$ rpki-client -vvvf rpki.apnic.net/member_repository/A9120A29/0E06DBA24D5C11EAA8088A66C4F9AE02/QbMaaMknik1EdI4t-MasqBV47LU.mft File: QbMaaMknik1EdI4t-MasqBV47LU.mft (raw, json) Hash identifier: /MrfwU9PuqB2UDHCbI7Z7RGzc/+TaJFk41rzAo/T658= Subject key identifier: F6:89:95:D0:4F:D8:52:8F:4D:4B:68:17:B1:96:2D:39:3E:30:77:11 Authority key identifier: 41:B3:1A:68:C9:27:8A:4D:44:74:8E:2D:F8:C6:AC:A8:15:78:EC:B5 Certificate issuer: /CN=A9120A29/serialNumber=41B31A68C9278A4D44748E2DF8C6ACA81578ECB5 Certificate serial: 0BD9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QbMaaMknik1EdI4t-MasqBV47LU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120A29/0E06DBA24D5C11EAA8088A66C4F9AE02/QbMaaMknik1EdI4t-MasqBV47LU.mft Manifest number: 0BD0 Signing time: Tue 06 Oct 2026 19:07:14 +0000 Manifest this update: Tue 06 Oct 2026 19:07:13 +0000 Manifest next update: Tue 13 Oct 2026 19:07:13 +0000 Files and hashes: 1: QbMaaMknik1EdI4t-MasqBV47LU.crl (hash: ntxWU9o5HpRVPUMKOkzT79165NZnqdfNR10onNqFV1M=) 2: 73A346A24D5D11EAA811C368C4F9AE02.roa (hash: nj77j6pl8szzl1JiOzZeiuGGmWG3Z+CTwRY8QlEyQKs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120A29/0E06DBA24D5C11EAA8088A66C4F9AE02/QbMaaMknik1EdI4t-MasqBV47LU.crl rsync://rpki.apnic.net/member_repository/A9120A29/0E06DBA24D5C11EAA8088A66C4F9AE02/QbMaaMknik1EdI4t-MasqBV47LU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QbMaaMknik1EdI4t-MasqBV47LU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 19:07:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3033 (0xbd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120A29, serialNumber=41B31A68C9278A4D44748E2DF8C6ACA81578ECB5 Validity Not Before: Oct 6 19:07:13 2026 GMT Not After : Oct 13 19:07:13 2026 GMT Subject: CN=6ac546e2-a32b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:3b:28:ea:8e:07:a3:7e:df:b7:ca:e4:be:9d: 09:11:64:91:f9:58:ea:66:8b:e5:a3:4d:ef:e7:01: 9d:44:4e:ba:f5:9e:7f:76:76:4d:47:bf:49:36:3d: 7e:1e:c0:95:0d:4a:92:b8:b0:de:a8:72:1a:08:d9: 2b:00:51:e4:c3:b7:cb:51:2e:ef:26:f3:f7:8a:ec: 38:2b:40:35:53:85:17:bd:a2:0d:00:7f:e8:a4:d5: ed:09:4a:e6:65:b0:fa:4a:1a:a2:29:be:aa:7c:ef: cd:9f:07:5f:ef:ba:8f:36:93:52:c9:7b:d6:ac:90: b2:15:a9:5b:93:3f:a6:08:d3:f6:f2:8b:d4:15:23: 96:8d:b7:bf:c0:c5:1b:0d:28:db:ec:6d:1b:a3:59: 3b:6d:0f:96:ec:13:c8:3a:59:e7:85:52:c6:24:cc: 6e:59:50:9d:21:b0:41:86:71:c7:f3:ce:8a:6e:b4: c2:3e:4e:23:ae:4c:6e:ad:88:71:d5:52:ab:a4:45: 7a:fe:e7:fe:eb:d1:e4:c8:1e:76:56:cd:e2:78:38: c0:d6:30:e2:55:fd:d3:65:c1:cc:ad:29:0f:91:94: 34:d1:67:8c:d6:69:fc:a4:15:26:b5:e5:15:9a:a1: de:2a:45:37:b7:3d:cf:09:96:be:87:26:ef:16:39: 94:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:89:95:D0:4F:D8:52:8F:4D:4B:68:17:B1:96:2D:39:3E:30:77:11 X509v3 Authority Key Identifier: keyid:41:B3:1A:68:C9:27:8A:4D:44:74:8E:2D:F8:C6:AC:A8:15:78:EC:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120A29/0E06DBA24D5C11EAA8088A66C4F9AE02/QbMaaMknik1EdI4t-MasqBV47LU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QbMaaMknik1EdI4t-MasqBV47LU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120A29/0E06DBA24D5C11EAA8088A66C4F9AE02/QbMaaMknik1EdI4t-MasqBV47LU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:af:37:b9:77:9d:72:99:81:e1:c0:0c:46:77:ee:38:81:d4: 8d:5f:7d:16:b3:c3:c9:22:72:1e:61:2b:99:08:f3:5c:a4:a6: 89:48:d4:a0:4e:dc:cb:5f:82:34:1e:6a:ca:cf:6e:c9:89:d0: 13:11:d0:77:34:4f:54:ea:34:83:c3:88:45:95:54:d7:e5:3c: 38:69:47:cf:d2:e1:72:af:37:b6:ef:55:93:e6:e1:48:f0:be: fa:91:2b:60:a9:a3:3b:99:83:fe:49:33:f1:d6:e0:75:e2:28: 3e:59:5f:5c:2e:38:a9:e5:e2:32:6c:84:54:1c:22:e5:37:87: 8d:63:86:d0:a5:49:8e:53:bc:5c:31:28:99:b4:9e:9f:0d:62: 77:b6:7e:88:1f:46:1b:3b:2f:28:4c:cd:da:b9:da:63:89:9a: 9e:29:5d:c8:34:b4:e1:6c:1e:5b:a6:23:cd:b7:77:7f:f8:77: de:bf:ae:e3:4e:a4:4b:91:a6:50:87:b1:06:13:2d:f9:97:c4: 33:27:31:a5:17:32:cb:10:d9:5a:ac:d0:e1:55:54:1a:31:95: e4:87:23:15:dc:96:75:d2:9b:f3:82:f6:f9:72:af:ce:81:b5: 8f:49:4e:19:43:2f:27:48:ae:8c:d7:a3:d3:f0:ad:07:e4:76: 4a:df:f0:90 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC9kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBBMjkxMTAvBgNVBAUTKDQxQjMxQTY4QzkyNzhBNEQ0NDc0OEUyREY4QzZBQ0E4 MTU3OEVDQjUwHhcNMjYxMDA2MTkwNzEzWhcNMjYxMDEzMTkwNzEzWjAYMRYwFAYD VQQDEw02YWM1NDZlMi1hMzJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2zso6o4Ho37ft8rkvp0JEWSR+VjqZovlo03v5wGdRE669Z5/dnZNR79JNj1+ HsCVDUqSuLDeqHIaCNkrAFHkw7fLUS7vJvP3iuw4K0A1U4UXvaINAH/opNXtCUrm ZbD6ShqiKb6qfO/Nnwdf77qPNpNSyXvWrJCyFalbkz+mCNP28ovUFSOWjbe/wMUb DSjb7G0bo1k7bQ+W7BPIOlnnhVLGJMxuWVCdIbBBhnHH886KbrTCPk4jrkxurYhx 1VKrpEV6/uf+69HkyB52Vs3ieDjA1jDiVf3TZcHMrSkPkZQ00WeM1mn8pBUmteUV mqHeKkU3tz3PCZa+hybvFjmUTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPaJldBP 2FKPTUtoF7GWLTk+MHcRMB8GA1UdIwQYMBaAFEGzGmjJJ4pNRHSOLfjGrKgVeOy1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEEyOS8wRTA2REJBMjRE NUMxMUVBQTgwODhBNjZDNEY5QUUwMi9RYk1hYU1rbmlrMUVkSTR0LU1hc3FCVjQ3 TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FiTWFhTWtuaWsxRWRJNHQtTWFzcUJWNDdMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MEEyOS8wRTA2REJBMjRENUMxMUVBQTgwODhBNjZDNEY5QUUwMi9RYk1hYU1rbmlr MUVkSTR0LU1hc3FCVjQ3TFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEa83uXedcpmB4cAMRnfuOIHUjV99FrPDySJyHmErmQjzXKSmiUjUoE7cy1+C NB5qys9uyYnQExHQdzRPVOo0g8OIRZVU1+U8OGlHz9Lhcq83tu9Vk+bhSPC++pEr YKmjO5mD/kkz8dbgdeIoPllfXC44qeXiMmyEVBwi5TeHjWOG0KVJjlO8XDEombSe nw1id7Z+iB9GGzsvKEzN2rnaY4manildyDS04WweW6Yjzbd3f/h33r+u406kS5Gm UIexBhMt+ZfEMycxpRcyyxDZWqzQ4VVUGjGV5IcjFdyWddKb84L2+XKvzoG1j0lO GUMvJ0iujNej0/CtB+R2St/wkA== -----END CERTIFICATE-----Generated at Thu Oct 8 17:44:39 2026 by rpki-client