$ rpki-client -vvvf rpki.apnic.net/member_repository/A913F772/D003CC8884D211F1B663606C59A30FBC/qkPN2PNDwbXd5ZFqct92iMqueoE.mft File: qkPN2PNDwbXd5ZFqct92iMqueoE.mft (raw, json) Hash identifier: Iid1LL+4XB9CQuaaCchiThOt5DB3aR6EdYhQvZtqn1Q= Subject key identifier: FF:49:04:46:D5:D1:FB:D0:7C:DA:FD:97:C1:CA:89:6E:B9:98:1D:B6 Authority key identifier: AA:43:CD:D8:F3:43:C1:B5:DD:E5:91:6A:72:DF:76:88:CA:AE:7A:81 Certificate issuer: /CN=A913F772/serialNumber=AA43CDD8F343C1B5DDE5916A72DF7688CAAE7A81 Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkPN2PNDwbXd5ZFqct92iMqueoE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F772/D003CC8884D211F1B663606C59A30FBC/qkPN2PNDwbXd5ZFqct92iMqueoE.mft Manifest number: 26 Signing time: Wed 23 Sep 2026 08:34:41 +0000 Manifest this update: Wed 23 Sep 2026 08:34:41 +0000 Manifest next update: Wed 30 Sep 2026 08:34:41 +0000 Files and hashes: 1: qkPN2PNDwbXd5ZFqct92iMqueoE.crl (hash: tzpqE+Q92AZtBLOuxm3NZX1Ck0rWkghefIi1Fmab1U8=) 2: 4FCEA4DEAB7411F1AEAF1A494011F970.roa (hash: k0ikLn1bTTuiT/l3ng6w+BqXHzkn74K1k/UHZrJqSe4=) 3: E907651696E111F1834D6D3B5C11F970.roa (hash: Au6HFeuLwHhTmvCTCnA87u9C1lgzZm77myw4Ir5SR88=) 4: C1C00A1284DA11F1A36DC6415BA30FBC.roa (hash: Nmcq4UHe3DrUnvTS7pPr090KNaayVFKp/fB14Rol1gw=) 5: 7A8B7F78AB7211F1A5F72F244011F970.roa (hash: CuH0XNKafF/9BTVwY8dM+Xd/rd/WtV5cKIRzyQS3nLA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F772/D003CC8884D211F1B663606C59A30FBC/qkPN2PNDwbXd5ZFqct92iMqueoE.crl rsync://rpki.apnic.net/member_repository/A913F772/D003CC8884D211F1B663606C59A30FBC/qkPN2PNDwbXd5ZFqct92iMqueoE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkPN2PNDwbXd5ZFqct92iMqueoE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 08:19:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F772, serialNumber=AA43CDD8F343C1B5DDE5916A72DF7688CAAE7A81 Validity Not Before: Sep 23 08:34:41 2026 GMT Not After : Sep 30 08:34:41 2026 GMT Subject: CN=6ab38f21-5d12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6b:9a:aa:4b:32:2f:5e:ba:d4:b0:79:22:05: ef:38:e8:83:6a:99:34:66:46:79:0c:d2:7a:27:4a: 8e:7d:e9:6f:97:f9:1f:bf:c5:e3:f9:8d:77:9d:31: 32:4c:0a:83:77:0a:10:fe:2d:8e:c7:05:de:9e:4c: 17:af:da:f5:b5:c5:d9:06:9f:c6:83:39:09:c3:17: 5b:44:43:7c:f3:81:c1:23:7e:d9:2e:48:41:ea:f4: d7:48:79:ef:cb:d6:08:dd:61:13:cf:e2:d8:75:d4: 47:ab:a0:d7:68:49:5e:da:17:5b:87:66:0e:f4:f3: 33:03:76:74:72:91:ba:2f:af:bc:15:d7:32:1e:7b: 53:62:16:02:d9:0f:57:cb:0f:bf:13:2b:d6:52:7c: 71:be:90:79:4c:5a:dd:26:36:b7:4c:67:54:32:5c: bb:a6:d5:7d:1c:47:53:e6:47:75:2b:87:02:df:de: 41:a6:45:2b:67:88:ee:2b:b0:e2:d8:38:c7:7a:12: ea:c3:2f:e3:0c:2d:ad:e2:a9:32:ce:6f:35:61:3c: cf:6c:b9:cd:fb:63:3c:cb:13:8d:7e:9c:8c:8e:03: d9:cb:f0:d6:7a:74:1f:26:87:bf:82:0d:e2:b9:d7: 97:af:dd:a4:78:41:ed:79:de:47:77:10:46:83:59: 2d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:49:04:46:D5:D1:FB:D0:7C:DA:FD:97:C1:CA:89:6E:B9:98:1D:B6 