$ rpki-client -vvvf rpki.apnic.net/member_repository/A9198D20/3F7703C21CE911EA98897487C4F9AE02/Q8PPEXS9crQ0xpKLir6_BdYxP0A.mft File: Q8PPEXS9crQ0xpKLir6_BdYxP0A.mft (raw, json) Hash identifier: ySyj/G667BAdeHOrj/M9GrvJWK/QSQd09Yx9+gFjMa0= Subject key identifier: 31:B5:07:B7:7A:C4:D4:65:9F:9D:8A:3B:13:65:46:A0:F7:D8:78:BC Authority key identifier: 43:C3:CF:11:74:BD:72:B4:34:C6:92:8B:8A:BE:BF:05:D6:31:3F:40 Certificate issuer: /CN=A9198D20/serialNumber=43C3CF1174BD72B434C6928B8ABEBF05D6313F40 Certificate serial: 0CC8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q8PPEXS9crQ0xpKLir6_BdYxP0A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198D20/3F7703C21CE911EA98897487C4F9AE02/Q8PPEXS9crQ0xpKLir6_BdYxP0A.mft Manifest number: 0CBF Signing time: Sun 20 Sep 2026 18:29:30 +0000 Manifest this update: Sun 20 Sep 2026 18:29:30 +0000 Manifest next update: Sun 27 Sep 2026 18:29:30 +0000 Files and hashes: 1: Q8PPEXS9crQ0xpKLir6_BdYxP0A.crl (hash: xCCYAv2OK2lH2h6xyCkL23P6xXIC4OZX58AbJxxMfKw=) 2: EE985C561CEA11EA8B382C0BC4F9AE02.roa (hash: DJMUXwUzwbPlOgQB+UtvzG/7I16IrRMq3UM2uKL9s14=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198D20/3F7703C21CE911EA98897487C4F9AE02/Q8PPEXS9crQ0xpKLir6_BdYxP0A.crl rsync://rpki.apnic.net/member_repository/A9198D20/3F7703C21CE911EA98897487C4F9AE02/Q8PPEXS9crQ0xpKLir6_BdYxP0A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q8PPEXS9crQ0xpKLir6_BdYxP0A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 18:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3272 (0xcc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198D20, serialNumber=43C3CF1174BD72B434C6928B8ABEBF05D6313F40 Validity Not Before: Sep 20 18:29:30 2026 GMT Not After : Sep 27 18:29:30 2026 GMT Subject: CN=6ab0260a-c668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:16:dd:31:ee:cf:05:f7:fc:44:7d:ac:45:c3: 10:4d:77:40:53:f7:c9:7a:7a:c9:2a:19:80:18:33: ae:41:95:e4:01:09:ae:01:c3:16:26:a5:86:2d:72: 84:5b:b2:99:8e:e0:96:e8:98:fd:40:5b:d5:b2:a8: 6e:ea:2c:06:89:2c:71:19:e5:3f:50:ad:36:b8:90: 56:e2:c7:db:3e:21:f4:26:2d:92:bd:ca:dc:8a:9b: 43:26:2b:81:48:29:3f:b6:44:dd:53:11:6f:7f:f8: 35:06:5c:89:1b:e0:8c:cb:2f:76:41:57:46:63:71: b6:b1:86:e4:91:89:28:70:44:25:48:07:fb:0d:e1: 19:d5:00:56:7d:a7:b5:59:c6:d5:36:3b:0f:81:88: 1a:11:a9:b1:24:b9:c5:a7:2f:ea:a2:21:43:69:16: 89:3e:88:fc:4b:53:6b:de:74:45:45:5e:8e:0e:4e: 83:2e:62:9e:88:d1:38:cb:99:1f:8f:0c:39:91:78: 8d:e7:47:b5:89:e4:7c:7a:67:07:b5:ce:21:f9:44: 9d:ca:71:cc:3b:df:93:51:8f:7d:51:5a:e8:5d:dd: c5:0d:a0:39:bc:e9:58:c0:28:b3:fa:7d:74:15:87: 2c:ee:d5:5f:66:4d:82:f4:25:7f:ad:a7:1d:0b:37: dd:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:B5:07:B7:7A:C4:D4:65:9F:9D:8A:3B:13:65:46:A0:F7:D8:78:BC X509v3 Authority Key Identifier: