$ rpki-client -vvvf rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.mft File: qZhc3TeTLh02TExtddulA79yZ3w.mft (raw, json) Hash identifier: aj74D5mB3eqoL7Nn3uHHorB441xgQwj+07iUxu6VYPQ= Subject key identifier: 5B:72:FE:04:57:A9:38:EE:30:93:6B:7B:7D:BF:2F:2D:71:CA:A5:A9 Authority key identifier: A9:98:5C:DD:37:93:2E:1D:36:4C:4C:6D:75:DB:A5:03:BF:72:67:7C Certificate issuer: /CN=A911B12B/serialNumber=A9985CDD37932E1D364C4C6D75DBA503BF72677C Certificate serial: 02AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZhc3TeTLh02TExtddulA79yZ3w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.mft Manifest number: 0296 Signing time: Fri 11 Sep 2026 01:57:19 +0000 Manifest this update: Fri 11 Sep 2026 01:57:18 +0000 Manifest next update: Fri 18 Sep 2026 01:57:18 +0000 Files and hashes: 1: qZhc3TeTLh02TExtddulA79yZ3w.crl (hash: +W0YHWtNb0eMzaG6eq5dMLiAGXqHUr+SmGK5Hl8MmR0=) 2: 1B38341C6B7C11F095B90A2BC4F9AE02.roa (hash: vnClLHCLhMH1PDS6B+hUbxjRXbWWCDwm+ivihh2znyE=) 3: 3370378A9D1F11F08AA63833C4F9AE02.roa (hash: MxG5JeI0s1DDujkYeGnSi1n1rR5cTlPjYLG12mySBEo=) 4: 5BC485B09D1F11F09313A14DC4F9AE02.roa (hash: a7mFbdEd5Rjo2JTpy6uMvBLZm7bSHGiAu3zDsnwY9wE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.crl rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZhc3TeTLh02TExtddulA79yZ3w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 01:57:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 682 (0x2aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B12B, serialNumber=A9985CDD37932E1D364C4C6D75DBA503BF72677C Validity Not Before: Sep 11 01:57:18 2026 GMT Not After : Sep 18 01:57:18 2026 GMT Subject: CN=6aa35fff-c4b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:76:90:73:b4:19:51:4b:45:04:90:b9:51:4c: 48:ff:d4:5c:cb:d9:cc:71:a8:41:20:06:f3:a9:2f: ea:2f:d6:9b:21:ed:5f:00:c6:7f:86:c9:c2:02:b1: ca:43:93:13:80:7f:93:df:ed:df:0a:1f:90:56:20: 71:6e:12:b5:14:c7:20:b8:56:92:43:77:a6:a5:2b: 0e:e9:38:e5:bb:71:2d:be:85:d5:e3:d0:51:68:af: d9:8a:b4:09:a1:4d:58:76:15:ae:d9:9d:86:a6:d9: 23:68:ad:a8:28:1a:32:f0:94:ae:ba:d4:cb:9c:52: 67:21:9e:50:de:06:65:0d:3f:8d:67:9d:51:02:08: ec:1f:99:18:e4:c8:7c:82:f2:05:a4:7f:ee:7e:3f: ec:be:1d:e5:25:df:c4:3f:ee:ec:8f:e8:a8:03:7e: 7d:3f:5a:4e:2e:9c:ca:9a:de:89:71:fb:ad:48:ea: ae:3f:41:5d:78:87:7b:57:8b:5c:48:71:9c:6f:a7: c8:4e:68:8c:ff:aa:0f:78:dc:5b:65:b5:64:93:25: 77:03:8c:c6:7e:10:47:3f:e3:ca:b3:d9:13:c2:ed: d3:16:cb:a0:6d:26:c6:26:3a:a8:63:bb:9a:3a:76: 37:34:f2:cb:ce:ef:05:fa:48:38:b3:bf:61:49:d2: a6:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:72:FE:04:57:A9:38:EE:30:93:6B:7B:7D:BF:2F:2D:71:CA:A5:A9 