$ rpki-client -vvvf rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.mft File: 3qY-MQG_FZkCCkCD-hw9lkshMMA.mft (raw, json) Hash identifier: rD1VOXvF5dW/NUTXJ9lXf1fuZaQ17hospWoEl3pD8CQ= Subject key identifier: EF:F4:9C:4F:82:4C:95:2F:11:CF:6C:E9:E6:10:7D:90:B3:94:94:60 Authority key identifier: DE:A6:3E:31:01:BF:15:99:02:0A:40:83:FA:1C:3D:96:4B:21:30:C0 Certificate issuer: /CN=A9161857/serialNumber=DEA63E3101BF1599020A4083FA1C3D964B2130C0 Certificate serial: 0124 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qY-MQG_FZkCCkCD-hw9lkshMMA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.mft Manifest number: 0112 Signing time: Wed 23 Sep 2026 06:04:18 +0000 Manifest this update: Wed 23 Sep 2026 06:04:18 +0000 Manifest next update: Wed 30 Sep 2026 06:04:18 +0000 Files and hashes: 1: 3qY-MQG_FZkCCkCD-hw9lkshMMA.crl (hash: YucWlWkjRn2Kz5c8K7t4bQviskbN+e6KkhfO9cwwXI8=) 2: EBD46B4A9FBF11F19246D1DD5211F970.roa (hash: 35CSobwx3CJSzjVqfVhK7LBnxTx7Ipo3cg0/6OZm4OI=) 3: 0148654664AE11F1AC9CD4CD9247A888.roa (hash: XUY8icPDiAIYlrFuNXDQzObZfGQJQ9QbZtuXyrDZV4k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.crl rsync://rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qY-MQG_FZkCCkCD-hw9lkshMMA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 06:04:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 292 (0x124) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161857, serialNumber=DEA63E3101BF1599020A4083FA1C3D964B2130C0 Validity Not Before: Sep 23 06:04:18 2026 GMT Not After : Sep 30 06:04:18 2026 GMT Subject: CN=6ab36be2-ffdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:d0:56:ed:f1:87:de:ff:ae:6b:e2:8d:78:f7: a3:3f:b6:42:a1:28:fc:cb:c7:b1:99:6a:8d:fc:e5: 71:95:d6:66:5c:74:38:9f:05:ad:48:b3:f4:3a:54: b7:71:8e:b3:f2:28:ac:b2:34:76:89:a0:b4:53:50: 40:81:4e:05:0d:8b:d1:1f:9b:1b:97:99:79:a0:59: 06:c4:46:36:6b:2b:60:62:a4:be:45:d1:78:58:d6: 66:be:7b:a4:a2:41:c0:c1:62:6c:1f:1a:0c:b5:76: e5:57:fa:ba:36:34:85:9d:b1:f1:d0:49:6d:76:a6: 81:b3:42:29:85:52:e1:c6:09:31:4d:61:c9:0c:f1: c1:d0:8d:77:a5:06:8c:cd:cd:a6:c3:bc:bf:78:ab: 7e:a3:53:f1:91:ca:6d:df:20:ce:0d:79:74:91:1a: a1:29:d3:41:ae:99:96:42:66:ec:51:e4:fa:ef:89: b8:7a:81:04:f9:f8:4a:9c:92:6c:fc:5a:47:d2:b4: 84:40:76:bf:f1:11:b0:cb:80:cc:fe:0c:12:c3:5b: 4e:36:e4:87:59:80:84:c9:6a:87:57:9f:10:ea:c4: fb:be:53:9f:6c:b1:b0:73:0d:a7:93:06:a8:24:ed: 50:7a:f2:67:6d:7f:41:ff:b4:5f:ad:78:71:4b:a8: 3e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:F4:9C:4F:82:4C:95:2F:11:CF:6C:E9:E6:10:7D:90:B3:94:94:60 X509v3 Authority Key Identifier: keyid:DE:A6:3E:31:01:BF:15:99:02:0A:40:83:FA:1C:3D:96:4B:21:30:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qY-MQG_FZkCCkCD-hw9lkshMMA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:c7:f3:57:6d:65:3d:b3:32:92:77:ca:b0:9c:02:a0:9a:eb: 9e:dc:7e:15:6f:30:2a:9b:8f:ba:be:1f:8e:76:81:8a:4d:ef: ed:c3:cc:91:76:19:b7:be:e0:b0:ef:d1:8a:f9:5b:90:35:d8: 02:00:d3:8e:f3:c5:02:92:c0:75:bc:5b:15:5f:ed:53:33:e7: b4:4e:4b:15:db:53:5b:01:82:a7:24:8c:c7:6e:09:fc:e6:6a: 5a:73:1d:84:08:e9:4e:c3:25:78:35:4f:ee:56:22:67:1e:4e: 5c:ac:4e:59:7d:06:00:10:78:43:32:af:e5:28:b7:2b:2e:0f: f7:53:80:ae:c5:55:61:3c:3f:6a:25:50:2f:a2:3d:17:5f:0f: c1:96:23:6a:5e:50:9a:f0:ba:ee:06:27:20:af:3d:91:ed:b0: 4f:aa:da:33:c7:94:cc:db:fc:79:73:6c:63:85:9b:5b:a9:95: 92:da:ac:f8:cf:7f:5a:e2:c0:25:fe:59:15:d7:77:72:60:57: 1c:57:07:86:98:40:6b:d4:5b:fa:55:63:55:7d:47:e5:da:0f: 40:ce:35:ee:c4:c3:25:cb:95:ca:9c:bf:1e:1c:52:3a:fa:32: c6:28:a9:57:97:2b:8e:8c:c8:cb:77:fa:23:09:bb:dd:14:0b: a5:d4:56:a6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjE4NTcxMTAvBgNVBAUTKERFQTYzRTMxMDFCRjE1OTkwMjBBNDA4M0ZBMUMzRDk2 NEIyMTMwQzAwHhcNMjYwOTIzMDYwNDE4WhcNMjYwOTMwMDYwNDE4WjAYMRYwFAYD VQQDEw02YWIzNmJlMi1mZmRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA39BW7fGH3v+ua+KNePejP7ZCoSj8y8exmWqN/OVxldZmXHQ4nwWtSLP0OlS3 cY6z8iissjR2iaC0U1BAgU4FDYvRH5sbl5l5oFkGxEY2aytgYqS+RdF4WNZmvnuk okHAwWJsHxoMtXblV/q6NjSFnbHx0EltdqaBs0IphVLhxgkxTWHJDPHB0I13pQaM zc2mw7y/eKt+o1Pxkcpt3yDODXl0kRqhKdNBrpmWQmbsUeT674m4eoEE+fhKnJJs /FpH0rSEQHa/8RGwy4DM/gwSw1tONuSHWYCEyWqHV58Q6sT7vlOfbLGwcw2nkwao JO1QevJnbX9B/7RfrXhxS6g+XQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO/0nE+C TJUvEc9s6eYQfZCzlJRgMB8GA1UdIwQYMBaAFN6mPjEBvxWZAgpAg/ocPZZLITDA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTg1Ny9DQjE0QkYyNjND OTgxMUYwQUYxMjRCMzhDNEY5QUUwMi8zcVktTVFHX0Zaa0NDa0NELWh3OWxrc2hN TUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNxWS1NUUdfRlprQ0NrQ0QtaHc5bGtzaE1NQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTg1Ny9DQjE0QkYyNjNDOTgxMUYwQUYxMjRCMzhDNEY5QUUwMi8zcVktTVFHX0Za a0NDa0NELWh3OWxrc2hNTUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADsfzV21lPbMyknfKsJwCoJrrntx+FW8wKpuPur4fjnaBik3v7cPMkXYZt77g sO/RivlbkDXYAgDTjvPFApLAdbxbFV/tUzPntE5LFdtTWwGCpySMx24J/OZqWnMd hAjpTsMleDVP7lYiZx5OXKxOWX0GABB4QzKv5Si3Ky4P91OArsVVYTw/aiVQL6I9 F18PwZYjal5QmvC67gYnIK89ke2wT6raM8eUzNv8eXNsY4WbW6mVktqs+M9/WuLA Jf5ZFdd3cmBXHFcHhphAa9Rb+lVjVX1H5doPQM417sTDJcuVypy/HhxSOvoyxiip V5crjozIy3f6Iwm73RQLpdRWpg== -----END CERTIFICATE-----Generated at Thu Sep 24 10:16:56 2026 by rpki-client