$ rpki-client -vvvf rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft File: Ql8CIk3cYp0viP9mPH9K32zWRT4.mft (raw, json) Hash identifier: GnRpgmDfhtaDb3naZY5qlDPjFY0ZXrbJLLC2FFBiu14= Subject key identifier: A0:E7:6A:EC:72:3F:14:2B:79:B2:7F:67:FD:F2:99:84:EB:A5:34:E2 Authority key identifier: 42:5F:02:22:4D:DC:62:9D:2F:88:FF:66:3C:7F:4A:DF:6C:D6:45:3E Certificate issuer: /CN=A915430A/serialNumber=425F02224DDC629D2F88FF663C7F4ADF6CD6453E Certificate serial: 0372 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft Manifest number: 036B Signing time: Wed 23 Sep 2026 00:28:04 +0000 Manifest this update: Wed 23 Sep 2026 00:28:04 +0000 Manifest next update: Wed 30 Sep 2026 00:28:04 +0000 Files and hashes: 1: Ql8CIk3cYp0viP9mPH9K32zWRT4.crl (hash: NXGmpK9e0A7S5yvctuWIvKJ1GUag/IKNPfIRxOLl9OA=) 2: 55C580C2108411EDB5AE6333C4F9AE02.roa (hash: vslJ1kocoWetdyBiIdXiE0Fd+CgpEX2kc3GNbUnf16M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.crl rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 00:28:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 882 (0x372) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915430A, serialNumber=425F02224DDC629D2F88FF663C7F4ADF6CD6453E Validity Not Before: Sep 23 00:28:04 2026 GMT Not After : Sep 30 00:28:04 2026 GMT Subject: CN=6ab31d14-e9c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:fc:5d:8d:76:52:e1:08:0e:db:aa:9f:e5:90: a3:53:1b:5f:c8:11:47:42:c9:10:59:8f:48:8a:a5: 48:8d:67:9d:b9:a7:e8:24:6f:b1:13:50:9a:bc:ed: 4b:c6:f5:ed:02:84:56:21:c2:eb:f9:c7:2b:bb:cf: 43:ab:27:3c:59:c6:05:43:a1:29:f8:07:d5:ac:5c: 04:52:7b:7d:4a:2b:1b:c7:23:cb:c0:a3:8f:60:02: 6e:71:a4:d1:4d:b6:0b:0d:e6:c0:eb:f2:8f:7b:74: 01:be:95:d5:5b:6a:23:93:d1:c4:f4:f8:4c:cc:79: 24:9d:07:98:f9:91:50:11:b7:7e:2d:2b:40:0d:5c: 89:da:b3:f4:bf:26:7d:b1:12:b5:e9:9a:dd:7e:67: 0c:f2:41:ef:5e:34:e4:99:2e:4b:a2:63:e5:88:49: 57:e1:58:04:ed:ca:e5:0b:47:06:a1:46:c9:ac:69: f9:91:59:13:e9:92:cd:40:7a:e6:c3:a0:47:e9:c0: be:b3:5b:17:09:80:02:40:cb:6f:51:9e:2c:6e:5a: a4:83:19:11:d5:de:0b:5d:65:2c:a1:f1:cd:db:17: 16:08:1c:2e:ac:4d:d4:62:0b:b7:b8:d6:9f:51:e2: c7:b8:2d:28:d9:26:6a:b5:53:35:0c:a6:03:92:d2: f6:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:E7:6A:EC:72:3F:14:2B:79:B2:7F:67:FD:F2:99:84:EB:A5:34:E2 X509v3 Authority Key Identifier: keyid:42:5F:02:22:4D:DC:62:9D:2F:88:FF:66:3C:7F:4A:DF:6C:D6:45:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:b7:96:57:96:2f:c0:05:8c:92:13:04:53:d3:84:34:a6:b0: 