$ rpki-client -vvvf rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.mft File: qpCd6zVb4xTwVTIZQw0JrOLY53E.mft (raw, json) Hash identifier: 8UEtnwc8NpGFLii1+n8Gy84LGY8Ez9M7Ae7hf7ak3wU= Subject key identifier: F2:64:6A:94:7A:A0:23:12:4F:B5:12:54:CD:4F:6B:CC:29:58:99:B7 Authority key identifier: AA:90:9D:EB:35:5B:E3:14:F0:55:32:19:43:0D:09:AC:E2:D8:E7:71 Certificate issuer: /CN=A9188F72/serialNumber=AA909DEB355BE314F0553219430D09ACE2D8E771 Certificate serial: 0123 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpCd6zVb4xTwVTIZQw0JrOLY53E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.mft Manifest number: 011A Signing time: Mon 21 Sep 2026 05:57:21 +0000 Manifest this update: Mon 21 Sep 2026 05:57:21 +0000 Manifest next update: Mon 28 Sep 2026 05:57:21 +0000 Files and hashes: 1: qpCd6zVb4xTwVTIZQw0JrOLY53E.crl (hash: 7inZ4rs+ONWW7rMgHgYo2PUkHM3/7kPAM5S8t2buwx0=) 2: CDD9D46EA82511F0A1B4386EC4F9AE02.roa (hash: /fZtQO9WFWt4xEmvAMiAEgk560qzFG36sx+TD4RIiz4=) 3: DC02E120A82511F0919E5F6EC4F9AE02.roa (hash: nFFjss0HOe9zjxoy2QI4KkvK/22dVhrCtwgvb/muMK4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.crl rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpCd6zVb4xTwVTIZQw0JrOLY53E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 05:57:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 291 (0x123) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188F72, serialNumber=AA909DEB355BE314F0553219430D09ACE2D8E771 Validity Not Before: Sep 21 05:57:21 2026 GMT Not After : Sep 28 05:57:21 2026 GMT Subject: CN=6ab0c741-47d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:cc:4b:97:ee:7d:87:d7:ad:c0:4a:ac:38:65: a7:5e:d5:2c:36:0e:a2:bb:4e:53:81:30:22:0d:5a: 2d:32:93:3e:7b:49:58:c3:c7:1d:e9:b3:1c:d0:41: d9:3a:01:26:a0:64:df:ee:e1:b0:7c:7c:0d:bc:98: c4:2d:80:b1:4f:9c:fb:8e:6a:59:fa:0b:80:7f:1f: de:7a:0e:a2:e3:b1:75:5e:cb:ce:78:98:e5:f6:e5: e8:ea:15:b8:90:2c:b9:39:4e:54:52:b4:53:15:1b: 96:6d:22:8d:5e:52:b8:3d:5d:23:1b:5c:6b:a8:a3: a5:6d:f4:f6:56:9e:61:35:c0:f6:7c:8c:35:4b:17: 62:1b:dc:d1:17:62:f4:1a:d5:54:15:60:b1:66:48: 77:9f:41:3e:e4:27:9b:7c:31:cf:1f:fe:74:cd:3f: dd:f7:5e:ec:a0:0d:05:cc:7e:50:21:ab:f4:6f:b0: cb:ba:51:94:05:b7:71:f2:1e:c8:19:38:1f:9f:9a: e1:89:6a:47:05:9d:33:0e:e9:1e:a3:47:51:7a:c7: a8:29:c2:3b:2b:8f:fc:12:db:f6:b1:9e:0e:15:a3: 57:84:f2:e7:d0:f3:bb:4a:92:1c:24:fc:8f:c0:18: aa:8c:ce:65:e4:40:a9:15:8b:c5:79:12:6f:4d:c1: 9f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:64:6A:94:7A:A0:23:12:4F:B5:12:54:CD:4F:6B:CC:29:58:99:B7 X509v3 Authority Key Identifier: keyid:AA:90:9D:EB:35:5B:E3:14:F0:55:32:19:43:0D:09:AC:E2:D8:E7:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpCd6zVb4xTwVTIZQw0JrOLY53E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:d4:c0:99:66:87:3e:80:a1:8e:45:03:0f:ad:d0:ed:a8:92: c9:21:22:85:f9:d5:c4:c8:83:39:89:6b:a4:96:35:32:52:7c: 3d:04:32:5d:bb:fe:54:71:d7:af:ef:01:a9:c2:97:5a:59:a8: 17:45:50:86:12:db:e7:90:c1:2f:4e:26:54:33:5d:40:07:92: 60:f2:76:2f:1d:ae:27:a4:ff:1e:19:92:cf:ff:52:79:10:e3: 9a:44:d7:3a:12:f1:c0:b3:f6:18:35:fc:62:8c:aa:cd:e0:12: 06:65:97:5d:97:82:9c:38:55:b1:c2:1d:5a:05:66:4f:b1:60: 8b:44:08:6c:70:32:f0:55:20:4b:0d:01:0c:44:b6:28:17:d2: 06:f2:58:24:ca:2b:82:3b:9c:80:f0:fc:80:ee:7a:62:48:b4: 89:18:5a:07:ab:4f:c7:7a:4a:8a:5d:13:da:1f:f1:22:e8:60: 57:60:e4:2d:27:50:77:26:0d:84:de:1b:3c:1a:5e:1c:0a:f0: d9:1d:2a:0e:b9:1e:6c:d4:a2:7f:ad:a8:e9:07:ba:ac:b5:be: 10:c9:e4:23:ba:dd:0d:51:81:00:3e:32:b7:0e:21:59:6e:c9: 56:fb:3a:ca:b0:b6:97:8b:2e:59:a8:3f:d0:3c:05:67:63:e6: f4:e1:fd:31 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhGNzIxMTAvBgNVBAUTKEFBOTA5REVCMzU1QkUzMTRGMDU1MzIxOTQzMEQwOUFD RTJEOEU3NzEwHhcNMjYwOTIxMDU1NzIxWhcNMjYwOTI4MDU1NzIxWjAYMRYwFAYD VQQDEw02YWIwYzc0MS00N2Q4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArsxLl+59h9etwEqsOGWnXtUsNg6iu05TgTAiDVotMpM+e0lYw8cd6bMc0EHZ OgEmoGTf7uGwfHwNvJjELYCxT5z7jmpZ+guAfx/eeg6i47F1XsvOeJjl9uXo6hW4 kCy5OU5UUrRTFRuWbSKNXlK4PV0jG1xrqKOlbfT2Vp5hNcD2fIw1SxdiG9zRF2L0 GtVUFWCxZkh3n0E+5CebfDHPH/50zT/d917soA0FzH5QIav0b7DLulGUBbdx8h7I GTgfn5rhiWpHBZ0zDukeo0dReseoKcI7K4/8Etv2sZ4OFaNXhPLn0PO7SpIcJPyP wBiqjM5l5ECpFYvFeRJvTcGfxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPJkapR6 oCMST7USVM1Pa8wpWJm3MB8GA1UdIwQYMBaAFKqQnes1W+MU8FUyGUMNCazi2Odx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEY3Mi9DQUFGMEQ0QzBF MkMxMUYwOEYxRDY5ODFDNEY5QUUwMi9xcENkNnpWYjR4VHdWVElaUXcwSnJPTFk1 M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FwQ2Q2elZiNHhUd1ZUSVpRdzBKck9MWTUzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OEY3Mi9DQUFGMEQ0QzBFMkMxMUYwOEYxRDY5ODFDNEY5QUUwMi9xcENkNnpWYjR4 VHdWVElaUXcwSnJPTFk1M0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFtTAmWaHPoChjkUDD63Q7aiSySEihfnVxMiDOYlrpJY1MlJ8PQQyXbv+VHHX r+8BqcKXWlmoF0VQhhLb55DBL04mVDNdQAeSYPJ2Lx2uJ6T/HhmSz/9SeRDjmkTX OhLxwLP2GDX8YoyqzeASBmWXXZeCnDhVscIdWgVmT7Fgi0QIbHAy8FUgSw0BDES2 KBfSBvJYJMorgjucgPD8gO56Yki0iRhaB6tPx3pKil0T2h/xIuhgV2DkLSdQdyYN hN4bPBpeHArw2R0qDrkebNSif62o6Qe6rLW+EMnkI7rdDVGBAD4ytw4hWW7JVvs6 yrC2l4suWag/0DwFZ2Pm9OH9MQ== -----END CERTIFICATE-----Generated at Tue Sep 22 19:09:18 2026 by rpki-client