keyid:43:C3:CF:11:74:BD:72:B4:34:C6:92:8B:8A:BE:BF:05:D6:31:3F:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198D20/3F7703C21CE911EA98897487C4F9AE02/Q8PPEXS9crQ0xpKLir6_BdYxP0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q8PPEXS9crQ0xpKLir6_BdYxP0A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198D20/3F7703C21CE911EA98897487C4F9AE02/Q8PPEXS9crQ0xpKLir6_BdYxP0A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:78:b5:c2:36:24:9a:e7:15:61:2f:ea:84:83:9c:d0:37:17: c7:27:b3:c3:3d:bf:44:be:73:50:dc:fe:1d:cb:58:4d:64:39: e8:67:f0:31:5d:c0:0c:e4:c7:05:44:10:7e:2d:6f:ca:b4:fd: 29:c7:a3:79:8b:01:81:ae:62:fb:17:5d:d0:b3:39:56:f5:0e: 6c:fc:19:be:fe:03:eb:76:c4:f2:6d:07:60:b8:7e:ec:59:9d: 3b:09:bc:c3:4a:aa:85:0a:1a:a7:52:fb:c6:81:59:e7:3a:35: 93:a2:1d:f4:c5:6b:e7:3d:21:ae:59:a7:48:41:c7:21:22:e7: c5:96:a8:89:b9:87:34:1b:72:2b:78:14:38:65:0b:64:99:77: 8b:a3:eb:3f:ef:1e:42:9e:b5:ec:1a:c4:30:cb:08:ae:7e:84: dc:b7:c2:ed:a8:b1:53:15:92:60:92:ca:10:a9:34:03:da:92: 83:2a:a1:19:27:28:58:d1:a8:9d:d4:d1:fa:12:03:10:d8:83: b9:f6:e5:e5:fe:2f:91:6e:99:e1:46:c6:56:94:35:ce:83:52: 84:19:a1:d1:a3:13:85:78:62:7b:f7:45:1b:2c:49:a5:80:3b: a2:a9:22:71:15:7d:64:df:71:d0:ce:75:9b:cd:75:e8:af:a4: 59:4d:81:6d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OThEMjAxMTAvBgNVBAUTKDQzQzNDRjExNzRCRDcyQjQzNEM2OTI4QjhBQkVCRjA1 RDYzMTNGNDAwHhcNMjYwOTIwMTgyOTMwWhcNMjYwOTI3MTgyOTMwWjAYMRYwFAYD VQQDEw02YWIwMjYwYS1jNjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArhbdMe7PBff8RH2sRcMQTXdAU/fJenrJKhmAGDOuQZXkAQmuAcMWJqWGLXKE W7KZjuCW6Jj9QFvVsqhu6iwGiSxxGeU/UK02uJBW4sfbPiH0Ji2SvcrciptDJiuB SCk/tkTdUxFvf/g1BlyJG+CMyy92QVdGY3G2sYbkkYkocEQlSAf7DeEZ1QBWfae1 WcbVNjsPgYgaEamxJLnFpy/qoiFDaRaJPoj8S1Nr3nRFRV6ODk6DLmKeiNE4y5kf jww5kXiN50e1ieR8emcHtc4h+USdynHMO9+TUY99UVroXd3FDaA5vOlYwCiz+n10 FYcs7tVfZk2C9CV/racdCzfdSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDG1B7d6 xNRln52KOxNlRqD32Hi8MB8GA1UdIwQYMBaAFEPDzxF0vXK0NMaSi4q+vwXWMT9A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OEQyMC8zRjc3MDNDMjFD RTkxMUVBOTg4OTc0ODdDNEY5QUUwMi9ROFBQRVhTOWNyUTB4cEtMaXI2X0JkWXhQ MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1E4UFBFWFM5Y3JRMHhwS0xpcjZfQmRZeFAwQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OEQyMC8zRjc3MDNDMjFDRTkxMUVBOTg4OTc0ODdDNEY5QUUwMi9ROFBQRVhTOWNy UTB4cEtMaXI2X0JkWXhQMEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgXi1wjYkmucVYS/qhIOc0DcXxyezwz2/RL5zUNz+HctYTWQ56GfwMV3ADOTH BUQQfi1vyrT9KcejeYsBga5i+xdd0LM5VvUObPwZvv4D63bE8m0HYLh+7FmdOwm8 w0qqhQoap1L7xoFZ5zo1k6Id9MVr5z0hrlmnSEHHISLnxZaoibmHNBtyK3gUOGUL ZJl3i6PrP+8eQp617BrEMMsIrn6E3LfC7aixUxWSYJLKEKk0A9qSgyqhGScoWNGo ndTR+hIDENiDufbl5f4vkW6Z4UbGVpQ1zoNShBmh0aMThXhie/dFGyxJpYA7oqki cRV9ZN9x0M51m8116K+kWU2BbQ== -----END CERTIFICATE-----Generated at Tue Sep 22 19:45:44 2026 by rpki-client