$ rpki-client -vvvf rpki.apnic.net/member_repository/A9139555/DC7D145A022D11ED9D646B57C4F9AE02/Q2XRedW3PoqX7eBQXynvAMLWPvk.mft File: Q2XRedW3PoqX7eBQXynvAMLWPvk.mft (raw, json) Hash identifier: dGHhSOg68bFd1Af4AU6benz5VDsgWwM5bAstot+oV2M= Subject key identifier: 72:94:28:5A:15:4C:52:00:1B:31:6C:30:4D:5B:6D:E6:2F:82:9B:C4 Authority key identifier: 43:65:D1:79:D5:B7:3E:8A:97:ED:E0:50:5F:29:EF:00:C2:D6:3E:F9 Certificate issuer: /CN=A9139555/serialNumber=4365D179D5B73E8A97EDE0505F29EF00C2D63EF9 Certificate serial: 03A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2XRedW3PoqX7eBQXynvAMLWPvk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139555/DC7D145A022D11ED9D646B57C4F9AE02/Q2XRedW3PoqX7eBQXynvAMLWPvk.mft Manifest number: 039A Signing time: Sat 03 Oct 2026 01:00:06 +0000 Manifest this update: Sat 03 Oct 2026 01:00:05 +0000 Manifest next update: Sat 10 Oct 2026 01:00:05 +0000 Files and hashes: 1: Q2XRedW3PoqX7eBQXynvAMLWPvk.crl (hash: W95yIurjVLwj7hu4paoGRyTMnwCBnsI0/X1MxyRMjw4=) 2: E9A9531644D611F0ABB89277C4F9AE02.roa (hash: Tyhx7c0DVAEQgGmo4FKMzM1+jmt5Mt3Gn4Kf+51OmGw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139555/DC7D145A022D11ED9D646B57C4F9AE02/Q2XRedW3PoqX7eBQXynvAMLWPvk.crl rsync://rpki.apnic.net/member_repository/A9139555/DC7D145A022D11ED9D646B57C4F9AE02/Q2XRedW3PoqX7eBQXynvAMLWPvk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2XRedW3PoqX7eBQXynvAMLWPvk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 01:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 933 (0x3a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139555, serialNumber=4365D179D5B73E8A97EDE0505F29EF00C2D63EF9 Validity Not Before: Oct 3 01:00:05 2026 GMT Not After : Oct 10 01:00:05 2026 GMT Subject: CN=6ac05396-e86d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:92:a8:72:a2:20:27:3b:10:db:c7:5d:c7:db: 99:cf:39:99:b8:60:f3:81:3f:67:73:e4:d8:5e:76: e7:be:50:c5:cc:71:d9:64:fc:45:f0:44:7f:3c:8f: 22:b4:e8:69:6a:9e:a2:f4:68:de:76:39:86:74:a5: ff:a9:88:2a:96:49:bb:9e:f2:13:4d:7e:26:05:aa: 74:00:a9:43:4a:b2:32:8d:bf:2e:07:9f:ac:26:7e: 12:37:5f:66:cd:e0:ab:42:e5:2f:88:fb:aa:c6:62: 59:56:21:62:47:8e:45:5a:73:a7:ac:e4:84:9d:06: 5e:89:3e:74:a5:1f:f3:b2:f1:2f:f7:10:e0:28:05: 41:73:37:f1:9f:cf:e6:85:d0:35:18:cd:20:5e:cb: 37:b7:6b:a5:d3:f0:c8:98:9d:c5:b1:41:04:c9:97: 1d:e7:ab:37:f3:59:a1:ed:80:8a:b5:19:0a:19:e8: 18:72:4e:be:1e:80:77:1f:c3:54:00:cf:c1:70:1d: d5:32:9d:67:7c:43:ff:65:35:7f:0a:7b:4a:a8:5c: 73:06:e7:ec:1d:c3:74:77:28:22:03:16:ff:40:74: db:0d:76:75:b2:6f:c7:24:51:72:0c:48:80:5f:ac: 97:d0:88:69:29:c6:cc:13:b0:24:74:a4:03:73:7b: 04:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:94:28:5A:15:4C:52:00:1B:31:6C:30:4D:5B:6D:E6:2F:82:9B:C4 X509v3 Authority Key Identifier: keyid:43:65:D1:79:D5:B7:3E:8A:97:ED:E0:50:5F:29:EF:00:C2:D6:3E:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139555/DC7D145A022D11ED9D646B57C4F9AE02/Q2XRedW3PoqX7eBQXynvAMLWPvk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2XRedW3PoqX7eBQXynvAMLWPvk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139555/DC7D145A022D11ED9D646B57C4F9AE02/Q2XRedW3PoqX7eBQXynvAMLWPvk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:48:f2:0d:7b:60:96:5b:1f:5d:58:8a:d4:ce:c1:2e:6c:48: c9:44:de:37:5e:5f:ef:52:95:3f:50:af:26:ff:e8:fd:f6:60: b0:25:f4:fd:ce:5e:19:b9:72:25:3d:f9:99:88:11:93:93:07: 3a:74:29:cc:59:d5:c6:a6:fa:5c:4b:2c:b5:c3:d0:7f:fd:3a: 2c:0b:54:2d:4d:5f:b3:4a:63:23:2e:e3:42:95:b6:78:46:4c: af:48:2e:b2:fc:f9:29:39:20:b5:b3:7b:5c:3d:b5:4c:b5:ea: ad:67:58:71:59:c9:2f:27:0c:5d:b3:00:e7:7d:12:2c:50:ba: 38:a8:2f:47:c1:c6:64:6d:f0:8a:9c:1c:c6:6c:01:6e:34:d0: 1a:8c:42:bd:b7:a1:b8:ed:c2:22:ed:21:d8:f5:ca:c6:9a:7f: 11:67:5e:cf:f1:84:9b:98:ea:0d:53:6b:9a:a6:36:35:0a:68: b6:17:d5:42:4c:bf:d0:99:4e:67:f1:50:ef:4b:d3:eb:51:51: c7:12:03:93:3d:5f:fb:c8:0a:08:8e:dc:e5:54:2c:73:dc:84: ac:7a:fa:63:63:1c:d1:f2:c4:a1:2a:a0:5a:a7:14:3e:3a:05: 51:07:ff:d4:99:0f:61:46:ae:bc:8c:c2:14:e5:58:f0:dd:a1: 8d:c6:c5:ad -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA6UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzk1NTUxMTAvBgNVBAUTKDQzNjVEMTc5RDVCNzNFOEE5N0VERTA1MDVGMjlFRjAw QzJENjNFRjkwHhcNMjYxMDAzMDEwMDA1WhcNMjYxMDEwMDEwMDA1WjAYMRYwFAYD VQQDEw02YWMwNTM5Ni1lODZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl5KocqIgJzsQ28ddx9uZzzmZuGDzgT9nc+TYXnbnvlDFzHHZZPxF8ER/PI8i tOhpap6i9GjedjmGdKX/qYgqlkm7nvITTX4mBap0AKlDSrIyjb8uB5+sJn4SN19m zeCrQuUviPuqxmJZViFiR45FWnOnrOSEnQZeiT50pR/zsvEv9xDgKAVBczfxn8/m hdA1GM0gXss3t2ul0/DImJ3FsUEEyZcd56s381mh7YCKtRkKGegYck6+HoB3H8NU AM/BcB3VMp1nfEP/ZTV/CntKqFxzBufsHcN0dygiAxb/QHTbDXZ1sm/HJFFyDEiA X6yX0IhpKcbME7AkdKQDc3sE9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHKUKFoV TFIAGzFsME1bbeYvgpvEMB8GA1UdIwQYMBaAFENl0XnVtz6Kl+3gUF8p7wDC1j75 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTU1NS9EQzdEMTQ1QTAy MkQxMUVEOUQ2NDZCNTdDNEY5QUUwMi9RMlhSZWRXM1BvcVg3ZUJRWHludkFNTFdQ dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1EyWFJlZFczUG9xWDdlQlFYeW52QU1MV1B2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTU1NS9EQzdEMTQ1QTAyMkQxMUVEOUQ2NDZCNTdDNEY5QUUwMi9RMlhSZWRXM1Bv cVg3ZUJRWHludkFNTFdQdmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAK0jyDXtgllsfXViK1M7BLmxIyUTeN15f71KVP1CvJv/o/fZgsCX0/c5eGbly JT35mYgRk5MHOnQpzFnVxqb6XEsstcPQf/06LAtULU1fs0pjIy7jQpW2eEZMr0gu svz5KTkgtbN7XD21TLXqrWdYcVnJLycMXbMA530SLFC6OKgvR8HGZG3wipwcxmwB bjTQGoxCvbehuO3CIu0h2PXKxpp/EWdez/GEm5jqDVNrmqY2NQpothfVQky/0JlO Z/FQ70vT61FRxxIDkz1f+8gKCI7c5VQsc9yErHr6Y2Mc0fLEoSqgWqcUPjoFUQf/ 1JkPYUauvIzCFOVY8N2hjcbFrQ== -----END CERTIFICATE-----Generated at Sun Oct 4 10:05:57 2026 by rpki-client