$ rpki-client -vvf rpki.apnic.net/member_repository/A9198D20/3F7703C21CE911EA98897487C4F9AE02/Q8PPEXS9crQ0xpKLir6_BdYxP0A.mft File: Q8PPEXS9crQ0xpKLir6_BdYxP0A.mft (raw, json) Hash identifier: IHTQhWTiINaxfPpYHn8ZQ9vTES8vTS1ML7gdNhbjc0g= Subject key identifier: 8E:F8:DF:07:06:E6:6E:EA:56:ED:F3:E2:CF:9B:C2:51:22:15:E3:85 Authority key identifier: 43:C3:CF:11:74:BD:72:B4:34:C6:92:8B:8A:BE:BF:05:D6:31:3F:40 Certificate issuer: /CN=A9198D20/serialNumber=43C3CF1174BD72B434C6928B8ABEBF05D6313F40 Certificate serial: 0C95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q8PPEXS9crQ0xpKLir6_BdYxP0A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198D20/3F7703C21CE911EA98897487C4F9AE02/Q8PPEXS9crQ0xpKLir6_BdYxP0A.mft Manifest number: 0C8C Signing time: Fri 12 Jun 2026 18:36:32 +0000 Manifest this update: Fri 12 Jun 2026 18:36:32 +0000 Manifest next update: Fri 19 Jun 2026 18:36:32 +0000 Files and hashes: 1: Q8PPEXS9crQ0xpKLir6_BdYxP0A.crl (hash: pSIZ4868Ru5/5crzU00jTpoSXRZVez047CnohBvVglQ=) 2: EE985C561CEA11EA8B382C0BC4F9AE02.roa (hash: DJMUXwUzwbPlOgQB+UtvzG/7I16IrRMq3UM2uKL9s14=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198D20/3F7703C21CE911EA98897487C4F9AE02/Q8PPEXS9crQ0xpKLir6_BdYxP0A.crl rsync://rpki.apnic.net/member_repository/A9198D20/3F7703C21CE911EA98897487C4F9AE02/Q8PPEXS9crQ0xpKLir6_BdYxP0A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q8PPEXS9crQ0xpKLir6_BdYxP0A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 18:36:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3221 (0xc95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198D20, serialNumber=43C3CF1174BD72B434C6928B8ABEBF05D6313F40 Validity Not Before: Jun 12 18:36:32 2026 GMT Not After : Jun 19 18:36:32 2026 GMT Subject: CN=6a2c51b0-dcaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8b:29:e8:2c:6a:be:67:5e:0c:9b:c9:0b:7f: 39:a7:cf:c3:33:9a:73:27:84:e1:b0:9f:b7:75:f9: 0a:80:30:0d:db:31:49:75:d6:e4:b3:34:30:41:b1: d8:56:d9:9f:81:d8:12:8c:b4:40:87:b9:7b:08:88: d6:2b:63:6e:43:56:b3:f5:64:9c:cb:8d:74:b1:59: 9f:bd:91:74:32:32:7d:6b:84:a8:2f:97:a3:ac:84: 6c:9e:d7:c7:70:c2:ca:19:e3:3f:14:3f:d8:98:96: 6c:d0:9e:83:9d:03:0a:27:a2:2e:40:47:6d:45:e3: 06:b7:e3:38:02:f2:96:41:f8:2e:6f:20:aa:84:25: dd:40:3f:23:67:c1:3a:ba:53:52:fe:84:2a:8c:68: 3b:f8:99:4d:2b:b1:f2:be:8a:41:39:a3:b9:b0:50: 2c:c1:ec:ae:c2:26:24:73:54:09:7b:94:eb:ef:78: d0:e9:01:9e:1c:6f:73:9a:e8:49:5a:bb:23:fa:2e: 9c:1e:a0:ee:15:15:2b:cb:f8:1b:eb:d9:8b:81:a0: 09:ba:d1:07:88:38:d0:9d:51:33:23:45:be:12:7e: 76:10:60:e8:d0:b6:28:20:ad:bb:ed:b6:f5:3f:be: 8e:6b:83:72:cd:8a:5f:cd:fb:9d:f8:66:9c:b6:a3: ab:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:F8:DF:07:06:E6:6E:EA:56:ED:F3:E2:CF:9B:C2:51:22:15:E3:85 X509v3 Authority Key Identifier: