$ rpki-client -vvvf rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.mft File: qafXPj7Y1cRm3LxsIJzUNTzemM8.mft (raw, json) Hash identifier: xIiR4M9J7JRQv++k/4UbZwKum66jYju7Xng1Z/km1ak= Subject key identifier: 81:D7:5D:3A:88:6A:BF:D4:4F:09:93:56:F0:8E:E4:E1:3E:4A:86:0B Authority key identifier: A9:A7:D7:3E:3E:D8:D5:C4:66:DC:BC:6C:20:9C:D4:35:3C:DE:98:CF Certificate issuer: /CN=A9143FC4/serialNumber=A9A7D73E3ED8D5C466DCBC6C209CD4353CDE98CF Certificate serial: 3557 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qafXPj7Y1cRm3LxsIJzUNTzemM8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.mft Manifest number: 3552 Signing time: Thu 22 Oct 2026 15:18:58 +0000 Manifest this update: Thu 22 Oct 2026 15:18:57 +0000 Manifest next update: Thu 29 Oct 2026 15:18:57 +0000 Files and hashes: 1: qafXPj7Y1cRm3LxsIJzUNTzemM8.crl (hash: fSORtPB/Am8jQ3lHMh6JlGqZz/hAyqDQ9AVSKPBdvKc=) 2: FE96F04256EE11F09D243832C4F9AE02.roa (hash: e8GSBttrBgtoI1SFNewE5+wtUTbMHlzUBUVAWSdm4M8=) 3: C3DFE8E48A4311F1B869C3203411F970.roa (hash: EhCaL1leBykbYZWxG9405+W3f7XM7uKqg5KaoxRKZ1g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.crl rsync://rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qafXPj7Y1cRm3LxsIJzUNTzemM8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Oct 2026 15:18:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13655 (0x3557) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143FC4, serialNumber=A9A7D73E3ED8D5C466DCBC6C209CD4353CDE98CF Validity Not Before: Oct 22 15:18:57 2026 GMT Not After : Oct 29 15:18:57 2026 GMT Subject: CN=6ada2962-de88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:43:b1:d4:e1:8b:d9:e6:ce:53:b9:d3:bd:2d: 22:23:b5:1e:e0:e7:fd:ac:9b:8a:6a:7a:c3:d9:99: 77:b8:09:20:40:d1:54:17:64:64:9e:6d:b8:54:64: 49:f0:50:53:d2:1e:9a:ea:b8:00:ae:3a:e6:f6:57: f0:b4:b2:da:0f:1f:e0:f0:c1:50:c7:ab:a8:90:dc: 25:4f:b1:54:50:66:b1:41:47:f0:4c:46:76:0c:7c: af:d9:6f:1a:67:bb:e9:28:75:6d:ab:67:6e:b8:63: 89:60:21:f3:f1:b4:b9:a8:04:c7:a1:ae:47:48:62: b9:29:bd:db:ec:0b:b5:03:dd:dd:b3:9a:1a:1a:83: 4d:97:ed:58:d0:d9:de:e9:96:8c:7b:d0:b9:20:23: 6f:f4:2d:9f:e6:ee:b7:f0:e0:62:13:d5:f1:91:b7: 1e:a1:a9:78:c6:19:f8:3b:4c:90:e5:fa:77:84:6e: 69:86:a9:a2:18:87:2a:c7:02:ce:24:2a:96:fd:39: 2b:aa:ac:0f:cd:a7:b3:80:64:03:cd:2c:05:b2:60: 0f:e2:9a:67:50:f0:30:b7:0d:ea:b0:57:53:03:fe: 94:95:61:1b:52:18:ad:2e:37:5c:9d:ab:d5:3b:c5: cf:48:f6:92:c3:19:f8:a9:0a:e3:42:79:0d:ec:e0: b4:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:D7:5D:3A:88:6A:BF:D4:4F:09:93:56:F0:8E:E4:E1:3E:4A:86:0B X509v3 Authority Key Identifier: keyid:A9:A7:D7:3E:3E:D8:D5:C4:66:DC:BC:6C:20:9C:D4:35:3C:DE:98:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qafXPj7Y1cRm3LxsIJzUNTzemM8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:12:75:5c:20:6c:9d:6f:81:ae:dd:28:58:33:10:ea:64:46: 61:f3:2f:53:a8:8f:22:7b:dc:0f:f0:c9:95:9d:bb:bd:4a:36: 13:b7:a8:20:fc:5d:70:6c:6a:28:27:68:db:f2:4a:94:27:cb: af:cc:b4:99:c6:87:d3:38:a6:5f:7d:08:97:a6:72:c0:a6:d7: a4:05:01:8d:48:83:06:fe:09:c0:db:55:b4:26:e9:23:d6:f1: 9d:7f:e8:49:61:c8:f4:26:61:a2:86:df:5e:4a:2b:43:27:49: 2e:b8:2f:1c:42:4a:30:b0:f7:b2:fc:73:ed:4c:5b:99:9e:42: de:e4:be:c5:4b:15:9a:1a:ac:13:1b:50:4e:a9:c8:28:6b:87: c4:25:0e:51:38:ec:87:05:e0:f6:8d:ed:6b:a1:9b:dc:9a:0d: ae:46:e6:58:25:0e:dd:f1:30:a0:4d:c6:6b:47:69:92:0a:d5: a4:6a:80:e1:d5:b9:19:7a:4e:c3:e4:02:71:ba:dc:eb:b3:4d: 8d:b9:3a:e9:f3:bf:d9:a0:cd:73:57:72:0e:b4:59:62:5d:3d: dd:d6:6b:a2:3a:cc:5e:f4:4b:51:36:d4:74:be:83:b3:04:0d: 61:c1:38:c8:98:fc:49:80:a1:57:b7:45:c2:69:10:f7:b9:c2: eb:3a:47:84 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNGQzQxMTAvBgNVBAUTKEE5QTdENzNFM0VEOEQ1QzQ2NkRDQkM2QzIwOUNENDM1 M0NERTk4Q0YwHhcNMjYxMDIyMTUxODU3WhcNMjYxMDI5MTUxODU3WjAYMRYwFAYD VQQDEw02YWRhMjk2Mi1kZTg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA30Ox1OGL2ebOU7nTvS0iI7Ue4Of9rJuKanrD2Zl3uAkgQNFUF2Rknm24VGRJ 8FBT0h6a6rgArjrm9lfwtLLaDx/g8MFQx6uokNwlT7FUUGaxQUfwTEZ2DHyv2W8a Z7vpKHVtq2duuGOJYCHz8bS5qATHoa5HSGK5Kb3b7Au1A93ds5oaGoNNl+1Y0Nne 6ZaMe9C5ICNv9C2f5u638OBiE9Xxkbceoal4xhn4O0yQ5fp3hG5phqmiGIcqxwLO JCqW/TkrqqwPzaezgGQDzSwFsmAP4ppnUPAwtw3qsFdTA/6UlWEbUhitLjdcnavV O8XPSPaSwxn4qQrjQnkN7OC06wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIHXXTqI ar/UTwmTVvCO5OE+SoYLMB8GA1UdIwQYMBaAFKmn1z4+2NXEZty8bCCc1DU83pjP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0ZDNC9CMTY1QTNBODI5 NTgxMUUyQjM4RDU4RkIwOEIwMkNEMi9xYWZYUGo3WTFjUm0zTHhzSUp6VU5UemVt TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FhZlhQajdZMWNSbTNMeHNJSnpVTlR6ZW1NOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0ZDNC9CMTY1QTNBODI5NTgxMUUyQjM4RDU4RkIwOEIwMkNEMi9xYWZYUGo3WTFj Um0zTHhzSUp6VU5UemVtTTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlxJ1XCBsnW+Brt0oWDMQ6mRGYfMvU6iPInvcD/DJlZ27vUo2E7eoIPxdcGxq KCdo2/JKlCfLr8y0mcaH0zimX30Il6ZywKbXpAUBjUiDBv4JwNtVtCbpI9bxnX/o SWHI9CZhoobfXkorQydJLrgvHEJKMLD3svxz7UxbmZ5C3uS+xUsVmhqsExtQTqnI KGuHxCUOUTjshwXg9o3ta6Gb3JoNrkbmWCUO3fEwoE3Ga0dpkgrVpGqA4dW5GXpO w+QCcbrc67NNjbk66fO/2aDNc1dyDrRZYl093dZrojrMXvRLUTbUdL6DswQNYcE4 yJj8SYChV7dFwmkQ97nC6zpHhA== -----END CERTIFICATE-----Generated at Sat Oct 24 07:11:54 2026 by rpki-client