$ rpki-client -vvvf rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft File: Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft (raw, json) Hash identifier: tdnU+fsCBt0gkpOK0CIQmgBSIbaPrycMfxldbHJ+grk= Subject key identifier: 21:ED:9A:C2:43:CD:1D:85:8A:6A:38:E8:99:04:0A:9B:3A:C5:F8:02 Authority key identifier: 43:81:95:5E:26:5A:28:3F:85:DC:9A:44:E9:D5:13:73:12:7A:24:12 Certificate issuer: /CN=A914A2CF/serialNumber=4381955E265A283F85DC9A44E9D51373127A2412 Certificate serial: 28BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft Manifest number: 28AA Signing time: Tue 06 Oct 2026 15:36:48 +0000 Manifest this update: Tue 06 Oct 2026 15:36:48 +0000 Manifest next update: Tue 13 Oct 2026 15:36:48 +0000 Files and hashes: 1: Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.crl (hash: tB8y3RlZA7X6ToxNBeu27Zf41yKHdNtH7n/kt069EDc=) 2: 6DAE125C54F611E79DF7E643C4F9AE02.roa (hash: LPyaDve5O9/4WQe5jKoSjlWttPY7ojSlNyw4xX1idoY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.crl rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 15:36:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10429 (0x28bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A2CF, serialNumber=4381955E265A283F85DC9A44E9D51373127A2412 Validity Not Before: Oct 6 15:36:48 2026 GMT Not After : Oct 13 15:36:48 2026 GMT Subject: CN=6ac51590-14d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:6f:49:76:1c:88:d4:51:67:32:ae:59:13:b0: 67:c1:da:f7:76:55:b9:cf:04:ab:bc:e5:59:95:7d: 1c:d4:2e:4f:db:58:bb:61:b4:99:9a:b2:b5:3d:bb: 34:dc:6c:36:e5:2b:45:cf:40:15:ed:9b:27:80:c8: 6e:c1:ff:95:a1:56:f9:3d:e2:72:28:c1:89:1d:fc: b1:02:32:de:df:ac:6b:46:e6:5f:e2:0f:d5:9c:bb: 82:55:c9:16:dd:5a:4a:d0:72:91:1c:20:ad:15:a5: 96:94:87:65:14:9f:4b:ee:eb:79:d5:cb:ac:27:ac: 0c:37:af:9a:8b:21:38:7c:eb:f1:40:5e:88:3c:8f: 73:f0:b3:68:73:c1:77:ef:1e:c8:ed:00:f0:db:28: ce:e4:22:06:26:0a:d2:41:ea:1e:55:e7:b8:97:ef: 79:c2:33:21:83:8b:8b:96:22:b0:7d:e0:dd:b8:e8: 2b:ee:1f:4c:6f:97:d8:20:22:f9:96:4a:ab:5f:03: 68:05:c6:62:d7:c9:b2:52:84:24:f3:f1:3e:08:41: 61:d9:4a:85:8a:6d:cf:f4:8f:4d:ca:9b:21:f9:39: b6:c8:45:ac:a6:b0:23:c2:67:f1:41:cb:64:06:33: 59:86:12:d7:b2:a6:b6:82:ff:1e:f8:42:b9:ba:4a: 64:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:ED:9A:C2:43:CD:1D:85:8A:6A:38:E8:99:04:0A:9B:3A:C5:F8:02 X509v3 Authority Key Identifier: keyid:43:81:95:5E:26:5A:28:3F:85:DC:9A:44:E9:D5:13:73:12:7A:24:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d0:dd:bc:0e:f2:d8:c5:27:fa:0b:c4:9b:04:c2:80:24:2b:f7: 