$ rpki-client -vvvf rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.mft File: Q2ssXwP5HKdBxqJJ3AFabVRKYqY.mft (raw, json) Hash identifier: vZNPa2aHBNroez78UaD2J+PlJhwkOK8Ljly0XfT/dms= Subject key identifier: C7:72:D9:18:4B:55:E3:48:9A:B3:CA:59:6C:3D:C8:56:21:D2:0F:A7 Authority key identifier: 43:6B:2C:5F:03:F9:1C:A7:41:C6:A2:49:DC:01:5A:6D:54:4A:62:A6 Certificate issuer: /CN=A911647C/serialNumber=436B2C5F03F91CA741C6A249DC015A6D544A62A6 Certificate serial: 0BEF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.mft Manifest number: 0B2C Signing time: Tue 20 Oct 2026 19:35:10 +0000 Manifest this update: Tue 20 Oct 2026 19:35:10 +0000 Manifest next update: Tue 27 Oct 2026 19:35:10 +0000 Files and hashes: 1: Q2ssXwP5HKdBxqJJ3AFabVRKYqY.crl (hash: b5pIx7wyp6ayj8w9uhFQOF0TDgornRAL39OqRwrIUU8=) 2: C3E2252E205F11EE8117111CC4F9AE02.roa (hash: wpGRFC6+DwJQoD/Bm6hMgYO5Gr04EgHxiy8sbfP7iA8=) 3: 84023C06D24611EABDDF5344C4F9AE02.roa (hash: LpUWhMMembbOWPh50IbGhsLcg7v+awk6J0ISPizwZwo=) 4: 8626FFC65AE511EBA452D33EC4F9AE02.roa (hash: sw6eH1M5hEn6a0pc3B0uLVLZCRXvmEkQN01rQxgEvj0=) 5: 553170245AC511EBA052F663C4F9AE02.roa (hash: NBDkJIuqHlF4I8cMlSivAAbBMzPvILaMaBqKjeLV/KQ=) 6: 0DE32D9C2B1E11F0AFEB852DC4F9AE02.roa (hash: GhZxcNMvyQlSrFSWmku1+ahVlAxZoEGclnQbU2Qrymw=) 7: 0EA44D4E5ADD11EBB9CEE568C4F9AE02.roa (hash: GKBnrOK5UbpE6Y1zn126/+tVLBVe3fXMAkHrduoxCcI=) 8: 61EFB2ACAC3611EDA5995F3FC4F9AE02.roa (hash: wZo18R1LnD+2k6h4J7pMIrHXFSVwyqxLJaqUcBl2koQ=) 9: DCF88EAE5ED811EBAB677671C4F9AE02.roa (hash: SkOhlI1Sq/LIctQQV3ASYYQ+aRYJDMBcBGKvl4fYf/A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.crl rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 19:35:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3055 (0xbef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911647C, serialNumber=436B2C5F03F91CA741C6A249DC015A6D544A62A6 Validity Not Before: Oct 20 19:35:10 2026 GMT Not After : Oct 27 19:35:10 2026 GMT Subject: CN=6ad7c26e-a833 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b7:54:c3:06:5c:09:6c:d8:09:55:52:50:2b: b3:f8:36:d4:d4:26:76:28:f1:6f:de:c6:4b:24:03: 33:33:bc:87:ef:17:ed:f1:b4:8d:70:d5:bb:b5:2a: f5:8a:82:d6:69:7b:59:1e:a6:87:3d:1f:d6:34:de: 6f:2f:8e:97:5a:66:41:1f:b2:1d:a7:a7:08:98:5f: f2:d5:ad:76:e6:4c:d1:22:19:8e:d9:ff:62:4d:96: 86:8a:39:65:b6:ef:03:b4:b2:2a:4d:a5:0d:04:78: b8:a5:ed:e4:29:97:e3:b7:5c:1b:74:62:8e:82:3d: 4d:ab:f1:f4:1d:95:91:d5:c4:86:1e:26:23:fe:62: 98:0a:84:56:48:2a:26:85:03:9d:8b:e6:3b:f6:9c: 01:03:c3:4d:01:43:ff:1e:41:43:01:47:e2:4c:38: 81:63:e5:ca:6e:bd:02:c5:7e:88:bc:57:8f:2c:3a: 41:96:19:cd:97:c5:79:16:0a:0c:48:78:db:d1:89: d7:64:c5:ad:47:c8:3a:be:4c:fe:4a:d5:59:b2:81: 17:7d:0d:7d:54:b2:1e:85:a6:24:18:4f:31:7f:bd: b4:dc:d0:14:b1:1a:29:97:22:45:83:1c:db:a2:34: 