$ rpki-client -vvvf rpki.apnic.net/member_repository/A913AE23/301A1E4A2C6C11EFA346942DC4F9AE02/QeHsF957pw-MEkF3aWN3AjclGd4.mft File: QeHsF957pw-MEkF3aWN3AjclGd4.mft (raw, json) Hash identifier: 5tpukzjXGeF1n/E7EiEJCPRVnIlnbLrr7MLRrICMXiQ= Subject key identifier: D4:63:6F:D4:E8:B9:8C:40:78:FC:05:16:44:BF:1E:42:AA:12:08:FA Authority key identifier: 41:E1:EC:17:DE:7B:A7:0F:8C:12:41:77:69:63:77:02:37:25:19:DE Certificate issuer: /CN=A913AE23/serialNumber=41E1EC17DE7BA70F8C12417769637702372519DE Certificate serial: 01BC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QeHsF957pw-MEkF3aWN3AjclGd4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913AE23/301A1E4A2C6C11EFA346942DC4F9AE02/QeHsF957pw-MEkF3aWN3AjclGd4.mft Manifest number: 01B0 Signing time: Fri 25 Sep 2026 04:07:24 +0000 Manifest this update: Fri 25 Sep 2026 04:07:24 +0000 Manifest next update: Fri 02 Oct 2026 04:07:24 +0000 Files and hashes: 1: QeHsF957pw-MEkF3aWN3AjclGd4.crl (hash: giWnxs0TDX+PlKpqEsxxAUKLy7zkgniMs9W7rdGlzPE=) 2: 8CF832322C6C11EFB50AD22EC4F9AE02.roa (hash: UHGlHlkxn7F3WkUBBsVEYZP4o8fl36tTO1UDlwoZDiM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913AE23/301A1E4A2C6C11EFA346942DC4F9AE02/QeHsF957pw-MEkF3aWN3AjclGd4.crl rsync://rpki.apnic.net/member_repository/A913AE23/301A1E4A2C6C11EFA346942DC4F9AE02/QeHsF957pw-MEkF3aWN3AjclGd4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QeHsF957pw-MEkF3aWN3AjclGd4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 04:07:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 444 (0x1bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913AE23, serialNumber=41E1EC17DE7BA70F8C12417769637702372519DE Validity Not Before: Sep 25 04:07:24 2026 GMT Not After : Oct 2 04:07:24 2026 GMT Subject: CN=6ab5f37c-8604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:20:31:3b:a6:cf:73:a1:00:96:a6:6a:8a:d0: db:38:4d:c3:30:be:16:a8:68:0e:b5:44:3a:b8:35: 36:91:ad:4a:6c:9c:0b:ec:2c:ca:61:70:fb:b8:45: bf:ea:c7:3b:13:ae:0e:c7:af:4f:b1:6d:06:fe:db: 23:44:75:e3:2c:e0:74:ef:79:d1:45:e7:cd:56:fe: 2f:d3:e5:24:e7:86:03:2a:e7:bd:16:54:c0:d6:55: 2e:f7:af:6b:a1:ff:a0:c0:8a:fc:7c:c5:77:06:89: ef:19:9b:86:cf:1d:ec:f5:c9:31:8a:21:b0:e9:31: 6e:d1:e5:9e:4c:76:a1:0a:ce:83:80:d7:e9:2f:04: 59:32:32:65:80:c1:50:40:54:74:9c:e1:70:6c:34: fc:02:4b:1d:df:7c:79:b6:c6:5f:60:7f:32:64:5f: 68:69:fe:1b:0d:d3:13:51:f1:a6:49:ae:9f:32:b4: ef:5d:a4:0a:08:61:2f:01:e9:d9:e7:bd:a2:35:08: f6:57:89:f9:05:e4:b5:83:66:43:56:62:e3:9c:62: d2:44:10:10:70:89:66:45:6f:6b:88:f5:0b:a0:57: 0a:cd:d4:96:b6:01:15:62:cb:9d:ea:5e:6c:83:5e: be:ba:6f:b3:99:63:09:a8:b9:77:14:56:1e:19:3a: 38:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:63:6F:D4:E8:B9:8C:40:78:FC:05:16:44:BF:1E:42:AA:12:08:FA X509v3 Authority Key Identifier: keyid:41:E1:EC:17:DE:7B:A7:0F:8C:12:41:77:69:63:77:02:37:25:19:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913AE23/301A1E4A2C6C11EFA346942DC4F9AE02/QeHsF957pw-MEkF3aWN3AjclGd4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QeHsF957pw-MEkF3aWN3AjclGd4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE23/301A1E4A2C6C11EFA346942DC4F9AE02/QeHsF957pw-MEkF3aWN3AjclGd4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:6b:23:72:3d:3d:57:37:33:be:95:8f:13:c8:22:29:68:f1: 5a:9e:83:3a:e5:e9:65:7b:f6:a9:1f:5c:4f:27:8f:bd:1f:47: 3c:bc:68:ee:e0:87:55:e9:ac:93:6f:dd:35:ec:90:05:93:74: f8:99:4a:36:61:eb:17:7d:12:69:0b:3a:b0:c9:e4:65:a7:4a: 42:3f:73:22:3e:b5:b7:5a:94:f9:d7:f9:07:63:7e:6f:ea:4e: f2:8f:95:a1:e5:01:bb:7a:57:55:36:e0:7d:dc:a7:f2:fb:97: 1d:ba:7e:63:e8:ed:3f:95:f7:a2:f0:b8:5d:e9:88:b2:cb:96: 46:f0:41:7a:7e:6d:dd:e2:88:6d:36:ad:ac:43:a7:40:79:44: a0:b7:6f:92:6d:79:92:18:01:be:b6:fb:11:e8:6d:2b:56:9f: c2:fd:b1:19:db:16:8a:de:66:79:56:51:aa:4d:5d:16:a8:1b: 8d:3b:86:73:48:4b:15:71:e1:b1:20:82:ef:d3:00:6b:aa:b3: 55:41:f6:87:80:4f:ab:2f:cf:99:72:03:d1:1d:76:bf:05:42: 80:37:85:d3:cb:34:c2:dc:d1:bf:dd:21:a1:f6:d8:8d:fb:40: 5b:b0:6b:61:f4:83:6b:1e:d0:15:1b:ed:11:d3:37:d8:a6:e4: 0a:be:c2:c9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0FFMjMxMTAvBgNVBAUTKDQxRTFFQzE3REU3QkE3MEY4QzEyNDE3NzY5NjM3NzAy MzcyNTE5REUwHhcNMjYwOTI1MDQwNzI0WhcNMjYxMDAyMDQwNzI0WjAYMRYwFAYD VQQDEw02YWI1ZjM3Yy04NjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvSAxO6bPc6EAlqZqitDbOE3DML4WqGgOtUQ6uDU2ka1KbJwL7CzKYXD7uEW/ 6sc7E64Ox69PsW0G/tsjRHXjLOB073nRRefNVv4v0+Uk54YDKue9FlTA1lUu969r of+gwIr8fMV3BonvGZuGzx3s9ckxiiGw6TFu0eWeTHahCs6DgNfpLwRZMjJlgMFQ QFR0nOFwbDT8Aksd33x5tsZfYH8yZF9oaf4bDdMTUfGmSa6fMrTvXaQKCGEvAenZ 572iNQj2V4n5BeS1g2ZDVmLjnGLSRBAQcIlmRW9riPULoFcKzdSWtgEVYsud6l5s g16+um+zmWMJqLl3FFYeGTo4QwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNRjb9To uYxAePwFFkS/HkKqEgj6MB8GA1UdIwQYMBaAFEHh7Bfee6cPjBJBd2ljdwI3JRne MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUUyMy8zMDFBMUU0QTJD NkMxMUVGQTM0Njk0MkRDNEY5QUUwMi9RZUhzRjk1N3B3LU1Fa0YzYVdOM0FqY2xH ZDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FlSHNGOTU3cHctTUVrRjNhV04zQWpjbEdkNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QUUyMy8zMDFBMUU0QTJDNkMxMUVGQTM0Njk0MkRDNEY5QUUwMi9RZUhzRjk1N3B3 LU1Fa0YzYVdOM0FqY2xHZDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArGsjcj09VzczvpWPE8giKWjxWp6DOuXpZXv2qR9cTyePvR9HPLxo7uCHVems k2/dNeyQBZN0+JlKNmHrF30SaQs6sMnkZadKQj9zIj61t1qU+df5B2N+b+pO8o+V oeUBu3pXVTbgfdyn8vuXHbp+Y+jtP5X3ovC4XemIssuWRvBBen5t3eKIbTatrEOn QHlEoLdvkm15khgBvrb7EehtK1afwv2xGdsWit5meVZRqk1dFqgbjTuGc0hLFXHh sSCC79MAa6qzVUH2h4BPqy/PmXID0R12vwVCgDeF08s0wtzRv90hofbYjftAW7Br YfSDax7QFRvtEdM32KbkCr7CyQ== -----END CERTIFICATE-----Generated at Fri Sep 25 17:20:14 2026 by rpki-client