$ rpki-client -vvvf rpki.apnic.net/member_repository/A9152A2D/B29F1746D79911F188807BD60266CEF9/qzBoDdt_IapqFT4iO2CVAZUc6Hk.mft File: qzBoDdt_IapqFT4iO2CVAZUc6Hk.mft (raw, json) Hash identifier: Jh8pVo9qxdBVJNNoBawXn3PWsby/KaQxWZ0Ceb0Pcjw= Subject key identifier: A6:BD:4C:55:F9:7C:B6:0A:E7:99:B9:ED:AD:D9:3E:CC:7F:43:6C:2D Authority key identifier: AB:30:68:0D:DB:7F:21:AA:6A:15:3E:22:3B:60:95:01:95:1C:E8:79 Certificate issuer: /CN=A9152A2D/serialNumber=AB30680DDB7F21AA6A153E223B609501951CE879 Certificate serial: 03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qzBoDdt_IapqFT4iO2CVAZUc6Hk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152A2D/B29F1746D79911F188807BD60266CEF9/qzBoDdt_IapqFT4iO2CVAZUc6Hk.mft Manifest number: 03 Signing time: Thu 05 Nov 2026 10:14:54 +0000 Manifest this update: Thu 05 Nov 2026 10:14:53 +0000 Manifest next update: Thu 12 Nov 2026 10:14:53 +0000 Files and hashes: 1: qzBoDdt_IapqFT4iO2CVAZUc6Hk.crl (hash: fk/eaXN1d2/KHDn/48a1T/827irDQfY2tK3TmZ4PoQk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152A2D/B29F1746D79911F188807BD60266CEF9/qzBoDdt_IapqFT4iO2CVAZUc6Hk.crl rsync://rpki.apnic.net/member_repository/A9152A2D/B29F1746D79911F188807BD60266CEF9/qzBoDdt_IapqFT4iO2CVAZUc6Hk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qzBoDdt_IapqFT4iO2CVAZUc6Hk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Nov 2026 10:14:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152A2D, serialNumber=AB30680DDB7F21AA6A153E223B609501951CE879 Validity Not Before: Nov 5 10:14:53 2026 GMT Not After : Nov 12 10:14:53 2026 GMT Subject: CN=6aec571d-4fdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:bc:35:6d:a3:5b:f2:0a:8e:e7:ac:9a:c9:ce: 01:30:c0:f0:36:e9:ad:b4:ed:36:a1:55:4e:77:80: 47:80:c1:67:a6:d9:6d:d8:42:64:ef:4c:0a:37:2a: 51:a4:48:81:16:71:58:d1:f9:7a:a2:05:bf:3d:c0: 40:db:3c:d0:0e:fe:c6:f4:fe:1a:ad:4c:f4:43:a1: 24:64:25:d7:70:8f:64:06:16:c9:0a:72:07:88:2b: 0b:8a:05:9d:d3:45:37:71:96:af:bd:5e:09:de:fd: 36:d4:dc:c0:84:12:35:d2:c3:b1:fb:ad:17:46:95: 7d:79:3e:77:df:cd:9f:08:21:4d:dc:8e:fd:ea:dc: 45:aa:2f:e0:f1:9d:be:32:a9:de:ea:5b:ca:e7:06: d5:06:d5:7f:ab:43:1a:28:10:3d:e7:9c:56:5f:6d: c9:86:f6:9b:11:cf:b9:56:83:31:2a:f9:9b:eb:cd: 58:e8:95:7e:cb:3a:5e:98:09:2d:b0:12:02:ba:76: 86:06:f3:9c:8e:73:4f:cd:db:53:fe:60:a4:6b:c2: 49:4a:cc:aa:fb:da:62:2e:08:f7:4a:33:6d:9f:94: f5:ec:03:08:53:62:37:72:63:b6:08:e1:50:c9:54: 0a:bd:df:3a:dd:de:45:e6:24:79:a0:cd:5c:d7:18: 29:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:BD:4C:55:F9:7C:B6:0A:E7:99:B9:ED:AD:D9:3E:CC:7F:43:6C:2D X509v3 Authority Key Identifier: