$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft File: Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft (raw, json) Hash identifier: yJkMj1R36Q+M1thlBEcUowEkGK7q5WW7bW5HBTYhG6Y= Subject key identifier: BE:3F:76:39:0E:BA:E8:2A:CF:6A:7B:7A:0C:1E:8B:DA:4A:30:F0:67 Authority key identifier: 43:F7:42:3F:93:D6:BA:09:69:40:59:FB:23:DE:F8:52:8D:26:49:9D Certificate issuer: /CN=A9186D9F/serialNumber=43F7423F93D6BA09694059FB23DEF8528D26499D Certificate serial: 01BB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q_dCP5PWuglpQFn7I974Uo0mSZ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft Manifest number: 01AC Signing time: Wed 23 Sep 2026 03:55:38 +0000 Manifest this update: Wed 23 Sep 2026 03:55:37 +0000 Manifest next update: Wed 30 Sep 2026 03:55:37 +0000 Files and hashes: 1: Q_dCP5PWuglpQFn7I974Uo0mSZ0.crl (hash: Dbcc8Zl72AMQRl13i0fEKGJaYlDD6opHll2UePgPZI4=) 2: 17EA0C7A38DF11EF8EEDB25EC4F9AE02.roa (hash: /XTyxqSYUJyaevZitv5Zo/nsUreDwOBj39YjFuaF4Dg=) 3: A63A2DFA2F5411EF9A12027FC4F9AE02.roa (hash: vL9CnB4VhNfvCGfjKTpVpyZ3hX+MBOGWCdcUnoltMFE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.crl rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q_dCP5PWuglpQFn7I974Uo0mSZ0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 03:55:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 443 (0x1bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186D9F, serialNumber=43F7423F93D6BA09694059FB23DEF8528D26499D Validity Not Before: Sep 23 03:55:37 2026 GMT Not After : Sep 30 03:55:37 2026 GMT Subject: CN=6ab34db9-825a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:50:f0:c6:a3:6d:fd:76:ff:d1:0c:e9:d6:18: ab:77:29:1b:ab:19:43:34:32:e7:40:c4:a2:82:ae: a6:41:dc:ab:e8:34:5e:b2:bb:98:92:5a:c0:91:ab: 39:79:17:5d:49:d5:2e:f9:36:f2:53:e9:02:00:93: 20:f8:d7:32:2b:6e:48:a4:78:f0:2e:09:2f:f4:a9: f6:66:ed:eb:a4:d6:07:55:56:5e:b9:8d:d4:82:69: a4:9f:09:3d:ef:82:6e:3a:5a:2d:d8:a7:19:89:0f: fd:93:6b:28:1b:2e:34:86:17:c9:c0:29:ba:95:85: e9:d2:99:cc:d4:90:18:d4:1e:26:0b:df:92:09:4e: 70:d0:97:f0:02:44:66:e4:cc:be:13:aa:70:30:bc: b8:f6:76:43:4d:22:05:ed:ee:f2:bc:08:9e:65:1d: fb:8f:b0:ac:9f:ee:73:36:09:ff:14:5f:4f:6b:4e: ce:e9:f9:00:2c:d5:91:3f:83:b6:c3:41:5d:52:3e: d0:71:b5:81:0f:97:c9:2b:c2:03:61:1d:76:44:3d: a6:cc:2a:13:d5:03:dd:90:88:92:79:57:8a:9b:4a: 57:14:cb:30:b1:f1:4b:0a:70:a6:96:74:0c:56:d4: a0:db:22:3b:fe:ec:cd:eb:ff:f0:62:0b:2e:3f:20: a6:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:3F:76:39:0E:BA:E8:2A:CF:6A:7B:7A:0C:1E:8B:DA:4A:30:F0:67 X509v3 Authority Key Identifier: keyid:43:F7:42:3F:93:D6:BA:09:69:40:59:FB:23:DE:F8:52:8D:26:49:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q_dCP5PWuglpQFn7I974Uo0mSZ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:80:86:8b:40:bd:90:3f:b3:4a:b7:76:4b:69:7b:93:3d:d3: 8b:7a:87:74:67:3f:8b:f8:64:a1:94:5d:26:26:fc:08:05:e3: f2:32:a2:80:1e:52:16:9c:2f:67:0c:49:b7:e8:f6:dc:a7:3a: a4:47:fc:c8:22:35:bc:16:75:c6:ee:35:67:04:90:5e:b6:39: 12:a5:a9:2a:08:dc:e3:52:d2:b5:66:5b:86:5b:6b:fb:5d:71: ed:36:82:7f:83:d5:b9:47:cb:76:e3:ee:83:dd:31:4f:3a:19: 69:05:9b:f0:64:09:c5:47:30:c5:b7:36:23:6f:df:ff:66:8a: 09:ef:6c:f2:54:d6:eb:2a:be:79:69:36:d1:c8:99:1e:4c:ec: 37:0b:11:3c:58:b9:88:62:f6:46:a2:6c:04:04:e1:6e:c1:be: 92:24:81:79:4e:9a:d9:4a:03:f0:98:ff:61:da:86:b7:c9:80: ea:2f:10:55:0a:48:70:15:84:39:32:8f:d0:e3:82:d5:a1:db: 27:40:dd:70:b6:f9:4c:7f:85:f5:61:16:da:c7:17:c9:a0:42: 5e:39:e9:a7:44:16:fc:95:10:ae:98:6b:0b:9f:9f:96:5e:3c: 8a:9f:b7:cd:dc:f0:cd:50:67:ae:20:0e:45:0e:98:9a:47:2a: d0:98:15:91 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZEOUYxMTAvBgNVBAUTKDQzRjc0MjNGOTNENkJBMDk2OTQwNTlGQjIzREVGODUy OEQyNjQ5OUQwHhcNMjYwOTIzMDM1NTM3WhcNMjYwOTMwMDM1NTM3WjAYMRYwFAYD VQQDEw02YWIzNGRiOS04MjVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAilDwxqNt/Xb/0Qzp1hirdykbqxlDNDLnQMSigq6mQdyr6DResruYklrAkas5 eRddSdUu+TbyU+kCAJMg+NcyK25IpHjwLgkv9Kn2Zu3rpNYHVVZeuY3Ugmmknwk9 74JuOlot2KcZiQ/9k2soGy40hhfJwCm6lYXp0pnM1JAY1B4mC9+SCU5w0JfwAkRm 5My+E6pwMLy49nZDTSIF7e7yvAieZR37j7Csn+5zNgn/FF9Pa07O6fkALNWRP4O2 w0FdUj7QcbWBD5fJK8IDYR12RD2mzCoT1QPdkIiSeVeKm0pXFMswsfFLCnCmlnQM VtSg2yI7/uzN6//wYgsuPyCmSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL4/djkO uugqz2p7egwei9pKMPBnMB8GA1UdIwQYMBaAFEP3Qj+T1roJaUBZ+yPe+FKNJkmd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkQ5Ri9BOTM2RTQ0MDJF MDQxMUVGODZGMjlENzlDNEY5QUUwMi9RX2RDUDVQV3VnbHBRRm43STk3NFVvMG1T WjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FfZENQNVBXdWdscFFGbjdJOTc0VW8wbVNaMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkQ5Ri9BOTM2RTQ0MDJFMDQxMUVGODZGMjlENzlDNEY5QUUwMi9RX2RDUDVQV3Vn bHBRRm43STk3NFVvMG1TWjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoICGi0C9kD+zSrd2S2l7kz3Ti3qHdGc/i/hkoZRdJib8CAXj8jKigB5SFpwv ZwxJt+j23Kc6pEf8yCI1vBZ1xu41ZwSQXrY5EqWpKgjc41LStWZbhltr+11x7TaC f4PVuUfLduPug90xTzoZaQWb8GQJxUcwxbc2I2/f/2aKCe9s8lTW6yq+eWk20ciZ HkzsNwsRPFi5iGL2RqJsBAThbsG+kiSBeU6a2UoD8Jj/YdqGt8mA6i8QVQpIcBWE OTKP0OOC1aHbJ0DdcLb5TH+F9WEW2scXyaBCXjnpp0QW/JUQrphrC5+fll48ip+3 zdzwzVBnriAORQ6Ymkcq0JgVkQ== -----END CERTIFICATE-----Generated at Thu Sep 24 09:13:55 2026 by rpki-client