$ rpki-client -vvvf rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft File: qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft (raw, json) Hash identifier: x22zzzHicqKonAY3+vZocHIX1jzE/xdUZ+kSwIHPdNg= Subject key identifier: 09:53:13:79:FE:E7:6F:D0:89:5A:C6:1A:CF:E9:06:6F:D1:0C:98:23 Authority key identifier: AB:0D:87:97:C5:8A:83:A5:B4:9C:07:7A:32:EF:67:32:87:24:E4:12 Certificate issuer: /CN=A914E026/serialNumber=AB0D8797C58A83A5B49C077A32EF67328724E412 Certificate serial: 0D9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qw2Hl8WKg6W0nAd6Mu9nMock5BI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft Manifest number: 0D95 Signing time: Thu 24 Sep 2026 17:55:06 +0000 Manifest this update: Thu 24 Sep 2026 17:55:06 +0000 Manifest next update: Thu 01 Oct 2026 17:55:06 +0000 Files and hashes: 1: qw2Hl8WKg6W0nAd6Mu9nMock5BI.crl (hash: 2pjVy0KdnOOaM4uBfIS10hpOyUmcW9nYfPrRZRQdves=) 2: 95693F483EFC11F19C051D00C6833773.roa (hash: FvcTIUqCk8IaKULOCCc+8nkYabbY0kOvHe1B0EDMOSI=) 3: CEFC9F4C3EFD11F18502D769C6833773.roa (hash: asADDRBilLEaXG8oF0ClMDpzkYwVXZNb9WKZ3OOCar0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.crl rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qw2Hl8WKg6W0nAd6Mu9nMock5BI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 17:55:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3483 (0xd9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E026, serialNumber=AB0D8797C58A83A5B49C077A32EF67328724E412 Validity Not Before: Sep 24 17:55:06 2026 GMT Not After : Oct 1 17:55:06 2026 GMT Subject: CN=6ab563fa-a4c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:52:1c:18:12:ed:f0:13:7f:75:f6:5d:2f:05: d8:bd:85:3d:8b:8b:74:4a:ba:9e:7d:7c:27:68:a5: c4:6c:9b:69:aa:33:65:bc:a0:6a:22:03:d9:9a:7e: 18:76:aa:ff:89:1f:e2:6f:03:d0:1d:24:ab:0c:61: e6:67:ba:ff:38:3f:d0:19:a1:ac:04:bb:96:ae:ba: b1:13:dc:d4:97:2f:55:1b:2e:39:3d:08:06:c2:09: f0:1a:a9:f7:f0:c8:d2:4d:0e:ef:61:f9:c3:ce:c0: 20:07:5c:1a:f8:f9:97:50:70:25:6a:0c:6f:79:e4: ee:7e:5c:bc:ca:58:77:73:67:c9:35:1e:79:76:f8: d1:32:c4:65:94:72:4a:70:a5:8c:9e:ff:ae:9d:9d: cf:f5:39:43:e5:14:7b:a6:a4:e9:c6:5f:07:b5:6d: 3f:80:98:d3:9a:3b:d6:43:ae:af:23:3b:34:d2:b4: 75:6a:33:a7:b9:36:3a:27:3f:22:99:57:78:cc:08: a8:72:12:86:7f:ee:cf:35:0a:a1:84:37:42:fb:a2: 69:de:7b:5d:c8:15:cb:4c:48:2d:13:10:5c:b1:df: cd:1b:b3:62:1d:e7:b6:ab:4b:51:d7:fe:7a:f9:35: bc:46:68:1f:06:4e:bd:1d:e5:79:fe:4e:c5:ac:b0: ef:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:53:13:79:FE:E7:6F:D0:89:5A:C6:1A:CF:E9:06:6F:D1:0C:98:23 X509v3 Authority Key Identifier: