:EC:17:DE:7B:A7:0F:8C:12:41:77:69:63:77:02:37:25:19:DE Certificate issuer: /CN=A913AE23/serialNumber=41E1EC17DE7BA70F8C12417769637702372519DE Certificate serial: 01BA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QeHsF957pw-MEkF3aWN3AjclGd4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913AE23/301A1E4A2C6C11EFA346942DC4F9AE02/QeHsF957pw-MEkF3aWN3AjclGd4.mft Manifest number: 01AE Signing time: Mon 21 Sep 2026 04:05:07 +0000 Manifest this update: Mon 21 Sep 2026 04:05:06 +0000 Manifest next update: Mon 28 Sep 2026 04:05:06 +0000 Files and hashes: 1: QeHsF957pw-MEkF3aWN3AjclGd4.crl (hash: KNzVMfm9NQjJ9o5YBItOyiMD15qePYoT1sHq+1J3DFM=) 2: 8CF832322C6C11EFB50AD22EC4F9AE02.roa (hash: UHGlHlkxn7F3WkUBBsVEYZP4o8fl36tTO1UDlwoZDiM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913AE23/301A1E4A2C6C11EFA346942DC4F9AE02/QeHsF957pw-MEkF3aWN3AjclGd4.crl rsync://rpki.apnic.net/member_repository/A913AE23/301A1E4A2C6C11EFA346942DC4F9AE02/QeHsF957pw-MEkF3aWN3AjclGd4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QeHsF957pw-MEkF3aWN3AjclGd4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 04:05:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 442 (0x1ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913AE23, serialNumber=41E1EC17DE7BA70F8C12417769637702372519DE Validity Not Before: Sep 21 04:05:06 2026 GMT Not After : Sep 28 04:05:06 2026 GMT Subject: CN=6ab0acf2-5e27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5f:9f:db:0b:1d:7c:7f:36:57:eb:40:c5:24: f3:eb:d6:a2:5c:bf:74:f6:f1:fc:02:c7:cc:8c:91: 7e:f9:52:7b:61:72:1c:17:ef:da:d5:5d:6c:ae:da: 81:01:83:5b:26:91:f4:34:a9:60:88:7f:d4:75:cf: 7b:c9:d0:39:4d:16:3e:56:18:76:7f:2d:f5:37:22: 68:f0:41:6a:20:e2:6e:0e:69:c0:3c:9f:fd:d0:e9: 29:68:35:cd:93:db:d2:74:d9:4b:1a:10:a4:7b:7f: 2a:dc:88:24:bf:58:2c:fb:a5:fe:6b:12:f9:ce:b2: 0b:18:4d:51:f0:50:b6:78:61:ba:f3:c7:5c:56:33: a1:27:e6:ae:6e:3b:a3:7b:d7:be:99:70:9d:e6:4d: bc:8f:d4:cb:32:4e:ce:72:02:e6:93:cf:7a:21:67: 2b:a1:af:af:c3:6c:93:2e:c0:57:dd:9c:b8:08:27: 9c:cf:35:95:ed:ef:b4:c9:f0:4c:89:55:1c:db:be: 93:4b:f6:05:58:ff:19:b2:96:b8:f7:11:a6:78:1d: e3:63:08:a3:23:06:eb:58:3b:97:bd:c3:4c:9c:e2: f3:55:b0:e5:62:3b:b9:56:db:bb:08:f3:68:d0:f2: 65:30:4c:b4:7f:3e:47:e6:e6:cb:0f:56:f7:67:34: 0b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:01:EC:D7:B1:57:5D:31:20:1A:A3:EA:3E:C3:1A:E8:CC:4C:7A:88 X509v3 Authority Key Identifier: keyid:41:E1:EC:17:DE:7B:A7:0F:8C:12:41:77:69:63:77:02:37:25:19:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913AE23/301A1E4A2C6C11EFA346942DC4F9AE02/QeHsF957pw-MEkF3aWN3AjclGd4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QeHsF957pw-MEkF3aWN3AjclGd4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE23/301A1E4A2C6C11EFA346942DC4F9AE02/QeHsF957pw-MEkF3aWN3AjclGd4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:99:83:5b:ad:8e:53:63:3b:67:4a:e3:56:ca:c4:b9:60:9a: bd:d0:e8:76:c0:da:47:45:c9:aa:d8:0f:ef:23:6f:67:67:a1: f9:c7:3c:04:df:3a:b9:4e:d0:10:23:7d:59:e0:c7:11:6d:86: 2f:bb:eb:d3:b0:3f:83:fe:bb:4e:81:4f:b6:90:d7:fd:c3:71: b5:9d:21:86:2c:cd:27:2a:17:00:5a:07:86:64:de:e5:7e:bf: 50:85:03:0b:59:f4:4a:94:b5:31:ed:b8:65:f2:43:ed:cf:f3: b6:4f:05:49:53:97:52:f3:53:54:c2:49:ef:04:4a:41:ed:72: 32:57:28:70:96:ab:03:e8:7f:ee:4b:e7:48:68:bf:45:ea:da: e7:d7:81:8f:30:34:8b:b0:d6:d6:14:93:bb:24:9a:ef:5f:fa: 27:0f:e0:31:06:0e:97:bb:a0:e2:61:0a:f8:ef:d6:35:22:d5: cf:67:bd:10:1b:21:04:6e:c1:09:ef:4a:ad:43:aa:d4:5d:64: a8:dc:73:d8:04:1c:ae:91:58:4e:8d:bc:d4:44:59:f5:60:60: 83:72:e2:c1:64:71:41:2d:33:a0:48:40:8f:20:89:c0:75:dc: 71:9d:ad:cc:01:76:8b:a0:33:35:8b:82:e9:a4:50:ae:ad:64: 3f:a8:3a:ed -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0FFMjMxMTAvBgNVBAUTKDQxRTFFQzE3REU3QkE3MEY4QzEyNDE3NzY5NjM3NzAy MzcyNTE5REUwHhcNMjYwOTIxMDQwNTA2WhcNMjYwOTI4MDQwNTA2WjAYMRYwFAYD VQQDEw02YWIwYWNmMi01ZTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArV+f2wsdfH82V+tAxSTz69aiXL909vH8AsfMjJF++VJ7YXIcF+/a1V1srtqB AYNbJpH0NKlgiH/Udc97ydA5TRY+Vhh2fy31NyJo8EFqIOJuDmnAPJ/90OkpaDXN k9vSdNlLGhCke38q3Igkv1gs+6X+axL5zrILGE1R8FC2eGG688dcVjOhJ+aubjuj e9e+mXCd5k28j9TLMk7OcgLmk896IWcroa+vw2yTLsBX3Zy4CCeczzWV7e+0yfBM iVUc276TS/YFWP8Zspa49xGmeB3jYwijIwbrWDuXvcNMnOLzVbDlYju5Vtu7CPNo 0PJlMEy0fz5H5ubLD1b3ZzQL0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKoB7Nex V10xIBqj6j7DGujMTHqIMB8GA1UdIwQYMBaAFEHh7Bfee6cPjBJBd2ljdwI3JRne MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUUyMy8zMDFBMUU0QTJD NkMxMUVGQTM0Njk0MkRDNEY5QUUwMi9RZUhzRjk1N3B3LU1Fa0YzYVdOM0FqY2xH ZDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FlSHNGOTU3cHctTUVrRjNhV04zQWpjbEdkNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QUUyMy8zMDFBMUU0QTJDNkMxMUVGQTM0Njk0MkRDNEY5QUUwMi9RZUhzRjk1N3B3 LU1Fa0YzYVdOM0FqY2xHZDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAupmDW62OU2M7Z0rjVsrEuWCavdDodsDaR0XJqtgP7yNvZ2eh+cc8BN86uU7Q ECN9WeDHEW2GL7vr07A/g/67ToFPtpDX/cNxtZ0hhizNJyoXAFoHhmTe5X6/UIUD C1n0SpS1Me24ZfJD7c/ztk8FSVOXUvNTVMJJ7wRKQe1yMlcocJarA+h/7kvnSGi/ Rera59eBjzA0i7DW1hSTuySa71/6Jw/gMQYOl7ug4mEK+O/WNSLVz2e9EBshBG7B Ce9KrUOq1F1kqNxz2AQcrpFYTo281ERZ9WBgg3LiwWRxQS0zoEhAjyCJwHXccZ2t zAF2i6AzNYuC6aRQrq1kP6g67Q== -----END CERTIFICATE-----Generated at Mon Sep 21 10:14:32 2026 by rpki-client