$ rpki-client -vvvf rpki.apnic.net/member_repository/A913631F/7B3F0B1CCF1C11EF81947F85C4F9AE02/QDu3uRj5FUrYLCrTWu_Aq-jQat4.mft File: QDu3uRj5FUrYLCrTWu_Aq-jQat4.mft (raw, json) Hash identifier: s7+ScfJHqu0JXnHuaLMTf/cvp9kGtt+Ic9me2PouWAk= Subject key identifier: 71:A4:35:6E:70:60:D9:CB:9E:0E:44:4E:D3:C9:B6:FA:EE:49:E5:35 Authority key identifier: 40:3B:B7:B9:18:F9:15:4A:D8:2C:2A:D3:5A:EF:C0:AB:E8:D0:6A:DE Certificate issuer: /CN=A913631F/serialNumber=403BB7B918F9154AD82C2AD35AEFC0ABE8D06ADE Certificate serial: 0144 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QDu3uRj5FUrYLCrTWu_Aq-jQat4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913631F/7B3F0B1CCF1C11EF81947F85C4F9AE02/QDu3uRj5FUrYLCrTWu_Aq-jQat4.mft Manifest number: 0141 Signing time: Wed 23 Sep 2026 05:14:32 +0000 Manifest this update: Wed 23 Sep 2026 05:14:31 +0000 Manifest next update: Wed 30 Sep 2026 05:14:31 +0000 Files and hashes: 1: QDu3uRj5FUrYLCrTWu_Aq-jQat4.crl (hash: 81f0QJwBgn6wxVEOJdYVXabmzRaS86E/ab6sXXIJEXw=) 2: CA9B891ACF1C11EF981F2F86C4F9AE02.roa (hash: tykKMCNyhL8YIODSIbVTOG4k2NzgIkvRLrrP9k8uYXw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913631F/7B3F0B1CCF1C11EF81947F85C4F9AE02/QDu3uRj5FUrYLCrTWu_Aq-jQat4.crl rsync://rpki.apnic.net/member_repository/A913631F/7B3F0B1CCF1C11EF81947F85C4F9AE02/QDu3uRj5FUrYLCrTWu_Aq-jQat4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QDu3uRj5FUrYLCrTWu_Aq-jQat4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 05:14:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 324 (0x144) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913631F, serialNumber=403BB7B918F9154AD82C2AD35AEFC0ABE8D06ADE Validity Not Before: Sep 23 05:14:31 2026 GMT Not After : Sep 30 05:14:31 2026 GMT Subject: CN=6ab36038-b35e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:77:30:2b:31:d0:ed:f6:29:5a:49:35:7a:d2: e7:2e:df:b1:e7:8e:74:41:e2:99:ec:80:2d:d0:11: 7d:ec:79:87:ee:8f:55:3a:20:6f:3e:da:4f:9c:b8: eb:cd:db:b1:fe:23:67:45:2c:a8:8b:97:3c:57:12: 13:84:2e:31:6d:b4:14:7e:e8:4f:0a:87:9c:61:bf: 95:97:6f:8e:e1:26:0d:9b:c5:71:da:16:3e:3b:38: 30:67:b0:2c:43:bd:6a:e1:bf:68:06:ed:a8:76:e2: 42:2d:08:6f:4f:96:d6:b4:0b:13:f3:7c:c0:47:18: ae:65:b8:a0:5c:06:72:8b:38:90:7e:34:dc:15:42: 13:63:d6:66:2e:71:12:4a:56:3a:ae:03:11:d0:de: fb:0b:21:b6:fb:46:8e:4b:b7:e0:8d:6d:79:00:26: ab:24:ab:18:bc:e4:68:e8:77:79:47:54:08:2c:fb: 7b:37:c4:f3:cf:b5:89:a7:cd:19:9b:62:9d:30:30: 5d:fa:7c:b7:ed:a0:ea:77:ef:4d:a3:3a:d4:2f:fb: 82:9d:84:69:2d:2c:4e:87:1a:f4:9c:3b:53:da:a1: e9:a8:3d:7b:74:b0:cb:3f:7c:3b:4c:a9:6d:38:3f: be:3c:69:ef:88:8a:03:9d:94:83:71:a7:24:f7:82: 19:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:A4:35:6E:70:60:D9:CB:9E:0E:44:4E:D3:C9:B6:FA:EE:49:E5:35 X509v3 Authority Key Identifier: