$ rpki-client -vvvf rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft File: Ql8CIk3cYp0viP9mPH9K32zWRT4.mft (raw, json) Hash identifier: me+eOVUHAqAvE2Yc0k3jzUApi9JGYOVLBPKHq9u+Cxo= Subject key identifier: 1F:52:8C:D3:C9:7D:46:71:F3:36:0F:B9:1E:7A:14:72:1E:F8:4F:B9 Authority key identifier: 42:5F:02:22:4D:DC:62:9D:2F:88:FF:66:3C:7F:4A:DF:6C:D6:45:3E Certificate issuer: /CN=A915430A/serialNumber=425F02224DDC629D2F88FF663C7F4ADF6CD6453E Certificate serial: 0371 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft Manifest number: 036A Signing time: Mon 21 Sep 2026 00:40:33 +0000 Manifest this update: Mon 21 Sep 2026 00:40:32 +0000 Manifest next update: Mon 28 Sep 2026 00:40:32 +0000 Files and hashes: 1: Ql8CIk3cYp0viP9mPH9K32zWRT4.crl (hash: b9LFkIuzwPFSsjxXs0rnYpw4Jee0nYoxvLrW/x7V71A=) 2: 55C580C2108411EDB5AE6333C4F9AE02.roa (hash: vslJ1kocoWetdyBiIdXiE0Fd+CgpEX2kc3GNbUnf16M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.crl rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 00:40:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 881 (0x371) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915430A, serialNumber=425F02224DDC629D2F88FF663C7F4ADF6CD6453E Validity Not Before: Sep 21 00:40:32 2026 GMT Not After : Sep 28 00:40:32 2026 GMT Subject: CN=6ab07d00-37dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:36:82:fa:43:5d:e8:d2:a8:9d:20:f8:d6:11: 33:25:72:49:2f:c0:bb:1c:29:66:f3:52:2c:93:26: d3:28:b6:79:e9:22:d4:a1:2c:0a:1f:51:99:67:cf: f5:c5:41:c4:ca:aa:37:cc:b9:a7:e6:31:06:3d:ce: f9:56:33:b5:83:f6:7b:e9:e0:05:6b:7d:47:11:c3: ee:ac:fc:4d:c0:a0:4f:77:9e:f4:7e:3c:ad:87:6c: db:76:e8:fe:74:33:f0:c4:2b:fb:31:2c:ed:e9:41: 2d:c8:3f:b0:d6:ab:5c:d6:e5:7d:28:e7:a3:cc:fd: fe:0e:c9:0b:fc:8c:ff:59:37:49:12:e8:8a:f8:36: e1:37:5a:fb:ad:5c:25:34:87:9b:65:82:38:84:75: 8d:dd:f7:af:4c:6d:e4:b4:f2:4f:e7:4c:5a:c7:61: 87:f6:d2:96:8a:c6:72:ad:7f:14:45:0b:d6:72:31: 84:42:9c:96:16:fa:8a:ab:f4:da:98:01:1d:2f:5c: dd:3c:1c:c0:38:30:c7:29:b1:a4:e2:d1:f5:f0:88: 11:2b:76:fa:cd:c5:52:7f:ff:91:5b:82:9f:39:99: 32:70:0f:74:69:d2:5e:c4:ad:a5:ba:b2:06:a5:57: 78:fb:cf:b7:b1:5a:89:a0:e3:24:de:68:d7:f1:a0: 6b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:52:8C:D3:C9:7D:46:71:F3:36:0F:B9:1E:7A:14:72:1E:F8:4F:B9 X509v3 Authority Key Identifier: keyid:42:5F:02:22:4D:DC:62:9D:2F:88:FF:66:3C:7F:4A:DF:6C:D6:45:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:98:e0:99:53:3d:05:97:ff:95:a8:0f:a0:5c:b3:86:62:59: 