$ rpki-client -vvvf rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft File: qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft (raw, json) Hash identifier: MCVsMpME8RVo3WfQXKKM5w0mT+LpC4J5K90UHMClO4o= Subject key identifier: BE:80:84:CE:19:6A:08:AC:72:D7:70:FC:E6:F6:72:CD:25:51:F4:0C Authority key identifier: AB:11:E8:09:F2:BC:66:B0:D1:E6:0B:8A:31:F8:6B:5B:82:E0:0E:39 Certificate issuer: /CN=A9191FA5/serialNumber=AB11E809F2BC66B0D1E60B8A31F86B5B82E00E39 Certificate serial: 3784 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft Manifest number: 368C Signing time: Tue 22 Sep 2026 14:28:04 +0000 Manifest this update: Tue 22 Sep 2026 14:28:04 +0000 Manifest next update: Tue 29 Sep 2026 14:28:04 +0000 Files and hashes: 1: qxHoCfK8ZrDR5guKMfhrW4LgDjk.crl (hash: ZPPhyaobCOTeHjJkjjY6qbVxo1uwbLOFbP1o/GR5wck=) 2: FF09B6BEC2E511EBBDB1B180C4F9AE02.roa (hash: a90RRxvfJuCInXMqPhHrJeh2ozk4EcWexWMPqgF9CUE=) 3: FDE510BCC2E511EBBDB1B180C4F9AE02.roa (hash: WQPSpMOv8/dEP+Ftx23/DGMKPs2Lbujf5CefihOR5E0=) 4: B8E7D994D00711EAB66A1255C4F9AE02.roa (hash: ceidhlKu5HDjsUw7jcr2YLL4PSxhocZYikLNU4m7FQc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.crl rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 14:28:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14212 (0x3784) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191FA5, serialNumber=AB11E809F2BC66B0D1E60B8A31F86B5B82E00E39 Validity Not Before: Sep 22 14:28:04 2026 GMT Not After : Sep 29 14:28:04 2026 GMT Subject: CN=6ab29074-aea4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:19:5a:b1:fd:5a:86:b2:28:e6:c7:19:23:ce: 41:49:25:81:b8:1f:d0:99:ba:2a:fd:ce:1e:85:27: a0:a4:ea:91:2b:35:bb:69:f4:51:53:9d:c4:c0:5e: e1:07:99:3f:99:5a:27:f7:6d:a0:1d:3c:03:7e:87: 6d:59:32:1e:79:94:42:28:2a:fd:ea:a7:15:55:be: 95:0a:3b:59:3a:a4:a4:6a:fc:03:08:4b:4e:87:74: 8e:e4:a6:91:86:f3:a6:0e:81:7a:bd:71:75:e0:a4: a3:98:ef:92:20:07:44:be:60:14:35:1d:4e:1e:8a: 16:cd:11:84:67:95:1f:48:85:07:7f:1b:ee:96:37: 70:54:fa:99:1f:63:68:e8:5a:5b:51:91:ac:59:25: 52:13:78:ab:43:28:87:e3:46:7d:ac:ce:b2:65:d4: 46:ae:b8:9c:6d:25:d1:a0:ba:93:66:8e:12:50:bc: 55:12:ae:b9:fb:15:1d:da:0a:af:fa:c4:08:f4:31: 0b:e3:e0:a8:a7:b2:f9:ae:66:83:4c:44:3c:67:d0: 2d:44:d5:f9:19:28:3b:f9:73:ca:af:33:67:73:33: a1:cb:3b:1d:8c:82:da:c5:95:9f:56:24:77:8f:07: 00:03:12:db:1c:99:18:14:72:2e:55:60:a0:c5:a1: 53:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:80:84:CE:19:6A:08:AC:72:D7:70:FC:E6:F6:72:CD:25:51:F4:0C X509v3 Authority Key Identifier: keyid:AB:11:E8:09:F2:BC:66:B0:D1:E6:0B:8A:31:F8:6B:5B:82:E0:0E:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:0a:bc:10:c0:96:5c:c0:96:e6:4d:2b:82:75:df:c0:52:42: b4:a7:1e:31:3b:85:1f:59:66:df:99:11:83:d2:77:0d:43:5b: e0:bd:6b:2e:fe:7a:0f:da:7f:b4:e3:5d:9d:b8:da:53:d4:48: e2:29:81:fb:94:80:e2:6e:b9:98:11:f8:f0:2a:f8:ec:73:18: 4b:9b:38:d5:7f:ae:54:64:7b:5d:f6:1f:75:14:a2:fc:8b:d3: ff:7e:bb:5d:67:55:cb:0e:d5:93:c1:99:83:ad:07:78:60:3b: 5d:10:7a:a1:2c:11:de:33:1c:d3:da:96:52:7c:ba:0e:c6:bb: 05:de:84:07:07:6a:a0:52:78:50:db:a4:93:54:c4:37:32:df: fb:bf:df:3a:80:11:0d:84:c1:50:8e:44:19:22:a6:f0:56:5c: f1:d5:0a:38:af:b5:ae:64:73:c3:9d:7c:81:52:47:3d:95:88: b2:4c:6d:ed:87:16:8c:48:31:fc:62:7f:62:e3:f7:ed:6b:e5: c2:dd:e8:25:9c:77:5b:e6:50:c7:12:e2:06:86:39:75:ba:26: de:8a:bf:ec:2d:02:3f:f0:a8:89:46:32:fd:de:32:c1:1b:9f: ef:f0:c8:8f:6c:ac:2f:15:21:8f:c7:c0:c3:64:b1:e1:4b:d9: dd:e3:53:95 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICN4QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFGQTUxMTAvBgNVBAUTKEFCMTFFODA5RjJCQzY2QjBEMUU2MEI4QTMxRjg2QjVC ODJFMDBFMzkwHhcNMjYwOTIyMTQyODA0WhcNMjYwOTI5MTQyODA0WjAYMRYwFAYD VQQDEw02YWIyOTA3NC1hZWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAshlasf1ahrIo5scZI85BSSWBuB/Qmboq/c4ehSegpOqRKzW7afRRU53EwF7h B5k/mVon922gHTwDfodtWTIeeZRCKCr96qcVVb6VCjtZOqSkavwDCEtOh3SO5KaR hvOmDoF6vXF14KSjmO+SIAdEvmAUNR1OHooWzRGEZ5UfSIUHfxvuljdwVPqZH2No 6FpbUZGsWSVSE3irQyiH40Z9rM6yZdRGrricbSXRoLqTZo4SULxVEq65+xUd2gqv +sQI9DEL4+Cop7L5rmaDTEQ8Z9AtRNX5GSg7+XPKrzNnczOhyzsdjILaxZWfViR3 jwcAAxLbHJkYFHIuVWCgxaFTUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL6AhM4Z agisctdw/Ob2cs0lUfQMMB8GA1UdIwQYMBaAFKsR6AnyvGaw0eYLijH4a1uC4A45 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUZBNS8wODA1NkNFNDFE ODcxMUUyOUREM0M2REUwOEIwMkNEMi9xeEhvQ2ZLOFpyRFI1Z3VLTWZoclc0TGdE amsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F4SG9DZks4WnJEUjVndUtNZmhyVzRMZ0Rqay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUZBNS8wODA1NkNFNDFEODcxMUUyOUREM0M2REUwOEIwMkNEMi9xeEhvQ2ZLOFpy RFI1Z3VLTWZoclc0TGdEamsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPQq8EMCWXMCW5k0rgnXfwFJCtKceMTuFH1lm35kRg9J3DUNb4L1rLv56D9p/ tONdnbjaU9RI4imB+5SA4m65mBH48Cr47HMYS5s41X+uVGR7XfYfdRSi/IvT/367 XWdVyw7Vk8GZg60HeGA7XRB6oSwR3jMc09qWUny6Dsa7Bd6EBwdqoFJ4UNukk1TE NzLf+7/fOoARDYTBUI5EGSKm8FZc8dUKOK+1rmRzw518gVJHPZWIskxt7YcWjEgx /GJ/YuP37Wvlwt3oJZx3W+ZQxxLiBoY5dbom3oq/7C0CP/CoiUYy/d4ywRuf7/DI j2ysLxUhj8fAw2Sx4UvZ3eNTlQ== -----END CERTIFICATE-----Generated at Tue Sep 22 21:43:06 2026 by rpki-client