$ rpki-client -vvf rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.mft File: qafXPj7Y1cRm3LxsIJzUNTzemM8.mft (raw, json) Hash identifier: /U0147LtsG+vto2I6L49mT3TXhz5GATMcuHKHtw0+NQ= Subject key identifier: 3C:48:4A:70:4B:60:F8:D0:17:46:54:16:6E:1C:FF:0E:C0:F3:CA:FF Authority key identifier: A9:A7:D7:3E:3E:D8:D5:C4:66:DC:BC:6C:20:9C:D4:35:3C:DE:98:CF Certificate issuer: /CN=A9143FC4/serialNumber=A9A7D73E3ED8D5C466DCBC6C209CD4353CDE98CF Certificate serial: 3536 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qafXPj7Y1cRm3LxsIJzUNTzemM8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.mft Manifest number: 3531 Signing time: Tue 18 Aug 2026 15:21:57 +0000 Manifest this update: Tue 18 Aug 2026 15:21:57 +0000 Manifest next update: Tue 25 Aug 2026 15:21:57 +0000 Files and hashes: 1: qafXPj7Y1cRm3LxsIJzUNTzemM8.crl (hash: lFaEWWqoRKnK48uaZrOwakaeiKXjvbNaOIFjNCZGZAA=) 2: FE96F04256EE11F09D243832C4F9AE02.roa (hash: e8GSBttrBgtoI1SFNewE5+wtUTbMHlzUBUVAWSdm4M8=) 3: C3DFE8E48A4311F1B869C3203411F970.roa (hash: EhCaL1leBykbYZWxG9405+W3f7XM7uKqg5KaoxRKZ1g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.crl rsync://rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qafXPj7Y1cRm3LxsIJzUNTzemM8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 15:21:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13622 (0x3536) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143FC4, serialNumber=A9A7D73E3ED8D5C466DCBC6C209CD4353CDE98CF Validity Not Before: Aug 18 15:21:57 2026 GMT Not After : Aug 25 15:21:57 2026 GMT Subject: CN=6a847895-3b65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:01:89:92:3e:ce:a0:49:00:df:e7:91:b6:d6: 0a:f4:3f:cf:53:3c:a2:64:3c:22:1a:64:8a:eb:b1: 26:c6:41:8c:58:60:92:59:34:e3:61:02:45:c2:32: 8e:31:c0:de:35:52:ff:5d:55:0e:cf:7a:22:5c:b4: 2d:82:f8:62:57:51:65:87:06:39:55:6c:1e:3f:68: f7:20:8f:c3:c1:cd:26:35:36:20:e4:90:5d:62:8b: 45:f2:c4:36:e4:3a:2b:80:f7:75:da:44:c5:0c:2a: e3:e8:33:67:d3:3d:0e:76:33:83:82:92:46:73:3c: 96:78:0e:97:e0:87:86:58:fc:ae:9f:7b:78:46:44: cc:cc:8c:97:61:9b:83:37:56:de:a6:c4:8b:c4:c8: ce:51:52:2e:3e:40:d1:25:a3:91:38:c4:ba:a7:0f: c4:7c:6b:d9:6d:37:45:cf:1d:d1:3e:49:d2:93:33: 3a:a0:95:f4:d5:7d:f8:27:0b:ac:7b:3f:35:0c:44: fb:45:89:30:53:a1:7a:09:a3:76:b8:bb:17:37:ff: b2:d5:bb:c4:ad:61:5c:14:b3:08:a2:db:49:de:0a: 7b:42:18:d9:e9:26:29:f4:38:4d:57:88:b3:33:a8: 81:61:1c:f0:9f:d1:e6:08:63:d4:28:26:f3:39:89: 0d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:48:4A:70:4B:60:F8:D0:17:46:54:16:6E:1C:FF:0E:C0:F3:CA:FF X509v3 Authority Key Identifier: keyid:A9:A7:D7:3E:3E:D8:D5:C4:66:DC:BC:6C:20:9C:D4:35:3C:DE:98:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qafXPj7Y1cRm3LxsIJzUNTzemM8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:e2:1b:39:eb:86:9c:08:b2:50:67:5b:22:6d:8d:1b:a5:88: a3:b8:69:3c:d6:ff:dc:16:89:0d:0b:e2:9a:74:a0:09:3a:22: 12:ec:3b:8a:3b:ee:b3:4e:b8:77:a9:31:19:fd:93:10:76:a3: b8:2f:f9:14:e4:7d:cf:a5:e4:3a:43:f0:90:1f:9b:56:cb:ef: 09:95:09:cd:5b:74:fa:75:6b:db:e0:e3:b2:1f:37:83:f5:c3: b1:cc:e3:f4:78:7e:91:eb:b8:a5:82:a7:24:45:a1:29:56:9a: 65:8c:b2:75:9f:d5:07:a9:2c:d9:93:4d:00:3e:57:3a:48:79: ec:95:29:31:7d:ed:a6:55:59:20:06:cc:64:12:f6:e6:86:94: e3:00:d4:9a:da:ad:4a:1b:71:b7:a7:c5:fd:08:61:03:75:8e: ce:20:f7:5d:4f:4c:0a:b3:3b:c5:8f:79:cd:2e:25:10:ce:20: 11:3e:62:1b:09:8a:79:b4:43:32:f3:5f:51:20:1f:1e:4f:d3: 04:68:97:42:17:4a:3d:6d:f7:d2:a0:a9:28:db:37:10:28:6d: 21:4c:b8:aa:03:f1:19:57:52:03:97:b1:46:c3:b5:32:56:52: 36:b4:8a:02:25:79:e5:57:0b:49:e8:ad:63:72:a7:4b:fa:4c: 12:83:ac:44 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNTYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNGQzQxMTAvBgNVBAUTKEE5QTdENzNFM0VEOEQ1QzQ2NkRDQkM2QzIwOUNENDM1 M0NERTk4Q0YwHhcNMjYwODE4MTUyMTU3WhcNMjYwODI1MTUyMTU3WjAYMRYwFAYD VQQDEw02YTg0Nzg5NS0zYjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAowGJkj7OoEkA3+eRttYK9D/PUzyiZDwiGmSK67EmxkGMWGCSWTTjYQJFwjKO McDeNVL/XVUOz3oiXLQtgvhiV1FlhwY5VWweP2j3II/Dwc0mNTYg5JBdYotF8sQ2 5DorgPd12kTFDCrj6DNn0z0OdjODgpJGczyWeA6X4IeGWPyun3t4RkTMzIyXYZuD N1bepsSLxMjOUVIuPkDRJaOROMS6pw/EfGvZbTdFzx3RPknSkzM6oJX01X34Jwus ez81DET7RYkwU6F6CaN2uLsXN/+y1bvErWFcFLMIottJ3gp7QhjZ6SYp9DhNV4iz M6iBYRzwn9HmCGPUKCbzOYkNWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDxISnBL YPjQF0ZUFm4c/w7A88r/MB8GA1UdIwQYMBaAFKmn1z4+2NXEZty8bCCc1DU83pjP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0ZDNC9CMTY1QTNBODI5 NTgxMUUyQjM4RDU4RkIwOEIwMkNEMi9xYWZYUGo3WTFjUm0zTHhzSUp6VU5UemVt TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FhZlhQajdZMWNSbTNMeHNJSnpVTlR6ZW1NOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0ZDNC9CMTY1QTNBODI5NTgxMUUyQjM4RDU4RkIwOEIwMkNEMi9xYWZYUGo3WTFj Um0zTHhzSUp6VU5UemVtTTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAyuIbOeuGnAiyUGdbIm2NG6WIo7hpPNb/3BaJDQvimnSgCToiEuw7ijvus064 d6kxGf2TEHajuC/5FOR9z6XkOkPwkB+bVsvvCZUJzVt0+nVr2+Djsh83g/XDsczj 9Hh+keu4pYKnJEWhKVaaZYyydZ/VB6ks2ZNNAD5XOkh57JUpMX3tplVZIAbMZBL2 5oaU4wDUmtqtShtxt6fF/QhhA3WOziD3XU9MCrM7xY95zS4lEM4gET5iGwmKebRD MvNfUSAfHk/TBGiXQhdKPW330qCpKNs3EChtIUy4qgPxGVdSA5exRsO1MlZSNrSK AiV55VcLSeitY3KnS/pMEoOsRA== -----END CERTIFICATE-----Generated at Wed Aug 19 11:46:56 2026 by rpki-client