X509v3 Authority Key Identifier: keyid:AA:43:CD:D8:F3:43:C1:B5:DD:E5:91:6A:72:DF:76:88:CA:AE:7A:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F772/D003CC8884D211F1B663606C59A30FBC/qkPN2PNDwbXd5ZFqct92iMqueoE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkPN2PNDwbXd5ZFqct92iMqueoE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F772/D003CC8884D211F1B663606C59A30FBC/qkPN2PNDwbXd5ZFqct92iMqueoE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:67:92:82:fc:d4:0b:90:54:ce:57:61:67:df:8d:7e:90:fe: 94:88:da:0b:e1:fe:4b:2c:1d:43:6c:56:82:89:80:54:97:c6: 48:02:fd:48:f0:cb:27:c1:c8:3e:f4:0b:7e:1b:61:5a:c2:64: 6d:4a:5b:9b:18:30:1f:67:9e:ec:ea:6c:0b:4d:7e:94:fb:b3: 81:cd:81:f7:b2:4d:34:89:c4:a7:19:eb:11:ac:67:c1:e2:66: cb:d1:1e:05:cf:ae:02:b2:6d:7c:70:68:f7:37:98:47:e0:80: 7b:1e:65:59:9e:2a:d9:93:51:fb:32:cc:4e:c5:ff:56:17:14: 64:00:eb:b1:a0:d3:8c:18:19:85:2f:28:63:ff:73:cf:56:dd: 3a:9a:10:34:24:40:9f:18:9b:40:3e:b7:10:00:7e:d4:22:06: 8f:d9:15:07:20:6b:80:c5:38:13:a8:f0:63:a7:c0:1f:84:d6: 47:e7:ed:aa:33:93:ab:62:dd:b9:a6:91:0f:7d:40:f9:d9:67: 3f:9b:ba:54:5e:25:fb:00:f2:8e:ad:c0:94:1d:ab:5c:1d:21: 2b:1a:04:be:ee:79:d5:7d:3a:e0:75:b0:54:d0:a2:29:7e:e5: ed:91:bc:ad:b8:be:fa:c9:05:a7:06:28:ae:2b:68:79:9b:55: 87:99:9e:b0 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz Rjc3MjExMC8GA1UEBRMoQUE0M0NERDhGMzQzQzFCNURERTU5MTZBNzJERjc2ODhD QUFFN0E4MTAeFw0yNjA5MjMwODM0NDFaFw0yNjA5MzAwODM0NDFaMBgxFjAUBgNV BAMTDTZhYjM4ZjIxLTVkMTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3a5qqSzIvXrrUsHkiBe846INqmTRmRnkM0nonSo596W+X+R+/xeP5jXedMTJM CoN3ChD+LY7HBd6eTBev2vW1xdkGn8aDOQnDF1tEQ3zzgcEjftkuSEHq9NdIee/L 1gjdYRPP4th11EeroNdoSV7aF1uHZg708zMDdnRykbovr7wV1zIee1NiFgLZD1fL D78TK9ZSfHG+kHlMWt0mNrdMZ1QyXLum1X0cR1PmR3UrhwLf3kGmRStniO4rsOLY OMd6EurDL+MMLa3iqTLObzVhPM9suc37YzzLE41+nIyOA9nL8NZ6dB8mh7+CDeK5 15ev3aR4Qe153kd3EEaDWS3DAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU/0kERtXR +9B82v2XwcqJbrmYHbYwHwYDVR0jBBgwFoAUqkPN2PNDwbXd5ZFqct92iMqueoEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNGNzcyL0QwMDNDQzg4ODRE MjExRjFCNjYzNjA2QzU5QTMwRkJDL3FrUE4yUE5Ed2JYZDVaRnFjdDkyaU1xdWVv RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcWtQTjJQTkR3YlhkNVpGcWN0OTJpTXF1ZW9FLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNG NzcyL0QwMDNDQzg4ODREMjExRjFCNjYzNjA2QzU5QTMwRkJDL3FrUE4yUE5Ed2JY ZDVaRnFjdDkyaU1xdWVvRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQByZ5KC/NQLkFTOV2Fn341+kP6UiNoL4f5LLB1DbFaCiYBUl8ZIAv1I8Msnwcg+ 9At+G2FawmRtSlubGDAfZ57s6mwLTX6U+7OBzYH3sk00icSnGesRrGfB4mbL0R4F z64Csm18cGj3N5hH4IB7HmVZnirZk1H7MsxOxf9WFxRkAOuxoNOMGBmFLyhj/3PP Vt06mhA0JECfGJtAPrcQAH7UIgaP2RUHIGuAxTgTqPBjp8AfhNZH5+2qM5OrYt25 ppEPfUD52Wc/m7pUXiX7APKOrcCUHatcHSErGgS+7nnVfTrgdbBU0KIpfuXtkbyt uL76yQWnBiiuK2h5m1WHmZ6w -----END CERTIFICATE-----Generated at Wed Sep 23 12:54:28 2026 by rpki-client