84:80:6e:09:36:97:3f:10:84:32:02:da:c6:a3:0c:3b:48:2b: c0:e4:8e:d3:85:4b:4f:0a:f4:6f:55:47:54:1a:37:45:b4:1c: 66:93:b9:ad:b6:a9:02:8d:b3:9c:47:89:ea:58:0a:9f:6b:1b: 90:60:54:9c:d1:b2:62:09:a1:21:82:b3:40:1f:6b:ee:ab:03: 94:35:5f:6e:ba:f7:80:77:4c:26:43:1e:91:5e:6e:56:7e:8f: 41:c9:ac:94:e7:60:6a:b1:a8:20:d0:30:3c:a7:d9:d7:3f:4c: a1:53:2f:88:4e:37:77:ed:28:3d:4e:f8:56:8d:30:f3:53:c6: eb:b5:a2:98:15:13:98:dc:d6:96:ef:6e:06:19:17:c2:5d:93: 39:3b:5b:f2:d3:a6:64:c3:e6:96:bb:0b:74:fe:a6:9b:bf:d9: aa:f8:db:1e:b3:8f:e6:ed:86:cb:c1:91:73:11:7b:4d:47:79: 3b:46:1e:59:d1:42:34:31:5e:55:e4:b8:7c:24:d8:aa:39:16: 47:7b:f2:7f:61:e3:c5:eb:41:45:98:94:e7:66:bd:3f:2b:29: 8b:8a:f8:6a:32:c3:8b:37:77:4e:4a:a8:7b:bb:76:38:62:99: c6:0e:6d:3d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA3EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQzMEExMTAvBgNVBAUTKDQyNUYwMjIyNEREQzYyOUQyRjg4RkY2NjNDN0Y0QURG NkNENjQ1M0UwHhcNMjYwOTIxMDA0MDMyWhcNMjYwOTI4MDA0MDMyWjAYMRYwFAYD VQQDEw02YWIwN2QwMC0zN2RjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApjaC+kNd6NKonSD41hEzJXJJL8C7HClm81IskybTKLZ56SLUoSwKH1GZZ8/1 xUHEyqo3zLmn5jEGPc75VjO1g/Z76eAFa31HEcPurPxNwKBPd570fjyth2zbduj+ dDPwxCv7MSzt6UEtyD+w1qtc1uV9KOejzP3+DskL/Iz/WTdJEuiK+DbhN1r7rVwl NIebZYI4hHWN3fevTG3ktPJP50xax2GH9tKWisZyrX8URQvWcjGEQpyWFvqKq/Ta mAEdL1zdPBzAODDHKbGk4tH18IgRK3b6zcVSf/+RW4KfOZkycA90adJexK2lurIG pVd4+8+3sVqJoOMk3mjX8aBrAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB9SjNPJ fUZx8zYPuR56FHIe+E+5MB8GA1UdIwQYMBaAFEJfAiJN3GKdL4j/Zjx/St9s1kU+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDMwQS83RUJGN0NDMjBG RjIxMUVEOUZFNzk2ODZDNEY5QUUwMi9RbDhDSWszY1lwMHZpUDltUEg5SzMyeldS VDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FsOENJazNjWXAwdmlQOW1QSDlLMzJ6V1JUNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDMwQS83RUJGN0NDMjBGRjIxMUVEOUZFNzk2ODZDNEY5QUUwMi9RbDhDSWszY1lw MHZpUDltUEg5SzMyeldSVDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfZjgmVM9BZf/lagPoFyzhmJZhIBuCTaXPxCEMgLaxqMMO0grwOSO04VLTwr0 b1VHVBo3RbQcZpO5rbapAo2znEeJ6lgKn2sbkGBUnNGyYgmhIYKzQB9r7qsDlDVf brr3gHdMJkMekV5uVn6PQcmslOdgarGoINAwPKfZ1z9MoVMviE43d+0oPU74Vo0w 81PG67WimBUTmNzWlu9uBhkXwl2TOTtb8tOmZMPmlrsLdP6mm7/ZqvjbHrOP5u2G y8GRcxF7TUd5O0YeWdFCNDFeVeS4fCTYqjkWR3vyf2HjxetBRZiU52a9Pyspi4r4 ajLDizd3Tkqoe7t2OGKZxg5tPQ== -----END CERTIFICATE-----Generated at Tue Sep 22 16:37:27 2026 by rpki-client