$ rpki-client -vvvf rpki.apnic.net/member_repository/A9134639/2BA23C8CD5BF11F08DBC7C31C4F9AE02/QF5asHUAe6PYUmLWiyUZhsbp3V0.mft File: QF5asHUAe6PYUmLWiyUZhsbp3V0.mft (raw, json) Hash identifier: aY7gMXb589SvviKxnwdWFYZReZpWFHv1i7X0muzts1o= Subject key identifier: 3C:09:E9:95:21:2D:08:49:CB:68:E6:53:0F:BF:A3:77:22:2D:A2:6F Authority key identifier: 40:5E:5A:B0:75:00:7B:A3:D8:52:62:D6:8B:25:19:86:C6:E9:DD:5D Certificate issuer: /CN=A9134639/serialNumber=405E5AB075007BA3D85262D68B251986C6E9DD5D Certificate serial: A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QF5asHUAe6PYUmLWiyUZhsbp3V0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134639/2BA23C8CD5BF11F08DBC7C31C4F9AE02/QF5asHUAe6PYUmLWiyUZhsbp3V0.mft Manifest number: A2 Signing time: Sat 03 Oct 2026 08:04:11 +0000 Manifest this update: Sat 03 Oct 2026 08:04:10 +0000 Manifest next update: Sat 10 Oct 2026 08:04:10 +0000 Files and hashes: 1: QF5asHUAe6PYUmLWiyUZhsbp3V0.crl (hash: /cQi64RqdJc0OCOUz/IQZGEw4s2rPxOSKuVJgsZsrD0=) 2: BFA7DB2EB8BF11F19F9061496D11F970.roa (hash: MPR4NHdHnvvgE6hmqwS4hbLAySjghA7dW/cEaXsXZ3A=) 3: E7C4738EF69011F0944A82D5396F56BC.roa (hash: FMzFZrlslBMIjQSp5kS4GLLPEkEhvoj8LXFantUsG14=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134639/2BA23C8CD5BF11F08DBC7C31C4F9AE02/QF5asHUAe6PYUmLWiyUZhsbp3V0.crl rsync://rpki.apnic.net/member_repository/A9134639/2BA23C8CD5BF11F08DBC7C31C4F9AE02/QF5asHUAe6PYUmLWiyUZhsbp3V0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QF5asHUAe6PYUmLWiyUZhsbp3V0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 08:04:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 169 (0xa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134639, serialNumber=405E5AB075007BA3D85262D68B251986C6E9DD5D Validity Not Before: Oct 3 08:04:10 2026 GMT Not After : Oct 10 08:04:10 2026 GMT Subject: CN=6ac0b6fb-2afa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:35:e3:fb:92:52:1b:1a:ac:25:b6:1b:06:6a: 82:68:f3:09:3f:25:7e:a5:89:78:43:31:82:2f:18: 25:24:d1:15:f7:8d:7f:2d:d8:5f:e7:2a:fe:90:ae: 32:26:1b:06:0a:f0:a7:0b:a2:cb:c4:a7:07:3d:b9: 0d:c2:f9:1b:d4:b4:84:4b:75:21:6b:70:0a:d1:4a: b5:49:4b:0e:2a:df:d1:a8:04:da:42:87:36:dc:d9: 9d:e4:69:80:e2:83:cb:87:24:e4:fa:50:d4:bb:82: 99:9e:a1:fe:cb:a4:95:df:4a:8f:37:ca:26:88:d2: 39:5e:bd:af:b0:a6:83:cd:06:ce:ab:13:7e:fc:0d: 1b:5f:b1:c9:8a:ed:e2:41:b1:93:32:ba:e9:57:7c: ad:8e:87:37:47:83:05:65:bf:8c:d2:ac:aa:73:f7: 97:32:d1:a3:69:eb:bb:35:56:1d:0f:ca:43:63:f3: eb:76:82:8b:6b:25:f5:56:1d:c3:bf:6e:45:6b:2a: b0:9c:eb:99:0f:71:49:59:80:c1:ac:41:e1:11:bb: 57:60:b8:26:7d:b8:f7:e2:fc:42:92:1a:da:1f:dd: ab:b6:d8:6e:6e:8f:50:5a:fa:a2:f1:18:63:35:f4: 0e:aa:b1:52:0c:db:94:4a:0a:f7:a1:2d:b5:06:9f: 46:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:09:E9:95:21:2D:08:49:CB:68:E6:53:0F:BF:A3:77:22:2D:A2:6F X509v3 Authority