$ rpki-client -vvvf rpki.apnic.net/member_repository/A9154F63/9DA95560D83211F1BCD0001C2F66CEF9/QTKkvy6Ctk3fo4nzSVHVWEyrTaY.mft File: QTKkvy6Ctk3fo4nzSVHVWEyrTaY.mft (raw, json) Hash identifier: C8HYnurFMMiHTJr/Vk7aJst3G0UmdfPtuI7lVFZgEYA= Subject key identifier: B2:16:AA:D5:7C:E3:4C:71:0F:B6:53:98:9D:C9:9F:2B:DE:42:5E:C4 Authority key identifier: 41:32:A4:BF:2E:82:B6:4D:DF:A3:89:F3:49:51:D5:58:4C:AB:4D:A6 Certificate issuer: /CN=A9154F63/serialNumber=4132A4BF2E82B64DDFA389F34951D5584CAB4DA6 Certificate serial: 04 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QTKkvy6Ctk3fo4nzSVHVWEyrTaY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154F63/9DA95560D83211F1BCD0001C2F66CEF9/QTKkvy6Ctk3fo4nzSVHVWEyrTaY.mft Manifest number: 03 Signing time: Thu 05 Nov 2026 10:15:37 +0000 Manifest this update: Thu 05 Nov 2026 10:15:37 +0000 Manifest next update: Thu 12 Nov 2026 10:15:37 +0000 Files and hashes: 1: QTKkvy6Ctk3fo4nzSVHVWEyrTaY.crl (hash: TPMTBlbsaWfHu1ka070KnSgzm9I2QqguPJ+IwXaY5kI=) 2: 2AC55BAED83511F193B3C8893066CEF9.roa (hash: X/pCRyo6uUE8fE8fMZAAb2F5dNLoQOAiVVIpiufiQ9w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154F63/9DA95560D83211F1BCD0001C2F66CEF9/QTKkvy6Ctk3fo4nzSVHVWEyrTaY.crl rsync://rpki.apnic.net/member_repository/A9154F63/9DA95560D83211F1BCD0001C2F66CEF9/QTKkvy6Ctk3fo4nzSVHVWEyrTaY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QTKkvy6Ctk3fo4nzSVHVWEyrTaY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Nov 2026 10:15:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154F63, serialNumber=4132A4BF2E82B64DDFA389F34951D5584CAB4DA6 Validity Not Before: Nov 5 10:15:37 2026 GMT Not After : Nov 12 10:15:37 2026 GMT Subject: CN=6aec5749-5512 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0a:b6:af:ee:c3:95:12:92:52:d8:dd:ea:7b: b3:25:50:f2:7f:78:ce:c5:a0:03:35:c6:ee:7e:94: fd:19:a6:ba:36:2f:fe:46:9f:9d:41:45:d6:c6:80: b4:32:3a:f3:c5:c2:44:0c:a1:7b:d1:36:62:b9:3a: 05:0f:dd:67:c4:45:91:6a:c2:91:29:1e:26:ee:c2: 9c:8b:1b:cf:02:73:c0:f5:21:7c:33:7c:0e:7e:05: 44:28:b1:a3:85:68:88:28:42:24:a7:63:e4:76:92: be:e1:a6:ae:b9:f0:bf:ae:ec:34:52:07:2c:6a:3d: 13:e2:18:42:12:52:64:77:6a:68:02:5e:d0:f7:d4: 2d:f8:65:d4:76:41:3b:57:f0:b1:0b:ec:0b:47:34: 11:a6:f4:57:d1:6e:12:62:f1:ad:f6:34:d4:ad:85: c9:02:ec:c5:14:ad:b3:63:b7:a1:4f:86:6b:4a:03: 82:81:ee:8f:6b:8f:95:0c:6b:69:b6:bd:1a:34:63: 45:df:da:03:26:55:09:5d:ca:90:46:a2:18:e8:38: 3f:c3:b0:1f:b0:f5:88:e6:b2:48:b6:24:1c:c3:7e: de:42:02:2f:62:71:5f:bd:7b:0a:c6:f9:d7:ee:69: 74:c3:50:60:14:97:83:5e:58:7a:d0:f7:53:1b:8a: a2:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:16:AA:D5:7C:E3:4C:71:0F:B6:53:98:9D:C9:9F:2B:DE:42:5E:C4 X509v3 Authority Key Identifier: