$ rpki-client -vvvf rpki.apnic.net/member_repository/A9156971/48C221861D9211E2ADB30BF508B02CD2/KQX7MhK9YWRvt69jPqGiV7w6Pew.mft File: KQX7MhK9YWRvt69jPqGiV7w6Pew.mft (raw, json) Hash identifier: Czf7Kn1mc9WFFITBw74Igz7DafgU+AiLxve9uHCL1F4= Subject key identifier: 19:C4:53:D7:F8:A3:23:E6:8E:53:F4:DD:02:70:7B:CD:36:43:16:75 Authority key identifier: 29:05:FB:32:12:BD:61:64:6F:B7:AF:63:3E:A1:A2:57:BC:3A:3D:EC Certificate issuer: /CN=A9156971/serialNumber=2905FB3212BD61646FB7AF633EA1A257BC3A3DEC Certificate serial: 3597 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQX7MhK9YWRvt69jPqGiV7w6Pew.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156971/48C221861D9211E2ADB30BF508B02CD2/KQX7MhK9YWRvt69jPqGiV7w6Pew.mft Manifest number: 358E Signing time: Sat 10 Oct 2026 14:43:34 +0000 Manifest this update: Sat 10 Oct 2026 14:43:34 +0000 Manifest next update: Sat 17 Oct 2026 14:43:34 +0000 Files and hashes: 1: KQX7MhK9YWRvt69jPqGiV7w6Pew.crl (hash: jV0lIwIwrozaqBoNdoM4Eg+vIsrP13wOyCSlQ3H2VMA=) 2: 4AF78A4AFEC611EF86B4765BC4F9AE02.roa (hash: DaUDfRkisbFjBhwxGgOMj8rF42Ao1F9Plt9FEElpL3c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156971/48C221861D9211E2ADB30BF508B02CD2/KQX7MhK9YWRvt69jPqGiV7w6Pew.crl rsync://rpki.apnic.net/member_repository/A9156971/48C221861D9211E2ADB30BF508B02CD2/KQX7MhK9YWRvt69jPqGiV7w6Pew.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQX7MhK9YWRvt69jPqGiV7w6Pew.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 14:43:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13719 (0x3597) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156971, serialNumber=2905FB3212BD61646FB7AF633EA1A257BC3A3DEC Validity Not Before: Oct 10 14:43:34 2026 GMT Not After : Oct 17 14:43:34 2026 GMT Subject: CN=6aca4f16-cf4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ce:aa:6b:51:a2:16:92:2b:bf:f5:de:54:10: 9b:89:6d:59:53:7b:91:5d:3a:7e:43:47:4a:2c:8a: 09:4c:f0:8d:49:31:6d:2c:8d:e8:89:15:07:a3:bc: 2b:fb:2f:13:aa:4d:20:6c:ab:f6:ce:b7:a9:0c:a3: 95:90:71:9b:5e:d5:7b:0c:65:35:b8:22:d1:11:01: 63:e2:20:0a:b6:4b:7c:57:7f:29:5e:0f:9b:12:e5: 5d:0c:0c:15:46:3e:fd:19:f7:40:a2:88:2e:d3:98: 0e:0c:0f:ad:31:a2:ac:07:90:4f:19:ab:74:36:cb: 8d:02:9b:4d:74:b0:8b:18:fc:24:3b:09:92:36:c4: 4f:60:3f:05:38:7b:c0:c9:3c:64:00:6c:78:43:f1: 51:93:f1:83:72:4e:40:e7:70:c1:b2:d0:98:9e:c2: 4f:2f:54:86:64:50:7f:a9:ba:39:b8:36:7d:3c:0c: 26:c1:34:71:57:39:16:34:10:36:41:8d:fd:11:7a: 80:4d:64:8c:88:57:59:60:a5:e4:1e:fb:ff:99:78: 02:94:2e:67:22:0b:a3:99:d0:73:1b:29:b8:39:50: c8:59:75:50:0d:d9:4d:ca:8e:c9:9c:07:cb:62:84: 7b:20:09:12:62:bc:76:eb:4b:7f:f3:c9:3d:43:2b: 7f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:C4:53:D7:F8:A3:23:E6:8E:53:F4:DD:02:70:7B:CD:36:43:16:75 X509v3 Authority Key Identifier: keyid:29:05:FB:32:12:BD:61:64:6F:B7:AF:63:3E:A1:A2:57:BC:3A:3D:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156971/48C221861D9211E2ADB30BF508B02CD2/KQX7MhK9YWRvt69jPqGiV7w6Pew.