keyid:40:3B:B7:B9:18:F9:15:4A:D8:2C:2A:D3:5A:EF:C0:AB:E8:D0:6A:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913631F/7B3F0B1CCF1C11EF81947F85C4F9AE02/QDu3uRj5FUrYLCrTWu_Aq-jQat4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QDu3uRj5FUrYLCrTWu_Aq-jQat4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913631F/7B3F0B1CCF1C11EF81947F85C4F9AE02/QDu3uRj5FUrYLCrTWu_Aq-jQat4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:d9:df:47:49:50:be:a1:f1:13:3b:41:4c:d4:12:b0:b0:ea: 51:a7:44:d4:3d:fd:20:15:91:e8:8c:38:64:11:49:d1:39:96: 61:dd:24:28:6f:5f:d3:12:4e:cf:e6:c3:ec:e9:52:d2:2d:71: 7e:25:fb:98:72:a0:16:b6:e8:e2:f3:82:cf:76:f5:ed:86:b1: 39:8f:fa:80:54:dd:e0:90:4d:7a:72:21:a3:28:38:6e:d8:c6: 7c:fc:08:a4:a5:d3:6c:6f:18:da:cc:ae:2d:3b:13:7c:65:c9: d7:4b:2e:ec:1d:06:23:52:83:bd:2d:56:f8:ca:82:b2:c0:96: 40:66:02:10:cf:f9:8b:84:71:e4:87:9e:2c:49:01:0c:7f:1b: 7a:57:1e:9d:3d:41:bf:1c:49:c6:0d:39:f5:f7:57:47:0f:3c: 43:03:2f:53:03:9f:1d:39:37:c4:cf:26:df:4a:81:b4:21:b9: 76:1c:2b:10:a8:c9:d0:fd:ce:c2:c7:d5:87:82:9b:e4:14:78: 56:5e:53:f7:49:6d:6e:bf:0f:06:00:ee:c9:8b:42:ad:06:6c: f9:34:b8:23:ed:b9:ba:d0:c8:cd:41:6b:36:e1:b6:8d:d7:01: 4c:99:35:8a:3c:64:6d:4a:d0:fe:51:e5:51:e5:d4:ff:c6:55: 96:51:7a:cb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzYzMUYxMTAvBgNVBAUTKDQwM0JCN0I5MThGOTE1NEFEODJDMkFEMzVBRUZDMEFC RThEMDZBREUwHhcNMjYwOTIzMDUxNDMxWhcNMjYwOTMwMDUxNDMxWjAYMRYwFAYD VQQDEw02YWIzNjAzOC1iMzVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx3cwKzHQ7fYpWkk1etLnLt+x5450QeKZ7IAt0BF97HmH7o9VOiBvPtpPnLjr zdux/iNnRSyoi5c8VxIThC4xbbQUfuhPCoecYb+Vl2+O4SYNm8Vx2hY+OzgwZ7As Q71q4b9oBu2oduJCLQhvT5bWtAsT83zARxiuZbigXAZyiziQfjTcFUITY9ZmLnES SlY6rgMR0N77CyG2+0aOS7fgjW15ACarJKsYvORo6Hd5R1QILPt7N8Tzz7WJp80Z m2KdMDBd+ny37aDqd+9NozrUL/uCnYRpLSxOhxr0nDtT2qHpqD17dLDLP3w7TKlt OD++PGnviIoDnZSDcack94IZQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHGkNW5w YNnLng5ETtPJtvruSeU1MB8GA1UdIwQYMBaAFEA7t7kY+RVK2Cwq01rvwKvo0Gre MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjMxRi83QjNGMEIxQ0NG MUMxMUVGODE5NDdGODVDNEY5QUUwMi9RRHUzdVJqNUZVcllMQ3JUV3VfQXEtalFh dDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FEdTN1Umo1RlVyWUxDclRXdV9BcS1qUWF0NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjMxRi83QjNGMEIxQ0NGMUMxMUVGODE5NDdGODVDNEY5QUUwMi9RRHUzdVJqNUZV cllMQ3JUV3VfQXEtalFhdDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWdnfR0lQvqHxEztBTNQSsLDqUadE1D39IBWR6Iw4ZBFJ0TmWYd0kKG9f0xJO z+bD7OlS0i1xfiX7mHKgFrbo4vOCz3b17YaxOY/6gFTd4JBNenIhoyg4btjGfPwI pKXTbG8Y2syuLTsTfGXJ10su7B0GI1KDvS1W+MqCssCWQGYCEM/5i4Rx5IeeLEkB DH8belcenT1BvxxJxg059fdXRw88QwMvUwOfHTk3xM8m30qBtCG5dhwrEKjJ0P3O wsfVh4Kb5BR4Vl5T90ltbr8PBgDuyYtCrQZs+TS4I+25utDIzUFrNuG2jdcBTJk1 ijxkbUrQ/lHlUeXU/8ZVllF6yw== -----END CERTIFICATE-----Generated at Wed Sep 23 14:48:19 2026 by rpki-client