$ rpki-client -vvvf rpki.apnic.net/member_repository/A9156971/48C221861D9211E2ADB30BF508B02CD2/KQX7MhK9YWRvt69jPqGiV7w6Pew.mft File: KQX7MhK9YWRvt69jPqGiV7w6Pew.mft (raw, json) Hash identifier: f/gk3K9x13hLlCq6kwz16g5OgZ1RddZtSMzTfIgXvqQ= Subject key identifier: A9:26:83:10:EA:FB:B6:A8:F9:33:AA:84:16:34:92:C0:31:5D:65:74 Authority key identifier: 29:05:FB:32:12:BD:61:64:6F:B7:AF:63:3E:A1:A2:57:BC:3A:3D:EC Certificate issuer: /CN=A9156971/serialNumber=2905FB3212BD61646FB7AF633EA1A257BC3A3DEC Certificate serial: 3591 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQX7MhK9YWRvt69jPqGiV7w6Pew.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156971/48C221861D9211E2ADB30BF508B02CD2/KQX7MhK9YWRvt69jPqGiV7w6Pew.mft Manifest number: 3588 Signing time: Mon 28 Sep 2026 14:44:34 +0000 Manifest this update: Mon 28 Sep 2026 14:44:34 +0000 Manifest next update: Mon 05 Oct 2026 14:44:34 +0000 Files and hashes: 1: KQX7MhK9YWRvt69jPqGiV7w6Pew.crl (hash: UAR50yC+5hZ0hv3g/CpPhq13mkA/P2lDW0S5L7ayWos=) 2: 4AF78A4AFEC611EF86B4765BC4F9AE02.roa (hash: DaUDfRkisbFjBhwxGgOMj8rF42Ao1F9Plt9FEElpL3c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156971/48C221861D9211E2ADB30BF508B02CD2/KQX7MhK9YWRvt69jPqGiV7w6Pew.crl rsync://rpki.apnic.net/member_repository/A9156971/48C221861D9211E2ADB30BF508B02CD2/KQX7MhK9YWRvt69jPqGiV7w6Pew.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQX7MhK9YWRvt69jPqGiV7w6Pew.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 14:44:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13713 (0x3591) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156971, serialNumber=2905FB3212BD61646FB7AF633EA1A257BC3A3DEC Validity Not Before: Sep 28 14:44:34 2026 GMT Not After : Oct 5 14:44:34 2026 GMT Subject: CN=6aba7d52-8988 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:dc:b1:a0:ec:fd:78:1f:75:0f:d5:f1:f9:f0: 5a:75:92:22:49:86:ac:14:a2:16:fc:a4:71:62:45: 68:71:98:0c:ef:33:3f:68:83:4e:2b:01:1b:2e:a5: 19:4f:ca:f4:5d:fc:7b:cf:4b:bd:86:53:d9:63:dd: e3:c4:7d:aa:5e:1f:86:d4:0c:3a:b4:bf:75:ea:f0: 21:2b:9a:25:c7:6b:da:ba:6c:75:b6:3a:bd:d8:cb: b2:d3:ea:1a:ce:49:2a:a5:25:49:a5:10:68:8d:ad: 20:64:c3:91:3e:56:57:38:53:41:16:ad:ba:7f:d5: 9b:82:b7:76:b5:19:69:30:6b:bd:bb:d4:11:bc:22: 9d:ce:d7:9b:a9:0a:bb:ea:74:a5:53:bf:1e:54:6f: 4b:b2:96:aa:e0:24:46:d7:06:1e:32:36:b9:9e:75: 60:09:01:b4:b1:bb:81:2d:3e:77:aa:03:d0:58:e2: 2b:de:8d:8d:fa:8f:82:6f:2c:e6:a9:ef:74:67:30: 6c:51:86:f6:25:77:a3:eb:3b:b4:bf:78:67:09:a6: fb:a8:23:45:86:52:99:89:6e:56:3a:01:ce:b1:81: 43:c3:7e:76:23:4d:8b:33:88:c3:5a:62:49:12:b0: d6:7c:ea:f9:4d:20:cc:00:77:2d:b0:cd:4a:92:18: 5c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:26:83:10:EA:FB:B6:A8:F9:33:AA:84:16:34:92:C0:31:5D:65:74 X509v3 Authority Key Identifier: keyid:29:05:FB:32:12:BD:61:64:6F:B7:AF:63:3E:A1:A2:57:BC:3A:3D:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156971/48C221861D9211E2ADB30BF508B02CD2/KQX7MhK9YWRvt69jPqGiV7w6Pew.