$ rpki-client -vvvf rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft File: qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft (raw, json) Hash identifier: tjlmMVMr9qZgLSrtooCR135J1coC1Pum8NhOxO80f/U= Subject key identifier: C5:42:6D:95:31:2A:DC:0A:46:A8:FE:10:F4:A9:82:7E:BB:25:B3:B7 Authority key identifier: AB:0D:87:97:C5:8A:83:A5:B4:9C:07:7A:32:EF:67:32:87:24:E4:12 Certificate issuer: /CN=A914E026/serialNumber=AB0D8797C58A83A5B49C077A32EF67328724E412 Certificate serial: 0D9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qw2Hl8WKg6W0nAd6Mu9nMock5BI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft Manifest number: 0D97 Signing time: Mon 28 Sep 2026 18:03:06 +0000 Manifest this update: Mon 28 Sep 2026 18:03:05 +0000 Manifest next update: Mon 05 Oct 2026 18:03:05 +0000 Files and hashes: 1: qw2Hl8WKg6W0nAd6Mu9nMock5BI.crl (hash: FPaXtE3r5jYq0dHBw4mYJsG7QHuvLidR/xnqYyc3LTw=) 2: 95693F483EFC11F19C051D00C6833773.roa (hash: FvcTIUqCk8IaKULOCCc+8nkYabbY0kOvHe1B0EDMOSI=) 3: CEFC9F4C3EFD11F18502D769C6833773.roa (hash: asADDRBilLEaXG8oF0ClMDpzkYwVXZNb9WKZ3OOCar0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.crl rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qw2Hl8WKg6W0nAd6Mu9nMock5BI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 18:03:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3485 (0xd9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E026, serialNumber=AB0D8797C58A83A5B49C077A32EF67328724E412 Validity Not Before: Sep 28 18:03:05 2026 GMT Not After : Oct 5 18:03:05 2026 GMT Subject: CN=6abaabd9-0421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:54:e4:91:08:c2:2d:c1:69:0a:77:7b:d4:13: 5a:cb:70:56:48:e4:a8:34:70:ed:68:19:eb:03:07: 03:1e:c2:35:d2:dc:60:80:5e:2e:28:eb:38:7c:87: ca:bc:b3:9f:b6:24:cf:ca:88:dd:8b:31:0e:05:aa: 9f:08:4f:00:a5:4f:dc:f2:3b:52:11:69:40:5a:29: ba:7f:c2:d1:2a:a9:f1:e0:d8:74:f7:d9:46:4f:50: c8:68:a2:f1:5b:6d:a5:79:c2:a7:98:6e:aa:13:f9: 1f:a8:52:47:51:51:fe:ff:63:d1:2b:cd:cc:39:f8: 5d:40:5a:32:10:3d:7b:22:42:89:c3:8c:ba:93:45: 1e:ec:03:a7:cb:f9:6d:d4:46:f4:5d:35:65:60:6e: fe:5f:54:56:b7:16:e2:39:c2:30:75:b1:eb:95:e3: 27:53:6b:a9:04:05:28:1e:85:93:9c:6a:ea:fc:2a: da:b1:57:49:f0:e6:c3:5f:11:fa:cc:a8:0b:0e:02: a1:a6:09:4c:b5:cb:85:8d:a7:e6:18:aa:84:2c:83: 90:15:da:2a:3e:45:09:e0:a2:cc:49:b6:e8:4d:38: c4:46:ca:86:8a:0f:01:c6:43:c3:6c:03:aa:43:e2: 60:b7:d1:7b:21:9c:20:d8:e3:78:0b:8d:f9:59:c0: 3d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:42:6D:95:31:2A:DC:0A:46:A8:FE:10:F4:A9:82:7E:BB:25:B3:B7 X509v3 Authority Key Identifier: