$ rpki-client -vvvf rpki.apnic.net/member_repository/A9156971/48C221861D9211E2ADB30BF508B02CD2/KQX7MhK9YWRvt69jPqGiV7w6Pew.mft File: KQX7MhK9YWRvt69jPqGiV7w6Pew.mft (raw, json) Hash identifier: N+VXC7pMwPRsB2wOG+RqAnUEEdxf7+BosqT5wFWRUxM= Subject key identifier: DD:1E:FC:DA:60:31:42:85:0F:E2:13:94:2B:48:FF:0E:2A:48:D1:D5 Authority key identifier: 29:05:FB:32:12:BD:61:64:6F:B7:AF:63:3E:A1:A2:57:BC:3A:3D:EC Certificate issuer: /CN=A9156971/serialNumber=2905FB3212BD61646FB7AF633EA1A257BC3A3DEC Certificate serial: 3590 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQX7MhK9YWRvt69jPqGiV7w6Pew.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156971/48C221861D9211E2ADB30BF508B02CD2/KQX7MhK9YWRvt69jPqGiV7w6Pew.mft Manifest number: 3587 Signing time: Sat 26 Sep 2026 14:44:03 +0000 Manifest this update: Sat 26 Sep 2026 14:44:02 +0000 Manifest next update: Sat 03 Oct 2026 14:44:02 +0000 Files and hashes: 1: KQX7MhK9YWRvt69jPqGiV7w6Pew.crl (hash: jN7QBpvPyTNd2gg47cJZZ0IiYfvOm15rWpvWyl72emA=) 2: 4AF78A4AFEC611EF86B4765BC4F9AE02.roa (hash: DaUDfRkisbFjBhwxGgOMj8rF42Ao1F9Plt9FEElpL3c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156971/48C221861D9211E2ADB30BF508B02CD2/KQX7MhK9YWRvt69jPqGiV7w6Pew.crl rsync://rpki.apnic.net/member_repository/A9156971/48C221861D9211E2ADB30BF508B02CD2/KQX7MhK9YWRvt69jPqGiV7w6Pew.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQX7MhK9YWRvt69jPqGiV7w6Pew.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 14:44:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13712 (0x3590) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156971, serialNumber=2905FB3212BD61646FB7AF633EA1A257BC3A3DEC Validity Not Before: Sep 26 14:44:02 2026 GMT Not After : Oct 3 14:44:02 2026 GMT Subject: CN=6ab7da32-6cee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:66:b5:75:9f:79:f0:b6:47:3c:2e:f0:77:48: 92:cf:78:70:5d:a5:23:77:7a:90:e7:0a:51:49:9a: cc:ed:4c:6a:03:f1:c6:5d:88:a5:0b:92:10:aa:c6: 48:2c:d2:2a:7a:1e:a8:1f:e7:d3:fa:ac:48:ef:06: 22:ca:76:1a:21:97:e5:23:2f:ab:d4:2d:f7:ee:37: 7f:d1:aa:a0:d9:b9:d3:24:b3:fb:05:e3:f2:67:0c: a3:3f:06:aa:21:7c:28:a6:75:29:cb:72:7d:32:68: ee:89:c3:68:eb:d5:4b:6e:de:fd:1e:6e:64:dc:00: 55:a7:78:11:8c:a2:ca:27:e4:87:4b:94:75:e4:10: f2:45:79:af:04:fd:0a:00:06:d9:ff:44:4c:f5:b9: 91:71:5c:a6:a7:07:d0:17:57:e9:31:fa:8c:90:55: e0:9d:06:f8:bc:82:b1:b2:f0:43:74:77:d4:eb:41: 5d:2e:00:ca:44:3e:a4:68:e4:89:ea:51:7b:2f:6c: 05:b1:38:15:7f:e3:66:ed:18:d5:1d:be:ce:70:3d: c0:4b:11:ea:20:e6:a4:e9:db:73:2c:8b:5d:ca:33: 59:f3:b9:e4:29:49:71:e2:2b:ac:0e:1a:55:5f:d1: bb:76:5a:e3:23:b5:ac:9d:f2:4b:28:a9:98:d9:bc: 8d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:1E:FC:DA:60:31:42:85:0F:E2:13:94:2B:48:FF:0E:2A:48:D1:D5 X509v3 Authority Key Identifier: keyid:29:05:FB:32:12:BD:61:64:6F:B7:AF:63:3E:A1:A2:57:BC:3A:3D:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156971/48C221861D9211E2ADB30BF508B02CD2/KQX7MhK9YWRvt69jPqGiV7w6Pew.