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQX7MhK9YWRvt69jPqGiV7w6Pew.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156971/48C221861D9211E2ADB30BF508B02CD2/KQX7MhK9YWRvt69jPqGiV7w6Pew.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:e0:de:44:c6:aa:9c:98:e8:d3:82:f0:37:22:8c:47:68:43: 4c:d9:a3:52:c6:c2:a9:7e:7b:5b:06:03:69:87:80:03:60:97: a1:33:90:59:f8:15:e6:73:0d:45:54:a1:d6:c9:66:43:a1:aa: a4:5c:7a:dd:01:87:78:24:db:43:6a:ed:d6:18:5a:fb:5c:4d: f8:0c:47:48:4b:59:06:25:ba:96:2d:d5:cd:28:68:cb:38:81: da:66:b9:9e:4a:4d:92:67:a3:0e:f9:aa:05:5f:40:e2:91:c3: 98:7a:b5:98:1a:0f:8a:11:e3:17:76:34:7a:ed:02:95:50:33: 78:2c:bf:36:f8:2f:be:8e:40:11:88:5f:86:9e:49:78:1f:f3: 31:d1:c3:26:36:ec:ff:43:e2:d7:c0:a9:9e:44:31:5d:1e:89: cd:e7:c8:15:79:1c:f3:6c:fd:be:7a:67:ca:35:8d:cb:7a:df: d0:c6:93:f1:4d:c5:88:4f:15:23:6f:bd:e7:89:7f:74:64:56: 96:83:3e:94:0a:64:d3:80:0a:a4:e9:b7:f5:38:02:f5:16:e0: dc:50:90:92:b4:9b:b7:8f:6b:8b:b7:8f:fc:88:38:4b:75:15: 87:17:e9:9b:3e:17:34:dc:c7:d2:91:5e:a9:7f:50:24:23:a8: ad:3f:0c:ec -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY5NzExMTAvBgNVBAUTKDI5MDVGQjMyMTJCRDYxNjQ2RkI3QUY2MzNFQTFBMjU3 QkMzQTNERUMwHhcNMjYwOTI4MTQ0NDM0WhcNMjYxMDA1MTQ0NDM0WjAYMRYwFAYD VQQDEw02YWJhN2Q1Mi04OTg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvdyxoOz9eB91D9Xx+fBadZIiSYasFKIW/KRxYkVocZgM7zM/aINOKwEbLqUZ T8r0Xfx7z0u9hlPZY93jxH2qXh+G1Aw6tL916vAhK5olx2vaumx1tjq92Muy0+oa zkkqpSVJpRBoja0gZMORPlZXOFNBFq26f9Wbgrd2tRlpMGu9u9QRvCKdztebqQq7 6nSlU78eVG9Lspaq4CRG1wYeMja5nnVgCQG0sbuBLT53qgPQWOIr3o2N+o+Cbyzm qe90ZzBsUYb2JXej6zu0v3hnCab7qCNFhlKZiW5WOgHOsYFDw352I02LM4jDWmJJ ErDWfOr5TSDMAHctsM1KkhhcnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKkmgxDq +7ao+TOqhBY0ksAxXWV0MB8GA1UdIwQYMBaAFCkF+zISvWFkb7evYz6hole8Oj3s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Njk3MS80OEMyMjE4NjFE OTIxMUUyQURCMzBCRjUwOEIwMkNEMi9LUVg3TWhLOVlXUnZ0NjlqUHFHaVY3dzZQ ZXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tRWDdNaEs5WVdSdnQ2OWpQcUdpVjd3NlBldy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Njk3MS80OEMyMjE4NjFEOTIxMUUyQURCMzBCRjUwOEIwMkNEMi9LUVg3TWhLOVlX UnZ0NjlqUHFHaVY3dzZQZXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHuDeRMaqnJjo04LwNyKMR2hDTNmjUsbCqX57WwYDaYeAA2CXoTOQWfgV5nMN RVSh1slmQ6GqpFx63QGHeCTbQ2rt1hha+1xN+AxHSEtZBiW6li3VzShoyziB2ma5 nkpNkmejDvmqBV9A4pHDmHq1mBoPihHjF3Y0eu0ClVAzeCy/Nvgvvo5AEYhfhp5J eB/zMdHDJjbs/0Pi18CpnkQxXR6JzefIFXkc82z9vnpnyjWNy3rf0MaT8U3FiE8V I2+954l/dGRWloM+lApk04AKpOm39TgC9Rbg3FCQkrSbt49ri7eP/Ig4S3UVhxfp mz4XNNzH0pFeqX9QJCOorT8M7A== -----END CERTIFICATE-----Generated at Tue Sep 29 15:02:28 2026 by rpki-client