2d:ea:4d:71:b6:cc:2a:b1:6e:42:4f:64:40:0f:eb:17:0a:52: cc:f2:e8:c3:38:99:11:c2:7a:0e:a8:60:c6:75:c2:ab:61:d5: bb:89:6f:d2:0b:d5:87:46:9a:f4:08:12:33:a3:86:5e:84:df: ec:0b:63:36:b1:b7:c0:3f:0c:fc:61:7c:8f:47:33:0a:23:cc: f2:ca:a4:b5:a9:81:96:d9:04:13:c1:a5:30:a8:28:b8:a7:21: 50:d5:bb:98:05:b4:f7:a8:02:8a:b8:90:bc:c6:b9:f5:f7:c0: 37:d6:2e:35:2f:6e:45:b2:59:1e:43:fe:91:59:86:d2:da:f0: fc:b8:31:1e:8f:ce:d1:e3:3e:29:f7:b2:eb:a6:ac:38:51:14: 25:1c:02:0d:48:99:08:c8:d8:c0:e7:03:6c:dc:16:8f:ae:d4: ed:0c:38:dc:72:5b:b6:4b:0c:8e:15:36:5a:ea:9c:49:7d:20: 50:68:ec:a7:0e:08:35:56:97:2b:e3:fc:65:92:1d:1f:38:17: 36:0c:7e:bb:77:37:f4:ea:fb:80:bc:2b:ca:d3:4f:09:da:d7: 00:34:dd:fa:14:38:8e:b3:22:f1:c5:2d:fe:60:15:7c:c7:83: 13:31:74:ee -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICKL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEEyQ0YxMTAvBgNVBAUTKDQzODE5NTVFMjY1QTI4M0Y4NURDOUE0NEU5RDUxMzcz MTI3QTI0MTIwHhcNMjYxMDA2MTUzNjQ4WhcNMjYxMDEzMTUzNjQ4WjAYMRYwFAYD VQQDEw02YWM1MTU5MC0xNGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx29JdhyI1FFnMq5ZE7Bnwdr3dlW5zwSrvOVZlX0c1C5P21i7YbSZmrK1Pbs0 3Gw25StFz0AV7ZsngMhuwf+VoVb5PeJyKMGJHfyxAjLe36xrRuZf4g/VnLuCVckW 3VpK0HKRHCCtFaWWlIdlFJ9L7ut51cusJ6wMN6+aiyE4fOvxQF6IPI9z8LNoc8F3 7x7I7QDw2yjO5CIGJgrSQeoeVee4l+95wjMhg4uLliKwfeDduOgr7h9Mb5fYICL5 lkqrXwNoBcZi18myUoQk8/E+CEFh2UqFim3P9I9Nypsh+Tm2yEWsprAjwmfxQctk BjNZhhLXsqa2gv8e+EK5ukpkVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCHtmsJD zR2Fimo46JkECps6xfgCMB8GA1UdIwQYMBaAFEOBlV4mWig/hdyaROnVE3MSeiQS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTJDRi9ENjFGRUE5RUE3 NjYxMUU0QjExMDNEMzBDNEY5QUUwMi9RNEdWWGlaYUtELUYzSnBFNmRVVGN4SjZK QkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1E0R1ZYaVphS0QtRjNKcEU2ZFVUY3hKNkpCSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTJDRi9ENjFGRUE5RUE3NjYxMUU0QjExMDNEMzBDNEY5QUUwMi9RNEdWWGlaYUtE LUYzSnBFNmRVVGN4SjZKQkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA0N28DvLYxSf6C8SbBMKAJCv3LepNcbbMKrFuQk9kQA/rFwpSzPLowziZEcJ6 DqhgxnXCq2HVu4lv0gvVh0aa9AgSM6OGXoTf7AtjNrG3wD8M/GF8j0czCiPM8sqk tamBltkEE8GlMKgouKchUNW7mAW096gCiriQvMa59ffAN9YuNS9uRbJZHkP+kVmG 0trw/LgxHo/O0eM+Kfey66asOFEUJRwCDUiZCMjYwOcDbNwWj67U7Qw43HJbtksM jhU2WuqcSX0gUGjspw4INVaXK+P8ZZIdHzgXNgx+u3c39Or7gLwrytNPCdrXADTd +hQ4jrMi8cUt/mAVfMeDEzF07g== -----END CERTIFICATE-----Generated at Thu Oct 8 03:59:52 2026 by rpki-client