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQX7MhK9YWRvt69jPqGiV7w6Pew.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156971/48C221861D9211E2ADB30BF508B02CD2/KQX7MhK9YWRvt69jPqGiV7w6Pew.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:4e:9a:24:62:da:dd:9e:bf:0a:d7:2e:06:1e:7c:8e:9b:45: 2f:b7:b9:10:91:fe:26:88:8c:55:1e:2a:22:d5:2a:8a:b3:84: 54:2d:bb:7c:cc:6f:82:3d:88:b5:c3:d7:32:bb:71:9d:3f:f9: 47:d3:1a:00:76:91:40:e6:4a:e1:db:48:a5:d8:ac:72:76:21: dc:b6:5a:f6:ef:c0:02:35:5b:be:02:ab:35:25:98:1c:90:ee: fe:70:e4:21:4c:b2:7c:15:60:88:83:bc:95:2d:84:83:2e:4d: eb:b7:90:58:b5:a3:6a:e7:55:3c:a9:55:48:e8:b7:3f:02:25: 60:8c:2e:52:8e:54:8f:99:80:38:2b:2a:32:93:61:69:8d:87: 01:ff:65:7f:90:ba:d7:83:cd:e1:1b:02:82:08:0e:1c:71:8a: be:0f:57:d7:d8:e0:07:1f:c0:d3:7e:60:18:9d:47:c5:06:8e: 94:51:71:d9:d2:e0:1b:d2:f4:14:bb:88:70:0d:bc:8d:33:00: e5:ea:21:99:d0:0d:01:1f:ed:c6:24:f3:5b:17:5a:25:1e:22: 11:4a:d6:14:94:19:05:9d:55:5b:a7:2f:45:20:74:c0:77:35: 24:c4:31:b0:3c:0a:eb:65:c2:5a:ed:bf:03:28:30:2d:de:b9: 00:a9:ad:3a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY5NzExMTAvBgNVBAUTKDI5MDVGQjMyMTJCRDYxNjQ2RkI3QUY2MzNFQTFBMjU3 QkMzQTNERUMwHhcNMjYwOTI2MTQ0NDAyWhcNMjYxMDAzMTQ0NDAyWjAYMRYwFAYD VQQDEw02YWI3ZGEzMi02Y2VlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA62a1dZ958LZHPC7wd0iSz3hwXaUjd3qQ5wpRSZrM7UxqA/HGXYilC5IQqsZI LNIqeh6oH+fT+qxI7wYiynYaIZflIy+r1C337jd/0aqg2bnTJLP7BePyZwyjPwaq IXwopnUpy3J9MmjuicNo69VLbt79Hm5k3ABVp3gRjKLKJ+SHS5R15BDyRXmvBP0K AAbZ/0RM9bmRcVympwfQF1fpMfqMkFXgnQb4vIKxsvBDdHfU60FdLgDKRD6kaOSJ 6lF7L2wFsTgVf+Nm7RjVHb7OcD3ASxHqIOak6dtzLItdyjNZ87nkKUlx4iusDhpV X9G7dlrjI7WsnfJLKKmY2byN3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN0e/Npg MUKFD+ITlCtI/w4qSNHVMB8GA1UdIwQYMBaAFCkF+zISvWFkb7evYz6hole8Oj3s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Njk3MS80OEMyMjE4NjFE OTIxMUUyQURCMzBCRjUwOEIwMkNEMi9LUVg3TWhLOVlXUnZ0NjlqUHFHaVY3dzZQ ZXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tRWDdNaEs5WVdSdnQ2OWpQcUdpVjd3NlBldy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Njk3MS80OEMyMjE4NjFEOTIxMUUyQURCMzBCRjUwOEIwMkNEMi9LUVg3TWhLOVlX UnZ0NjlqUHFHaVY3dzZQZXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbE6aJGLa3Z6/CtcuBh58jptFL7e5EJH+JoiMVR4qItUqirOEVC27fMxvgj2I tcPXMrtxnT/5R9MaAHaRQOZK4dtIpdiscnYh3LZa9u/AAjVbvgKrNSWYHJDu/nDk IUyyfBVgiIO8lS2Egy5N67eQWLWjaudVPKlVSOi3PwIlYIwuUo5Uj5mAOCsqMpNh aY2HAf9lf5C614PN4RsCgggOHHGKvg9X19jgBx/A035gGJ1HxQaOlFFx2dLgG9L0 FLuIcA28jTMA5eohmdANAR/txiTzWxdaJR4iEUrWFJQZBZ1VW6cvRSB0wHc1JMQx sDwK62XCWu2/AygwLd65AKmtOg== -----END CERTIFICATE-----Generated at Sat Sep 26 18:50:04 2026 by rpki-client