keyid:41:32:A4:BF:2E:82:B6:4D:DF:A3:89:F3:49:51:D5:58:4C:AB:4D:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154F63/9DA95560D83211F1BCD0001C2F66CEF9/QTKkvy6Ctk3fo4nzSVHVWEyrTaY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QTKkvy6Ctk3fo4nzSVHVWEyrTaY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154F63/9DA95560D83211F1BCD0001C2F66CEF9/QTKkvy6Ctk3fo4nzSVHVWEyrTaY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:d0:3d:90:b0:ce:68:89:33:ce:37:99:a7:81:04:ae:a3:da: a4:8b:25:29:8b:70:a9:62:8e:78:c4:27:84:60:e9:68:59:1d: 44:62:fd:64:0d:f8:ec:78:56:b0:fe:58:98:e3:16:ce:b6:70: 67:67:65:53:cd:15:b2:18:14:a5:3c:c0:c2:12:31:43:41:29: 02:b3:6a:4f:88:50:8b:6f:e8:48:7a:0b:ed:8b:5d:93:0e:b7: 46:ae:12:05:cd:54:ee:9a:1e:51:46:41:79:4d:67:ce:b6:b5: 4c:78:ea:c0:ab:ba:d7:f8:77:48:0f:93:c2:68:36:d2:b6:12: b6:8a:15:1d:25:06:e3:fa:86:5f:36:fc:4f:e4:2c:83:bd:41: 35:ac:2d:1b:33:11:c5:f4:88:99:e9:40:05:dc:cb:db:2d:d0: 8d:30:8f:41:8a:00:06:18:b2:1b:5d:77:89:02:cc:8d:37:00: 1c:cf:e7:f2:ba:7b:a9:b2:12:68:3f:37:1b:f1:89:fa:1f:25: b0:94:ee:48:63:fa:07:55:d5:77:1c:e2:03:6a:89:6b:8e:3b: 44:8d:10:82:6c:bf:c9:6a:7f:1f:6c:ea:3d:1e:3b:cc:6c:fd: ba:3c:aa:9a:f2:14:13:80:8d:a5:ff:df:98:3c:5f:1d:d5:4d: c5:b0:44:b1 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NEY2MzExMC8GA1UEBRMoNDEzMkE0QkYyRTgyQjY0RERGQTM4OUYzNDk1MUQ1NTg0 Q0FCNERBNjAeFw0yNjExMDUxMDE1MzdaFw0yNjExMTIxMDE1MzdaMBgxFjAUBgNV BAMTDTZhZWM1NzQ5LTU1MTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqCrav7sOVEpJS2N3qe7MlUPJ/eM7FoAM1xu5+lP0Zpro2L/5Gn51BRdbGgLQy OvPFwkQMoXvRNmK5OgUP3WfERZFqwpEpHibuwpyLG88Cc8D1IXwzfA5+BUQosaOF aIgoQiSnY+R2kr7hpq658L+u7DRSByxqPRPiGEISUmR3amgCXtD31C34ZdR2QTtX 8LEL7AtHNBGm9FfRbhJi8a32NNSthckC7MUUrbNjt6FPhmtKA4KB7o9rj5UMa2m2 vRo0Y0Xf2gMmVQldypBGohjoOD/DsB+w9Yjmski2JBzDft5CAi9icV+9ewrG+dfu aXTDUGAUl4NeWHrQ91MbiqLnAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUshaq1Xzj THEPtlOYncmfK95CXsQwHwYDVR0jBBgwFoAUQTKkvy6Ctk3fo4nzSVHVWEyrTaYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0RjYzLzlEQTk1NTYwRDgz MjExRjFCQ0QwMDAxQzJGNjZDRUY5L1FUS2t2eTZDdGszZm80bnpTVkhWV0V5clRh WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUVRLa3Z5NkN0azNmbzRuelNWSFZXRXlyVGFZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0 RjYzLzlEQTk1NTYwRDgzMjExRjFCQ0QwMDAxQzJGNjZDRUY5L1FUS2t2eTZDdGsz Zm80bnpTVkhWV0V5clRhWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB40D2QsM5oiTPON5mngQSuo9qkiyUpi3CpYo54xCeEYOloWR1EYv1kDfjseFaw /liY4xbOtnBnZ2VTzRWyGBSlPMDCEjFDQSkCs2pPiFCLb+hIegvti12TDrdGrhIF zVTumh5RRkF5TWfOtrVMeOrAq7rX+HdID5PCaDbSthK2ihUdJQbj+oZfNvxP5CyD vUE1rC0bMxHF9IiZ6UAF3MvbLdCNMI9BigAGGLIbXXeJAsyNNwAcz+fyunupshJo Pzcb8Yn6HyWwlO5IY/oHVdV3HOIDaolrjjtEjRCCbL/Jan8fbOo9HjvMbP26PKqa 8hQTgI2l/9+YPF8d1U3FsESx -----END CERTIFICATE-----Generated at Thu Nov 5 19:52:18 2026 by rpki-client