$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.mft File: qkNqr8aIBFv1FIhhVG-j_cqYQI4.mft (raw, json) Hash identifier: jErZSpws0BhK11zbPDmwDraZTMyV7pKjysg45PE7TTA= Subject key identifier: 2B:61:9F:10:0A:0C:18:29:7D:45:B2:54:15:C4:8A:86:27:D4:1D:92 Authority key identifier: AA:43:6A:AF:C6:88:04:5B:F5:14:88:61:54:6F:A3:FD:CA:98:40:8E Certificate issuer: /CN=A917E4BA/serialNumber=AA436AAFC688045BF5148861546FA3FDCA98408E Certificate serial: 0BD2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkNqr8aIBFv1FIhhVG-j_cqYQI4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.mft Manifest number: 0BC1 Signing time: Sat 26 Sep 2026 19:09:06 +0000 Manifest this update: Sat 26 Sep 2026 19:09:05 +0000 Manifest next update: Sat 03 Oct 2026 19:09:05 +0000 Files and hashes: 1: qkNqr8aIBFv1FIhhVG-j_cqYQI4.crl (hash: zvWLJnjM33+3A6qAyJ0WsQ7yR8dmzYMFMkdAnw6vmFo=) 2: 2512D04C22BE11EC9240097DC4F9AE02.roa (hash: PPFiA6qNq6GDtkUBy0eT9Y5FpJTkF5X4pnd1msh8TAs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.crl rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkNqr8aIBFv1FIhhVG-j_cqYQI4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 19:09:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3026 (0xbd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E4BA, serialNumber=AA436AAFC688045BF5148861546FA3FDCA98408E Validity Not Before: Sep 26 19:09:05 2026 GMT Not After : Oct 3 19:09:05 2026 GMT Subject: CN=6ab81852-d2cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4b:76:98:b9:3b:f4:17:0f:01:cf:56:d7:d2: c1:d8:10:3c:ae:b3:9e:e3:90:ec:75:63:85:b4:df: d7:2d:65:a3:d2:f2:c9:fc:0d:34:6f:e2:d9:d8:6b: 52:3c:c7:2f:9e:8f:bc:00:a2:59:10:be:94:51:9b: 2c:7b:72:cb:13:bf:27:d6:11:5f:4b:7e:4a:6a:e4: 6f:1a:65:e4:10:29:bf:f1:ef:08:18:31:32:51:79: 95:31:5c:02:aa:9f:05:83:4b:8c:34:6a:d9:54:41: 28:0e:6f:93:b7:f9:e3:cf:e5:0c:d1:6e:a8:ae:b5: cc:d1:ee:60:8c:0c:64:b4:2d:92:58:58:ba:20:a9: 4f:da:0e:f6:35:96:a1:d5:cf:14:f3:a2:89:0d:eb: 9a:fb:6e:69:1e:1a:51:08:95:3a:33:bb:79:f1:90: a9:90:fc:a3:33:6b:78:36:f1:c6:15:3b:50:0f:58: 32:b9:ff:1c:37:1d:88:e7:98:57:16:25:23:c0:1c: 4f:38:43:e6:2d:96:67:83:49:02:09:9d:ff:e9:23: 5d:32:7a:62:9b:e1:75:d9:8d:78:3e:2a:c1:a5:18: 99:51:41:11:19:2f:d5:c7:dc:6e:01:c4:4c:7c:f0: b0:38:28:24:09:58:ea:da:52:ab:b8:7a:ea:59:9a: 65:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:61:9F:10:0A:0C:18:29:7D:45:B2:54:15:C4:8A:86:27:D4:1D:92 X509v3 Authority Key Identifier: keyid:AA:43:6A:AF:C6:88:04:5B:F5:14:88:61:54:6F:A3:FD:CA:98:40:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkNqr8aIBFv1FIhhVG-j_cqYQI4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:bc:54:2f:05:a8:5c:bb:c6:27:24:f0:17:05:a2:2a:ac:a8: 49:56:6d:ba:be:7d:76:c0:a1:dd:dc:f7:96:d6:d8:4b:ab:70: cd:f7:14:98:3c:56:fe:cb:1c:6b:fc:65:5f:51:11:0f:7b:98: 11:17:20:04:5e:ee:b6:f2:d3:be:70:d7:47:be:7b:f2:dd:d7: d2:48:1b:d4:76:f4:da:a0:76:32:99:1b:9e:bd:0a:94:c3:a1: d4:b6:8f:6c:28:e2:a6:08:61:4e:8c:92:6a:35:44:01:a9:40: c1:25:3e:dc:38:3a:50:08:77:b9:10:75:45:4a:d6:ab:c8:37: eb:59:c2:fa:bb:13:03:ce:6c:45:bb:03:30:29:8e:5b:4e:e8: 1a:22:b6:45:05:25:24:46:f5:ff:84:c2:52:5b:82:75:fc:31: 77:d0:82:f0:e7:32:95:3a:e9:36:08:17:39:11:2c:2a:c5:ee: 48:6c:dc:95:fd:8c:ca:7d:cc:95:ea:fa:0c:83:ae:e6:86:fe: 69:0f:5b:6c:62:14:d5:de:1b:1d:4f:f1:5e:49:80:03:cc:be: ce:0b:51:cb:ae:93:61:5d:94:28:f5:21:c7:43:08:97:0a:c2: 69:6f:f8:13:b2:aa:e5:09:77:cf:32:1d:91:91:da:72:d8:a1: d8:b2:95:3f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC9IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U0QkExMTAvBgNVBAUTKEFBNDM2QUFGQzY4ODA0NUJGNTE0ODg2MTU0NkZBM0ZE Q0E5ODQwOEUwHhcNMjYwOTI2MTkwOTA1WhcNMjYxMDAzMTkwOTA1WjAYMRYwFAYD VQQDEw02YWI4MTg1Mi1kMmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAukt2mLk79BcPAc9W19LB2BA8rrOe45DsdWOFtN/XLWWj0vLJ/A00b+LZ2GtS PMcvno+8AKJZEL6UUZsse3LLE78n1hFfS35KauRvGmXkECm/8e8IGDEyUXmVMVwC qp8Fg0uMNGrZVEEoDm+Tt/njz+UM0W6orrXM0e5gjAxktC2SWFi6IKlP2g72NZah 1c8U86KJDeua+25pHhpRCJU6M7t58ZCpkPyjM2t4NvHGFTtQD1gyuf8cNx2I55hX FiUjwBxPOEPmLZZng0kCCZ3/6SNdMnpim+F12Y14PirBpRiZUUERGS/Vx9xuAcRM fPCwOCgkCVjq2lKruHrqWZplwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCthnxAK DBgpfUWyVBXEioYn1B2SMB8GA1UdIwQYMBaAFKpDaq/GiARb9RSIYVRvo/3KmECO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTRCQS9EMDZCRjMyODUy REMxMUVBODI2MDFCMEZDNEY5QUUwMi9xa05xcjhhSUJGdjFGSWhoVkctal9jcVlR STQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FrTnFyOGFJQkZ2MUZJaGhWRy1qX2NxWVFJNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTRCQS9EMDZCRjMyODUyREMxMUVBODI2MDFCMEZDNEY5QUUwMi9xa05xcjhhSUJG djFGSWhoVkctal9jcVlRSTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAK7xULwWoXLvGJyTwFwWiKqyoSVZtur59dsCh3dz3ltbYS6twzfcUmDxW/ssc a/xlX1ERD3uYERcgBF7utvLTvnDXR7578t3X0kgb1Hb02qB2Mpkbnr0KlMOh1LaP bCjipghhToySajVEAalAwSU+3Dg6UAh3uRB1RUrWq8g361nC+rsTA85sRbsDMCmO W07oGiK2RQUlJEb1/4TCUluCdfwxd9CC8OcylTrpNggXOREsKsXuSGzclf2Myn3M ler6DIOu5ob+aQ9bbGIU1d4bHU/xXkmAA8y+zgtRy66TYV2UKPUhx0MIlwrCaW/4 E7Kq5Ql3zzIdkZHactih2LKVPw== -----END CERTIFICATE-----Generated at Sun Sep 27 07:43:21 2026 by rpki-client