$ rpki-client -vvvf rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.mft File: qafXPj7Y1cRm3LxsIJzUNTzemM8.mft (raw, json) Hash identifier: 43T1uhqSNPfi91izdFHkvhHFrH7/cd2PR74QNUvbiWQ= Subject key identifier: E6:45:13:28:1F:4D:AB:F3:CA:B1:5C:C3:D5:A0:87:D5:E0:3E:CF:45 Authority key identifier: A9:A7:D7:3E:3E:D8:D5:C4:66:DC:BC:6C:20:9C:D4:35:3C:DE:98:CF Certificate issuer: /CN=A9143FC4/serialNumber=A9A7D73E3ED8D5C466DCBC6C209CD4353CDE98CF Certificate serial: 3547 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qafXPj7Y1cRm3LxsIJzUNTzemM8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.mft Manifest number: 3542 Signing time: Sun 20 Sep 2026 15:16:52 +0000 Manifest this update: Sun 20 Sep 2026 15:16:52 +0000 Manifest next update: Sun 27 Sep 2026 15:16:52 +0000 Files and hashes: 1: qafXPj7Y1cRm3LxsIJzUNTzemM8.crl (hash: RGbh62EK5Tk6L4rGEHZZMRmq7ihItlquxG4q+YY7VlU=) 2: C3DFE8E48A4311F1B869C3203411F970.roa (hash: EhCaL1leBykbYZWxG9405+W3f7XM7uKqg5KaoxRKZ1g=) 3: FE96F04256EE11F09D243832C4F9AE02.roa (hash: e8GSBttrBgtoI1SFNewE5+wtUTbMHlzUBUVAWSdm4M8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.crl rsync://rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qafXPj7Y1cRm3LxsIJzUNTzemM8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 15:16:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13639 (0x3547) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143FC4, serialNumber=A9A7D73E3ED8D5C466DCBC6C209CD4353CDE98CF Validity Not Before: Sep 20 15:16:52 2026 GMT Not After : Sep 27 15:16:52 2026 GMT Subject: CN=6aaff8e4-14ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:80:88:e7:fe:2d:ad:4e:09:ff:a4:71:47:1c: fd:6b:ed:60:26:ec:2e:7c:e4:aa:b0:f1:7b:82:12: 6c:36:dd:58:be:5f:8c:7e:c2:d2:57:15:95:85:9c: c1:0c:30:df:85:bc:59:b6:fb:79:cb:f0:e1:06:c5: d4:e7:93:0d:ea:d5:51:35:b3:4b:07:08:2e:17:89: 94:0e:88:ea:f4:3f:1c:0e:b2:9b:41:ae:ea:53:eb: 36:49:c3:f1:ff:ef:9e:5f:f8:fa:89:ae:ae:d4:ad: 58:a4:43:a4:78:76:cf:05:02:d0:35:0f:80:ba:4f: f8:d8:0b:4b:cc:46:5d:db:15:28:01:bc:33:02:65: 24:3d:73:ba:18:b7:73:43:ce:31:42:6b:e2:ff:24: c6:89:ec:a4:65:b8:20:5c:8f:53:fc:21:4f:e6:1e: c1:69:cb:1c:5b:b9:a5:34:d1:03:54:8e:83:c3:c0: 51:cb:5b:a1:d9:53:d6:b1:fe:b5:ae:50:e6:37:83: 3a:60:ef:cd:96:34:44:67:58:00:8b:a0:f9:21:db: 64:7f:25:0b:7d:a6:fd:75:70:d9:2b:d3:c2:30:3b: 05:d4:27:2d:54:69:5a:a5:83:3f:ab:be:61:57:72: e5:22:59:8c:6e:d3:d7:98:e0:36:98:43:87:cd:53: 3e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:45:13:28:1F:4D:AB:F3:CA:B1:5C:C3:D5:A0:87:D5:E0:3E:CF:45 X509v3 Authority Key Identifier: