$ rpki-client -vvvf rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft File: qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft (raw, json) Hash identifier: rv5K9i4pqJ9S7z6dCjJQBYm4ybU1FKIzJgdueF0fLKA= Subject key identifier: AB:5B:C1:7E:29:53:8E:F0:77:21:67:7C:9D:56:B8:55:A9:00:C7:6F Authority key identifier: AB:0D:87:97:C5:8A:83:A5:B4:9C:07:7A:32:EF:67:32:87:24:E4:12 Certificate issuer: /CN=A914E026/serialNumber=AB0D8797C58A83A5B49C077A32EF67328724E412 Certificate serial: 0DAB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qw2Hl8WKg6W0nAd6Mu9nMock5BI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft Manifest number: 0DA5 Signing time: Mon 26 Oct 2026 17:57:09 +0000 Manifest this update: Mon 26 Oct 2026 17:57:09 +0000 Manifest next update: Mon 02 Nov 2026 17:57:09 +0000 Files and hashes: 1: qw2Hl8WKg6W0nAd6Mu9nMock5BI.crl (hash: wMCTSXlVESKmdeRU/jg52SoRGcAFNUK97FNRW1wDmHo=) 2: 95693F483EFC11F19C051D00C6833773.roa (hash: FvcTIUqCk8IaKULOCCc+8nkYabbY0kOvHe1B0EDMOSI=) 3: CEFC9F4C3EFD11F18502D769C6833773.roa (hash: asADDRBilLEaXG8oF0ClMDpzkYwVXZNb9WKZ3OOCar0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.crl rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qw2Hl8WKg6W0nAd6Mu9nMock5BI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 17:57:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3499 (0xdab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E026, serialNumber=AB0D8797C58A83A5B49C077A32EF67328724E412 Validity Not Before: Oct 26 17:57:09 2026 GMT Not After : Nov 2 17:57:09 2026 GMT Subject: CN=6adf9475-1546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:52:b8:99:72:e3:32:37:54:cf:93:42:b7:53: 4f:81:f9:6e:27:39:05:9b:e9:df:95:64:0f:99:de: d3:fb:c5:17:8d:29:60:a3:00:55:e2:c8:7d:e9:17: 9a:11:8b:34:10:14:8e:94:cb:36:60:8a:9d:a4:91: e9:d5:40:81:b5:d4:e0:ec:02:aa:f2:de:53:77:c0: 6b:53:ae:3f:99:0d:6e:b4:69:50:e5:ae:ac:2a:42: 61:3a:5e:13:4d:80:6d:82:94:74:59:6f:5f:9a:c6: e3:6a:27:09:a9:4b:ba:6f:84:c9:c0:18:56:48:85: b6:f6:b5:95:57:ec:af:f0:3a:ed:0c:7e:84:c0:28: 16:d8:0d:99:44:33:68:05:be:1f:76:91:2f:49:fe: de:0b:fb:bd:4e:9e:23:fa:61:42:b9:67:5e:f9:2f: 72:7b:d9:1e:ac:9f:84:c6:65:4a:8b:55:9a:3d:5c: c8:6e:c0:f8:1a:c0:69:bf:30:9a:0b:0e:6d:1c:fc: 8b:7e:70:1c:60:b8:73:a9:12:54:e4:f6:75:42:4f: 7a:d5:79:87:d1:1c:0b:d3:a8:d8:34:df:76:3e:ed: 42:b4:b9:b6:f0:3b:f6:79:52:8b:b9:9f:25:a4:51: 35:43:16:12:eb:36:ca:71:4e:90:ca:42:85:e4:a7: 79:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:5B:C1:7E:29:53:8E:F0:77:21:67:7C:9D:56:B8:55:A9:00:C7:6F X509v3 Authority Key Identifier: keyid:AB:0D:87:97:C5:8A:83:A5:B4:9C:07:7A:32:EF:67:32:87:24:E4:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qw2Hl8WKg6W0nAd6Mu9nMock5BI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:58:d3:27:72:ad:e1:cb:98:15:2d:e9:48:b6:f1:83:a0:17: a3:51:7a:ea:3c:89:88:67:62:74:3d:f2:cd:82:97:17:d2:9d: 99:57:11:72:06:6e:a1:16:cb:52:fc:f9:b7:c7:b1:1a:4f:74: 13:e9:fd:d2:8b:5a:11:b5:04:ce:b8:38:55:ef:88:f6:64:f1: bd:3c:31:87:78:9b:20:50:a9:19:ab:0f:2a:e7:09:a3:a4:c0: 6a:f3:05:34:32:72:6f:8f:7b:b4:16:18:9c:0f:95:5d:cc:a9: f7:5c:94:5c:58:ef:7e:12:78:b7:b5:88:4b:70:4a:8b:e5:af: e4:e5:d1:4e:50:6e:fa:a8:e0:2b:c6:45:c8:dd:d1:2d:8b:05: 85:a4:fe:65:ca:29:7a:16:21:08:0e:13:ac:15:ce:91:3e:9f: e2:20:65:c5:44:3b:3f:e4:64:a5:00:50:71:75:53:a4:5d:3a: a4:41:c1:4f:40:08:88:ed:aa:af:a9:7f:8b:68:d6:97:d8:cb: 94:6b:84:1b:b8:a7:31:a9:b1:68:a0:2f:26:64:52:03:98:5a: 56:7b:53:d7:72:4c:df:03:17:05:59:70:a4:58:8e:27:41:73: 1a:5d:f9:e0:1f:63:2b:54:c1:2c:52:89:4e:bb:df:27:ee:a5: b2:0c:ec:c0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUwMjYxMTAvBgNVBAUTKEFCMEQ4Nzk3QzU4QTgzQTVCNDlDMDc3QTMyRUY2NzMy ODcyNEU0MTIwHhcNMjYxMDI2MTc1NzA5WhcNMjYxMTAyMTc1NzA5WjAYMRYwFAYD VQQDEw02YWRmOTQ3NS0xNTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1FK4mXLjMjdUz5NCt1NPgfluJzkFm+nflWQPmd7T+8UXjSlgowBV4sh96Rea EYs0EBSOlMs2YIqdpJHp1UCBtdTg7AKq8t5Td8BrU64/mQ1utGlQ5a6sKkJhOl4T TYBtgpR0WW9fmsbjaicJqUu6b4TJwBhWSIW29rWVV+yv8DrtDH6EwCgW2A2ZRDNo Bb4fdpEvSf7eC/u9Tp4j+mFCuWde+S9ye9kerJ+ExmVKi1WaPVzIbsD4GsBpvzCa Cw5tHPyLfnAcYLhzqRJU5PZ1Qk961XmH0RwL06jYNN92Pu1CtLm28Dv2eVKLuZ8l pFE1QxYS6zbKcU6QykKF5Kd5WQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKtbwX4p U47wdyFnfJ1WuFWpAMdvMB8GA1UdIwQYMBaAFKsNh5fFioOltJwHejLvZzKHJOQS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTAyNi9ENkIyNjMwNEY1 NkExMUU5QkYyQUU2ODRDNEY5QUUwMi9xdzJIbDhXS2c2VzBuQWQ2TXU5bk1vY2s1 QkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F3MkhsOFdLZzZXMG5BZDZNdTluTW9jazVCSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTAyNi9ENkIyNjMwNEY1NkExMUU5QkYyQUU2ODRDNEY5QUUwMi9xdzJIbDhXS2c2 VzBuQWQ2TXU5bk1vY2s1QkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAi1jTJ3Kt4cuYFS3pSLbxg6AXo1F66jyJiGdidD3yzYKXF9KdmVcRcgZuoRbL Uvz5t8exGk90E+n90otaEbUEzrg4Ve+I9mTxvTwxh3ibIFCpGasPKucJo6TAavMF NDJyb497tBYYnA+VXcyp91yUXFjvfhJ4t7WIS3BKi+Wv5OXRTlBu+qjgK8ZFyN3R LYsFhaT+ZcopehYhCA4TrBXOkT6f4iBlxUQ7P+RkpQBQcXVTpF06pEHBT0AIiO2q r6l/i2jWl9jLlGuEG7inMamxaKAvJmRSA5haVntT13JM3wMXBVlwpFiOJ0FzGl35 4B9jK1TBLFKJTrvfJ+6lsgzswA== -----END CERTIFICATE-----Generated at Tue Oct 27 20:33:33 2026 by rpki-client