Key Identifier: keyid:40:5E:5A:B0:75:00:7B:A3:D8:52:62:D6:8B:25:19:86:C6:E9:DD:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134639/2BA23C8CD5BF11F08DBC7C31C4F9AE02/QF5asHUAe6PYUmLWiyUZhsbp3V0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QF5asHUAe6PYUmLWiyUZhsbp3V0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134639/2BA23C8CD5BF11F08DBC7C31C4F9AE02/QF5asHUAe6PYUmLWiyUZhsbp3V0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:a1:36:fc:91:3e:6b:66:5f:85:b8:1e:26:0d:4a:76:0c:04: a8:7a:27:71:6d:37:b4:3a:0a:b6:81:33:44:51:1e:6f:f1:2a: 5d:c2:2f:ee:9d:fa:27:61:7e:f6:ff:d6:6a:3f:f2:c2:27:80: 48:ef:51:07:4f:13:45:24:e0:8d:55:4a:e0:eb:95:7a:ab:30: 1a:d7:ba:86:c0:35:50:4f:02:d5:a5:77:61:a1:29:21:ef:85: b3:46:19:a1:38:4b:74:82:c5:17:4b:65:7b:32:b9:d2:7d:30: 21:18:d9:d9:c2:18:6e:00:89:e5:46:eb:bb:71:0a:0f:fd:0a: 6f:d7:07:2b:c5:8b:f3:ad:4f:6a:b8:c1:21:e0:a3:70:2e:f4: cd:f2:e6:9b:fd:81:56:dc:bc:64:33:8e:00:2b:74:e9:0e:99: 28:58:ed:fa:37:0c:72:b3:da:5f:b9:87:7c:74:98:f3:04:50: c6:17:e8:c9:7c:fe:c0:0e:09:88:57:ff:9d:74:7f:fe:f5:d1: 5a:52:ad:7b:9c:1c:26:2e:15:81:eb:5a:0e:57:cf:9c:1a:0b: 36:5d:13:35:07:b9:55:d7:d1:30:0c:45:43:7c:97:e7:7f:58: 66:8d:76:9b:22:39:da:e5:6b:24:84:d6:b3:c1:9c:be:42:13: c3:ff:fd:29 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQ2MzkxMTAvBgNVBAUTKDQwNUU1QUIwNzUwMDdCQTNEODUyNjJENjhCMjUxOTg2 QzZFOURENUQwHhcNMjYxMDAzMDgwNDEwWhcNMjYxMDEwMDgwNDEwWjAYMRYwFAYD VQQDEw02YWMwYjZmYi0yYWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtTXj+5JSGxqsJbYbBmqCaPMJPyV+pYl4QzGCLxglJNEV941/Ldhf5yr+kK4y JhsGCvCnC6LLxKcHPbkNwvkb1LSES3Uha3AK0Uq1SUsOKt/RqATaQoc23Nmd5GmA 4oPLhyTk+lDUu4KZnqH+y6SV30qPN8omiNI5Xr2vsKaDzQbOqxN+/A0bX7HJiu3i QbGTMrrpV3ytjoc3R4MFZb+M0qyqc/eXMtGjaeu7NVYdD8pDY/PrdoKLayX1Vh3D v25FayqwnOuZD3FJWYDBrEHhEbtXYLgmfbj34vxCkhraH92rtthubo9QWvqi8Rhj NfQOqrFSDNuUSgr3oS21Bp9GBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDwJ6ZUh LQhJy2jmUw+/o3ciLaJvMB8GA1UdIwQYMBaAFEBeWrB1AHuj2FJi1oslGYbG6d1d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDYzOS8yQkEyM0M4Q0Q1 QkYxMUYwOERCQzdDMzFDNEY5QUUwMi9RRjVhc0hVQWU2UFlVbUxXaXlVWmhzYnAz VjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FGNWFzSFVBZTZQWVVtTFdpeVVaaHNicDNWMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDYzOS8yQkEyM0M4Q0Q1QkYxMUYwOERCQzdDMzFDNEY5QUUwMi9RRjVhc0hVQWU2 UFlVbUxXaXlVWmhzYnAzVjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIaE2/JE+a2ZfhbgeJg1KdgwEqHoncW03tDoKtoEzRFEeb/EqXcIv7p36J2F+ 9v/Waj/ywieASO9RB08TRSTgjVVK4OuVeqswGte6hsA1UE8C1aV3YaEpIe+Fs0YZ oThLdILFF0tlezK50n0wIRjZ2cIYbgCJ5Ubru3EKD/0Kb9cHK8WL861ParjBIeCj cC70zfLmm/2BVty8ZDOOACt06Q6ZKFjt+jcMcrPaX7mHfHSY8wRQxhfoyXz+wA4J iFf/nXR//vXRWlKte5wcJi4VgetaDlfPnBoLNl0TNQe5VdfRMAxFQ3yX539YZo12 myI52uVrJITWs8GcvkITw//9KQ== -----END CERTIFICATE-----Generated at Sun Oct 4 18:00:14 2026 by rpki-client