keyid:AB:0D:87:97:C5:8A:83:A5:B4:9C:07:7A:32:EF:67:32:87:24:E4:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qw2Hl8WKg6W0nAd6Mu9nMock5BI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:0c:fb:8d:b4:a8:4d:ec:8b:18:69:b4:4e:a8:8e:d6:e1:2b: cc:78:b6:02:1c:ef:a9:39:34:35:7c:3b:55:9b:48:7d:71:43: 15:6f:09:3a:25:8f:ff:53:bc:07:3b:0c:b1:e7:14:c0:a4:ad: 73:7e:6b:38:f3:76:d7:6d:81:fa:06:40:98:c2:a9:82:29:03: 72:32:54:e8:39:8a:d2:a1:13:43:e6:8e:b3:47:a2:bf:cc:0a: ca:fd:9d:0c:82:dd:86:2d:d1:4b:31:eb:fa:8d:3b:96:ee:25: a0:68:cc:fb:32:f7:0c:8e:64:da:e7:61:cc:3a:fd:0d:30:59: 1e:d3:a6:63:0e:ed:39:85:ad:d1:78:cf:2e:df:50:7d:c8:15: 7c:45:fc:9b:96:5c:25:2b:cc:dc:54:da:0c:8a:11:b8:c3:df: 3e:5c:ef:27:ff:0b:4f:7e:b5:6a:d7:65:69:f0:2a:93:e3:b9: a7:8a:e0:c7:c8:c2:17:34:42:20:44:f8:12:ec:ca:7b:06:9f: 13:92:1d:89:b8:c1:7b:9d:d4:46:04:2b:1b:b7:22:69:5b:3a: f2:04:6d:c3:b0:93:4d:7b:07:2f:48:05:45:c3:e4:01:f9:94: 04:a8:f5:11:0f:21:6c:c7:2e:9a:8e:e9:22:9d:7a:62:b0:5b: 30:a6:ee:6b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUwMjYxMTAvBgNVBAUTKEFCMEQ4Nzk3QzU4QTgzQTVCNDlDMDc3QTMyRUY2NzMy ODcyNEU0MTIwHhcNMjYwOTI4MTgwMzA1WhcNMjYxMDA1MTgwMzA1WjAYMRYwFAYD VQQDEw02YWJhYWJkOS0wNDIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzVTkkQjCLcFpCnd71BNay3BWSOSoNHDtaBnrAwcDHsI10txggF4uKOs4fIfK vLOftiTPyojdizEOBaqfCE8ApU/c8jtSEWlAWim6f8LRKqnx4Nh099lGT1DIaKLx W22lecKnmG6qE/kfqFJHUVH+/2PRK83MOfhdQFoyED17IkKJw4y6k0Ue7AOny/lt 1Eb0XTVlYG7+X1RWtxbiOcIwdbHrleMnU2upBAUoHoWTnGrq/CrasVdJ8ObDXxH6 zKgLDgKhpglMtcuFjafmGKqELIOQFdoqPkUJ4KLMSbboTTjERsqGig8BxkPDbAOq Q+Jgt9F7IZwg2ON4C435WcA9GQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMVCbZUx KtwKRqj+EPSpgn67JbO3MB8GA1UdIwQYMBaAFKsNh5fFioOltJwHejLvZzKHJOQS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTAyNi9ENkIyNjMwNEY1 NkExMUU5QkYyQUU2ODRDNEY5QUUwMi9xdzJIbDhXS2c2VzBuQWQ2TXU5bk1vY2s1 QkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F3MkhsOFdLZzZXMG5BZDZNdTluTW9jazVCSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTAyNi9ENkIyNjMwNEY1NkExMUU5QkYyQUU2ODRDNEY5QUUwMi9xdzJIbDhXS2c2 VzBuQWQ2TXU5bk1vY2s1QkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALwz7jbSoTeyLGGm0TqiO1uErzHi2AhzvqTk0NXw7VZtIfXFDFW8JOiWP/1O8 BzsMsecUwKStc35rOPN2122B+gZAmMKpgikDcjJU6DmK0qETQ+aOs0eiv8wKyv2d DILdhi3RSzHr+o07lu4loGjM+zL3DI5k2udhzDr9DTBZHtOmYw7tOYWt0XjPLt9Q fcgVfEX8m5ZcJSvM3FTaDIoRuMPfPlzvJ/8LT361atdlafAqk+O5p4rgx8jCFzRC IET4EuzKewafE5IdibjBe53URgQrG7ciaVs68gRtw7CTTXsHL0gFRcPkAfmUBKj1 EQ8hbMcumo7pIp16YrBbMKbuaw== -----END CERTIFICATE-----Generated at Tue Sep 29 17:37:28 2026 by rpki-client