$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft File: qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft (raw, json) Hash identifier: ana2Lfpx0TnurWyBx3csOMBUT+pW52Mk/TkdARjMJsM= Subject key identifier: 2D:6B:14:42:07:70:A8:2B:66:78:24:F8:24:9F:C7:D1:D6:5F:65:C3 Authority key identifier: A8:FC:25:9A:10:1E:AB:82:6E:E8:CB:EA:2A:0B:DA:5C:DE:CF:DA:F2 Certificate issuer: /CN=A9186B80/serialNumber=A8FC259A101EAB826EE8CBEA2A0BDA5CDECFDAF2 Certificate serial: 0604 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft Manifest number: 05F3 Signing time: Sun 20 Sep 2026 22:49:01 +0000 Manifest this update: Sun 20 Sep 2026 22:49:01 +0000 Manifest next update: Sun 27 Sep 2026 22:49:01 +0000 Files and hashes: 1: qPwlmhAeq4Ju6MvqKgvaXN7P2vI.crl (hash: UXvzWOPADWXGar1MXZWEhiUsR6VKwtLxnOTGMyGXOXQ=) 2: 9C09360E0C3411EDB8619843C4F9AE02.roa (hash: wMvkSHLjnq5sLqQ/zAmxIdC9rNEgP/i+2/CsALVDz+A=) 3: D3A7743C19EA11EC9C11D95AC4F9AE02.roa (hash: u3QeAH/Xjc/phjAuXipIPbI5+ZQ8m+RjZgJwXpuM0m0=) 4: 2DA2253A4E1211F1BF860394CD833773.roa (hash: OQC3+KRN4hsjI0V7STttKspjEkoDxGfQu0IpJxAelaI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.crl rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 22:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1540 (0x604) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186B80, serialNumber=A8FC259A101EAB826EE8CBEA2A0BDA5CDECFDAF2 Validity Not Before: Sep 20 22:49:01 2026 GMT Not After : Sep 27 22:49:01 2026 GMT Subject: CN=6ab062dd-9ff2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7a:be:bf:de:7e:04:c4:e4:42:b3:5b:6c:20: a6:17:df:46:3c:c5:78:f9:4d:ea:11:18:9f:3a:78: 58:66:24:67:92:d5:3e:b6:d0:09:41:0c:c6:ca:43: 53:78:5b:82:f2:fb:f6:2e:98:4f:7c:51:ed:9f:6a: 13:6d:ed:e0:fb:0d:74:e3:7f:f4:12:e4:f6:73:2d: 17:f2:6e:27:24:6b:1b:01:57:89:3e:01:36:39:ec: 7d:89:52:2e:4d:c8:f6:41:fb:0b:64:98:b1:55:35: 51:0b:0f:ec:47:92:dd:fe:e0:b1:a6:34:c9:f2:13: b7:70:6d:ed:fe:3e:d8:3f:5b:39:97:35:4a:2a:bb: 19:7f:ed:a2:ea:ac:87:d5:4a:41:e9:52:80:77:74: 87:19:c4:1f:fa:06:1f:04:14:9d:b8:bb:fd:e8:84: 5d:4f:59:1f:d7:b3:34:6d:5f:16:86:9c:fa:4a:e2: b1:2a:5e:0a:4a:28:6d:77:07:ad:da:c7:7f:bc:3f: a5:87:1a:e7:f8:79:22:af:fb:36:34:99:15:30:20: 25:5d:cb:7c:ce:5a:6c:7f:2f:f3:b2:9f:65:74:43: 35:db:fd:01:b0:98:64:e2:01:2b:61:2a:19:89:76: a6:76:46:b8:e5:57:54:7a:99:da:c3:e1:37:1a:ea: 2c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:6B:14:42:07:70:A8:2B:66:78:24:F8:24:9F:C7:D1:D6:5F:65:C3 X509v3 Authority Key Identifier: keyid:A8:FC:25:9A:10:1E:AB:82:6E:E8:CB:EA:2A:0B:DA:5C:DE:CF:DA:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:a9:4e:8d:cd:08:a0:e2:11:3e:48:88:0e:f2:b7:4c:51:63: 38:3a:10:15:d8:81:5b:8e:e2:4b:db:6f:5d:d4:7c:99:2f:54: f5:41:98:b7:a5:aa:64:65:30:65:24:83:09:76:9e:ab:55:71: 03:bf:41:30:86:cc:8c:04:b9:54:80:6c:67:b5:3d:ad:50:1d: ce:29:41:a6:f9:3c:e8:c5:e0:6c:33:98:2c:2b:53:5b:91:68: 9b:59:3f:92:0e:c9:fe:e7:f8:5c:3f:82:86:07:2f:f9:37:7d: 9e:0e:65:ab:1f:56:cc:a5:f7:aa:2a:ba:3a:d5:2c:2c:a2:78: 7e:47:9b:3e:99:54:09:e8:91:16:d0:c0:2f:d2:38:77:a5:9e: c0:1d:c2:e5:46:6c:05:83:8a:0f:33:80:0a:d6:51:12:83:34: 5e:ed:03:98:80:a3:a0:bf:56:e4:14:a7:a6:90:e6:10:e2:23: cb:91:6a:20:c7:6d:4f:f4:e4:5f:b4:84:68:3f:4a:66:67:be: ff:85:bb:14:16:36:de:38:3b:14:8d:e9:84:32:a7:ee:17:2d: 43:ed:ff:b6:72:3d:5c:b2:9c:e8:92:a8:49:ec:71:79:02:6c: 18:d4:2e:c8:0b:e7:5b:51:3b:de:a7:64:24:8a:0e:c5:2c:cc: 94:eb:a1:5c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBgQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZCODAxMTAvBgNVBAUTKEE4RkMyNTlBMTAxRUFCODI2RUU4Q0JFQTJBMEJEQTVD REVDRkRBRjIwHhcNMjYwOTIwMjI0OTAxWhcNMjYwOTI3MjI0OTAxWjAYMRYwFAYD VQQDEw02YWIwNjJkZC05ZmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwHq+v95+BMTkQrNbbCCmF99GPMV4+U3qERifOnhYZiRnktU+ttAJQQzGykNT eFuC8vv2LphPfFHtn2oTbe3g+w1043/0EuT2cy0X8m4nJGsbAVeJPgE2Oex9iVIu Tcj2QfsLZJixVTVRCw/sR5Ld/uCxpjTJ8hO3cG3t/j7YP1s5lzVKKrsZf+2i6qyH 1UpB6VKAd3SHGcQf+gYfBBSduLv96IRdT1kf17M0bV8Whpz6SuKxKl4KSihtdwet 2sd/vD+lhxrn+Hkir/s2NJkVMCAlXct8zlpsfy/zsp9ldEM12/0BsJhk4gErYSoZ iXamdka45VdUepnaw+E3Guos7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC1rFEIH cKgrZngk+CSfx9HWX2XDMB8GA1UdIwQYMBaAFKj8JZoQHquCbujL6ioL2lzez9ry MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkI4MC9CODY5ODA1RTEy M0IxMUVDOEExMzVGNDJDNEY5QUUwMi9xUHdsbWhBZXE0SnU2TXZxS2d2YVhON1Ay dkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FQd2xtaEFlcTRKdTZNdnFLZ3ZhWE43UDJ2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkI4MC9CODY5ODA1RTEyM0IxMUVDOEExMzVGNDJDNEY5QUUwMi9xUHdsbWhBZXE0 SnU2TXZxS2d2YVhON1AydkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtKlOjc0IoOIRPkiIDvK3TFFjODoQFdiBW47iS9tvXdR8mS9U9UGYt6WqZGUw ZSSDCXaeq1VxA79BMIbMjAS5VIBsZ7U9rVAdzilBpvk86MXgbDOYLCtTW5Fom1k/ kg7J/uf4XD+Chgcv+Td9ng5lqx9WzKX3qiq6OtUsLKJ4fkebPplUCeiRFtDAL9I4 d6WewB3C5UZsBYOKDzOACtZREoM0Xu0DmICjoL9W5BSnppDmEOIjy5FqIMdtT/Tk X7SEaD9KZme+/4W7FBY23jg7FI3phDKn7hctQ+3/tnI9XLKc6JKoSexxeQJsGNQu yAvnW1E73qdkJIoOxSzMlOuhXA== -----END CERTIFICATE-----Generated at Tue Sep 22 20:40:07 2026 by rpki-client