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQX7MhK9YWRvt69jPqGiV7w6Pew.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156971/48C221861D9211E2ADB30BF508B02CD2/KQX7MhK9YWRvt69jPqGiV7w6Pew.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:19:14:bf:2c:89:07:fd:91:91:b4:1b:c2:8e:e5:f0:7f:6c: 87:4f:b4:6c:7b:be:b8:2e:78:23:17:80:29:58:09:c3:2e:17: 34:fd:8f:73:4f:62:2e:74:4f:f2:64:eb:4b:00:cc:80:7b:43: 2d:81:85:f5:00:44:d5:c6:45:33:93:ec:e4:6b:03:b4:5f:9f: 3f:5c:7c:8f:3b:e6:88:14:e5:00:55:fb:03:fb:11:8e:57:ed: 07:3b:1e:00:d5:d5:98:e8:08:df:29:6d:91:1f:09:e6:00:73: d8:47:c5:04:ea:ab:a8:6c:53:b9:1f:f0:99:b0:69:19:2c:ff: 4a:9f:d2:b8:40:95:47:34:8b:f9:cf:89:97:90:16:e3:4c:96: 4c:c8:f2:2b:2b:5b:c1:41:7e:99:48:26:14:1d:ea:fe:4d:83: 82:24:83:4b:10:26:84:5f:25:55:52:36:d4:43:5e:10:29:db: 50:83:17:cc:68:90:34:6a:73:5f:e5:c6:c7:6b:bb:81:f8:bc: 2e:13:ea:86:b1:6b:55:08:db:ab:80:99:a2:d3:33:43:8a:9c: c1:7b:b1:d3:29:5a:9d:f7:0b:54:f1:52:d6:9d:5d:d9:15:1d: e1:84:6e:12:4a:9c:ef:fc:ea:4a:60:bc:ee:40:0e:9a:eb:e1: fe:0c:87:f8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY5NzExMTAvBgNVBAUTKDI5MDVGQjMyMTJCRDYxNjQ2RkI3QUY2MzNFQTFBMjU3 QkMzQTNERUMwHhcNMjYxMDEwMTQ0MzM0WhcNMjYxMDE3MTQ0MzM0WjAYMRYwFAYD VQQDEw02YWNhNGYxNi1jZjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2s6qa1GiFpIrv/XeVBCbiW1ZU3uRXTp+Q0dKLIoJTPCNSTFtLI3oiRUHo7wr +y8Tqk0gbKv2zrepDKOVkHGbXtV7DGU1uCLREQFj4iAKtkt8V38pXg+bEuVdDAwV Rj79GfdAoogu05gODA+tMaKsB5BPGat0NsuNAptNdLCLGPwkOwmSNsRPYD8FOHvA yTxkAGx4Q/FRk/GDck5A53DBstCYnsJPL1SGZFB/qbo5uDZ9PAwmwTRxVzkWNBA2 QY39EXqATWSMiFdZYKXkHvv/mXgClC5nIgujmdBzGym4OVDIWXVQDdlNyo7JnAfL YoR7IAkSYrx260t/88k9Qyt/BQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBnEU9f4 oyPmjlP03QJwe802QxZ1MB8GA1UdIwQYMBaAFCkF+zISvWFkb7evYz6hole8Oj3s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Njk3MS80OEMyMjE4NjFE OTIxMUUyQURCMzBCRjUwOEIwMkNEMi9LUVg3TWhLOVlXUnZ0NjlqUHFHaVY3dzZQ ZXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tRWDdNaEs5WVdSdnQ2OWpQcUdpVjd3NlBldy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Njk3MS80OEMyMjE4NjFEOTIxMUUyQURCMzBCRjUwOEIwMkNEMi9LUVg3TWhLOVlX UnZ0NjlqUHFHaVY3dzZQZXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATxkUvyyJB/2RkbQbwo7l8H9sh0+0bHu+uC54IxeAKVgJwy4XNP2Pc09iLnRP 8mTrSwDMgHtDLYGF9QBE1cZFM5Ps5GsDtF+fP1x8jzvmiBTlAFX7A/sRjlftBzse ANXVmOgI3yltkR8J5gBz2EfFBOqrqGxTuR/wmbBpGSz/Sp/SuECVRzSL+c+Jl5AW 40yWTMjyKytbwUF+mUgmFB3q/k2DgiSDSxAmhF8lVVI21ENeECnbUIMXzGiQNGpz X+XGx2u7gfi8LhPqhrFrVQjbq4CZotMzQ4qcwXux0ylanfcLVPFS1p1d2RUd4YRu Ekqc7/zqSmC87kAOmuvh/gyH+A== -----END CERTIFICATE-----Generated at Sat Oct 10 21:23:55 2026 by rpki-client