X509v3 Authority Key Identifier: keyid:A9:98:5C:DD:37:93:2E:1D:36:4C:4C:6D:75:DB:A5:03:BF:72:67:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZhc3TeTLh02TExtddulA79yZ3w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:74:a2:3e:54:65:5f:9e:27:e3:80:20:ba:9b:1f:41:8a:37: 77:fe:6d:ae:20:51:6c:88:a5:ee:48:c9:45:0a:22:46:e6:19: a5:2b:37:93:1c:20:15:f0:b4:94:a0:9f:b0:d4:70:41:7d:f6: 71:66:9a:15:8a:c4:50:8e:89:73:b9:52:49:9f:26:d4:f3:a7: 2a:44:b3:7d:2e:16:fc:26:19:ec:67:a0:01:7b:d4:9e:90:a2: 30:00:9c:dd:4b:dc:90:e7:3c:73:1a:28:3b:3c:13:5c:a4:e5: 68:4e:89:7b:2a:0b:89:ca:74:d0:ec:6b:ef:fa:50:2e:f5:ea: 12:5f:12:e2:68:10:21:f0:1a:4e:3a:07:18:53:52:ab:c7:30: 70:b5:23:3b:0f:9b:04:02:b3:3c:0c:57:ff:72:f4:e6:18:91: 83:53:3f:95:0a:7f:92:9d:ec:79:23:45:5b:e7:1e:14:6c:60: 09:76:12:df:3e:20:f7:8e:68:f7:74:62:27:c9:0f:fd:98:37: 4a:86:6c:7d:aa:7f:af:e1:d9:a1:71:35:c9:eb:a5:56:da:92: 28:c5:06:47:f0:0e:91:c0:69:e3:51:b6:7f:38:71:e5:e4:28: ff:fd:c4:84:27:16:49:60:b7:ef:83:ca:f6:03:8d:4e:f3:2d: ac:15:45:8e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUIxMkIxMTAvBgNVBAUTKEE5OTg1Q0REMzc5MzJFMUQzNjRDNEM2RDc1REJBNTAz QkY3MjY3N0MwHhcNMjYwOTExMDE1NzE4WhcNMjYwOTE4MDE1NzE4WjAYMRYwFAYD VQQDEw02YWEzNWZmZi1jNGI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtXaQc7QZUUtFBJC5UUxI/9Rcy9nMcahBIAbzqS/qL9abIe1fAMZ/hsnCArHK Q5MTgH+T3+3fCh+QViBxbhK1FMcguFaSQ3empSsO6Tjlu3EtvoXV49BRaK/ZirQJ oU1YdhWu2Z2GptkjaK2oKBoy8JSuutTLnFJnIZ5Q3gZlDT+NZ51RAgjsH5kY5Mh8 gvIFpH/ufj/svh3lJd/EP+7sj+ioA359P1pOLpzKmt6JcfutSOquP0FdeId7V4tc SHGcb6fITmiM/6oPeNxbZbVkkyV3A4zGfhBHP+PKs9kTwu3TFsugbSbGJjqoY7ua OnY3NPLLzu8F+kg4s79hSdKmjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFty/gRX qTjuMJNre32/Ly1xyqWpMB8GA1UdIwQYMBaAFKmYXN03ky4dNkxMbXXbpQO/cmd8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjEyQi8wOEMyNzUzMkRC NjgxMUVEOTZDNDlDM0RDNEY5QUUwMi9xWmhjM1RlVExoMDJURXh0ZGR1bEE3OXla M3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FaaGMzVGVUTGgwMlRFeHRkZHVsQTc5eVozdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjEyQi8wOEMyNzUzMkRCNjgxMUVEOTZDNDlDM0RDNEY5QUUwMi9xWmhjM1RlVExo MDJURXh0ZGR1bEE3OXlaM3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAXSiPlRlX54n44AgupsfQYo3d/5triBRbIil7kjJRQoiRuYZpSs3kxwgFfC0 lKCfsNRwQX32cWaaFYrEUI6Jc7lSSZ8m1POnKkSzfS4W/CYZ7GegAXvUnpCiMACc 3UvckOc8cxooOzwTXKTlaE6JeyoLicp00Oxr7/pQLvXqEl8S4mgQIfAaTjoHGFNS q8cwcLUjOw+bBAKzPAxX/3L05hiRg1M/lQp/kp3seSNFW+ceFGxgCXYS3z4g945o 93RiJ8kP/Zg3SoZsfap/r+HZoXE1yeulVtqSKMUGR/AOkcBp41G2fzhx5eQo//3E hCcWSWC374PK9gONTvMtrBVFjg== -----END CERTIFICATE-----Generated at Fri Sep 11 14:40:06 2026 by rpki-client