$ rpki-client -vvvf rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.mft File: qJaxcL8NiHI_NsesIIeFSqKEvXE.mft (raw, json) Hash identifier: QYjvnQ9AKj/5UGsjB4UHbX0LumX14S4LuJ4DeqU6QtM= Subject key identifier: 9C:33:3F:92:EE:C4:88:63:88:15:62:27:52:6E:6A:C6:43:35:DB:B7 Authority key identifier: A8:96:B1:70:BF:0D:88:72:3F:36:C7:AC:20:87:85:4A:A2:84:BD:71 Certificate issuer: /CN=A913DF3B/serialNumber=A896B170BF0D88723F36C7AC2087854AA284BD71 Certificate serial: 0645 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJaxcL8NiHI_NsesIIeFSqKEvXE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.mft Manifest number: 063D Signing time: Fri 18 Sep 2026 22:36:41 +0000 Manifest this update: Fri 18 Sep 2026 22:36:41 +0000 Manifest next update: Fri 25 Sep 2026 22:36:41 +0000 Files and hashes: 1: qJaxcL8NiHI_NsesIIeFSqKEvXE.crl (hash: t35kr1oPHGxxqlIZv0l5suaMWjBb7UNsRppDngrcXX8=) 2: 8D7E9B7EF03D11EB804DF61FC4F9AE02.roa (hash: ma+DNS3MZoAgjxWhTTX9baQIdHEsD5fkm6hMo1qHO0U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.crl rsync://rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJaxcL8NiHI_NsesIIeFSqKEvXE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1605 (0x645) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DF3B, serialNumber=A896B170BF0D88723F36C7AC2087854AA284BD71 Validity Not Before: Sep 18 22:36:41 2026 GMT Not After : Sep 25 22:36:41 2026 GMT Subject: CN=6aadbcf9-5c21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:02:f4:6d:2a:22:fc:bc:64:13:dd:8c:ef:54: 05:3a:e6:c3:aa:ee:72:a3:70:8b:0d:de:84:e7:1e: 92:ff:20:21:6b:87:c0:3b:be:c6:55:fd:04:0e:af: c4:dc:fb:af:96:a6:43:2b:a1:ae:d6:44:d1:3d:34: 8f:dd:6b:56:96:45:c7:64:f3:21:a9:ab:d7:0e:7e: 88:9a:60:0a:f0:26:a2:f8:68:d1:7a:c1:c6:04:ea: 65:34:f9:28:ad:77:64:68:80:92:c3:61:0f:fa:cf: fe:70:10:e4:81:2c:68:18:ed:a5:df:f7:1b:72:a4: ba:c2:0e:48:00:8b:44:17:b1:35:96:86:19:54:24: 0b:25:90:f5:40:af:a3:dc:a2:d1:b1:7a:cc:9d:da: d1:67:26:66:1a:66:6b:85:39:8f:b6:08:b7:78:f4: cf:6f:74:74:bb:ec:69:f9:da:e8:71:aa:7a:fe:26: c8:12:60:da:0e:30:8d:7a:c6:2d:b7:ca:1f:4a:19: 85:f8:50:a3:5b:96:d2:82:e5:4c:74:3e:72:6b:85: c0:19:f4:43:e4:ea:24:95:58:b1:ba:33:d5:aa:30: b9:18:ed:a2:5a:e5:95:c2:cd:2b:32:35:be:3e:77: 89:86:b0:86:00:ba:fe:5f:0f:78:99:01:3d:a3:32: 15:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:33:3F:92:EE:C4:88:63:88:15:62:27:52:6E:6A:C6:43:35:DB:B7 X509v3 Authority Key Identifier: keyid:A8:96:B1:70:BF:0D:88:72:3F:36:C7:AC:20:87:85:4A:A2:84:BD:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJaxcL8NiHI_NsesIIeFSqKEvXE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:cf:20:19:ce:7f:2a:5b:f5:98:dd:55:20:8b:b7:fc:8f:19: f4:1e:e6:0c:b4:9d:b2:40:50:e7:13:4e:b1:87:1e:14:ca:f5: 72:f0:c9:f6:c2:02:0a:e6:68:bc:a3:52:85:74:54:4d:7f:d2: a7:d2:3d:f1:25:8a:c6:fa:58:ae:33:79:d0:5f:6e:af:13:65: 79:f6:68:cb:96:ce:c7:9c:63:00:c9:31:c3:61:ac:9f:4b:80: 40:db:76:ef:0e:86:98:ad:27:b6:d8:73:0b:27:d8:94:6d:09: 33:13:1a:f3:8d:00:00:f0:23:37:51:58:b3:4a:c8:64:bd:fc: 14:8d:78:50:c1:eb:b5:bd:af:05:98:31:07:9e:98:38:f8:26: 75:70:0b:ba:1d:85:d2:0a:fb:7c:b8:ad:8c:06:8e:d0:bc:5f: f0:4d:a1:5d:40:8c:48:55:84:33:af:be:f0:38:c2:73:34:8c: d7:e4:15:47:c2:76:fc:ee:c9:c9:7d:f3:52:a4:0a:a5:a1:a5: 80:57:05:73:a9:d6:e1:7c:a5:ad:76:e9:90:90:0f:ec:2d:b7: 9a:0e:f5:a6:b6:06:dd:00:4d:bd:7a:de:68:eb:2d:37:36:69: 19:41:41:63:7a:36:2c:fc:0e:02:ed:f2:4b:2c:54:74:ce:d4: 27:bd:ce:7b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBkUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0RGM0IxMTAvBgNVBAUTKEE4OTZCMTcwQkYwRDg4NzIzRjM2QzdBQzIwODc4NTRB QTI4NEJENzEwHhcNMjYwOTE4MjIzNjQxWhcNMjYwOTI1MjIzNjQxWjAYMRYwFAYD VQQDEw02YWFkYmNmOS01YzIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzwL0bSoi/LxkE92M71QFOubDqu5yo3CLDd6E5x6S/yAha4fAO77GVf0EDq/E 3PuvlqZDK6Gu1kTRPTSP3WtWlkXHZPMhqavXDn6ImmAK8Cai+GjResHGBOplNPko rXdkaICSw2EP+s/+cBDkgSxoGO2l3/cbcqS6wg5IAItEF7E1loYZVCQLJZD1QK+j 3KLRsXrMndrRZyZmGmZrhTmPtgi3ePTPb3R0u+xp+drocap6/ibIEmDaDjCNesYt t8ofShmF+FCjW5bSguVMdD5ya4XAGfRD5OoklVixujPVqjC5GO2iWuWVws0rMjW+ PneJhrCGALr+Xw94mQE9ozIV8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJwzP5Lu xIhjiBViJ1JuasZDNdu3MB8GA1UdIwQYMBaAFKiWsXC/DYhyPzbHrCCHhUqihL1x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREYzQi9DREJBODEyRUYw M0ExMUVCOEQzMEUwNThDNEY5QUUwMi9xSmF4Y0w4TmlISV9Oc2VzSUllRlNxS0V2 WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FKYXhjTDhOaUhJX05zZXNJSWVGU3FLRXZYRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz REYzQi9DREJBODEyRUYwM0ExMUVCOEQzMEUwNThDNEY5QUUwMi9xSmF4Y0w4TmlI SV9Oc2VzSUllRlNxS0V2WEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVs8gGc5/Klv1mN1VIIu3/I8Z9B7mDLSdskBQ5xNOsYceFMr1cvDJ9sICCuZo vKNShXRUTX/Sp9I98SWKxvpYrjN50F9urxNlefZoy5bOx5xjAMkxw2Gsn0uAQNt2 7w6GmK0ntthzCyfYlG0JMxMa840AAPAjN1FYs0rIZL38FI14UMHrtb2vBZgxB56Y OPgmdXALuh2F0gr7fLitjAaO0Lxf8E2hXUCMSFWEM6++8DjCczSM1+QVR8J2/O7J yX3zUqQKpaGlgFcFc6nW4XylrXbpkJAP7C23mg71prYG3QBNvXreaOstNzZpGUFB Y3o2LPwOAu3ySyxUdM7UJ73Oew== -----END CERTIFICATE-----Generated at Mon Sep 21 00:06:00 2026 by rpki-client