$ rpki-client -vvvf rpki.apnic.net/member_repository/A911CF44/6677BEB68C8311EB849E6129C4F9AE02/QN1mK29ul7NNO3WoAH3lOI2SclM.mft File: QN1mK29ul7NNO3WoAH3lOI2SclM.mft (raw, json) Hash identifier: U4hv4IjG4OP0LYdiSbLrnP2OgM5qNlPmiJ1Pni3TbjQ= Subject key identifier: 71:EE:6B:B6:4F:67:13:AF:DF:6A:D2:EF:2B:31:86:6A:67:E1:3A:23 Authority key identifier: 40:DD:66:2B:6F:6E:97:B3:4D:3B:75:A8:00:7D:E5:38:8D:92:72:53 Certificate issuer: /CN=A911CF44/serialNumber=40DD662B6F6E97B34D3B75A8007DE5388D927253 Certificate serial: 0752 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QN1mK29ul7NNO3WoAH3lOI2SclM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CF44/6677BEB68C8311EB849E6129C4F9AE02/QN1mK29ul7NNO3WoAH3lOI2SclM.mft Manifest number: 0748 Signing time: Sun 04 Oct 2026 21:54:53 +0000 Manifest this update: Sun 04 Oct 2026 21:54:52 +0000 Manifest next update: Sun 11 Oct 2026 21:54:52 +0000 Files and hashes: 1: QN1mK29ul7NNO3WoAH3lOI2SclM.crl (hash: fIRe+pOwFppXlDcYJ+WT66IJKhQUeeOVuy/jFKRJcKo=) 2: 85613B4E8C8411EBB68DD829C4F9AE02.roa (hash: 20IQ5k6iGcflni7byHLtSc+KRh5svbsk0T1vVsQKJRo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CF44/6677BEB68C8311EB849E6129C4F9AE02/QN1mK29ul7NNO3WoAH3lOI2SclM.crl rsync://rpki.apnic.net/member_repository/A911CF44/6677BEB68C8311EB849E6129C4F9AE02/QN1mK29ul7NNO3WoAH3lOI2SclM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QN1mK29ul7NNO3WoAH3lOI2SclM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 21:54:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1874 (0x752) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CF44, serialNumber=40DD662B6F6E97B34D3B75A8007DE5388D927253 Validity Not Before: Oct 4 21:54:52 2026 GMT Not After : Oct 11 21:54:52 2026 GMT Subject: CN=6ac2cb2d-f7a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1d:5e:60:a1:da:66:a7:de:d0:0f:69:27:e1: d8:4a:0c:f8:02:50:d9:96:96:5d:37:42:7e:16:ea: d6:f3:23:b2:3e:d1:5f:65:15:18:71:ad:48:5d:dc: e9:2e:91:13:68:7d:de:71:4e:7b:87:94:da:f0:c8: 00:fd:d3:47:6a:7a:5d:0d:e5:d1:d2:53:c9:f2:0d: 4e:37:ca:15:e8:b6:ab:b5:0d:ce:64:c0:13:63:3d: 93:79:c5:45:8b:d2:c6:b1:25:07:cc:fc:c7:67:6b: b5:01:5b:42:f0:fe:62:95:e9:69:83:16:a2:c7:67: d8:56:af:78:7f:27:9d:78:c2:2b:79:c3:b8:72:56: 36:e2:74:36:ab:72:f7:a9:12:db:c7:d3:58:8d:d9: 31:13:61:d7:53:14:55:cc:e7:03:40:43:89:d1:bf: e5:66:68:25:8d:b6:0a:61:09:db:d2:c0:09:e2:4f: 29:55:14:78:b0:39:d5:7d:0c:fc:f5:da:cd:a2:18: c1:a9:f8:84:d8:41:19:bf:d5:3e:8a:b4:7a:df:4b: 85:8b:cc:f0:69:4c:14:79:32:72:54:1a:87:af:a2: 4a:19:a7:41:05:17:80:4c:a6:12:b4:93:a5:b5:d0: 3f:5b:12:80:78:19:47:57:3d:17:fa:04:60:d5:5b: 9d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:EE:6B:B6:4F:67:13:AF:DF:6A:D2:EF:2B:31:86:6A:67:E1:3A:23 X509v3 Authority Key Identifier: keyid:40:DD:66:2B:6F:6E:97:B3:4D:3B:75:A8:00:7D:E5:38:8D:92:72:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CF44/6677BEB68C8311EB849E6129C4F9AE02/QN1mK29ul7NNO3WoAH3lOI2SclM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QN1mK29ul7NNO3WoAH3lOI2SclM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CF44/6677BEB68C8311EB849E6129C4F9AE02/QN1mK29ul7NNO3WoAH3lOI2SclM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:14:f1:7d:9b:2d:97:ae:01:25:55:f8:92:2d:b8:66:69:b9: 8c:bd:f7:7d:23:7c:e9:ba:f8:3a:97:ae:c1:96:82:c0:bd:f5: 55:4b:f9:bf:10:c5:ad:55:70:0b:53:ee:20:50:04:c0:1c:b1: 4f:8f:e2:00:85:05:f0:38:af:56:26:e5:42:11:17:68:3f:37: ee:d1:51:bd:db:0b:ee:5d:ba:e2:f3:b0:73:8a:e8:1f:ae:2f: ed:41:2a:7e:ae:cf:af:f0:31:c9:aa:c4:db:52:af:c5:7a:67: 66:27:e0:d4:e0:8c:83:42:b5:6b:41:53:d2:c1:eb:07:bb:f4: 9b:ce:6f:30:a0:41:2a:05:4d:d6:6d:a8:d0:62:79:1b:01:3b: c1:e0:64:7c:0a:11:bf:17:e3:47:02:25:3c:45:ef:d6:3e:43: 98:b5:60:bd:9a:ca:e7:e1:c8:9e:5b:c5:8b:6c:31:5e:f2:38: b6:2c:a2:e2:e5:1a:8b:02:e8:58:4c:f6:11:e7:6c:7e:bc:7a: c4:7d:85:a8:55:96:89:0c:4b:f0:52:fb:3c:23:dc:d3:9e:73: 5a:6b:04:9a:0d:c8:9d:60:43:5d:a3:ee:0f:ee:a5:1f:32:c9: 49:db:83:5a:51:16:df:2c:33:c4:9c:44:8b:9b:5e:85:3b:cf: 70:3a:95:62 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB1IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUNGNDQxMTAvBgNVBAUTKDQwREQ2NjJCNkY2RTk3QjM0RDNCNzVBODAwN0RFNTM4 OEQ5MjcyNTMwHhcNMjYxMDA0MjE1NDUyWhcNMjYxMDExMjE1NDUyWjAYMRYwFAYD VQQDEw02YWMyY2IyZC1mN2E0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAux1eYKHaZqfe0A9pJ+HYSgz4AlDZlpZdN0J+FurW8yOyPtFfZRUYca1IXdzp LpETaH3ecU57h5Ta8MgA/dNHanpdDeXR0lPJ8g1ON8oV6LartQ3OZMATYz2TecVF i9LGsSUHzPzHZ2u1AVtC8P5ilelpgxaix2fYVq94fyedeMIrecO4clY24nQ2q3L3 qRLbx9NYjdkxE2HXUxRVzOcDQEOJ0b/lZmgljbYKYQnb0sAJ4k8pVRR4sDnVfQz8 9drNohjBqfiE2EEZv9U+irR630uFi8zwaUwUeTJyVBqHr6JKGadBBReATKYStJOl tdA/WxKAeBlHVz0X+gRg1VudWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHHua7ZP ZxOv32rS7ysxhmpn4TojMB8GA1UdIwQYMBaAFEDdZitvbpezTTt1qAB95TiNknJT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0Y0NC82Njc3QkVCNjhD ODMxMUVCODQ5RTYxMjlDNEY5QUUwMi9RTjFtSzI5dWw3Tk5PM1dvQUgzbE9JMlNj bE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FOMW1LMjl1bDdOTk8zV29BSDNsT0kyU2NsTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Q0Y0NC82Njc3QkVCNjhDODMxMUVCODQ5RTYxMjlDNEY5QUUwMi9RTjFtSzI5dWw3 Tk5PM1dvQUgzbE9JMlNjbE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXhTxfZstl64BJVX4ki24Zmm5jL33fSN86br4OpeuwZaCwL31VUv5vxDFrVVw C1PuIFAEwByxT4/iAIUF8DivViblQhEXaD837tFRvdsL7l264vOwc4roH64v7UEq fq7Pr/AxyarE21KvxXpnZifg1OCMg0K1a0FT0sHrB7v0m85vMKBBKgVN1m2o0GJ5 GwE7weBkfAoRvxfjRwIlPEXv1j5DmLVgvZrK5+HInlvFi2wxXvI4tiyi4uUaiwLo WEz2Eedsfrx6xH2FqFWWiQxL8FL7PCPc055zWmsEmg3InWBDXaPuD+6lHzLJSduD WlEW3ywzxJxEi5tehTvPcDqVYg== -----END CERTIFICATE-----Generated at Mon Oct 5 14:39:23 2026 by rpki-client