$ rpki-client -vvf rpki.apnic.net/member_repository/A9125C31/38BF409A159011EA9C413652C4F9AE02/cQU3JEaiBkVG2WKfQhw3b9zvIdY.mft File: cQU3JEaiBkVG2WKfQhw3b9zvIdY.mft (raw, json) Hash identifier: rdhiye8u1hNXLSk1SZnVDIIWQa36rv2E+ZKFthfVoCk= Subject key identifier: 9C:63:3D:CD:4B:F6:C6:11:99:15:73:FA:73:EC:DF:D8:75:8E:83:73 Authority key identifier: 71:05:37:24:46:A2:06:45:46:D9:62:9F:42:1C:37:6F:DC:EF:21:D6 Certificate issuer: /CN=A9125C31/serialNumber=7105372446A2064546D9629F421C376FDCEF21D6 Certificate serial: 0CE0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQU3JEaiBkVG2WKfQhw3b9zvIdY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125C31/38BF409A159011EA9C413652C4F9AE02/cQU3JEaiBkVG2WKfQhw3b9zvIdY.mft Manifest number: 0CD6 Signing time: Tue 18 Aug 2026 18:43:35 +0000 Manifest this update: Tue 18 Aug 2026 18:43:34 +0000 Manifest next update: Tue 25 Aug 2026 18:43:34 +0000 Files and hashes: 1: cQU3JEaiBkVG2WKfQhw3b9zvIdY.crl (hash: Gl4ST+6B4qt4BJwCBvwADQGC4p61B/xb1k/xfVrLD4k=) 2: 4697751815B111EA8277BA34C4F9AE02.roa (hash: mpWE3JxWmusWHtsdnUiKvPMOgwCqfgCScdAt8K/8YQY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125C31/38BF409A159011EA9C413652C4F9AE02/cQU3JEaiBkVG2WKfQhw3b9zvIdY.crl rsync://rpki.apnic.net/member_repository/A9125C31/38BF409A159011EA9C413652C4F9AE02/cQU3JEaiBkVG2WKfQhw3b9zvIdY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQU3JEaiBkVG2WKfQhw3b9zvIdY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 18:43:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3296 (0xce0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125C31, serialNumber=7105372446A2064546D9629F421C376FDCEF21D6 Validity Not Before: Aug 18 18:43:34 2026 GMT Not After : Aug 25 18:43:34 2026 GMT Subject: CN=6a84a7d6-cef8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:05:56:97:c1:be:d9:22:c1:18:57:ee:41:8f: 02:d7:b5:ef:1e:40:5b:8f:33:70:1c:d1:b0:c2:35: 6b:1d:8d:54:ef:44:8a:53:bf:c9:0e:3d:f6:d5:92: 31:e1:35:a7:3b:05:58:3e:96:b6:ca:13:c7:20:b1: f3:81:f9:38:42:48:ff:72:5d:8a:1b:bc:57:aa:b3: fc:1c:0c:cc:bf:a0:f3:ae:91:e9:0a:5b:dc:5a:6e: 6d:dc:59:83:a3:17:2d:7e:57:cc:eb:4e:15:db:4e: 23:36:58:05:e0:f4:4d:ab:3d:db:44:d9:5e:5a:07: 4d:28:f1:94:14:44:34:95:92:22:05:43:f5:3c:f8: 33:31:a6:24:d6:ef:93:b7:59:4d:d4:bf:57:18:d6: cc:f6:96:7d:60:18:50:49:ab:0b:02:86:3c:01:ba: b0:39:43:97:74:6d:07:d9:5a:4c:42:75:8c:4c:07: 78:7f:99:fb:ed:cb:7a:ec:53:4d:ea:ae:7e:5f:b3: 27:7c:a3:1f:5f:5e:cf:b5:47:19:f1:25:f3:11:13: ff:41:d5:ae:1e:a7:ad:4d:36:07:93:b2:9d:0e:0b: 67:b4:e6:4a:76:cb:f9:a6:58:27:23:84:c7:79:b6: 0f:8c:07:f0:eb:bf:3b:e0:43:76:7d:89:40:3c:04: 8c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:63:3D:CD:4B:F6:C6:11:99:15:73:FA:73:EC:DF:D8:75:8E:83:73 X509v3 Authority Key Identifier: