$ rpki-client -vvvf rpki.apnic.net/member_repository/A917C09A/B2966D9EEAD711F0B9CBFBE6646F56BC/Qe0RfxoN1CRX1JR491zcsoZTpx8.mft File: Qe0RfxoN1CRX1JR491zcsoZTpx8.mft (raw, json) Hash identifier: 1a51hFvPYjsn2QFcMT+evmN8HzeQDNrwzQPAZA3kflA= Subject key identifier: E7:D7:80:33:7D:D1:86:E4:EC:42:49:26:4D:BD:4D:7F:B8:B2:0E:9E Authority key identifier: 41:ED:11:7F:1A:0D:D4:24:57:D4:94:78:F7:5C:DC:B2:86:53:A7:1F Certificate issuer: /CN=A917C09A/serialNumber=41ED117F1A0DD42457D49478F75CDCB28653A71F Certificate serial: 91 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qe0RfxoN1CRX1JR491zcsoZTpx8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C09A/B2966D9EEAD711F0B9CBFBE6646F56BC/Qe0RfxoN1CRX1JR491zcsoZTpx8.mft Manifest number: 8E Signing time: Thu 01 Oct 2026 08:55:26 +0000 Manifest this update: Thu 01 Oct 2026 08:55:26 +0000 Manifest next update: Thu 08 Oct 2026 08:55:26 +0000 Files and hashes: 1: Qe0RfxoN1CRX1JR491zcsoZTpx8.crl (hash: 9rMwEIFkY4Iyv+qtkIiMhusSLMniYeGM1Y2TvzU9tSs=) 2: BBB1B36C387911F18844C9F1B7833773.roa (hash: sySn8z7CtimAbBeWbFVeZLj6Bb/UV3HDRIyOYd+GVX0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C09A/B2966D9EEAD711F0B9CBFBE6646F56BC/Qe0RfxoN1CRX1JR491zcsoZTpx8.crl rsync://rpki.apnic.net/member_repository/A917C09A/B2966D9EEAD711F0B9CBFBE6646F56BC/Qe0RfxoN1CRX1JR491zcsoZTpx8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qe0RfxoN1CRX1JR491zcsoZTpx8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Oct 2026 08:55:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 145 (0x91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C09A, serialNumber=41ED117F1A0DD42457D49478F75CDCB28653A71F Validity Not Before: Oct 1 08:55:26 2026 GMT Not After : Oct 8 08:55:26 2026 GMT Subject: CN=6abe1ffe-c4e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:1a:c8:30:0d:3d:ec:6e:81:5b:a9:62:1a:e6: 32:3a:69:3f:64:24:a8:d8:97:2f:80:56:13:79:5f: 80:50:4e:1d:32:be:e6:1c:76:06:a2:31:38:d8:f0: 49:dd:61:52:18:7b:56:bc:a1:8b:52:28:0b:97:1d: bd:66:69:22:52:ce:89:ad:56:2d:48:f1:a7:59:8a: 89:04:c7:52:7f:3e:c7:2d:b1:73:26:93:0a:35:34: 27:65:2e:f5:58:87:99:48:26:80:7f:86:fe:f5:af: aa:b8:bd:9c:cd:24:3f:71:39:10:4e:90:64:f1:cc: 51:5d:19:6b:f2:ac:e4:2d:ee:50:17:4d:64:ec:d8: 0b:e1:57:ca:54:ee:ea:13:9f:6d:84:6d:3e:0f:aa: a7:fe:07:1c:a0:15:34:b3:ac:53:1e:51:94:72:5a: c7:71:2d:ae:cc:17:fc:ea:60:13:a5:67:dc:8a:c0: 67:58:83:a3:59:85:02:bb:dd:44:df:1e:82:fc:1d: dc:e2:02:38:ba:97:8f:3c:38:fe:4c:d2:e0:8e:b2: ae:fb:ed:c8:ef:7a:21:3e:64:7f:10:7c:df:54:be: eb:47:71:7d:0c:aa:1d:ec:37:9b:92:68:66:35:d9: f0:39:3c:3d:9e:55:a5:e9:b1:88:49:54:75:9f:da: d0:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:D7:80:33:7D:D1:86:E4:EC:42:49:26:4D:BD:4D:7F:B8:B2:0E:9E X509v3 Authority Key Identifier: keyid:41:ED:11:7F:1A:0D:D4:24:57:D4:94:78:F7:5C:DC:B2:86:53:A7:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C09A/B2966D9EEAD711F0B9CBFBE6646F56BC/Qe0RfxoN1CRX1JR491zcsoZTpx8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qe0RfxoN1CRX1JR491zcsoZTpx8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C09A/B2966D9EEAD711F0B9CBFBE6646F56BC/Qe0RfxoN1CRX1JR491zcsoZTpx8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:51:f8:eb:0b:f4:3a:34:27:38:69:f5:66:d1:f9:89:dc:32: eb:2d:59:08:0e:6a:34:89:70:ff:7f:94:d5:3d:bb:8a:98:c6: 79:02:ef:d5:13:09:59:86:08:ac:ff:df:2b:3d:1e:f5:53:01: 55:ac:a7:02:30:c2:ea:c0:d0:95:ba:e2:48:f7:4e:14:87:a6: 3f:65:e8:5c:8d:56:c3:43:65:e6:59:ad:20:c8:e4:5f:ae:54: 55:1a:71:aa:7f:4f:34:e0:06:d8:17:cf:5d:b6:63:cc:17:9e: 6a:8d:5b:a8:c3:86:7b:0e:13:44:f4:01:01:4e:f9:44:43:79: f6:dc:7b:ad:4c:31:09:99:62:2d:14:ad:c6:d7:fc:c9:2a:79: 1f:60:88:bd:8e:54:3f:0a:ce:52:be:b0:2d:9e:1f:cc:e4:03: c1:16:39:a8:27:d5:34:01:03:c3:a5:93:7e:f3:0e:e7:c3:16: ea:14:f1:95:80:be:d6:ea:53:d3:30:bd:45:33:69:e4:b0:c2: 02:26:ee:59:48:62:e2:c6:60:67:3b:73:9a:82:ee:41:5b:3e: 6f:a8:67:aa:63:be:b6:16:b4:a6:83:1d:88:08:e6:5d:07:ed: 66:e0:2b:b0:7c:33:c3:bd:a7:2b:15:c5:c4:02:55:c5:24:7c: 7b:58:8b:66 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MwOUExMTAvBgNVBAUTKDQxRUQxMTdGMUEwREQ0MjQ1N0Q0OTQ3OEY3NUNEQ0Iy ODY1M0E3MUYwHhcNMjYxMDAxMDg1NTI2WhcNMjYxMDA4MDg1NTI2WjAYMRYwFAYD VQQDEw02YWJlMWZmZS1jNGU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlBrIMA097G6BW6liGuYyOmk/ZCSo2JcvgFYTeV+AUE4dMr7mHHYGojE42PBJ 3WFSGHtWvKGLUigLlx29ZmkiUs6JrVYtSPGnWYqJBMdSfz7HLbFzJpMKNTQnZS71 WIeZSCaAf4b+9a+quL2czSQ/cTkQTpBk8cxRXRlr8qzkLe5QF01k7NgL4VfKVO7q E59thG0+D6qn/gccoBU0s6xTHlGUclrHcS2uzBf86mATpWfcisBnWIOjWYUCu91E 3x6C/B3c4gI4upePPDj+TNLgjrKu++3I73ohPmR/EHzfVL7rR3F9DKod7Debkmhm NdnwOTw9nlWl6bGISVR1n9rQOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOfXgDN9 0Ybk7EJJJk29TX+4sg6eMB8GA1UdIwQYMBaAFEHtEX8aDdQkV9SUePdc3LKGU6cf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzA5QS9CMjk2NkQ5RUVB RDcxMUYwQjlDQkZCRTY2NDZGNTZCQy9RZTBSZnhvTjFDUlgxSlI0OTF6Y3NvWlRw eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FlMFJmeG9OMUNSWDFKUjQ5MXpjc29aVHB4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzA5QS9CMjk2NkQ5RUVBRDcxMUYwQjlDQkZCRTY2NDZGNTZCQy9RZTBSZnhvTjFD UlgxSlI0OTF6Y3NvWlRweDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdVH46wv0OjQnOGn1ZtH5idwy6y1ZCA5qNIlw/3+U1T27ipjGeQLv1RMJWYYI rP/fKz0e9VMBVaynAjDC6sDQlbriSPdOFIemP2XoXI1Ww0Nl5lmtIMjkX65UVRpx qn9PNOAG2BfPXbZjzBeeao1bqMOGew4TRPQBAU75REN59tx7rUwxCZliLRStxtf8 ySp5H2CIvY5UPwrOUr6wLZ4fzOQDwRY5qCfVNAEDw6WTfvMO58MW6hTxlYC+1upT 0zC9RTNp5LDCAibuWUhi4sZgZztzmoLuQVs+b6hnqmO+tha0poMdiAjmXQftZuAr sHwzw72nKxXFxAJVxSR8e1iLZg== -----END CERTIFICATE-----Generated at Fri Oct 2 08:42:04 2026 by rpki-client