keyid:AB:30:68:0D:DB:7F:21:AA:6A:15:3E:22:3B:60:95:01:95:1C:E8:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152A2D/B29F1746D79911F188807BD60266CEF9/qzBoDdt_IapqFT4iO2CVAZUc6Hk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qzBoDdt_IapqFT4iO2CVAZUc6Hk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152A2D/B29F1746D79911F188807BD60266CEF9/qzBoDdt_IapqFT4iO2CVAZUc6Hk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:32:48:f1:40:30:7e:dc:26:31:65:fd:a9:d2:52:d9:3e:3c: 09:01:04:4e:73:28:22:19:41:45:02:5b:61:ec:f8:bb:f5:73: 71:75:64:4f:63:c9:6e:02:07:36:ff:41:83:a6:ee:47:49:c3: a4:16:cb:b0:99:c9:b7:f2:3a:b9:d5:b7:64:7a:2f:2b:f9:11: 58:c8:de:96:fb:20:ba:16:48:6f:0a:47:9e:d3:74:36:13:16: 99:bc:60:10:6d:27:3e:6c:17:55:26:46:66:aa:04:0e:19:e5: 38:4f:0d:e8:d3:c2:0b:c7:d3:f8:df:9f:5d:b9:3c:91:a2:b1: 6c:1e:3d:3b:26:99:b5:64:60:4d:7e:ef:6c:3d:f4:ea:e1:7d: ad:86:99:f5:02:a3:33:14:a3:cc:11:0d:9e:59:da:12:98:89: d5:7a:d2:58:0e:ac:22:29:92:90:2f:33:d1:6e:fc:89:c6:b1: b6:71:ee:7d:f0:4f:d8:05:4b:42:a1:19:f4:41:74:6d:44:be: 44:50:a5:2c:72:3a:9f:8d:99:11:5e:11:87:8c:d0:6c:34:50: 7b:4f:22:72:b0:5c:65:2a:6b:ac:3f:18:6a:e2:6b:5f:08:86: 85:be:6b:8c:3a:f8:e3:bc:3a:f1:92:9b:a8:1a:72:92:6a:47: c8:2f:35:0d -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MkEyRDExMC8GA1UEBRMoQUIzMDY4MEREQjdGMjFBQTZBMTUzRTIyM0I2MDk1MDE5 NTFDRTg3OTAeFw0yNjExMDUxMDE0NTNaFw0yNjExMTIxMDE0NTNaMBgxFjAUBgNV BAMTDTZhZWM1NzFkLTRmZGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCnvDVto1vyCo7nrJrJzgEwwPA26a207TahVU53gEeAwWem2W3YQmTvTAo3KlGk SIEWcVjR+XqiBb89wEDbPNAO/sb0/hqtTPRDoSRkJddwj2QGFskKcgeIKwuKBZ3T RTdxlq+9Xgne/TbU3MCEEjXSw7H7rRdGlX15PnffzZ8IIU3cjv3q3EWqL+Dxnb4y qd7qW8rnBtUG1X+rQxooED3nnFZfbcmG9psRz7lWgzEq+ZvrzVjolX7LOl6YCS2w EgK6doYG85yOc0/N21P+YKRrwklKzKr72mIuCPdKM22flPXsAwhTYjdyY7YI4VDJ VAq93zrd3kXmJHmgzVzXGClPAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUpr1MVfl8 tgrnmbntrdk+zH9DbC0wHwYDVR0jBBgwFoAUqzBoDdt/IapqFT4iO2CVAZUc6Hkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUyQTJEL0IyOUYxNzQ2RDc5 OTExRjE4ODgwN0JENjAyNjZDRUY5L3F6Qm9EZHRfSWFwcUZUNGlPMkNWQVpVYzZI ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcXpCb0RkdF9JYXBxRlQ0aU8yQ1ZBWlVjNkhrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUy QTJEL0IyOUYxNzQ2RDc5OTExRjE4ODgwN0JENjAyNjZDRUY5L3F6Qm9EZHRfSWFw cUZUNGlPMkNWQVpVYzZIay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBfMkjxQDB+3CYxZf2p0lLZPjwJAQROcygiGUFFAlth7Pi79XNxdWRPY8luAgc2 /0GDpu5HScOkFsuwmcm38jq51bdkei8r+RFYyN6W+yC6FkhvCkee03Q2ExaZvGAQ bSc+bBdVJkZmqgQOGeU4Tw3o08ILx9P4359duTyRorFsHj07Jpm1ZGBNfu9sPfTq 4X2thpn1AqMzFKPMEQ2eWdoSmInVetJYDqwiKZKQLzPRbvyJxrG2ce598E/YBUtC oRn0QXRtRL5EUKUscjqfjZkRXhGHjNBsNFB7TyJysFxlKmusPxhq4mtfCIaFvmuM OvjjvDrxkpuoGnKSakfILzUN -----END CERTIFICATE-----Generated at Thu Nov 5 18:45:53 2026 by rpki-client