$ rpki-client -vvvf rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.mft File: QL0lotYDGHPlXfzdrTpI97z4jIs.mft (raw, json) Hash identifier: 1We7RGFLtllpHlj3bns74rmOokGQ5dM8IW7YCVvFD0U= Subject key identifier: 1C:67:EA:91:BA:09:0F:30:44:CA:65:7D:58:6F:D9:D1:24:F5:10:D4 Authority key identifier: 40:BD:25:A2:D6:03:18:73:E5:5D:FC:DD:AD:3A:48:F7:BC:F8:8C:8B Certificate issuer: /CN=A9194A58/serialNumber=40BD25A2D6031873E55DFCDDAD3A48F7BCF88C8B Certificate serial: 193E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QL0lotYDGHPlXfzdrTpI97z4jIs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.mft Manifest number: 192F Signing time: Tue 22 Sep 2026 16:22:25 +0000 Manifest this update: Tue 22 Sep 2026 16:22:24 +0000 Manifest next update: Tue 29 Sep 2026 16:22:24 +0000 Files and hashes: 1: QL0lotYDGHPlXfzdrTpI97z4jIs.crl (hash: yuMbi028R4sVJgKA/Hzy6UCLmMa7iyYfVkxMgjvl4Bk=) 2: 42D0E9A4AFD911E7B8A7E96CC4F9AE02.roa (hash: eXgRHsIVRc9u6kHMAWlAPva+g61Bb19zupw4KQEne+U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.crl rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QL0lotYDGHPlXfzdrTpI97z4jIs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 16:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6462 (0x193e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194A58, serialNumber=40BD25A2D6031873E55DFCDDAD3A48F7BCF88C8B Validity Not Before: Sep 22 16:22:24 2026 GMT Not After : Sep 29 16:22:24 2026 GMT Subject: CN=6ab2ab40-1382 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:9b:47:35:9c:c4:27:8e:f6:38:a6:c6:0b:ed: b8:3b:7f:9e:89:2c:02:2d:f4:e0:c6:22:84:ad:0c: 1e:cf:61:f5:29:ab:9f:d1:85:cd:96:a8:0f:5a:0e: 15:15:ce:c0:16:27:68:56:7e:c3:f0:e7:fd:21:a9: c1:d8:98:98:53:5f:a7:e9:9a:39:a6:34:f1:78:06: 28:72:cd:33:3c:65:17:c6:7e:e7:57:ee:bc:fc:47: 0e:51:16:a5:32:aa:30:65:a0:4b:c6:79:c8:ce:44: 7c:4f:33:be:2d:ba:69:dd:9a:bb:03:81:94:9d:93: 89:ab:02:cf:2a:0f:d2:36:54:16:aa:0c:37:03:70: d7:42:6f:a1:25:a9:b5:00:c1:1e:b1:81:d8:3a:0f: 4a:f3:09:c2:d9:ae:af:9b:3e:ef:35:58:c8:67:23: 92:ed:e1:f0:37:98:7f:18:47:eb:99:7a:03:1c:0f: a7:5f:57:9e:c4:f6:d0:9b:50:d7:b0:19:b3:70:66: 2b:9f:16:00:9b:85:30:f6:90:03:da:5f:8f:68:43: 2e:09:89:00:9d:72:df:95:13:f1:34:a9:9b:11:54: c8:08:59:8e:9d:13:10:91:fc:f1:5b:44:2f:56:5b: cb:2a:7f:8d:6d:62:cb:0f:ed:b6:c3:a5:15:62:92: 9f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:67:EA:91:BA:09:0F:30:44:CA:65:7D:58:6F:D9:D1:24:F5:10:D4 X509v3 Authority Key Identifier: keyid:40:BD:25:A2:D6:03:18:73:E5:5D:FC:DD:AD:3A:48:F7:BC:F8:8C:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QL0lotYDGHPlXfzdrTpI97z4jIs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:47:19:4a:fb:d3:3f:63:62:93:88:8f:b7:f1:bb:c1:20:74: b2:32:a4:76:ee:6c:db:c6:2d:1f:9e:33:4f:a7:c8:c0:f4:4f: 17:14:7d:08:5f:14:84:45:57:0e:8e:65:de:38:7b:53:bf:55: 03:1f:bd:48:66:de:de:92:41:56:ec:b6:dc:ab:e8:cb:67:29: 37:ad:ac:c6:4d:51:fc:02:fd:a1:af:bf:01:51:fb:88:65:44: 7a:a3:d5:a0:26:2a:79:26:cf:c1:e6:0a:e6:7e:70:84:a5:f8: a8:d4:c1:2d:7a:14:fd:04:b7:e6:3b:74:a3:f6:46:09:2f:61: e1:0b:16:c2:66:91:8e:cf:45:53:4f:4c:d8:51:3b:41:78:40: 45:d8:ac:dd:0f:9d:7b:21:19:46:8b:fe:27:ac:38:2f:da:1e: 44:7f:f0:61:ae:dc:1c:cc:db:5b:5d:03:db:5a:f2:8e:1e:31: 7f:3c:00:a5:49:fb:62:a6:c7:6f:96:88:20:76:af:7b:f6:56: 68:2c:b1:88:26:a7:3a:ef:1b:78:e9:89:f5:3d:34:56:d9:6f: db:8a:9d:27:4f:f0:97:37:b6:9c:ad:54:c7:7c:8d:ef:f9:c9: 4c:f4:f3:5a:41:6b:3e:46:ae:ad:60:27:c3:77:b6:68:ca:c8: 5f:b0:4d:91 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGT4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRBNTgxMTAvBgNVBAUTKDQwQkQyNUEyRDYwMzE4NzNFNTVERkNEREFEM0E0OEY3 QkNGODhDOEIwHhcNMjYwOTIyMTYyMjI0WhcNMjYwOTI5MTYyMjI0WjAYMRYwFAYD VQQDEw02YWIyYWI0MC0xMzgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzJtHNZzEJ472OKbGC+24O3+eiSwCLfTgxiKErQwez2H1Kauf0YXNlqgPWg4V Fc7AFidoVn7D8Of9IanB2JiYU1+n6Zo5pjTxeAYocs0zPGUXxn7nV+68/EcOURal MqowZaBLxnnIzkR8TzO+Lbpp3Zq7A4GUnZOJqwLPKg/SNlQWqgw3A3DXQm+hJam1 AMEesYHYOg9K8wnC2a6vmz7vNVjIZyOS7eHwN5h/GEfrmXoDHA+nX1eexPbQm1DX sBmzcGYrnxYAm4Uw9pAD2l+PaEMuCYkAnXLflRPxNKmbEVTICFmOnRMQkfzxW0Qv VlvLKn+NbWLLD+22w6UVYpKf6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBxn6pG6 CQ8wRMplfVhv2dEk9RDUMB8GA1UdIwQYMBaAFEC9JaLWAxhz5V383a06SPe8+IyL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEE1OC80RUFDRTQ5MEFF NDMxMUU3ODgxQzY0MTZDNEY5QUUwMi9RTDBsb3RZREdIUGxYZnpkclRwSTk3ejRq SXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FMMGxvdFlER0hQbFhmemRyVHBJOTd6NGpJcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEE1OC80RUFDRTQ5MEFFNDMxMUU3ODgxQzY0MTZDNEY5QUUwMi9RTDBsb3RZREdI UGxYZnpkclRwSTk3ejRqSXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAU0cZSvvTP2Nik4iPt/G7wSB0sjKkdu5s28YtH54zT6fIwPRPFxR9CF8UhEVX Do5l3jh7U79VAx+9SGbe3pJBVuy23Kvoy2cpN62sxk1R/AL9oa+/AVH7iGVEeqPV oCYqeSbPweYK5n5whKX4qNTBLXoU/QS35jt0o/ZGCS9h4QsWwmaRjs9FU09M2FE7 QXhARdis3Q+deyEZRov+J6w4L9oeRH/wYa7cHMzbW10D21ryjh4xfzwApUn7YqbH b5aIIHave/ZWaCyxiCanOu8beOmJ9T00Vtlv24qdJ0/wlze2nK1Ux3yN7/nJTPTz WkFrPkaurWAnw3e2aMrIX7BNkQ== -----END CERTIFICATE-----Generated at Thu Sep 24 10:14:00 2026 by rpki-client