$ rpki-client -vvvf rpki.apnic.net/member_repository/A912C3BD/1A8108F2D97F11EB9E13594FC4F9AE02/RqE3XwEj9TNI8MT5A02QQP7p08o.mft File: RqE3XwEj9TNI8MT5A02QQP7p08o.mft (raw, json) Hash identifier: mSL3veUBiveZxczcZsTbEVZlh0vOKfgQeEsMm/k2aGw= Subject key identifier: AA:DD:23:C8:03:CB:23:1E:77:E7:2A:AB:B8:96:1B:2E:B1:4F:98:A8 Authority key identifier: 46:A1:37:5F:01:23:F5:33:48:F0:C4:F9:03:4D:90:40:FE:E9:D3:CA Certificate issuer: /CN=A912C3BD/serialNumber=46A1375F0123F53348F0C4F9034D9040FEE9D3CA Certificate serial: 0693 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RqE3XwEj9TNI8MT5A02QQP7p08o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C3BD/1A8108F2D97F11EB9E13594FC4F9AE02/RqE3XwEj9TNI8MT5A02QQP7p08o.mft Manifest number: 0687 Signing time: Tue 22 Sep 2026 22:13:43 +0000 Manifest this update: Tue 22 Sep 2026 22:13:43 +0000 Manifest next update: Tue 29 Sep 2026 22:13:43 +0000 Files and hashes: 1: RqE3XwEj9TNI8MT5A02QQP7p08o.crl (hash: JsqB+DWZVOYpprAYn7kyXG45zXN1QhOFFh2GZFJRspU=) 2: 6079B40AD98211EBAA210852C4F9AE02.roa (hash: WcftFva1gcea7hmA7H8a9I1dKGWiCBj9X3AHkNvPmMU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C3BD/1A8108F2D97F11EB9E13594FC4F9AE02/RqE3XwEj9TNI8MT5A02QQP7p08o.crl rsync://rpki.apnic.net/member_repository/A912C3BD/1A8108F2D97F11EB9E13594FC4F9AE02/RqE3XwEj9TNI8MT5A02QQP7p08o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RqE3XwEj9TNI8MT5A02QQP7p08o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 22:13:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1683 (0x693) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C3BD, serialNumber=46A1375F0123F53348F0C4F9034D9040FEE9D3CA Validity Not Before: Sep 22 22:13:43 2026 GMT Not After : Sep 29 22:13:43 2026 GMT Subject: CN=6ab2fd97-8fbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:21:d8:2c:70:f6:f1:bf:b4:55:f1:b7:e5:0b: 03:70:f0:49:51:a6:46:12:3d:bc:3e:52:5e:40:7c: 76:50:2f:70:d7:0e:fe:24:9f:e9:9d:37:ea:1b:89: 8e:1b:19:61:d3:43:bb:aa:6d:48:90:8d:12:5c:38: c7:1a:6a:f5:f6:a9:bf:f9:3f:d9:09:d1:18:d8:18: f6:bb:6f:06:93:ba:d8:f6:e2:fb:8d:8f:c3:7e:d9: c5:f7:ae:49:1a:71:fc:10:bc:6a:0f:3d:b4:01:02: 4d:f2:a9:ed:66:b0:a8:7a:df:32:f7:8d:6b:04:ba: 70:fa:69:e9:c3:f4:93:34:19:68:39:af:9c:f1:f7: 79:50:8e:65:b0:5d:a9:77:e8:3f:e5:93:f2:c8:58: 82:f1:41:e0:94:42:e8:d9:77:1f:fc:49:ed:95:3d: 1c:1b:cd:8b:cc:d5:6b:02:9d:0d:2f:5e:4a:49:24: c7:46:98:59:fb:34:1f:6f:78:07:8a:00:1b:c4:a7: 8c:8f:ad:28:b7:4f:9c:08:9a:cb:12:dd:71:37:39: 30:c4:ee:ee:95:ea:3f:20:9b:c5:5a:bc:4d:cb:db: 9c:c6:76:84:8a:21:29:8c:e2:45:98:31:40:b9:9e: 43:d4:7f:c6:69:68:29:f9:46:35:4f:2c:3f:92:cb: 5c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:DD:23:C8:03:CB:23:1E:77:E7:2A:AB:B8:96:1B:2E:B1:4F:98:A8 X509v3 Authority Key Identifier: keyid:46:A1:37:5F:01:23:F5:33:48:F0:C4:F9:03:4D:90:40:FE:E9:D3:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C3BD/1A8108F2D97F11EB9E13594FC4F9AE02/RqE3XwEj9TNI8MT5A02QQP7p08o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RqE3XwEj9TNI8MT5A02QQP7p08o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C3BD/1A8108F2D97F11EB9E13594FC4F9AE02/RqE3XwEj9TNI8MT5A02QQP7p08o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:3b:8a:47:7d:3c:ee:0f:3d:fe:53:d3:3e:23:71:66:ff:6e: f8:14:4f:71:3a:dc:f4:45:2c:3c:e5:47:36:33:14:93:f6:51: e3:44:aa:eb:c4:c0:e3:33:10:4d:52:ae:d6:3f:b6:ca:43:c6: e2:6f:6a:4e:4d:c1:85:18:7d:bf:b7:53:c6:db:db:d5:66:dd: 69:ee:d8:e5:9c:ad:ce:40:fd:85:7c:f4:ec:bc:62:1b:e7:84: ab:3d:3b:f4:3b:89:2b:78:9d:8a:40:89:26:42:d5:5c:b6:7e: c7:2f:d3:d0:da:a3:59:3c:2e:e3:7e:d2:8b:dd:1a:51:9c:b0: e9:f5:10:53:dd:34:9a:5a:84:13:56:41:2b:f2:d3:82:35:02: 0f:cf:a9:42:99:de:46:89:2c:4e:cf:8a:93:b5:dc:78:b9:22: 46:7f:11:10:2b:cc:c0:1e:7a:08:9f:01:ee:75:a5:8f:cb:62: 87:e6:3a:79:cf:76:5e:30:06:ef:be:ee:53:3a:7a:be:d4:10: dc:e1:e6:f4:c5:82:d4:fc:49:09:db:11:19:36:f9:aa:df:5c: 01:06:21:4d:8a:f3:39:81:fd:4f:aa:8f:cc:60:8c:bc:a6:bc: 89:68:65:19:80:04:66:94:a9:b1:3c:64:e9:49:c5:39:f5:fb: c6:f6:46:78 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBpMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkMzQkQxMTAvBgNVBAUTKDQ2QTEzNzVGMDEyM0Y1MzM0OEYwQzRGOTAzNEQ5MDQw RkVFOUQzQ0EwHhcNMjYwOTIyMjIxMzQzWhcNMjYwOTI5MjIxMzQzWjAYMRYwFAYD VQQDEw02YWIyZmQ5Ny04ZmJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsiHYLHD28b+0VfG35QsDcPBJUaZGEj28PlJeQHx2UC9w1w7+JJ/pnTfqG4mO Gxlh00O7qm1IkI0SXDjHGmr19qm/+T/ZCdEY2Bj2u28Gk7rY9uL7jY/DftnF965J GnH8ELxqDz20AQJN8qntZrCoet8y941rBLpw+mnpw/STNBloOa+c8fd5UI5lsF2p d+g/5ZPyyFiC8UHglELo2Xcf/EntlT0cG82LzNVrAp0NL15KSSTHRphZ+zQfb3gH igAbxKeMj60ot0+cCJrLEt1xNzkwxO7uleo/IJvFWrxNy9ucxnaEiiEpjOJFmDFA uZ5D1H/GaWgp+UY1Tyw/kstc0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKrdI8gD yyMed+cqq7iWGy6xT5ioMB8GA1UdIwQYMBaAFEahN18BI/UzSPDE+QNNkED+6dPK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzNCRC8xQTgxMDhGMkQ5 N0YxMUVCOUUxMzU5NEZDNEY5QUUwMi9ScUUzWHdFajlUTkk4TVQ1QTAyUVFQN3Aw OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JxRTNYd0VqOVROSThNVDVBMDJRUVA3cDA4by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzNCRC8xQTgxMDhGMkQ5N0YxMUVCOUUxMzU5NEZDNEY5QUUwMi9ScUUzWHdFajlU Tkk4TVQ1QTAyUVFQN3AwOG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZDuKR3087g89/lPTPiNxZv9u+BRPcTrc9EUsPOVHNjMUk/ZR40Sq68TA4zMQ TVKu1j+2ykPG4m9qTk3BhRh9v7dTxtvb1Wbdae7Y5ZytzkD9hXz07LxiG+eEqz07 9DuJK3idikCJJkLVXLZ+xy/T0NqjWTwu437Si90aUZyw6fUQU900mlqEE1ZBK/LT gjUCD8+pQpneRoksTs+Kk7XceLkiRn8RECvMwB56CJ8B7nWlj8tih+Y6ec92XjAG 777uUzp6vtQQ3OHm9MWC1PxJCdsRGTb5qt9cAQYhTYrzOYH9T6qPzGCMvKa8iWhl GYAEZpSpsTxk6UnFOfX7xvZGeA== -----END CERTIFICATE-----Generated at Thu Sep 24 23:02:27 2026 by rpki-client