31:52:50:4a:d3:59:43:14:7b:d9:32:7b:e8:44:58:dd:12:e9: 8b:27:6d:11:e7:e4:f6:ea:b4:8a:38:d6:0e:13:bc:6d:e5:48: 77:cc:ad:87:42:e5:b7:bc:e2:62:f7:d3:a7:b6:94:e7:b4:79: 6a:ed:5e:eb:f7:89:92:fa:4e:10:07:29:e3:91:40:3e:5f:b4: 59:91:cf:61:38:ec:0f:f4:f6:2d:1a:ee:f9:69:7a:66:81:fd: c8:ab:52:34:70:63:32:60:12:a3:54:99:87:d5:10:8e:17:09: 9c:a8:73:ed:08:a2:7a:eb:10:35:38:57:ba:08:b7:19:8c:8f: 6d:16:4c:9d:b7:64:4f:e7:a0:c3:d3:2d:39:80:de:96:73:04: f1:57:ce:ad:9b:4e:38:6f:26:19:a9:b2:cf:0d:fc:fa:5d:d8: 88:0a:72:39:07:cb:79:0e:d7:d2:93:c0:5e:b8:78:f4:af:d3: 15:9c:5b:d5:bc:89:fe:57:2d:fe:80:b2:0d:7d:5e:09:ca:91: 8f:f2:93:6a:d4:c8:29:77:83:a0:48:6b:9a:39:d8:40:45:e1: 34:bc:b3:13:d9:2d:13:99:97:a0:52:a4:58:df:46:63:57:de: 22:81:98:14 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA3IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQzMEExMTAvBgNVBAUTKDQyNUYwMjIyNEREQzYyOUQyRjg4RkY2NjNDN0Y0QURG NkNENjQ1M0UwHhcNMjYwOTIzMDAyODA0WhcNMjYwOTMwMDAyODA0WjAYMRYwFAYD VQQDEw02YWIzMWQxNC1lOWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7fxdjXZS4QgO26qf5ZCjUxtfyBFHQskQWY9IiqVIjWeduafoJG+xE1CavO1L xvXtAoRWIcLr+ccru89Dqyc8WcYFQ6Ep+AfVrFwEUnt9SisbxyPLwKOPYAJucaTR TbYLDebA6/KPe3QBvpXVW2ojk9HE9PhMzHkknQeY+ZFQEbd+LStADVyJ2rP0vyZ9 sRK16ZrdfmcM8kHvXjTkmS5LomPliElX4VgE7crlC0cGoUbJrGn5kVkT6ZLNQHrm w6BH6cC+s1sXCYACQMtvUZ4sblqkgxkR1d4LXWUsofHN2xcWCBwurE3UYgu3uNaf UeLHuC0o2SZqtVM1DKYDktL26QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKDnauxy PxQrebJ/Z/3ymYTrpTTiMB8GA1UdIwQYMBaAFEJfAiJN3GKdL4j/Zjx/St9s1kU+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDMwQS83RUJGN0NDMjBG RjIxMUVEOUZFNzk2ODZDNEY5QUUwMi9RbDhDSWszY1lwMHZpUDltUEg5SzMyeldS VDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FsOENJazNjWXAwdmlQOW1QSDlLMzJ6V1JUNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDMwQS83RUJGN0NDMjBGRjIxMUVEOUZFNzk2ODZDNEY5QUUwMi9RbDhDSWszY1lw MHZpUDltUEg5SzMyeldSVDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHLeWV5YvwAWMkhMEU9OENKawMVJQStNZQxR72TJ76ERY3RLpiydtEefk9uq0 ijjWDhO8beVId8yth0Llt7ziYvfTp7aU57R5au1e6/eJkvpOEAcp45FAPl+0WZHP YTjsD/T2LRru+Wl6ZoH9yKtSNHBjMmASo1SZh9UQjhcJnKhz7QiieusQNThXugi3 GYyPbRZMnbdkT+egw9MtOYDelnME8VfOrZtOOG8mGamyzw38+l3YiApyOQfLeQ7X 0pPAXrh49K/TFZxb1byJ/lct/oCyDX1eCcqRj/KTatTIKXeDoEhrmjnYQEXhNLyz E9ktE5mXoFKkWN9GY1feIoGYFA== -----END CERTIFICATE-----Generated at Thu Sep 24 05:21:58 2026 by rpki-client