$ rpki-client -vvvf rpki.apnic.net/member_repository/A9125C31/38BF409A159011EA9C413652C4F9AE02/cQU3JEaiBkVG2WKfQhw3b9zvIdY.mft File: cQU3JEaiBkVG2WKfQhw3b9zvIdY.mft (raw, json) Hash identifier: nSzI38Rb/w2tZz+BUXmLhBUMmJWbnoUga7dbvaj8MBU= Subject key identifier: 2B:6A:F7:6F:22:6E:F6:1E:75:94:83:61:94:C3:D2:F0:63:2B:E4:56 Authority key identifier: 71:05:37:24:46:A2:06:45:46:D9:62:9F:42:1C:37:6F:DC:EF:21:D6 Certificate issuer: /CN=A9125C31/serialNumber=7105372446A2064546D9629F421C376FDCEF21D6 Certificate serial: 0CF9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQU3JEaiBkVG2WKfQhw3b9zvIdY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125C31/38BF409A159011EA9C413652C4F9AE02/cQU3JEaiBkVG2WKfQhw3b9zvIdY.mft Manifest number: 0CEF Signing time: Tue 06 Oct 2026 18:32:53 +0000 Manifest this update: Tue 06 Oct 2026 18:32:52 +0000 Manifest next update: Tue 13 Oct 2026 18:32:52 +0000 Files and hashes: 1: cQU3JEaiBkVG2WKfQhw3b9zvIdY.crl (hash: lWdkivkhF+SdNOdK0GysQNanRIsGKjuCE/iNw+ooB2U=) 2: 4697751815B111EA8277BA34C4F9AE02.roa (hash: mpWE3JxWmusWHtsdnUiKvPMOgwCqfgCScdAt8K/8YQY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125C31/38BF409A159011EA9C413652C4F9AE02/cQU3JEaiBkVG2WKfQhw3b9zvIdY.crl rsync://rpki.apnic.net/member_repository/A9125C31/38BF409A159011EA9C413652C4F9AE02/cQU3JEaiBkVG2WKfQhw3b9zvIdY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQU3JEaiBkVG2WKfQhw3b9zvIdY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 18:32:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3321 (0xcf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125C31, serialNumber=7105372446A2064546D9629F421C376FDCEF21D6 Validity Not Before: Oct 6 18:32:52 2026 GMT Not After : Oct 13 18:32:52 2026 GMT Subject: CN=6ac53ed5-95ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a8:e1:88:c9:b9:25:8e:70:93:13:83:ed:c3: aa:56:c3:5b:ac:ef:d8:9b:80:3c:06:c6:15:d4:ed: f8:48:45:5f:0b:8f:55:7c:e8:3e:ff:c2:54:d6:b5: 37:af:30:0a:5a:31:fe:29:82:03:10:de:b4:21:e6: c0:18:b0:00:92:d6:f6:0d:1d:ca:12:48:26:c3:53: 55:f6:65:09:bc:89:d7:86:39:b4:0a:59:63:b6:c2: b6:8b:e3:03:a6:5e:a4:70:8f:bb:44:06:79:6e:8a: c3:33:15:0a:d7:39:a4:63:40:b9:0f:34:80:b5:ee: d7:d1:85:5a:f3:41:9c:e1:a1:c3:a9:a5:f0:a3:ba: d6:e7:5a:18:68:a3:7f:4e:66:67:a0:32:fd:06:b3: 5f:75:4d:ba:c0:aa:11:55:75:2b:f0:ef:38:0c:09: 93:02:54:64:17:4d:85:cf:09:68:9b:1a:96:25:25: f8:15:2e:25:a3:24:09:41:4f:c9:4a:ca:b0:15:ba: c7:fe:7e:cb:f4:9e:bf:b7:03:06:60:97:dc:ad:f3: 8a:9e:25:f7:eb:67:bd:0e:03:82:49:b7:b4:4f:55: a7:be:41:2b:8e:1d:4d:10:df:fa:96:b1:7c:c1:29: 9c:1d:7f:b8:44:8a:3c:ec:d2:ac:5d:3c:ea:e3:a4: bc:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:6A:F7:6F:22:6E:F6:1E:75:94:83:61:94:C3:D2:F0:63:2B:E4:56 X509v3 Authority Key Identifier: keyid:71:05:37:24:46:A2:06:45:46:D9:62:9F:42:1C:37:6F:DC:EF:21:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125C31/38BF409A159011EA9C413652C4F9AE02/cQU3JEaiBkVG2WKfQhw3b9zvIdY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQU3JEaiBkVG2WKfQhw3b9zvIdY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125C31/38BF409A159011EA9C413652C4F9AE02/cQU3JEaiBkVG2WKfQhw3b9zvIdY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:ef:30:d9:be:b1:b8:1f:71:92:17:38:2a:88:78:7a:f6:31: f7:40:74:12:b4:00:47:cd:c0:f2:39:52:87:3b:dd:5e:25:0b: d3:6a:74:57:ed:5c:6c:de:3c:65:b1:52:f0:48:ad:3a:38:46: c8:59:b7:5a:f3:37:32:55:86:4f:62:31:0f:ce:39:e5:2a:18: f9:6f:01:70:91:5c:82:34:b5:3b:d1:0d:20:54:b7:39:4a:41: e1:5f:a4:90:53:2a:7b:b7:ee:a5:bc:55:84:ba:72:ce:39:77: f7:4d:92:7a:7b:c2:4a:8e:b3:d9:bb:71:7c:fe:93:85:e9:ba: 10:49:da:6c:92:4c:c8:3c:1b:5d:59:a9:de:fa:c9:2d:17:6a: 1a:d2:86:ed:ca:45:12:b3:09:a3:67:ec:b3:77:e9:7c:56:b1: b5:41:b6:c0:1a:7c:09:b5:84:e0:09:be:1b:c4:3a:0e:46:ff: 90:51:56:59:ae:f9:66:c2:be:f1:be:4e:90:91:72:1e:9b:2e: c3:f3:1d:05:f3:0c:f6:31:b2:74:be:a2:38:84:44:3a:30:c3: 06:5a:eb:57:17:24:a5:63:33:7e:ff:e1:13:4f:70:f2:58:cc: 99:d4:44:54:0f:d2:c7:65:43:99:7f:d8:c0:04:bc:aa:88:d8: a0:0c:84:cf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjVDMzExMTAvBgNVBAUTKDcxMDUzNzI0NDZBMjA2NDU0NkQ5NjI5RjQyMUMzNzZG RENFRjIxRDYwHhcNMjYxMDA2MTgzMjUyWhcNMjYxMDEzMTgzMjUyWjAYMRYwFAYD VQQDEw02YWM1M2VkNS05NWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArajhiMm5JY5wkxOD7cOqVsNbrO/Ym4A8BsYV1O34SEVfC49VfOg+/8JU1rU3 rzAKWjH+KYIDEN60IebAGLAAktb2DR3KEkgmw1NV9mUJvInXhjm0ClljtsK2i+MD pl6kcI+7RAZ5borDMxUK1zmkY0C5DzSAte7X0YVa80Gc4aHDqaXwo7rW51oYaKN/ TmZnoDL9BrNfdU26wKoRVXUr8O84DAmTAlRkF02FzwlomxqWJSX4FS4loyQJQU/J SsqwFbrH/n7L9J6/twMGYJfcrfOKniX362e9DgOCSbe0T1WnvkErjh1NEN/6lrF8 wSmcHX+4RIo87NKsXTzq46S8hQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCtq928i bvYedZSDYZTD0vBjK+RWMB8GA1UdIwQYMBaAFHEFNyRGogZFRtlin0IcN2/c7yHW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUMzMS8zOEJGNDA5QTE1 OTAxMUVBOUM0MTM2NTJDNEY5QUUwMi9jUVUzSkVhaUJrVkcyV0tmUWh3M2I5enZJ ZFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NRVTNKRWFpQmtWRzJXS2ZRaHczYjl6dklkWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NUMzMS8zOEJGNDA5QTE1OTAxMUVBOUM0MTM2NTJDNEY5QUUwMi9jUVUzSkVhaUJr VkcyV0tmUWh3M2I5enZJZFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGe8w2b6xuB9xkhc4Koh4evYx90B0ErQAR83A8jlShzvdXiUL02p0V+1cbN48 ZbFS8EitOjhGyFm3WvM3MlWGT2IxD8455SoY+W8BcJFcgjS1O9ENIFS3OUpB4V+k kFMqe7fupbxVhLpyzjl3902SenvCSo6z2btxfP6Them6EEnabJJMyDwbXVmp3vrJ LRdqGtKG7cpFErMJo2fss3fpfFaxtUG2wBp8CbWE4Am+G8Q6Dkb/kFFWWa75ZsK+ 8b5OkJFyHpsuw/MdBfMM9jGydL6iOIREOjDDBlrrVxckpWMzfv/hE09w8ljMmdRE VA/Sx2VDmX/YwAS8qojYoAyEzw== -----END CERTIFICATE-----Generated at Thu Oct 8 17:17:29 2026 by rpki-client