$ rpki-client -vvvf rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft File: Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft (raw, json) Hash identifier: ynpzN+lDRo1F7SMN2ChzdXek34E6/drlSfQDtMYZEeI= Subject key identifier: 3B:6D:09:82:56:6E:1B:CE:5C:83:A1:9D:AD:C3:C1:23:D0:A2:EF:07 Authority key identifier: 42:4E:0A:38:43:F3:FA:1F:44:B6:AF:2E:F3:EE:11:81:5C:4B:52:09 Certificate issuer: /CN=A912C8AF/serialNumber=424E0A3843F3FA1F44B6AF2EF3EE11815C4B5209 Certificate serial: 0823 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft Manifest number: 0817 Signing time: Fri 04 Sep 2026 19:05:09 +0000 Manifest this update: Fri 04 Sep 2026 19:05:09 +0000 Manifest next update: Fri 11 Sep 2026 19:05:09 +0000 Files and hashes: 1: Qk4KOEPz-h9Etq8u8-4RgVxLUgk.crl (hash: gWbAaK+H/asCarkbnquOVPIWilezjCqBJlKJ1Qi1FZ0=) 2: 510308503E8211EBA910FF57C4F9AE02.roa (hash: O/lTB0pDSB8sB0dRmgz1yxjauyhwEgNkjtUoJWKHyCo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.crl rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 14:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2083 (0x823) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C8AF, serialNumber=424E0A3843F3FA1F44B6AF2EF3EE11815C4B5209 Validity Not Before: Sep 4 19:05:09 2026 GMT Not After : Sep 11 19:05:09 2026 GMT Subject: CN=6a9b1665-046b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d8:b4:b3:7d:90:3b:7e:67:bd:e1:b6:f3:2c: a6:4c:e5:40:c0:95:86:a3:94:a1:25:95:a2:48:ec: 1c:32:26:60:06:b6:d9:92:8d:4f:3c:0f:f0:40:d2: 5d:35:89:bf:91:d6:5a:a9:37:2b:d0:0b:db:1c:35: b9:fb:32:69:e1:c0:25:d4:4d:95:af:21:99:59:5b: 94:68:57:e1:36:83:d6:54:bd:62:d5:84:e1:3c:22: 59:3d:18:22:4e:b5:f6:4b:1a:91:e4:e6:90:53:34: c6:2a:73:ff:c9:75:fc:27:db:40:ce:1c:a1:fe:5f: 50:88:58:3e:23:f5:ae:c2:c2:99:3f:c6:32:ff:1f: df:08:da:e7:95:c2:4f:78:04:48:a6:7a:bf:2d:49: 61:85:0e:0c:3d:0d:d9:b3:84:e7:56:18:2c:5c:7c: 5b:fe:77:d6:af:83:9a:c8:b0:02:bc:f2:b9:9e:a1: 1f:63:ad:a1:03:77:cf:3f:9d:ca:28:bd:8b:e2:3b: 63:85:37:80:82:e7:2a:a9:9e:a6:c8:9f:58:e1:b3: 51:ca:9b:27:55:0a:cc:f5:0f:fc:7c:cc:5d:c8:18: 64:48:dd:7a:e5:8e:0f:a3:6f:be:0d:1f:59:77:62: 17:93:f7:79:92:8b:b7:0b:f0:f3:f1:37:a9:2c:68: f7:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:6D:09:82:56:6E:1B:CE:5C:83:A1:9D:AD:C3:C1:23:D0:A2:EF:07 X509v3 Authority Key Identifier: keyid:42:4E:0A:38:43:F3:FA:1F:44:B6:AF:2E:F3:EE:11:81:5C:4B:52:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:76:09:c5:0f:f1:34:17:7b:c5:b3:67:4b:96:26:12:8a:8c: ad:b8:df:29:f6:98:fb:01:00:7d:56:4e:35:4b:5d:56:d8:8e: 77:5e:95:0f:96:ed:95:13:db:b3:2c:21:50:a3:18:46:9f:94: 5f:89:76:91:44:67:c7:68:85:99:10:8d:1a:be:54:9b:23:34: bf:c1:98:8c:e0:04:c9:79:1d:2c:51:c9:d2:f3:61:5f:73:4d: 31:7b:da:8f:43:22:25:64:b2:85:48:16:16:f8:8b:8e:d4:b7: 67:70:4e:bc:17:4b:82:9d:5e:dd:28:54:e4:30:e1:b7:6e:d0: 46:27:05:91:01:50:63:bb:9f:f2:d5:51:17:5a:9d:a7:b3:6c: 76:3c:43:0d:e5:80:05:2f:e6:17:0f:c4:5a:be:a1:a0:6c:9d: 8a:24:e2:c6:af:38:99:e2:89:44:ff:f9:69:69:9d:b8:ea:3d: 0c:7a:df:5d:2a:d5:76:6a:1b:4a:d3:c9:f8:de:ac:33:0f:fc: c8:02:fa:d9:60:79:4a:7b:be:f7:f7:99:51:60:37:5b:6b:56: 73:d5:9c:c6:1c:c4:16:cb:df:72:ce:fd:59:9a:e4:c0:1c:70: 93:48:7e:31:b9:1b:48:77:03:ef:d4:6b:ee:30:82:f6:fb:ae: 1e:26:78:99 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCCMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM4QUYxMTAvBgNVBAUTKDQyNEUwQTM4NDNGM0ZBMUY0NEI2QUYyRUYzRUUxMTgx NUM0QjUyMDkwHhcNMjYwOTA0MTkwNTA5WhcNMjYwOTExMTkwNTA5WjAYMRYwFAYD VQQDEw02YTliMTY2NS0wNDZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAydi0s32QO35nveG28yymTOVAwJWGo5ShJZWiSOwcMiZgBrbZko1PPA/wQNJd NYm/kdZaqTcr0AvbHDW5+zJp4cAl1E2VryGZWVuUaFfhNoPWVL1i1YThPCJZPRgi TrX2SxqR5OaQUzTGKnP/yXX8J9tAzhyh/l9QiFg+I/WuwsKZP8Yy/x/fCNrnlcJP eARIpnq/LUlhhQ4MPQ3Zs4TnVhgsXHxb/nfWr4OayLACvPK5nqEfY62hA3fPP53K KL2L4jtjhTeAgucqqZ6myJ9Y4bNRypsnVQrM9Q/8fMxdyBhkSN165Y4Po2++DR9Z d2IXk/d5kou3C/Dz8TepLGj30QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDttCYJW bhvOXIOhna3DwSPQou8HMB8GA1UdIwQYMBaAFEJOCjhD8/ofRLavLvPuEYFcS1IJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzhBRi9FRTBBRUVDQTNF ODExMUVCOUFCRDkyMEZDNEY5QUUwMi9RazRLT0VQei1oOUV0cTh1OC00UmdWeExV Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1FrNEtPRVB6LWg5RXRxOHU4LTRSZ1Z4TFVnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzhBRi9FRTBBRUVDQTNFODExMUVCOUFCRDkyMEZDNEY5QUUwMi9RazRLT0VQei1o OUV0cTh1OC00UmdWeExVZ2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiHYJxQ/xNBd7xbNnS5YmEoqMrbjfKfaY+wEAfVZONUtdVtiOd16VD5btlRPb sywhUKMYRp+UX4l2kURnx2iFmRCNGr5UmyM0v8GYjOAEyXkdLFHJ0vNhX3NNMXva j0MiJWSyhUgWFviLjtS3Z3BOvBdLgp1e3ShU5DDht27QRicFkQFQY7uf8tVRF1qd p7NsdjxDDeWABS/mFw/EWr6hoGydiiTixq84meKJRP/5aWmduOo9DHrfXSrVdmob StPJ+N6sMw/8yAL62WB5Snu+9/eZUWA3W2tWc9WcxhzEFsvfcs79WZrkwBxwk0h+ MbkbSHcD79Rr7jCC9vuuHiZ4mQ== -----END CERTIFICATE-----Generated at Sat Sep 5 02:22:17 2026 by rpki-client