$ rpki-client -vvvf rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft File: Qb--vmNSH7BO2BI8aOXAza9dBc0.mft (raw, json) Hash identifier: Rb8bf6zhFSmzI0EuhBLnfLmMsysvWxWaERBNsKybg7w= Subject key identifier: 15:6A:50:FD:F8:07:53:ED:2F:EE:E4:4A:E2:FC:D4:79:CC:27:4E:CC Authority key identifier: 41:BF:BE:BE:63:52:1F:B0:4E:D8:12:3C:68:E5:C0:CD:AF:5D:05:CD Certificate issuer: /CN=A9170982/serialNumber=41BFBEBE63521FB04ED8123C68E5C0CDAF5D05CD Certificate serial: 04B4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qb--vmNSH7BO2BI8aOXAza9dBc0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft Manifest number: 048F Signing time: Tue 22 Sep 2026 23:44:29 +0000 Manifest this update: Tue 22 Sep 2026 23:44:28 +0000 Manifest next update: Tue 29 Sep 2026 23:44:28 +0000 Files and hashes: 1: Qb--vmNSH7BO2BI8aOXAza9dBc0.crl (hash: lin51pMXpyBJymhj2WXuDtWeTBxkzXNXkLAlV8p2D2I=) 2: 72CC7E489B7011F1BE44BE903D11F970.roa (hash: 3I4v5qOzX+tYbITH7A5Ntx0nhzYCg2Bwe+pDTdKTk1M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.crl rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qb--vmNSH7BO2BI8aOXAza9dBc0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 23:44:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1204 (0x4b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170982, serialNumber=41BFBEBE63521FB04ED8123C68E5C0CDAF5D05CD Validity Not Before: Sep 22 23:44:28 2026 GMT Not After : Sep 29 23:44:28 2026 GMT Subject: CN=6ab312dd-df16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:36:38:f4:5a:bf:5c:a4:32:1f:de:10:ea:8a: 88:3a:0c:f9:0b:b4:ac:54:9d:15:54:86:1f:54:36: a1:b6:83:ab:50:9a:5e:fc:b1:93:b9:2f:cd:a3:93: 99:df:15:4a:45:3a:d2:6f:b9:23:ed:3b:4f:72:c3: da:bf:7d:db:70:15:85:3d:e5:e5:4a:ff:20:24:33: a0:cc:e6:04:e2:0f:d0:2a:6e:aa:65:50:a0:62:06: ed:8a:b6:b6:88:1a:95:b8:ba:c7:ab:33:24:23:f4: 5a:5d:c4:e3:2a:7a:a8:af:76:77:01:3d:74:4b:8f: ee:7e:b4:54:38:8c:92:ed:0f:97:3e:8e:50:18:54: f0:50:d9:ea:3e:50:c0:eb:a2:df:c0:2b:e8:6a:00: 70:c1:05:e5:5d:b8:6c:94:b3:81:b6:85:42:c7:10: d7:f9:5c:4c:05:64:77:df:2b:28:66:b1:6b:10:23: 6b:90:ec:ef:b9:2a:95:1c:58:2f:bf:9d:a9:a4:75: a0:8b:02:c7:fd:48:30:b4:14:ae:74:79:2e:71:34: a5:82:61:57:15:7d:28:7c:70:77:95:79:dd:c5:fc: 22:a6:9b:d0:9c:65:df:73:f0:07:b7:34:a3:24:ea: 32:0e:1e:98:ad:c2:31:62:41:c7:e9:9d:47:83:e5: 02:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:6A:50:FD:F8:07:53:ED:2F:EE:E4:4A:E2:FC:D4:79:CC:27:4E:CC X509v3 Authority Key Identifier: keyid:41:BF:BE:BE:63:52:1F:B0:4E:D8:12:3C:68:E5:C0:CD:AF:5D:05:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qb--vmNSH7BO2BI8aOXAza9dBc0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:d0:43:83:1d:6f:66:f0:be:61:8c:99:dc:c9:c3:0e:73:0a: 81:07:70:5f:f1:41:9d:b2:de:b7:e7:f2:bf:3d:c5:78:f6:d1: 78:b3:4e:82:ef:99:b0:e1:37:73:f2:4f:ca:24:57:e3:1a:19: 9a:9c:da:a7:82:c0:0d:98:cb:53:1d:88:2c:dd:4e:84:cc:5c: 6d:89:ba:14:69:40:21:72:8f:aa:85:a6:ca:f3:35:68:17:d8: ec:61:a4:d5:be:24:b1:5f:3d:a4:b7:a2:05:46:7e:47:4d:3e: 50:c5:9c:65:b1:f2:2b:fa:aa:5d:e3:6e:71:e7:85:b6:83:fc: 47:fc:ed:bc:cd:9d:e1:04:49:4a:67:b1:b3:8d:55:f0:9d:48: 23:34:c4:10:5a:ad:89:1a:01:ce:6e:3f:b0:35:8d:57:46:e7: 0f:ba:aa:89:a1:b6:64:bb:00:4d:58:3b:6b:5d:78:4b:07:4c: 48:e8:71:dc:89:94:e9:f3:1d:65:8d:da:dd:ba:16:20:43:39: 5b:08:30:56:19:f2:54:9a:54:78:1e:34:09:07:a6:d3:5e:05: db:43:91:92:b8:98:56:9b:2c:59:af:6f:6b:4e:c6:20:a2:4d: 88:ae:e0:61:05:2e:82:1d:86:29:c7:97:e1:33:58:e7:cf:9c: c3:8b:d6:d4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBLQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA5ODIxMTAvBgNVBAUTKDQxQkZCRUJFNjM1MjFGQjA0RUQ4MTIzQzY4RTVDMENE QUY1RDA1Q0QwHhcNMjYwOTIyMjM0NDI4WhcNMjYwOTI5MjM0NDI4WjAYMRYwFAYD VQQDEw02YWIzMTJkZC1kZjE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzDY49Fq/XKQyH94Q6oqIOgz5C7SsVJ0VVIYfVDahtoOrUJpe/LGTuS/No5OZ 3xVKRTrSb7kj7TtPcsPav33bcBWFPeXlSv8gJDOgzOYE4g/QKm6qZVCgYgbtira2 iBqVuLrHqzMkI/RaXcTjKnqor3Z3AT10S4/ufrRUOIyS7Q+XPo5QGFTwUNnqPlDA 66LfwCvoagBwwQXlXbhslLOBtoVCxxDX+VxMBWR33ysoZrFrECNrkOzvuSqVHFgv v52ppHWgiwLH/UgwtBSudHkucTSlgmFXFX0ofHB3lXndxfwippvQnGXfc/AHtzSj JOoyDh6YrcIxYkHH6Z1Hg+UCOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBVqUP34 B1PtL+7kSuL81HnMJ07MMB8GA1UdIwQYMBaAFEG/vr5jUh+wTtgSPGjlwM2vXQXN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDk4Mi9DRjIwNUM2MEFD MTMxMUVDQjc3NkIyMDlDNEY5QUUwMi9RYi0tdm1OU0g3Qk8yQkk4YU9YQXphOWRC YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FiLS12bU5TSDdCTzJCSThhT1hBemE5ZEJjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDk4Mi9DRjIwNUM2MEFDMTMxMUVDQjc3NkIyMDlDNEY5QUUwMi9RYi0tdm1OU0g3 Qk8yQkk4YU9YQXphOWRCYzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQtBDgx1vZvC+YYyZ3MnDDnMKgQdwX/FBnbLet+fyvz3FePbReLNOgu+ZsOE3 c/JPyiRX4xoZmpzap4LADZjLUx2ILN1OhMxcbYm6FGlAIXKPqoWmyvM1aBfY7GGk 1b4ksV89pLeiBUZ+R00+UMWcZbHyK/qqXeNuceeFtoP8R/ztvM2d4QRJSmexs41V 8J1IIzTEEFqtiRoBzm4/sDWNV0bnD7qqiaG2ZLsATVg7a114SwdMSOhx3ImU6fMd ZY3a3boWIEM5WwgwVhnyVJpUeB40CQem014F20ORkriYVpssWa9va07GIKJNiK7g YQUugh2GKceX4TNY58+cw4vW1A== -----END CERTIFICATE-----Generated at Wed Sep 23 09:48:27 2026 by rpki-client