$ rpki-client -vvvf rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.mft File: qafXPj7Y1cRm3LxsIJzUNTzemM8.mft (raw, json) Hash identifier: aiKQeL4w94yKcBnT0b0juRSclwp21D08QWAZZKXZN9g= Subject key identifier: DB:1D:B7:22:8B:12:8D:CC:AF:34:26:2C:4E:1B:AD:79:98:19:3E:D9 Authority key identifier: A9:A7:D7:3E:3E:D8:D5:C4:66:DC:BC:6C:20:9C:D4:35:3C:DE:98:CF Certificate issuer: /CN=A9143FC4/serialNumber=A9A7D73E3ED8D5C466DCBC6C209CD4353CDE98CF Certificate serial: 3549 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qafXPj7Y1cRm3LxsIJzUNTzemM8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.mft Manifest number: 3544 Signing time: Thu 24 Sep 2026 15:16:55 +0000 Manifest this update: Thu 24 Sep 2026 15:16:55 +0000 Manifest next update: Thu 01 Oct 2026 15:16:55 +0000 Files and hashes: 1: qafXPj7Y1cRm3LxsIJzUNTzemM8.crl (hash: xDktBAt4fpN76KYTQffeC1BfCupbbGpLzvoUHy2pnEk=) 2: FE96F04256EE11F09D243832C4F9AE02.roa (hash: e8GSBttrBgtoI1SFNewE5+wtUTbMHlzUBUVAWSdm4M8=) 3: C3DFE8E48A4311F1B869C3203411F970.roa (hash: EhCaL1leBykbYZWxG9405+W3f7XM7uKqg5KaoxRKZ1g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.crl rsync://rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qafXPj7Y1cRm3LxsIJzUNTzemM8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 15:16:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13641 (0x3549) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143FC4, serialNumber=A9A7D73E3ED8D5C466DCBC6C209CD4353CDE98CF Validity Not Before: Sep 24 15:16:55 2026 GMT Not After : Oct 1 15:16:55 2026 GMT Subject: CN=6ab53ee7-eb32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:11:af:9b:40:45:dc:83:ca:e3:f2:8d:71:3f: ec:e3:87:05:70:ed:75:1d:4c:f3:bd:a2:36:08:bd: 1c:35:a1:28:45:6f:5a:e9:09:2e:d0:ae:46:a5:0c: 8c:78:01:cc:62:c0:2f:ef:fb:13:b2:98:17:c7:fa: 75:90:fc:69:78:02:aa:b0:09:c5:d4:d9:3a:4b:2d: a3:59:36:95:4d:a3:96:a1:2f:ec:fd:f8:e6:01:95: 8a:05:41:8e:e5:b1:31:15:6b:66:ac:dd:36:01:0d: 8c:5e:57:cc:37:79:60:3a:ee:bb:6f:ef:c0:98:99: 8a:fa:f3:db:45:5b:48:54:08:f0:2f:4e:5f:d5:2d: fd:dc:3c:30:c0:9e:85:66:0f:0e:a7:95:ec:c6:19: 75:74:bf:34:cb:60:38:27:b9:b2:1f:7d:a1:02:e0: 78:f1:b3:f0:4a:fc:9f:ca:2b:b4:31:1d:9a:c9:08: 16:a7:e9:12:37:58:33:75:a5:5b:18:82:48:d6:e4: b5:68:53:99:bc:6e:a5:ed:33:37:b9:fd:a9:db:d7: 5d:14:b0:7b:dd:4a:fc:c4:cb:2a:51:d2:db:1c:16: bd:db:8a:54:ef:fe:13:b6:09:ab:f7:18:d5:0d:85: f0:f8:3f:e4:4a:ce:71:55:2c:79:f9:95:db:c3:8a: 4d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:1D:B7:22:8B:12:8D:CC:AF:34:26:2C:4E:1B:AD:79:98:19:3E:D9 X509v3 Authority Key Identifier: keyid:A9:A7:D7:3E:3E:D8:D5:C4:66:DC:BC:6C:20:9C:D4:35:3C:DE:98:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qafXPj7Y1cRm3LxsIJzUNTzemM8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:20:f7:7b:a9:60:49:a6:af:69:34:8b:bc:dd:ad:22:8b:42: 5e:07:95:d7:9c:33:3c:90:2b:af:00:a7:44:4b:82:e5:a2:48: e1:ed:10:e6:64:3a:04:c0:60:93:4b:fa:91:97:a2:7f:47:19: 0b:e9:c4:dc:f9:a9:9c:62:8b:ef:e7:90:3b:49:a1:c4:df:77: c5:76:1b:13:72:ef:f1:9c:23:61:43:bb:9e:99:75:56:51:02: 5d:5e:f6:f6:06:e1:02:64:69:ab:a4:ef:b2:b4:d6:ea:c6:86: df:1f:bd:82:1e:7f:bd:48:67:ce:ad:a9:e5:5b:ba:5e:50:50: fb:b3:87:ea:26:ea:2a:ce:4c:15:e6:4e:a1:e5:ca:9b:1b:c5: 1c:20:1a:f6:c9:44:ae:a1:be:ca:c6:11:bb:b4:59:8e:6a:2e: 94:cb:60:e5:b1:13:64:6c:40:8b:5a:19:95:6a:ea:4d:61:23: c0:b1:37:94:50:71:ab:b8:31:58:92:ff:7a:f8:34:c7:ed:3c: bb:45:a0:38:4e:9d:33:19:16:b9:f3:ba:3e:d7:f0:ee:63:17: db:88:c0:b6:99:a5:b6:93:b2:52:45:02:b8:9c:c5:76:74:99: 2d:79:33:c7:97:4b:6e:5c:4f:18:bb:7e:31:93:23:7f:7b:bb: e2:35:ac:24 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNGQzQxMTAvBgNVBAUTKEE5QTdENzNFM0VEOEQ1QzQ2NkRDQkM2QzIwOUNENDM1 M0NERTk4Q0YwHhcNMjYwOTI0MTUxNjU1WhcNMjYxMDAxMTUxNjU1WjAYMRYwFAYD VQQDEw02YWI1M2VlNy1lYjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtBGvm0BF3IPK4/KNcT/s44cFcO11HUzzvaI2CL0cNaEoRW9a6Qku0K5GpQyM eAHMYsAv7/sTspgXx/p1kPxpeAKqsAnF1Nk6Sy2jWTaVTaOWoS/s/fjmAZWKBUGO 5bExFWtmrN02AQ2MXlfMN3lgOu67b+/AmJmK+vPbRVtIVAjwL05f1S393DwwwJ6F Zg8Op5Xsxhl1dL80y2A4J7myH32hAuB48bPwSvyfyiu0MR2ayQgWp+kSN1gzdaVb GIJI1uS1aFOZvG6l7TM3uf2p29ddFLB73Ur8xMsqUdLbHBa924pU7/4Ttgmr9xjV DYXw+D/kSs5xVSx5+ZXbw4pN/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNsdtyKL Eo3MrzQmLE4brXmYGT7ZMB8GA1UdIwQYMBaAFKmn1z4+2NXEZty8bCCc1DU83pjP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0ZDNC9CMTY1QTNBODI5 NTgxMUUyQjM4RDU4RkIwOEIwMkNEMi9xYWZYUGo3WTFjUm0zTHhzSUp6VU5UemVt TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FhZlhQajdZMWNSbTNMeHNJSnpVTlR6ZW1NOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0ZDNC9CMTY1QTNBODI5NTgxMUUyQjM4RDU4RkIwOEIwMkNEMi9xYWZYUGo3WTFj Um0zTHhzSUp6VU5UemVtTTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARyD3e6lgSaavaTSLvN2tIotCXgeV15wzPJArrwCnREuC5aJI4e0Q5mQ6BMBg k0v6kZeif0cZC+nE3PmpnGKL7+eQO0mhxN93xXYbE3Lv8ZwjYUO7npl1VlECXV72 9gbhAmRpq6TvsrTW6saG3x+9gh5/vUhnzq2p5Vu6XlBQ+7OH6ibqKs5MFeZOoeXK mxvFHCAa9slErqG+ysYRu7RZjmoulMtg5bETZGxAi1oZlWrqTWEjwLE3lFBxq7gx WJL/evg0x+08u0WgOE6dMxkWufO6Ptfw7mMX24jAtpmltpOyUkUCuJzFdnSZLXkz x5dLblxPGLt+MZMjf3u74jWsJA== -----END CERTIFICATE-----Generated at Thu Sep 24 19:38:22 2026 by rpki-client