$ rpki-client -vvvf rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft File: q9Q1SGWcuydu-NNbghL4OOjOt18.mft (raw, json) Hash identifier: zLO2zEhsxS6yVTN8B/J0GSWk8TLR/3Zqr91a2ktOqvQ= Subject key identifier: 42:78:48:DB:20:E2:E3:EF:FA:50:FC:45:91:E2:06:27:82:DB:CB:C2 Authority key identifier: AB:D4:35:48:65:9C:BB:27:6E:F8:D3:5B:82:12:F8:38:E8:CE:B7:5F Certificate issuer: /CN=A9132B1E/serialNumber=ABD43548659CBB276EF8D35B8212F838E8CEB75F Certificate serial: 0BC8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft Manifest number: 0B22 Signing time: Mon 26 Oct 2026 19:30:13 +0000 Manifest this update: Mon 26 Oct 2026 19:30:13 +0000 Manifest next update: Mon 02 Nov 2026 19:30:13 +0000 Files and hashes: 1: q9Q1SGWcuydu-NNbghL4OOjOt18.crl (hash: KQB3zzApMaAjYfT0v8y1JiYP06HBDcYasZCnTPFOFMc=) 2: AE493460CA7011F0B41AE018C4F9AE02.roa (hash: xIcJEEo0SjLo9RfqmyhHd5f9q4sHEfEABEu9ajiLww0=) 3: ABF4F248555511F0A341047BC4F9AE02.roa (hash: n9QAmEJQ9kZxHlOhthQbr/AO7+Rv5gbW5CmVpfpdp1Y=) 4: C14670EE323811F09C91DE2FC4F9AE02.roa (hash: hCfgHx3D3/JbgVOrzp8me4jGJi6fR8N8xzDPSQIMBx0=) 5: AF2F0B70CA7011F08E39E018C4F9AE02.roa (hash: KKSynpOm+ycQihs/yZsWcr8FrhVz4wSTwzAIsyVh/HE=) 6: 0B0485A250B811EBA8A3C670C4F9AE02.roa (hash: 9YeNPbkEMr49smUkWp5OvMYw8mMpgYiATLaFT0UeorU=) 7: AEB63B14CA7011F09EF8E018C4F9AE02.roa (hash: mxCH2vpK2XOhgq6GjWu4EDLEBsLtWayBY2NOfqL8jYM=) 8: 6580E03C79E511EC99DA1B51C4F9AE02.roa (hash: fKLRAkWs+zCufWcV04yXK1kQ1KxM/zVG5v7JSWUHnmI=) 9: 2452CF76CA7211F0B02B6A1BC4F9AE02.roa (hash: iHRiLGk5bEvTzw6ual7pTVIN/CRRx+XVbsv/MEAp4Wk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.crl rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 19:30:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3016 (0xbc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132B1E, serialNumber=ABD43548659CBB276EF8D35B8212F838E8CEB75F Validity Not Before: Oct 26 19:30:13 2026 GMT Not After : Nov 2 19:30:13 2026 GMT Subject: CN=6adfaa45-1b20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:85:5a:01:79:cb:60:16:be:0b:3a:dc:df:73: 75:e6:74:9e:ce:7b:52:d0:41:63:aa:36:c9:cd:ba: 56:2c:48:99:6e:eb:c8:24:71:82:df:b1:5c:f3:88: f6:ea:80:04:0f:03:f9:2b:b6:f1:e3:3a:68:cb:b7: 3d:66:01:87:4b:5a:0c:86:da:2a:64:10:31:12:3b: de:04:32:df:c9:39:db:fa:f7:22:a7:fd:74:9f:8b: 3c:1b:ee:48:9b:53:fb:ec:df:aa:f2:05:cd:0e:83: 26:7e:36:34:9a:6c:aa:03:58:f4:59:ad:65:c9:a5: 68:3b:3a:81:b4:9a:8e:7c:b0:88:1e:f9:df:05:97: a8:4b:92:89:a1:60:e6:1e:e9:30:14:2a:6b:72:60: 0c:8e:8b:60:65:40:82:04:96:8b:d2:8f:d7:8d:4c: e9:da:8b:59:63:0b:c7:09:66:61:74:7e:d0:e1:63: 91:b0:6f:00:fb:ec:44:e3:af:c3:7f:60:75:7a:07: b7:73:e8:75:33:1e:b9:83:de:b8:e7:b5:92:78:1c: 44:0b:26:19:d1:f1:34:47:40:9a:9f:e8:d1:e7:86: 7f:4b:36:2c:66:a0:17:0b:be:02:7c:61:56:f1:80: fa:f0:53:10:b6:8a:e5:b4:e8:af:44:98:fe:40:1e: 15:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:78:48:DB:20:E2:E3:EF:FA:50:FC:45:91:E2:06:27:82:DB:CB:C2 X509v3 Authority Key Identifier: keyid:AB:D4:35:48:65:9C:BB:27:6E:F8:D3:5B:82:12:F8:38:E8:CE:B7:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:ae:5b:c1:ab:37:25:3e:d1:f2:7f:24:8b:cc:67:50:13:b6: 1b:7d:e6:e3:36:d6:cc:49:6b:aa:75:73:dd:06:a1:68:33:ea: a6:4c:21:ad:6b:95:a4:0c:2a:f4:04:d9:e2:01:c4:a0:ff:5e: 54:71:30:5a:68:0b:90:4b:cf:4b:d1:32:41:ab:1c:c8:3c:47: dd:4e:7e:7e:93:72:01:2b:36:2b:23:c0:28:23:22:40:c5:12: cf:55:c9:b3:27:4e:f7:92:65:98:aa:34:fb:3c:20:25:9e:55: 2d:36:20:86:f9:ee:bb:4b:cc:9d:1d:c3:17:62:2e:c8:3d:e1: 24:da:17:d2:c0:4d:24:34:a1:b7:47:dd:b9:5e:5e:03:86:41: 99:7d:ee:79:8c:5a:c7:8b:1f:c5:ae:22:03:ca:b5:36:6e:48: 16:e1:34:1e:30:40:66:76:9d:5a:3c:d8:08:6d:b7:94:7e:4f: c0:9a:c2:07:40:96:89:6c:2c:83:3b:c8:3d:81:0f:5f:d2:a6: e1:84:63:c4:6a:9f:14:7a:fb:26:00:b7:59:a3:47:83:bc:b5: 26:f5:95:0c:de:87:75:43:43:f5:38:ac:cd:33:ee:1f:ea:9a: 81:18:b3:53:52:fd:82:f5:b8:5b:df:71:d1:42:e5:5e:04:61: 84:7d:6d:89 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC8gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJCMUUxMTAvBgNVBAUTKEFCRDQzNTQ4NjU5Q0JCMjc2RUY4RDM1QjgyMTJGODM4 RThDRUI3NUYwHhcNMjYxMDI2MTkzMDEzWhcNMjYxMTAyMTkzMDEzWjAYMRYwFAYD VQQDEw02YWRmYWE0NS0xYjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoIVaAXnLYBa+Czrc33N15nSezntS0EFjqjbJzbpWLEiZbuvIJHGC37Fc84j2 6oAEDwP5K7bx4zpoy7c9ZgGHS1oMhtoqZBAxEjveBDLfyTnb+vcip/10n4s8G+5I m1P77N+q8gXNDoMmfjY0mmyqA1j0Wa1lyaVoOzqBtJqOfLCIHvnfBZeoS5KJoWDm HukwFCprcmAMjotgZUCCBJaL0o/XjUzp2otZYwvHCWZhdH7Q4WORsG8A++xE46/D f2B1ege3c+h1Mx65g96457WSeBxECyYZ0fE0R0Can+jR54Z/SzYsZqAXC74CfGFW 8YD68FMQtorltOivRJj+QB4V9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEJ4SNsg 4uPv+lD8RZHiBieC28vCMB8GA1UdIwQYMBaAFKvUNUhlnLsnbvjTW4IS+Djozrdf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkIxRS84OTM2Q0MwNDg4 MzIxMUVBODQ4NjFCNzBDNEY5QUUwMi9xOVExU0dXY3V5ZHUtTk5iZ2hMNE9Pak90 MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3E5UTFTR1djdXlkdS1OTmJnaEw0T09qT3QxOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkIxRS84OTM2Q0MwNDg4MzIxMUVBODQ4NjFCNzBDNEY5QUUwMi9xOVExU0dXY3V5 ZHUtTk5iZ2hMNE9Pak90MTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUK5bwas3JT7R8n8ki8xnUBO2G33m4zbWzElrqnVz3QahaDPqpkwhrWuVpAwq 9ATZ4gHEoP9eVHEwWmgLkEvPS9EyQascyDxH3U5+fpNyASs2KyPAKCMiQMUSz1XJ sydO95JlmKo0+zwgJZ5VLTYghvnuu0vMnR3DF2IuyD3hJNoX0sBNJDSht0fduV5e A4ZBmX3ueYxax4sfxa4iA8q1Nm5IFuE0HjBAZnadWjzYCG23lH5PwJrCB0CWiWws gzvIPYEPX9Km4YRjxGqfFHr7JgC3WaNHg7y1JvWVDN6HdUND9TiszTPuH+qagRiz U1L9gvW4W99x0ULlXgRhhH1tiQ== -----END CERTIFICATE-----Generated at Wed Oct 28 10:30:10 2026 by rpki-client