keyid:43:C3:CF:11:74:BD:72:B4:34:C6:92:8B:8A:BE:BF:05:D6:31:3F:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198D20/3F7703C21CE911EA98897487C4F9AE02/Q8PPEXS9crQ0xpKLir6_BdYxP0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q8PPEXS9crQ0xpKLir6_BdYxP0A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198D20/3F7703C21CE911EA98897487C4F9AE02/Q8PPEXS9crQ0xpKLir6_BdYxP0A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:f1:8e:9f:12:88:2e:e3:7a:84:ae:cd:57:e8:fa:07:f5:8d: 54:17:a6:57:e9:42:f7:9a:18:e0:ee:7f:3c:b8:61:dd:54:45: b3:88:e1:4f:24:c0:b6:ed:a3:4a:f5:7c:d9:a3:82:42:8d:37: e2:45:ff:4d:98:4d:ff:30:f3:18:0a:68:68:30:b8:e6:39:fb: 61:c4:c1:85:56:b5:3d:87:64:7a:4d:13:88:5e:a4:49:93:8d: 0c:0e:08:8a:10:bc:0a:d4:9a:80:de:80:f7:08:d2:58:a0:35: d7:0a:37:62:9e:6e:36:7d:7c:35:13:a7:8b:23:6a:7a:02:e8: 71:fa:c6:ca:75:44:83:dc:fd:79:9d:92:41:70:74:45:e7:93: 90:14:95:17:89:48:e3:c9:6e:31:9f:61:d0:fd:8d:fa:9a:5d: 26:19:c4:06:2e:44:f6:46:6e:db:b5:88:8b:c0:66:6a:40:7d: b3:50:16:97:49:00:04:fb:40:c2:12:a7:ca:ea:71:8d:96:8e: a8:65:1d:0f:30:c7:6c:d8:5a:d1:81:3d:a3:be:2f:6c:d2:5c: b9:41:8b:bd:d4:a2:81:f0:01:df:70:67:fa:22:9a:e9:4e:f8: 41:9b:e0:f1:eb:be:41:9b:41:11:94:d3:ec:b2:a5:ff:87:6b: 0c:42:de:52 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OThEMjAxMTAvBgNVBAUTKDQzQzNDRjExNzRCRDcyQjQzNEM2OTI4QjhBQkVCRjA1 RDYzMTNGNDAwHhcNMjYwNjEyMTgzNjMyWhcNMjYwNjE5MTgzNjMyWjAYMRYwFAYD VQQDEw02YTJjNTFiMC1kY2FmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtYsp6CxqvmdeDJvJC385p8/DM5pzJ4ThsJ+3dfkKgDAN2zFJddbkszQwQbHY VtmfgdgSjLRAh7l7CIjWK2NuQ1az9WScy410sVmfvZF0MjJ9a4SoL5ejrIRsntfH cMLKGeM/FD/YmJZs0J6DnQMKJ6IuQEdtReMGt+M4AvKWQfgubyCqhCXdQD8jZ8E6 ulNS/oQqjGg7+JlNK7HyvopBOaO5sFAsweyuwiYkc1QJe5Tr73jQ6QGeHG9zmuhJ Wrsj+i6cHqDuFRUry/gb69mLgaAJutEHiDjQnVEzI0W+En52EGDo0LYoIK277bb1 P76Oa4NyzYpfzfud+GactqOr/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI743wcG 5m7qVu3z4s+bwlEiFeOFMB8GA1UdIwQYMBaAFEPDzxF0vXK0NMaSi4q+vwXWMT9A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OEQyMC8zRjc3MDNDMjFD RTkxMUVBOTg4OTc0ODdDNEY5QUUwMi9ROFBQRVhTOWNyUTB4cEtMaXI2X0JkWXhQ MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1E4UFBFWFM5Y3JRMHhwS0xpcjZfQmRZeFAwQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OEQyMC8zRjc3MDNDMjFDRTkxMUVBOTg4OTc0ODdDNEY5QUUwMi9ROFBQRVhTOWNy UTB4cEtMaXI2X0JkWXhQMEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAH/GOnxKILuN6hK7NV+j6B/WNVBemV+lC95oY4O5/PLhh3VRFs4jhTyTAtu2j SvV82aOCQo034kX/TZhN/zDzGApoaDC45jn7YcTBhVa1PYdkek0TiF6kSZONDA4I ihC8CtSagN6A9wjSWKA11wo3Yp5uNn18NROniyNqegLocfrGynVEg9z9eZ2SQXB0 ReeTkBSVF4lI48luMZ9h0P2N+ppdJhnEBi5E9kZu27WIi8BmakB9s1AWl0kABPtA whKnyupxjZaOqGUdDzDHbNha0YE9o74vbNJcuUGLvdSigfAB33Bn+iKa6U74QZvg 8eu+QZtBEZTT7LKl/4drDELeUg== -----END CERTIFICATE-----Generated at Sat Jun 13 09:40:38 2026 by rpki-client