keyid:71:05:37:24:46:A2:06:45:46:D9:62:9F:42:1C:37:6F:DC:EF:21:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125C31/38BF409A159011EA9C413652C4F9AE02/cQU3JEaiBkVG2WKfQhw3b9zvIdY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQU3JEaiBkVG2WKfQhw3b9zvIdY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125C31/38BF409A159011EA9C413652C4F9AE02/cQU3JEaiBkVG2WKfQhw3b9zvIdY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:41:af:02:19:68:5f:8b:06:fb:64:6c:8c:b5:4a:d8:bb:84: 2f:55:6e:66:08:b4:ac:1d:84:65:00:19:05:84:15:56:37:1a: 30:bf:6f:5b:f5:43:f3:22:4e:75:24:d3:56:07:7d:e7:b6:93: 60:53:05:6c:5d:45:e3:57:b8:ad:2c:11:e4:03:12:60:da:b8: 40:bc:bd:64:0f:12:ad:65:56:f4:41:47:bd:6c:c2:2b:f0:f3: 0f:33:09:a3:08:fb:4e:c4:c1:71:e0:db:06:bd:89:97:cd:a8: 34:24:06:e4:c0:68:bc:33:5d:b1:44:fc:d1:61:de:f5:6d:cf: ea:d2:d7:63:50:f9:8a:cc:33:9e:2b:b6:96:5a:cc:c3:5d:a9: b4:d3:4d:b2:ef:75:4f:7d:8e:be:3a:60:1e:8e:fd:06:62:9c: e7:4f:b2:34:ba:3a:a4:33:35:61:22:b1:65:4b:74:89:0a:74: 9f:32:7a:6f:f8:91:d1:0b:96:d1:f6:48:ff:07:a7:a4:4a:05: 4f:bb:92:c2:9e:45:59:ed:13:81:a1:cd:a8:bf:ad:b8:d6:6a: 5e:30:71:6f:ad:e6:cc:e7:4c:a4:d3:f2:43:e1:28:e7:b7:70: b0:8c:0e:c3:c0:70:68:22:e7:c1:3c:9b:4f:d4:6b:a2:10:1a: 1f:73:87:de -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjVDMzExMTAvBgNVBAUTKDcxMDUzNzI0NDZBMjA2NDU0NkQ5NjI5RjQyMUMzNzZG RENFRjIxRDYwHhcNMjYwODE4MTg0MzM0WhcNMjYwODI1MTg0MzM0WjAYMRYwFAYD VQQDEw02YTg0YTdkNi1jZWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwQVWl8G+2SLBGFfuQY8C17XvHkBbjzNwHNGwwjVrHY1U70SKU7/JDj321ZIx 4TWnOwVYPpa2yhPHILHzgfk4Qkj/cl2KG7xXqrP8HAzMv6DzrpHpClvcWm5t3FmD oxctflfM604V204jNlgF4PRNqz3bRNleWgdNKPGUFEQ0lZIiBUP1PPgzMaYk1u+T t1lN1L9XGNbM9pZ9YBhQSasLAoY8AbqwOUOXdG0H2VpMQnWMTAd4f5n77ct67FNN 6q5+X7MnfKMfX17PtUcZ8SXzERP/QdWuHqetTTYHk7KdDgtntOZKdsv5plgnI4TH ebYPjAfw67874EN2fYlAPASMkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJxjPc1L 9sYRmRVz+nPs39h1joNzMB8GA1UdIwQYMBaAFHEFNyRGogZFRtlin0IcN2/c7yHW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUMzMS8zOEJGNDA5QTE1 OTAxMUVBOUM0MTM2NTJDNEY5QUUwMi9jUVUzSkVhaUJrVkcyV0tmUWh3M2I5enZJ ZFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NRVTNKRWFpQmtWRzJXS2ZRaHczYjl6dklkWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NUMzMS8zOEJGNDA5QTE1OTAxMUVBOUM0MTM2NTJDNEY5QUUwMi9jUVUzSkVhaUJr VkcyV0tmUWh3M2I5enZJZFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAk0GvAhloX4sG+2RsjLVK2LuEL1VuZgi0rB2EZQAZBYQVVjcaML9vW/VD8yJO dSTTVgd957aTYFMFbF1F41e4rSwR5AMSYNq4QLy9ZA8SrWVW9EFHvWzCK/DzDzMJ owj7TsTBceDbBr2Jl82oNCQG5MBovDNdsUT80WHe9W3P6tLXY1D5iswzniu2llrM w12ptNNNsu91T32OvjpgHo79BmKc50+yNLo6pDM1YSKxZUt0iQp0nzJ6b/iR0QuW 0fZI/wenpEoFT7uSwp5FWe0TgaHNqL+tuNZqXjBxb63mzOdMpNPyQ+Eo57dwsIwO w8BwaCLnwTybT9RrohAaH3OH3g== -----END CERTIFICATE-----Generated at Wed Aug 19 14:33:56 2026 by rpki-client