$ rpki-client -vvvf rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft File: QJmwCEN2qeBM7XxnirxoWN2fhRo.mft (raw, json) Hash identifier: sh5jqDjVkj7WkaIdDwc+efPSzcyYkhMHCZeY2of+X3Q= Subject key identifier: 6E:28:42:CD:BE:B6:15:6E:4A:11:16:27:0C:5B:DC:95:10:3E:8B:10 Authority key identifier: 40:99:B0:08:43:76:A9:E0:4C:ED:7C:67:8A:BC:68:58:DD:9F:85:1A Certificate issuer: /CN=A919BCD9/serialNumber=4099B0084376A9E04CED7C678ABC6858DD9F851A Certificate serial: 0D6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJmwCEN2qeBM7XxnirxoWN2fhRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft Manifest number: 0D59 Signing time: Sun 20 Sep 2026 17:59:16 +0000 Manifest this update: Sun 20 Sep 2026 17:59:15 +0000 Manifest next update: Sun 27 Sep 2026 17:59:15 +0000 Files and hashes: 1: QJmwCEN2qeBM7XxnirxoWN2fhRo.crl (hash: amSdxTn45SVD4NMtTS9jfN/KXOtR1jQFDvk/TwRIuTg=) 2: E4B59AA2FF8311E9B1B99628C4F9AE02.roa (hash: y4vcTjeolSMrmAigiZozXMraZgaOak5oYF52X7KfAMI=) 3: E56CD3E8FF8311E9B1B99628C4F9AE02.roa (hash: yk+S2an59M1qblQEC/oVwNcQBVVUiZw+ShOuw7y2Rac=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.crl rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJmwCEN2qeBM7XxnirxoWN2fhRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 17:59:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3437 (0xd6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919BCD9, serialNumber=4099B0084376A9E04CED7C678ABC6858DD9F851A Validity Not Before: Sep 20 17:59:15 2026 GMT Not After : Sep 27 17:59:15 2026 GMT Subject: CN=6ab01ef4-793f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:21:fd:3b:8e:1a:11:c1:53:af:6b:59:24:2a: 09:cf:c8:cd:12:bb:fa:d4:fc:c8:08:94:1f:cd:74: 50:24:df:1c:d9:3e:8a:20:8d:70:fb:d9:b8:f2:56: 9e:ba:32:63:82:c3:2b:f9:69:1c:43:0b:3b:b1:ce: 3a:7b:2f:e6:5b:b6:17:0a:84:cc:4d:41:39:ff:52: 57:51:14:5b:bc:64:ff:43:f0:1c:98:06:f1:2d:31: f8:77:3c:36:b6:7f:57:e8:82:db:e4:a3:36:28:a4: e9:b3:24:70:0e:22:3a:37:0a:46:fe:0d:8e:1d:5b: ba:42:1b:0e:98:46:c2:e6:6b:f1:3f:97:cf:e5:c6: e2:53:09:3e:07:c8:0b:02:fb:2e:97:74:a7:f7:5a: ce:d8:32:ec:ea:3d:d6:51:5a:60:b4:5c:74:92:89: 09:b0:5c:5a:81:e7:97:d6:04:7b:27:e4:9d:5a:a0: 5e:ae:eb:8c:bf:76:3b:e4:5c:f3:5a:3f:11:05:38: f9:db:06:f2:52:7d:12:b1:8b:54:48:7a:a5:49:8d: ab:e4:67:81:58:a7:7f:3f:a0:b6:e9:a5:24:6e:b3: 5b:48:d5:56:4d:09:83:fc:a1:14:cd:ef:e0:97:47: 8f:5d:0e:b9:64:04:11:96:e3:13:9a:0b:9c:5f:b6: 5f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:28:42:CD:BE:B6:15:6E:4A:11:16:27:0C:5B:DC:95:10:3E:8B:10 X509v3 Authority Key Identifier: keyid:40:99:B0:08:43:76:A9:E0:4C:ED:7C:67:8A:BC:68:58:DD:9F:85:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJmwCEN2qeBM7XxnirxoWN2fhRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:d3:ef:94:a1:4f:1c:60:79:dd:cd:d8:9b:d0:95:c9:90:3e: 3f:74:da:9c:26:95:ec:4a:a6:84:40:2c:1f:54:da:11:17:40: af:9e:a5:df:aa:f0:e5:d0:49:19:36:7e:35:d9:15:e4:fa:6b: de:26:de:0c:ad:4c:7e:58:74:5e:85:1c:ab:53:70:98:89:5c: a9:0e:54:1d:ad:70:e3:85:7d:84:e4:f3:40:4a:bb:eb:97:80: 43:d1:af:b5:11:a8:c5:58:df:6b:b8:61:ae:44:40:ed:7c:75: 14:98:3f:27:f1:d1:9c:c5:9d:43:01:01:53:bf:be:0e:76:5d: 6a:84:f2:f9:84:77:f4:af:91:69:74:44:b5:62:5a:05:bf:74: d1:3d:e7:2a:9f:59:41:8c:cf:72:5f:d4:f6:c8:15:80:15:77: 48:7f:e5:b9:ad:3b:02:4d:07:f3:a6:81:33:89:81:39:63:3f: ff:42:be:a1:97:7a:be:be:0c:13:5d:76:60:9c:e1:b5:24:19: 32:bf:bb:19:09:a0:01:65:1a:bd:59:58:75:41:87:ae:7b:14: 9a:a7:68:a0:07:6d:58:90:a9:7c:d0:38:ed:e5:ef:75:19:8c: da:a5:17:43:35:c1:dc:18:ea:e8:9c:08:2e:d0:c0:29:a6:9e: 4d:43:f6:b4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUJDRDkxMTAvBgNVBAUTKDQwOTlCMDA4NDM3NkE5RTA0Q0VEN0M2NzhBQkM2ODU4 REQ5Rjg1MUEwHhcNMjYwOTIwMTc1OTE1WhcNMjYwOTI3MTc1OTE1WjAYMRYwFAYD VQQDEw02YWIwMWVmNC03OTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAryH9O44aEcFTr2tZJCoJz8jNErv61PzICJQfzXRQJN8c2T6KII1w+9m48lae ujJjgsMr+WkcQws7sc46ey/mW7YXCoTMTUE5/1JXURRbvGT/Q/AcmAbxLTH4dzw2 tn9X6ILb5KM2KKTpsyRwDiI6NwpG/g2OHVu6QhsOmEbC5mvxP5fP5cbiUwk+B8gL Avsul3Sn91rO2DLs6j3WUVpgtFx0kokJsFxageeX1gR7J+SdWqBeruuMv3Y75Fzz Wj8RBTj52wbyUn0SsYtUSHqlSY2r5GeBWKd/P6C26aUkbrNbSNVWTQmD/KEUze/g l0ePXQ65ZAQRluMTmgucX7Zf4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG4oQs2+ thVuShEWJwxb3JUQPosQMB8GA1UdIwQYMBaAFECZsAhDdqngTO18Z4q8aFjdn4Ua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QkNEOS8xN0I3OEYxNkZG ODIxMUU5QjQwMkZDMjRDNEY5QUUwMi9RSm13Q0VOMnFlQk03WHhuaXJ4b1dOMmZo Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FKbXdDRU4ycWVCTTdYeG5pcnhvV04yZmhSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QkNEOS8xN0I3OEYxNkZGODIxMUU5QjQwMkZDMjRDNEY5QUUwMi9RSm13Q0VOMnFl Qk03WHhuaXJ4b1dOMmZoUm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAyNPvlKFPHGB53c3Ym9CVyZA+P3TanCaV7EqmhEAsH1TaERdAr56l36rw5dBJ GTZ+NdkV5Ppr3ibeDK1Mflh0XoUcq1NwmIlcqQ5UHa1w44V9hOTzQEq765eAQ9Gv tRGoxVjfa7hhrkRA7Xx1FJg/J/HRnMWdQwEBU7++DnZdaoTy+YR39K+RaXREtWJa Bb900T3nKp9ZQYzPcl/U9sgVgBV3SH/lua07Ak0H86aBM4mBOWM//0K+oZd6vr4M E112YJzhtSQZMr+7GQmgAWUavVlYdUGHrnsUmqdooAdtWJCpfNA47eXvdRmM2qUX QzXB3Bjq6JwILtDAKaaeTUP2tA== -----END CERTIFICATE-----Generated at Mon Sep 21 23:32:53 2026 by rpki-client