keyid:A9:A7:D7:3E:3E:D8:D5:C4:66:DC:BC:6C:20:9C:D4:35:3C:DE:98:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qafXPj7Y1cRm3LxsIJzUNTzemM8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:51:e8:11:e6:86:2a:79:0b:41:20:00:63:d6:b4:50:83:59: 5e:e1:02:43:2c:b4:79:03:43:f6:3a:b2:09:54:e3:83:a4:2c: e5:d1:7b:4b:21:7e:1d:9e:db:b5:07:3f:23:cd:a2:e4:84:05: cb:80:e3:69:1b:38:e7:0b:60:fb:ec:9a:17:17:f1:c9:e4:5c: 3e:a4:4e:dd:b7:ce:67:4c:51:37:c0:91:5b:94:e5:09:e0:f8: da:c6:10:29:19:32:3e:a7:3c:b5:3e:7d:d7:6b:9d:ed:21:3d: 56:3e:4f:a6:e8:8c:fe:19:66:9f:53:c8:a7:1f:0d:af:c3:9b: 0f:cd:1e:36:17:92:cf:7b:85:08:28:a5:7c:2e:cf:b2:a0:ab: 23:5f:11:69:98:be:7b:ba:ec:64:6a:b7:69:7d:ec:c0:77:3b: 0e:02:8e:a2:5a:05:e5:50:88:d2:b8:fe:6b:f4:66:ad:4e:b7: 06:fd:a7:5a:2e:52:5b:1e:42:0c:96:e5:96:df:85:3d:49:67: 57:be:ea:bf:af:d2:64:ed:64:76:f1:3d:4e:b7:00:85:6a:10: 9c:11:3f:cf:1b:e4:2e:85:88:a1:08:ad:69:8a:c3:37:7f:ee: 02:49:13:38:b6:48:c5:db:ae:6c:95:9c:b3:1b:86:9a:ba:03: 34:f2:75:ed -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNGQzQxMTAvBgNVBAUTKEE5QTdENzNFM0VEOEQ1QzQ2NkRDQkM2QzIwOUNENDM1 M0NERTk4Q0YwHhcNMjYwOTIwMTUxNjUyWhcNMjYwOTI3MTUxNjUyWjAYMRYwFAYD VQQDEw02YWFmZjhlNC0xNGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1YCI5/4trU4J/6RxRxz9a+1gJuwufOSqsPF7ghJsNt1Yvl+MfsLSVxWVhZzB DDDfhbxZtvt5y/DhBsXU55MN6tVRNbNLBwguF4mUDojq9D8cDrKbQa7qU+s2ScPx /++eX/j6ia6u1K1YpEOkeHbPBQLQNQ+Auk/42AtLzEZd2xUoAbwzAmUkPXO6GLdz Q84xQmvi/yTGieykZbggXI9T/CFP5h7BacscW7mlNNEDVI6Dw8BRy1uh2VPWsf61 rlDmN4M6YO/NljREZ1gAi6D5IdtkfyULfab9dXDZK9PCMDsF1CctVGlapYM/q75h V3LlIlmMbtPXmOA2mEOHzVM+JwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOZFEygf TavzyrFcw9Wgh9XgPs9FMB8GA1UdIwQYMBaAFKmn1z4+2NXEZty8bCCc1DU83pjP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0ZDNC9CMTY1QTNBODI5 NTgxMUUyQjM4RDU4RkIwOEIwMkNEMi9xYWZYUGo3WTFjUm0zTHhzSUp6VU5UemVt TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FhZlhQajdZMWNSbTNMeHNJSnpVTlR6ZW1NOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0ZDNC9CMTY1QTNBODI5NTgxMUUyQjM4RDU4RkIwOEIwMkNEMi9xYWZYUGo3WTFj Um0zTHhzSUp6VU5UemVtTTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwVHoEeaGKnkLQSAAY9a0UINZXuECQyy0eQND9jqyCVTjg6Qs5dF7SyF+HZ7b tQc/I82i5IQFy4DjaRs45wtg++yaFxfxyeRcPqRO3bfOZ0xRN8CRW5TlCeD42sYQ KRkyPqc8tT5912ud7SE9Vj5PpuiM/hlmn1PIpx8Nr8ObD80eNheSz3uFCCilfC7P sqCrI18RaZi+e7rsZGq3aX3swHc7DgKOoloF5VCI0rj+a/RmrU63Bv2nWi5SWx5C DJbllt+FPUlnV77qv6/SZO1kdvE9TrcAhWoQnBE/zxvkLoWIoQitaYrDN3/uAkkT OLZIxduubJWcsxuGmroDNPJ17Q== -----END CERTIFICATE-----Generated at Mon Sep 21 17:25:57 2026 by rpki-client