$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E754/ACD1D7701DAB11E2BA2806AA08B02CD2/tQk3XiWpXStZwZWBw8Y1topJES0.mft File: tQk3XiWpXStZwZWBw8Y1topJES0.mft (raw, json) Hash identifier: MK5puxmVC7hQTXNpyVXASdMW5H+9M1fQJI9+68F7HJE= Subject key identifier: CA:A9:E3:2E:7E:B0:D7:4E:52:61:40:1F:F5:3F:51:C8:2D:91:2C:05 Authority key identifier: B5:09:37:5E:25:A9:5D:2B:59:C1:95:81:C3:C6:35:B6:8A:49:11:2D Certificate issuer: /CN=A917E754/serialNumber=B509375E25A95D2B59C19581C3C635B68A49112D Certificate serial: 358F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tQk3XiWpXStZwZWBw8Y1topJES0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E754/ACD1D7701DAB11E2BA2806AA08B02CD2/tQk3XiWpXStZwZWBw8Y1topJES0.mft Manifest number: 3585 Signing time: Tue 22 Sep 2026 15:15:20 +0000 Manifest this update: Tue 22 Sep 2026 15:15:20 +0000 Manifest next update: Tue 29 Sep 2026 15:15:20 +0000 Files and hashes: 1: tQk3XiWpXStZwZWBw8Y1topJES0.crl (hash: K3vOtrDmyu+Zu1Cl79bAO3ltFo7VLjrKol9TLyYtuWc=) 2: 2F79F386050511EA87CC7D42C4F9AE02.roa (hash: bvmOeL2YXx3nWwBQZ93HrV/AoxQKQL3Er6wwEPR+cds=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E754/ACD1D7701DAB11E2BA2806AA08B02CD2/tQk3XiWpXStZwZWBw8Y1topJES0.crl rsync://rpki.apnic.net/member_repository/A917E754/ACD1D7701DAB11E2BA2806AA08B02CD2/tQk3XiWpXStZwZWBw8Y1topJES0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tQk3XiWpXStZwZWBw8Y1topJES0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 15:15:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13711 (0x358f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E754, serialNumber=B509375E25A95D2B59C19581C3C635B68A49112D Validity Not Before: Sep 22 15:15:20 2026 GMT Not After : Sep 29 15:15:20 2026 GMT Subject: CN=6ab29b88-7e11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f8:76:0f:d2:7e:43:14:d0:ca:9a:aa:66:60: b6:44:e3:f3:9f:d7:b0:4b:0a:ed:49:0b:c8:33:2a: 75:96:6b:8d:45:45:82:e8:85:f5:c8:bd:b5:c7:38: de:b4:95:08:d0:8c:fb:de:a6:57:70:f2:6c:88:b2: 27:f7:40:bc:a5:54:93:25:aa:b7:20:ac:6c:e1:68: e9:2f:6b:0d:42:9c:60:b1:fe:f7:3d:7d:0b:f4:18: d8:54:b9:df:f4:9e:b5:f0:fb:73:00:97:ca:e6:b1: ba:34:51:28:db:41:0b:64:95:40:06:3a:c9:64:16: 5c:90:b5:93:80:16:8c:9b:e0:92:7b:54:98:58:27: f8:b6:85:04:49:6e:d9:e9:80:8d:c8:d7:55:87:1b: f3:0e:9f:06:14:09:15:2e:6e:ee:7a:8b:9e:a0:40: aa:c3:44:d1:a8:99:3a:d7:21:a5:79:68:d9:f7:03: bb:05:d4:64:6c:9b:a4:e7:36:7f:2b:a7:95:c2:9d: 5c:17:8c:a2:2a:c5:15:db:0b:14:10:40:b3:78:18: 4a:bb:e4:17:98:b6:c9:38:48:63:6c:61:65:8d:bf: 33:6a:c1:54:00:1e:62:12:0e:8a:c1:64:69:96:40: 11:5d:d6:1d:a8:6e:77:d1:72:f5:b1:3d:ed:8c:d9: e4:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:A9:E3:2E:7E:B0:D7:4E:52:61:40:1F:F5:3F:51:C8:2D:91:2C:05 X509v3 Authority Key Identifier: keyid:B5:09:37:5E:25:A9:5D:2B:59:C1:95:81:C3:C6:35:B6:8A:49:11:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E754/ACD1D7701DAB11E2BA2806AA08B02CD2/tQk3XiWpXStZwZWBw8Y1topJES0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tQk3XiWpXStZwZWBw8Y1topJES0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E754/ACD1D7701DAB11E2BA2806AA08B02CD2/tQk3XiWpXStZwZWBw8Y1topJES0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:ad:03:d4:b7:d5:4d:59:ba:f5:65:d9:4b:53:1d:e5:14:b8: 9a:b1:f5:17:70:d1:e2:eb:30:17:1f:06:bb:fa:aa:70:42:bc: 5e:cf:37:05:be:07:4e:32:b3:45:93:30:2d:a0:4c:a8:bc:af: 00:11:03:a9:cb:17:90:fc:a1:c3:71:e7:01:a4:dc:04:25:5b: 41:d4:4c:9b:d3:c8:cd:ad:b7:1d:10:b6:ff:6f:23:d7:65:56: 95:ef:de:5e:c9:fe:bb:65:17:ac:5c:01:c3:6c:31:33:af:5f: 98:3b:aa:d5:74:dc:d0:1a:9d:5b:44:8b:37:c4:5d:c5:d5:55: 92:7b:d7:60:91:46:1b:d2:60:2e:7f:35:d1:3f:fb:c1:ee:9d: 7d:36:75:e2:b3:28:1d:77:04:fd:d8:40:53:ce:53:4b:33:3a: 8e:67:2b:86:ed:54:e8:b1:54:c2:ef:20:4a:81:1c:7c:f7:c7: 12:4a:37:ee:89:af:c6:08:17:10:c1:9b:26:a0:c6:fd:c8:1f: 04:40:1d:f8:3a:1a:67:69:b5:fd:b7:64:0a:b7:00:09:fd:1b: 2d:ce:af:bd:7d:0f:d9:0b:3a:e9:a4:76:ce:74:bb:f7:f3:d7: 81:df:70:2a:48:e1:e4:38:9d:7f:b4:c5:f9:f6:51:d2:28:a9: f9:cb:fc:e8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U3NTQxMTAvBgNVBAUTKEI1MDkzNzVFMjVBOTVEMkI1OUMxOTU4MUMzQzYzNUI2 OEE0OTExMkQwHhcNMjYwOTIyMTUxNTIwWhcNMjYwOTI5MTUxNTIwWjAYMRYwFAYD VQQDEw02YWIyOWI4OC03ZTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0fh2D9J+QxTQypqqZmC2ROPzn9ewSwrtSQvIMyp1lmuNRUWC6IX1yL21xzje tJUI0Iz73qZXcPJsiLIn90C8pVSTJaq3IKxs4WjpL2sNQpxgsf73PX0L9BjYVLnf 9J618PtzAJfK5rG6NFEo20ELZJVABjrJZBZckLWTgBaMm+CSe1SYWCf4toUESW7Z 6YCNyNdVhxvzDp8GFAkVLm7ueoueoECqw0TRqJk61yGleWjZ9wO7BdRkbJuk5zZ/ K6eVwp1cF4yiKsUV2wsUEECzeBhKu+QXmLbJOEhjbGFljb8zasFUAB5iEg6KwWRp lkARXdYdqG530XL1sT3tjNnkrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMqp4y5+ sNdOUmFAH/U/UcgtkSwFMB8GA1UdIwQYMBaAFLUJN14lqV0rWcGVgcPGNbaKSREt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTc1NC9BQ0QxRDc3MDFE QUIxMUUyQkEyODA2QUEwOEIwMkNEMi90UWszWGlXcFhTdFp3WldCdzhZMXRvcEpF UzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RRazNYaVdwWFN0WndaV0J3OFkxdG9wSkVTMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTc1NC9BQ0QxRDc3MDFEQUIxMUUyQkEyODA2QUEwOEIwMkNEMi90UWszWGlXcFhT dFp3WldCdzhZMXRvcEpFUzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAL60D1LfVTVm69WXZS1Md5RS4mrH1F3DR4uswFx8Gu/qqcEK8Xs83Bb4HTjKz RZMwLaBMqLyvABEDqcsXkPyhw3HnAaTcBCVbQdRMm9PIza23HRC2/28j12VWle/e Xsn+u2UXrFwBw2wxM69fmDuq1XTc0BqdW0SLN8RdxdVVknvXYJFGG9JgLn810T/7 we6dfTZ14rMoHXcE/dhAU85TSzM6jmcrhu1U6LFUwu8gSoEcfPfHEko37omvxggX EMGbJqDG/cgfBEAd+DoaZ2m1/bdkCrcACf0bLc6vvX0P2Qs66aR2znS79/PXgd9w Kkjh5Didf7TF+fZR0iip+cv86A== -----END CERTIFICATE-----Generated at Wed Sep 23 16:57:18 2026 by rpki-client