$ rpki-client -vvvf rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.mft File: qDvPbbKI6WRw000Yr7PkqBJ5GGc.mft (raw, json) Hash identifier: OgpA+6vl95SsToI1w+Ou3tmEjVU9+fXNPxXckLw20EM= Subject key identifier: 43:59:C5:9A:47:A3:E3:8F:B4:37:B8:55:BF:45:59:21:61:9F:FA:77 Authority key identifier: A8:3B:CF:6D:B2:88:E9:64:70:D3:4D:18:AF:B3:E4:A8:12:79:18:67 Certificate issuer: /CN=A9167F95/serialNumber=A83BCF6DB288E96470D34D18AFB3E4A812791867 Certificate serial: 012A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDvPbbKI6WRw000Yr7PkqBJ5GGc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.mft Manifest number: 011E Signing time: Mon 21 Sep 2026 05:58:47 +0000 Manifest this update: Mon 21 Sep 2026 05:58:46 +0000 Manifest next update: Mon 28 Sep 2026 05:58:46 +0000 Files and hashes: 1: qDvPbbKI6WRw000Yr7PkqBJ5GGc.crl (hash: Nnias+oxH8ZSxM6jVETR4ZehxIMK4WnoScngX5KNeYY=) 2: FA9003D2D76B11F095EF502678D3641D.roa (hash: o3QxQZu5zodurwcTs5Rk1UZplrBOuwGoI1ym+ksUZ3E=) 3: 73667C2ED76B11F09495728677D3641D.roa (hash: 2Tj5hzFvoJCRrQMRxhtl/1QUyJ76MVlUsJwInbigzME=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.crl rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDvPbbKI6WRw000Yr7PkqBJ5GGc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 05:58:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 298 (0x12a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167F95, serialNumber=A83BCF6DB288E96470D34D18AFB3E4A812791867 Validity Not Before: Sep 21 05:58:46 2026 GMT Not After : Sep 28 05:58:46 2026 GMT Subject: CN=6ab0c797-a509 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a6:f4:6b:94:57:06:f8:1c:18:c7:15:41:36: 2e:12:05:7c:a2:e9:8b:6d:93:63:a6:85:25:7d:aa: 0d:26:ae:90:9b:00:98:f5:d2:f3:db:9c:59:dd:9a: a8:2e:bb:6b:2a:74:c0:93:6e:c3:84:c6:2d:5c:20: 4a:9d:e2:fe:5e:ed:4d:d8:10:d8:07:db:58:21:a8: 2b:ff:05:4f:e6:70:b6:0b:37:bc:ad:ee:62:19:46: 18:83:83:b5:b9:4b:97:9d:30:b5:68:77:57:32:9a: 62:ab:04:a7:8d:f5:ea:99:f1:e7:6a:02:d9:78:c1: 43:05:40:0a:e6:df:b7:91:99:8c:30:cc:51:54:d1: 67:27:38:cb:0d:b0:26:0d:77:bc:bd:41:ad:92:65: cb:e5:76:cb:92:88:34:4b:0c:c3:dd:ee:74:f3:00: a8:35:38:85:1a:e8:77:f9:df:2f:93:79:1a:8c:a1: d4:4d:53:7d:b0:48:07:6e:e8:e7:87:1a:fe:25:c2: 8c:f2:55:4f:6a:20:8e:a7:8a:a0:2a:fa:c9:3c:2c: 72:2f:82:b0:8f:da:b9:ae:30:21:70:ca:78:c5:c9: 8c:d3:e5:80:2a:dd:ce:18:ca:79:53:a7:df:77:89: 05:41:59:4e:02:a2:86:a3:12:a3:f5:41:c1:e9:5f: ec:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:59:C5:9A:47:A3:E3:8F:B4:37:B8:55:BF:45:59:21:61:9F:FA:77 X509v3 Authority Key Identifier: keyid:A8:3B:CF:6D:B2:88:E9:64:70:D3:4D:18:AF:B3:E4:A8:12:79:18:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDvPbbKI6WRw000Yr7PkqBJ5GGc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:2d:12:a9:a0:74:19:c4:dc:1d:d2:8e:27:07:be:06:3c:67: ec:7f:16:15:69:a3:d2:e1:80:55:39:27:47:e2:88:e9:c0:21: 5e:e3:3e:94:e0:42:b1:e5:30:b4:23:dd:f7:be:5a:2b:74:13: 5e:3c:39:33:51:50:d1:6a:18:e9:95:ba:57:72:ee:59:7b:91: 17:a7:19:0e:8f:6c:4d:4f:bb:c0:b5:58:ff:27:c9:8f:a3:38: 7c:0b:a9:ce:da:e1:eb:c3:a0:32:67:0d:5a:bb:3d:87:b2:23: 3c:c1:c9:72:f1:c7:3c:a5:10:13:7c:85:bd:7f:1c:00:2a:40: 45:a6:26:c2:7a:e4:46:56:5a:57:d6:05:33:79:15:dd:3b:26: 96:0e:96:b6:9e:74:15:db:5d:cc:1f:22:7b:ca:d6:24:ff:f5: 88:a4:9c:11:38:62:09:0d:0f:ce:fb:db:41:fc:9e:10:d0:86: e2:a2:b3:3f:02:be:ec:f0:0e:be:57:69:cd:e7:79:64:3b:a4: b3:d5:a5:5d:6c:70:87:2f:9f:25:fe:d4:89:4e:6a:d4:b5:58: 72:a9:ef:f7:59:43:b0:f2:85:df:a4:06:18:a2:71:50:23:63: c6:aa:6e:41:66:94:2c:74:69:5d:c0:5e:0f:e8:4e:fa:5f:de: 46:52:bf:1d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdGOTUxMTAvBgNVBAUTKEE4M0JDRjZEQjI4OEU5NjQ3MEQzNEQxOEFGQjNFNEE4 MTI3OTE4NjcwHhcNMjYwOTIxMDU1ODQ2WhcNMjYwOTI4MDU1ODQ2WjAYMRYwFAYD VQQDEw02YWIwYzc5Ny1hNTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuqb0a5RXBvgcGMcVQTYuEgV8oumLbZNjpoUlfaoNJq6QmwCY9dLz25xZ3Zqo LrtrKnTAk27DhMYtXCBKneL+Xu1N2BDYB9tYIagr/wVP5nC2Cze8re5iGUYYg4O1 uUuXnTC1aHdXMppiqwSnjfXqmfHnagLZeMFDBUAK5t+3kZmMMMxRVNFnJzjLDbAm DXe8vUGtkmXL5XbLkog0SwzD3e508wCoNTiFGuh3+d8vk3kajKHUTVN9sEgHbujn hxr+JcKM8lVPaiCOp4qgKvrJPCxyL4Kwj9q5rjAhcMp4xcmM0+WAKt3OGMp5U6ff d4kFQVlOAqKGoxKj9UHB6V/sXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFENZxZpH o+OPtDe4Vb9FWSFhn/p3MB8GA1UdIwQYMBaAFKg7z22yiOlkcNNNGK+z5KgSeRhn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0Y5NS83RDMzRkQzODEy RTcxMUYwQkRCOTQ1NERDNEY5QUUwMi9xRHZQYmJLSTZXUncwMDBZcjdQa3FCSjVH R2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FEdlBiYktJNldSdzAwMFlyN1BrcUJKNUdHYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0Y5NS83RDMzRkQzODEyRTcxMUYwQkRCOTQ1NERDNEY5QUUwMi9xRHZQYmJLSTZX UncwMDBZcjdQa3FCSjVHR2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASy0SqaB0GcTcHdKOJwe+Bjxn7H8WFWmj0uGAVTknR+KI6cAhXuM+lOBCseUw tCPd975aK3QTXjw5M1FQ0WoY6ZW6V3LuWXuRF6cZDo9sTU+7wLVY/yfJj6M4fAup ztrh68OgMmcNWrs9h7IjPMHJcvHHPKUQE3yFvX8cACpARaYmwnrkRlZaV9YFM3kV 3Tsmlg6Wtp50FdtdzB8ie8rWJP/1iKScEThiCQ0PzvvbQfyeENCG4qKzPwK+7PAO vldpzed5ZDuks9WlXWxwhy+fJf7UiU5q1LVYcqnv91lDsPKF36QGGKJxUCNjxqpu QWaULHRpXcBeD+hO+l/eRlK/HQ== -----END CERTIFICATE-----Generated at Mon Sep 21 23:44:01 2026 by rpki-client