$ rpki-client -vvvf rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft File: QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft (raw, json) Hash identifier: lfMJQLmkMrBGVcSi0LElp+ogD7tegKZzICkJPr4dRR4= Subject key identifier: DA:94:44:BF:6E:E5:A9:8F:B0:28:8E:09:76:8B:ED:84:4F:DE:2E:7E Authority key identifier: 42:B7:49:E1:EC:DB:E0:30:74:7F:8C:B5:74:7F:2D:73:A5:E4:24:54 Certificate issuer: /CN=A915D6C2/serialNumber=42B749E1ECDBE030747F8CB5747F2D73A5E42454 Certificate serial: 0563 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft Manifest number: 0552 Signing time: Tue 22 Sep 2026 23:06:38 +0000 Manifest this update: Tue 22 Sep 2026 23:06:38 +0000 Manifest next update: Tue 29 Sep 2026 23:06:38 +0000 Files and hashes: 1: QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.crl (hash: xooc3RgHVSGhOiqW+2q13ILLfcmxCjKw/FEtGzGT4EM=) 2: 5808B946B73A11ED8A2A8964C4F9AE02.roa (hash: l82fYq1x4u49vmBmNnG130HVCjkEDSzOMLfbwYG7C8U=) 3: 58A4A3E2B73A11ED8A2A8964C4F9AE02.roa (hash: yq/8yNnq6a4ASHoRBlMWzxoMD3auQ65vuNtbtSiVuBA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.crl rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 23:06:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1379 (0x563) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D6C2, serialNumber=42B749E1ECDBE030747F8CB5747F2D73A5E42454 Validity Not Before: Sep 22 23:06:38 2026 GMT Not After : Sep 29 23:06:38 2026 GMT Subject: CN=6ab309fe-7150 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4b:da:ee:84:ec:f7:5c:6a:0d:09:a9:22:86: e4:64:d9:a4:97:13:dc:73:07:74:54:07:61:78:2a: 78:79:da:b8:1e:66:c7:a6:e3:62:f1:db:cf:28:e3: 0f:12:8e:d5:d7:52:3f:6e:9e:bf:7e:ab:da:56:82: 39:41:0f:4f:d0:64:3e:29:78:a2:90:1d:5f:47:41: 44:36:34:62:39:9f:13:f9:f3:98:5c:c5:4c:e9:3d: 31:1a:48:ec:4d:b0:61:5c:34:30:a9:a3:c6:20:ac: 1b:9a:1f:21:4d:14:24:bd:f4:a3:8d:69:57:d7:f1: 83:fd:b1:5c:24:fb:4d:25:a8:d7:74:1c:21:f9:7e: 19:df:9e:25:99:55:2f:98:fd:1b:fd:4c:ba:39:df: 65:03:98:f4:98:03:e4:d7:2c:5c:e2:8a:65:41:30: 0b:59:e8:0a:fd:dd:13:22:4c:b3:13:4d:0d:be:a3: 87:8e:d5:48:de:dc:10:b3:e0:c8:3c:f1:13:74:f3: 5f:9b:e1:75:f5:22:3d:63:2f:8e:f4:17:b5:93:21: 83:d8:1f:cd:bd:fd:7d:c2:0c:6e:b7:f2:fb:4e:e0: 60:63:a5:0c:e8:3a:d4:82:8b:5a:5c:f6:af:02:43: 2e:04:c0:4c:f0:cc:99:12:c0:98:4f:01:6b:20:52: 15:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:94:44:BF:6E:E5:A9:8F:B0:28:8E:09:76:8B:ED:84:4F:DE:2E:7E X509v3 Authority Key Identifier: keyid:42:B7:49:E1:EC:DB:E0:30:74:7F:8C:B5:74:7F:2D:73:A5:E4:24:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:b0:c2:e8:13:11:f4:c0:7f:ab:2e:38:2a:5a:0b:68:81:3a: 1b:8a:fd:60:f5:36:4e:9a:5b:a7:0f:02:9b:6a:72:b5:38:9e: 76:d8:31:06:d2:52:9f:f7:e4:28:a9:fb:b8:e0:2f:7c:67:3f: aa:f4:93:c3:e1:0f:ce:fc:c3:0c:df:fb:6e:a9:49:7f:49:5e: 7a:56:cb:1c:83:57:55:01:99:8f:e3:10:10:14:aa:82:72:ef: c9:e4:9d:1f:a8:c0:59:ab:73:1d:97:0a:3a:87:00:18:d1:47: ea:76:7b:54:e1:c8:b4:21:24:2a:e9:bc:51:3f:9b:7a:0d:86: 6c:5e:c7:6b:c9:79:d9:11:5d:e7:4b:17:c9:2f:58:fe:70:c6: e2:84:de:9b:29:d0:10:9c:da:ac:f8:02:4e:22:4e:4e:46:24: e0:64:4e:1c:09:37:9b:21:f8:59:1b:63:3d:b5:bb:3e:58:de: 5f:a0:b3:a5:4f:ac:d6:b6:df:32:30:5b:10:8f:1c:97:88:49: 5e:c8:4f:2c:35:95:37:14:ed:24:53:d1:38:0a:6d:8c:70:4b: bf:4d:f5:6a:10:01:e5:99:fd:8f:9c:80:55:22:41:29:7e:29: 0f:9c:f7:be:fd:f0:77:44:9b:30:35:a1:66:d5:72:6f:ca:1b: a8:ac:8c:23 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ2QzIxMTAvBgNVBAUTKDQyQjc0OUUxRUNEQkUwMzA3NDdGOENCNTc0N0YyRDcz QTVFNDI0NTQwHhcNMjYwOTIyMjMwNjM4WhcNMjYwOTI5MjMwNjM4WjAYMRYwFAYD VQQDEw02YWIzMDlmZS03MTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAskva7oTs91xqDQmpIobkZNmklxPccwd0VAdheCp4edq4HmbHpuNi8dvPKOMP Eo7V11I/bp6/fqvaVoI5QQ9P0GQ+KXiikB1fR0FENjRiOZ8T+fOYXMVM6T0xGkjs TbBhXDQwqaPGIKwbmh8hTRQkvfSjjWlX1/GD/bFcJPtNJajXdBwh+X4Z354lmVUv mP0b/Uy6Od9lA5j0mAPk1yxc4oplQTALWegK/d0TIkyzE00NvqOHjtVI3twQs+DI PPETdPNfm+F19SI9Yy+O9Be1kyGD2B/Nvf19wgxut/L7TuBgY6UM6DrUgotaXPav AkMuBMBM8MyZEsCYTwFrIFIVwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNqURL9u 5amPsCiOCXaL7YRP3i5+MB8GA1UdIwQYMBaAFEK3SeHs2+AwdH+MtXR/LXOl5CRU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDZDMi9GOUM0NkZBQzUz QTIxMUVDOUQ1RTYxNURDNEY5QUUwMi9RcmRKNGV6YjREQjBmNHkxZEg4dGM2WGtK RlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FyZEo0ZXpiNERCMGY0eTFkSDh0YzZYa0pGUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDZDMi9GOUM0NkZBQzUzQTIxMUVDOUQ1RTYxNURDNEY5QUUwMi9RcmRKNGV6YjRE QjBmNHkxZEg4dGM2WGtKRlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIrDC6BMR9MB/qy44KloLaIE6G4r9YPU2Tppbpw8Cm2pytTiedtgxBtJSn/fk KKn7uOAvfGc/qvSTw+EPzvzDDN/7bqlJf0leelbLHINXVQGZj+MQEBSqgnLvyeSd H6jAWatzHZcKOocAGNFH6nZ7VOHItCEkKum8UT+beg2GbF7Ha8l52RFd50sXyS9Y /nDG4oTemynQEJzarPgCTiJOTkYk4GROHAk3myH4WRtjPbW7PljeX6CzpU+s1rbf MjBbEI8cl4hJXshPLDWVNxTtJFPROAptjHBLv031ahAB5Zn9j5yAVSJBKX4pD5z3 vv3wd0SbMDWhZtVyb8obqKyMIw== -----END CERTIFICATE-----Generated at Wed Sep 23 07:33:12 2026 by rpki-client