keyid:AB:0D:87:97:C5:8A:83:A5:B4:9C:07:7A:32:EF:67:32:87:24:E4:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qw2Hl8WKg6W0nAd6Mu9nMock5BI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:00:36:bd:bb:a5:04:10:e1:11:b1:7d:db:a9:61:28:b8:fe: 23:0c:5c:bb:eb:ef:5c:7e:16:3e:0f:19:69:ca:93:4e:6f:55: 12:bd:51:3d:7f:a9:93:87:5c:e6:a4:61:51:71:80:ff:c2:23: 01:41:7a:70:23:7f:61:11:08:91:05:d2:c7:ef:75:27:83:e4: 82:5a:a3:04:ed:af:dc:77:27:47:9c:1e:c7:29:7d:26:d1:a3: d4:ad:aa:a8:e8:6b:e1:97:ae:04:36:cb:7f:78:c8:47:04:94: 8d:aa:89:4f:a1:c5:9d:e1:7c:fd:27:5a:af:d7:a7:09:52:f8: 8e:1a:71:bf:09:de:f0:ea:5c:bf:97:ab:42:a0:e3:41:90:8b: 42:fa:fa:55:f8:7d:f8:bc:1b:57:86:0f:fe:a7:0d:15:91:38: f4:ac:a7:92:4d:3b:81:bf:2c:d5:ea:07:f8:64:4e:22:9d:22: 98:1f:ab:de:1b:11:6b:56:f8:7c:9b:dc:c4:e2:04:dd:da:f0: 80:5a:5c:7f:7c:52:c2:f5:2e:cb:1e:93:c9:3a:f6:88:39:c7: 48:6e:48:d7:ac:b7:cd:bd:97:14:88:ee:6d:30:aa:cf:e1:b6: 26:43:37:50:be:a4:eb:ff:1c:f1:a1:63:b9:ec:7b:82:a8:37: 35:a8:5a:7d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUwMjYxMTAvBgNVBAUTKEFCMEQ4Nzk3QzU4QTgzQTVCNDlDMDc3QTMyRUY2NzMy ODcyNEU0MTIwHhcNMjYwOTI0MTc1NTA2WhcNMjYxMDAxMTc1NTA2WjAYMRYwFAYD VQQDEw02YWI1NjNmYS1hNGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwlIcGBLt8BN/dfZdLwXYvYU9i4t0SrqefXwnaKXEbJtpqjNlvKBqIgPZmn4Y dqr/iR/ibwPQHSSrDGHmZ7r/OD/QGaGsBLuWrrqxE9zUly9VGy45PQgGwgnwGqn3 8MjSTQ7vYfnDzsAgB1wa+PmXUHAlagxveeTufly8ylh3c2fJNR55dvjRMsRllHJK cKWMnv+unZ3P9TlD5RR7pqTpxl8HtW0/gJjTmjvWQ66vIzs00rR1ajOnuTY6Jz8i mVd4zAiochKGf+7PNQqhhDdC+6Jp3ntdyBXLTEgtExBcsd/NG7NiHee2q0tR1/56 +TW8RmgfBk69HeV5/k7FrLDvYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAlTE3n+ 52/QiVrGGs/pBm/RDJgjMB8GA1UdIwQYMBaAFKsNh5fFioOltJwHejLvZzKHJOQS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTAyNi9ENkIyNjMwNEY1 NkExMUU5QkYyQUU2ODRDNEY5QUUwMi9xdzJIbDhXS2c2VzBuQWQ2TXU5bk1vY2s1 QkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F3MkhsOFdLZzZXMG5BZDZNdTluTW9jazVCSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTAyNi9ENkIyNjMwNEY1NkExMUU5QkYyQUU2ODRDNEY5QUUwMi9xdzJIbDhXS2c2 VzBuQWQ2TXU5bk1vY2s1QkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhQA2vbulBBDhEbF926lhKLj+Iwxcu+vvXH4WPg8ZacqTTm9VEr1RPX+pk4dc 5qRhUXGA/8IjAUF6cCN/YREIkQXSx+91J4PkglqjBO2v3HcnR5wexyl9JtGj1K2q qOhr4ZeuBDbLf3jIRwSUjaqJT6HFneF8/Sdar9enCVL4jhpxvwne8Opcv5erQqDj QZCLQvr6Vfh9+LwbV4YP/qcNFZE49Kynkk07gb8s1eoH+GROIp0imB+r3hsRa1b4 fJvcxOIE3drwgFpcf3xSwvUuyx6TyTr2iDnHSG5I16y3zb2XFIjubTCqz+G2JkM3 UL6k6/8c8aFjuex7gqg3NahafQ== -----END CERTIFICATE-----Generated at Sat Sep 26 10:42:57 2026 by rpki-client