93:77:7c:61:57:fd:44:46:4a:04:3c:62:54:bb:f6: 82:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:72:D9:18:4B:55:E3:48:9A:B3:CA:59:6C:3D:C8:56:21:D2:0F:A7 X509v3 Authority Key Identifier: keyid:43:6B:2C:5F:03:F9:1C:A7:41:C6:A2:49:DC:01:5A:6D:54:4A:62:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:03:08:cb:6f:9d:cc:1d:bf:6c:55:49:d8:a9:eb:7e:2e:0b: 2a:51:45:2f:98:5c:dd:08:82:04:ce:dc:76:ff:cd:e3:50:23: 0d:82:27:d0:5c:3c:b8:50:a5:e7:26:9c:31:f8:8a:c4:75:04: a6:97:a0:fa:69:30:f9:bd:0b:65:ce:19:ef:97:6a:c8:43:a2: b1:c9:bb:e7:98:e5:40:b2:ce:1b:75:1e:6e:a6:f7:15:27:10: d7:7e:85:7e:40:8a:67:74:ca:1a:e0:51:24:fd:e4:99:98:2b: bf:3a:be:0e:30:e2:d5:87:06:06:31:6c:05:dd:c7:5a:64:7a: e8:c8:d4:cd:d0:8d:82:9e:cc:4d:f1:49:fd:a9:0f:88:fb:4c: 4c:9f:42:a5:41:6a:d1:60:0e:53:9c:b0:e6:e7:72:31:b4:99: 95:a2:87:90:fe:c2:4b:4d:4c:5c:0b:4d:3a:d5:a2:5e:45:51: c9:0f:61:63:50:4f:ad:f3:85:f4:ba:bd:70:56:0c:af:bb:65: d8:7d:c7:27:b4:86:b6:09:8e:9d:7d:b3:dc:84:b5:9a:59:f2: 81:3b:8c:33:47:87:45:84:09:78:67:da:06:1c:77:9c:bf:e6: f1:28:08:1c:7b:f7:fa:85:89:39:aa:c6:a1:20:3d:8b:44:14: 0c:88:8b:17 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC+8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY0N0MxMTAvBgNVBAUTKDQzNkIyQzVGMDNGOTFDQTc0MUM2QTI0OURDMDE1QTZE NTQ0QTYyQTYwHhcNMjYxMDIwMTkzNTEwWhcNMjYxMDI3MTkzNTEwWjAYMRYwFAYD VQQDEw02YWQ3YzI2ZS1hODMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw7dUwwZcCWzYCVVSUCuz+DbU1CZ2KPFv3sZLJAMzM7yH7xft8bSNcNW7tSr1 ioLWaXtZHqaHPR/WNN5vL46XWmZBH7Idp6cImF/y1a125kzRIhmO2f9iTZaGijll tu8DtLIqTaUNBHi4pe3kKZfjt1wbdGKOgj1Nq/H0HZWR1cSGHiYj/mKYCoRWSCom hQOdi+Y79pwBA8NNAUP/HkFDAUfiTDiBY+XKbr0CxX6IvFePLDpBlhnNl8V5FgoM SHjb0YnXZMWtR8g6vkz+StVZsoEXfQ19VLIehaYkGE8xf7203NAUsRoplyJFgxzb ojSTd3xhV/1ERkoEPGJUu/aCbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMdy2RhL VeNImrPKWWw9yFYh0g+nMB8GA1UdIwQYMBaAFENrLF8D+RynQcaiSdwBWm1USmKm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjQ3Qy80MzdDQzQwNjg1 MTMxMUVBQUEwQjBBN0ZDNEY5QUUwMi9RMnNzWHdQNUhLZEJ4cUpKM0FGYWJWUktZ cVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Eyc3NYd1A1SEtkQnhxSkozQUZhYlZSS1lxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjQ3Qy80MzdDQzQwNjg1MTMxMUVBQUEwQjBBN0ZDNEY5QUUwMi9RMnNzWHdQNUhL ZEJ4cUpKM0FGYWJWUktZcVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQAMIy2+dzB2/bFVJ2Knrfi4LKlFFL5hc3QiCBM7cdv/N41AjDYIn0Fw8uFCl 5yacMfiKxHUEppeg+mkw+b0LZc4Z75dqyEOiscm755jlQLLOG3Uebqb3FScQ136F fkCKZ3TKGuBRJP3kmZgrvzq+DjDi1YcGBjFsBd3HWmR66MjUzdCNgp7MTfFJ/akP iPtMTJ9CpUFq0WAOU5yw5udyMbSZlaKHkP7CS01MXAtNOtWiXkVRyQ9hY1BPrfOF 9Lq9cFYMr7tl2H3HJ7SGtgmOnX2z3IS1mlnygTuMM0eHRYQJeGfaBhx3nL/m8SgI HHv3+oWJOarGoSA9i0QUDIiLFw== -----END CERTIFICATE-----Generated at Thu Oct 22 11:57:18 2026 by rpki-client