$ rpki-client -vvvf rpki.apnic.net/member_repository/A9163FDD/35AF6C5047B511F1A32F452AAB833773/CqtotenM02zgL8fv_DHy08o52yc.mft File: CqtotenM02zgL8fv_DHy08o52yc.mft (raw, json) Hash identifier: 2qMJaQvMidbe51zhfKIXfXSLG59H3lt+9EcmECDNolM= Subject key identifier: E1:0A:97:D8:07:4C:D1:D8:2C:B8:40:BD:66:83:39:9A:5F:BF:C0:2E Authority key identifier: 0A:AB:68:B5:E9:CC:D3:6C:E0:2F:C7:EF:FC:31:F2:D3:CA:39:DB:27 Certificate issuer: /CN=A9163FDD/serialNumber=0AAB68B5E9CCD36CE02FC7EFFC31F2D3CA39DB27 Certificate serial: 4D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CqtotenM02zgL8fv_DHy08o52yc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163FDD/35AF6C5047B511F1A32F452AAB833773/CqtotenM02zgL8fv_DHy08o52yc.mft Manifest number: 4B Signing time: Fri 25 Sep 2026 08:29:11 +0000 Manifest this update: Fri 25 Sep 2026 08:29:10 +0000 Manifest next update: Fri 02 Oct 2026 08:29:10 +0000 Files and hashes: 1: CqtotenM02zgL8fv_DHy08o52yc.crl (hash: w3HugpmAXsFR2GOZNLaYdLNGOa1pOfT7/RNxzWgFMac=) 2: CE980DA047B511F1AD6B752EAC833773.roa (hash: rJ7MwdMn12g2VriYRqbrvBuuT7dIwHbDf+/LEbL0SFk=) 3: 92701B9C47B511F187E28212AC833773.roa (hash: FGsq37N25gQEvAkHkSgHGjoYJq3skohOqe6KuypoGjc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163FDD/35AF6C5047B511F1A32F452AAB833773/CqtotenM02zgL8fv_DHy08o52yc.crl rsync://rpki.apnic.net/member_repository/A9163FDD/35AF6C5047B511F1A32F452AAB833773/CqtotenM02zgL8fv_DHy08o52yc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CqtotenM02zgL8fv_DHy08o52yc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 08:29:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77 (0x4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163FDD, serialNumber=0AAB68B5E9CCD36CE02FC7EFFC31F2D3CA39DB27 Validity Not Before: Sep 25 08:29:10 2026 GMT Not After : Oct 2 08:29:10 2026 GMT Subject: CN=6ab630d7-13d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a2:15:3a:74:85:54:1a:a7:72:d9:72:12:71: 3e:ea:8f:84:cb:2f:30:ac:59:56:9a:d4:ec:3e:7c: f1:54:eb:09:9a:37:16:bd:63:36:86:b4:af:81:46: 3f:58:f9:f9:44:67:82:01:e1:24:04:fd:be:5f:f7: 69:18:d5:fe:15:b7:3b:60:0b:0f:b7:ab:73:09:c9: df:2c:e7:f9:8f:d1:18:96:9e:e2:0b:be:02:28:98: 49:9c:79:ee:70:cd:37:8d:da:5a:55:d0:73:ea:fd: 61:8b:5b:da:05:40:24:e9:74:78:89:3b:3d:1d:c1: 09:75:74:99:18:51:15:fb:f1:17:49:2f:2e:c2:dc: 88:c6:21:ad:b4:06:9c:12:2e:6f:3d:b3:b6:65:bd: 94:d6:56:7d:0e:07:b8:8e:90:91:78:aa:5d:16:6d: 5e:45:d0:fc:02:79:0f:da:8a:5e:3c:5c:67:40:06: be:16:10:83:f0:7a:ba:d5:46:36:22:c5:fc:61:61: e3:7a:d9:3f:ef:6a:5d:a9:a6:47:51:bc:cb:44:e3: 10:a1:8a:ab:4d:79:c5:a7:71:0a:35:18:12:67:26: 96:f4:2d:42:20:b6:77:98:58:84:fb:c7:6f:d3:a2: 8a:25:f6:c6:44:0a:1c:92:ba:5e:c6:0a:ee:bd:e5: 48:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:0A:97:D8:07:4C:D1:D8:2C:B8:40:BD:66:83:39:9A:5F:BF:C0:2E X509v3 Authority Key Identifier: keyid:0A:AB:68:B5:E9:CC:D3:6C:E0:2F:C7:EF:FC:31:F2:D3:CA:39:DB:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163FDD/35AF6C5047B511F1A32F452AAB833773/CqtotenM02zgL8fv_DHy08o52yc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CqtotenM02zgL8fv_DHy08o52yc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163FDD/35AF6C5047B511F1A32F452AAB833773/CqtotenM02zgL8fv_DHy08o52yc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:5b:46:02:48:67:f8:80:e4:fd:5c:12:21:1b:b5:82:fc:e9: d2:dc:e2:ba:ad:a5:93:db:fa:e9:aa:36:9a:87:c1:fd:ba:78: 8e:0a:50:d4:36:d1:5c:70:fe:05:6d:18:53:7d:72:42:ca:29: ac:7d:3b:cc:c0:1d:ed:6b:da:73:ae:55:97:a7:e1:07:07:e4: 23:11:3c:8f:14:5f:de:82:32:91:93:ec:53:61:02:ad:9e:20: 3a:76:be:08:bd:74:59:86:65:98:e5:7c:6f:30:3c:e3:ae:2b: 74:75:b4:70:f2:08:0c:3c:65:ba:8c:6a:b6:d1:23:79:08:71: 44:83:49:bf:70:74:d7:02:40:c7:33:05:58:06:a1:92:5b:ce: 86:da:9a:93:4b:4b:b5:00:74:5f:3b:5c:cc:3d:e9:a3:26:72: 2a:a4:75:70:e2:f7:de:45:1e:ac:37:9d:42:68:ab:c6:b8:1a: 1d:fd:9b:ad:8b:a0:16:4e:fc:6b:d6:cc:f1:22:b1:16:f4:c9: 58:af:17:63:2f:83:bc:bf:25:24:e2:2c:1a:fe:a3:ed:36:7d: 67:25:0e:63:e5:07:af:22:b8:c3:cb:7c:23:82:80:87:fe:f2: c6:ab:2f:44:38:5f:1c:a1:b2:a4:56:6e:c7:5e:83:9b:51:2f: b4:6f:48:cb -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBTTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 M0ZERDExMC8GA1UEBRMoMEFBQjY4QjVFOUNDRDM2Q0UwMkZDN0VGRkMzMUYyRDND QTM5REIyNzAeFw0yNjA5MjUwODI5MTBaFw0yNjEwMDIwODI5MTBaMBgxFjAUBgNV BAMTDTZhYjYzMGQ3LTEzZDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCfohU6dIVUGqdy2XIScT7qj4TLLzCsWVaa1Ow+fPFU6wmaNxa9YzaGtK+BRj9Y +flEZ4IB4SQE/b5f92kY1f4VtztgCw+3q3MJyd8s5/mP0RiWnuILvgIomEmcee5w zTeN2lpV0HPq/WGLW9oFQCTpdHiJOz0dwQl1dJkYURX78RdJLy7C3IjGIa20BpwS Lm89s7ZlvZTWVn0OB7iOkJF4ql0WbV5F0PwCeQ/ail48XGdABr4WEIPwerrVRjYi xfxhYeN62T/val2ppkdRvMtE4xChiqtNecWncQo1GBJnJpb0LUIgtneYWIT7x2/T oool9sZEChySul7GCu695UgvAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU4QqX2AdM 0dgsuEC9ZoM5ml+/wC4wHwYDVR0jBBgwFoAUCqtotenM02zgL8fv/DHy08o52ycw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYzRkRELzM1QUY2QzUwNDdC NTExRjFBMzJGNDUyQUFCODMzNzczL0NxdG90ZW5NMDJ6Z0w4ZnZfREh5MDhvNTJ5 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQ3F0b3Rlbk0wMnpnTDhmdl9ESHkwOG81MnljLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYz RkRELzM1QUY2QzUwNDdCNTExRjFBMzJGNDUyQUFCODMzNzczL0NxdG90ZW5NMDJ6 Z0w4ZnZfREh5MDhvNTJ5Yy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQC2W0YCSGf4gOT9XBIhG7WC/OnS3OK6raWT2/rpqjaah8H9uniOClDUNtFccP4F bRhTfXJCyimsfTvMwB3ta9pzrlWXp+EHB+QjETyPFF/egjKRk+xTYQKtniA6dr4I vXRZhmWY5XxvMDzjrit0dbRw8ggMPGW6jGq20SN5CHFEg0m/cHTXAkDHMwVYBqGS W86G2pqTS0u1AHRfO1zMPemjJnIqpHVw4vfeRR6sN51CaKvGuBod/Zuti6AWTvxr 1szxIrEW9MlYrxdjL4O8vyUk4iwa/qPtNn1nJQ5j5QevIrjDy3wjgoCH/vLGqy9E OF8cobKkVm7HXoObUS+0b0jL -----END CERTIFICATE-----Generated at Sat Sep 26 06:38:06 2026 by rpki-client