$ rpki-client -vvvf rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft File: QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft (raw, json) Hash identifier: EBPZKQNYqsR7QXd52IhX0vJSeDfQiOJub5VQ2EEQSqY= Subject key identifier: 6D:BC:19:BD:F8:20:5C:08:CB:13:4F:87:52:C1:BC:40:81:58:C8:FB Authority key identifier: 41:0F:0F:E9:7B:E9:D9:ED:07:56:CD:4D:76:36:B9:3F:8F:23:8B:31 Certificate issuer: /CN=A912D306/serialNumber=410F0FE97BE9D9ED0756CD4D7636B93F8F238B31 Certificate serial: 359D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft Manifest number: 358E Signing time: Thu 24 Sep 2026 14:37:38 +0000 Manifest this update: Thu 24 Sep 2026 14:37:37 +0000 Manifest next update: Thu 01 Oct 2026 14:37:37 +0000 Files and hashes: 1: QQ8P6Xvp2e0HVs1Ndja5P48jizE.crl (hash: QCIXhXyF2+UwecT1ET7HP7Pf1gXwKoHPBp2m6ZvWMro=) 2: ABE8518A18DA11F08FC68386C4F9AE02.roa (hash: 0OdTWHoxd21Qjwnz0s44P4D4gReHVyaUQbCaa6G9U74=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.crl rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 14:37:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13725 (0x359d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D306, serialNumber=410F0FE97BE9D9ED0756CD4D7636B93F8F238B31 Validity Not Before: Sep 24 14:37:37 2026 GMT Not After : Oct 1 14:37:37 2026 GMT Subject: CN=6ab535b2-afe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3c:1c:49:50:2f:0b:5c:0f:f3:37:5b:7d:07: ef:c5:a1:b2:72:a4:cb:46:35:62:a9:a7:b1:23:e8: c2:4c:09:a1:82:bd:f6:fe:b8:08:2b:e2:31:8d:71: 59:32:58:0c:65:0b:1e:d3:f1:b8:b3:61:0c:80:b7: d6:cb:df:95:50:84:fc:29:aa:20:10:e2:fc:c7:b5: d5:e4:c2:44:b7:30:d3:9b:9d:72:e7:66:a4:11:41: 3a:b6:55:39:3b:49:a0:44:0c:67:46:77:66:13:43: 62:37:08:24:35:7b:37:db:35:a6:41:04:e0:36:56: 23:93:8f:4c:ac:37:7b:69:02:05:b3:da:06:25:b7: 3f:c0:8b:00:a7:d4:cb:4b:c6:9f:b1:f7:a3:6e:51: d4:21:0c:fa:76:dd:93:14:da:21:3f:46:c8:73:c0: f0:9f:84:7e:50:5b:96:46:df:66:3f:6e:49:e2:6a: 32:cf:87:e9:94:1c:a2:18:fc:9e:a1:54:71:27:0b: 55:eb:45:f2:14:71:9c:37:a6:c3:c4:54:b4:f4:d8: 26:ac:ab:e1:3d:99:03:80:95:27:49:f2:2b:e3:09: 27:05:65:08:ed:cf:45:cd:78:fb:72:7a:c1:af:58: e9:40:d2:06:f2:b8:e8:ea:9d:11:ba:3b:29:f4:44: 5f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:BC:19:BD:F8:20:5C:08:CB:13:4F:87:52:C1:BC:40:81:58:C8:FB X509v3 Authority Key Identifier: keyid:41:0F:0F:E9:7B:E9:D9:ED:07:56:CD:4D:76:36:B9:3F:8F:23:8B:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:bc:33:eb:ed:0c:61:37:11:37:8e:82:0c:31:81:c1:5c:12: a3:ef:d3:50:6b:ea:9b:5e:ca:62:8b:6f:e7:7d:e7:3c:82:c1: aa:df:10:42:c5:b5:8a:33:ab:d6:aa:b4:21:4a:85:06:8e:36: de:f3:4a:ba:16:4f:76:bf:d5:16:93:ad:0b:e2:39:c6:4a:58: a4:2b:46:16:4e:47:c9:6c:9a:8e:fb:4c:bf:97:83:84:41:14: 03:87:19:c3:72:2d:56:dc:fc:40:21:ed:52:fc:e6:17:19:f6: 0c:36:1a:d8:23:fd:f2:23:19:31:db:b5:f5:6e:25:4d:b5:55: 64:55:89:4e:5f:83:cf:c2:2e:0d:31:8e:76:2a:f4:cd:f8:9c: 3f:de:01:d0:eb:45:9f:08:41:63:b4:a3:da:4d:1f:77:df:54: 36:f2:7d:0b:24:1f:24:fd:c6:8b:1d:d6:31:b8:92:d9:6f:4d: 00:b8:d4:57:d4:5a:74:de:9b:25:44:84:a5:c5:f8:8b:8b:14: 4e:16:38:a8:4d:43:bb:86:23:9c:80:98:8a:bd:b0:bb:ce:5c: ac:1f:2c:03:13:78:3f:ef:4d:88:95:0e:bb:c9:f2:0d:f9:d1: a4:bb:60:03:25:50:e5:8d:36:60:39:d0:74:5e:d8:d6:eb:8f: 9b:c1:5b:a5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQzMDYxMTAvBgNVBAUTKDQxMEYwRkU5N0JFOUQ5RUQwNzU2Q0Q0RDc2MzZCOTNG OEYyMzhCMzEwHhcNMjYwOTI0MTQzNzM3WhcNMjYxMDAxMTQzNzM3WjAYMRYwFAYD VQQDEw02YWI1MzViMi1hZmUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsjwcSVAvC1wP8zdbfQfvxaGycqTLRjViqaexI+jCTAmhgr32/rgIK+IxjXFZ MlgMZQse0/G4s2EMgLfWy9+VUIT8KaogEOL8x7XV5MJEtzDTm51y52akEUE6tlU5 O0mgRAxnRndmE0NiNwgkNXs32zWmQQTgNlYjk49MrDd7aQIFs9oGJbc/wIsAp9TL S8afsfejblHUIQz6dt2TFNohP0bIc8Dwn4R+UFuWRt9mP25J4moyz4fplByiGPye oVRxJwtV60XyFHGcN6bDxFS09NgmrKvhPZkDgJUnSfIr4wknBWUI7c9FzXj7cnrB r1jpQNIG8rjo6p0Rujsp9ERfHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG28Gb34 IFwIyxNPh1LBvECBWMj7MB8GA1UdIwQYMBaAFEEPD+l76dntB1bNTXY2uT+PI4sx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDMwNi9CQ0JEODAxQzFE OEQxMUUyQjQyOUI3RUIwOEIwMkNEMi9RUThQNlh2cDJlMEhWczFOZGphNVA0OGpp ekUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FROFA2WHZwMmUwSFZzMU5kamE1UDQ4aml6RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDMwNi9CQ0JEODAxQzFEOEQxMUUyQjQyOUI3RUIwOEIwMkNEMi9RUThQNlh2cDJl MEhWczFOZGphNVA0OGppekUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAF7wz6+0MYTcRN46CDDGBwVwSo+/TUGvqm17KYotv533nPILBqt8QQsW1ijOr 1qq0IUqFBo423vNKuhZPdr/VFpOtC+I5xkpYpCtGFk5HyWyajvtMv5eDhEEUA4cZ w3ItVtz8QCHtUvzmFxn2DDYa2CP98iMZMdu19W4lTbVVZFWJTl+Dz8IuDTGOdir0 zficP94B0OtFnwhBY7Sj2k0fd99UNvJ9CyQfJP3Gix3WMbiS2W9NALjUV9RadN6b JUSEpcX4i4sUThY4qE1Du4YjnICYir2wu85crB8sAxN4P+9NiJUOu8nyDfnRpLtg AyVQ5Y02YDnQdF7Y1uuPm8FbpQ== -----END CERTIFICATE-----Generated at Fri Sep 25 19:18:43 2026 by rpki-client