$ rpki-client -vvvf rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft File: QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft (raw, json) Hash identifier: oX6pKf7753dllXVIIPbtiuKxc3x9VKAbmkX3CX+WsYM= Subject key identifier: A4:5F:5C:DD:11:4B:1E:12:20:2B:19:63:B8:D5:9B:0A:2E:CF:D0:81 Authority key identifier: 40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79 Certificate issuer: /CN=A9157D7A/serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379 Certificate serial: 090A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft Manifest number: 0842 Signing time: Tue 27 Oct 2026 12:48:46 +0000 Manifest this update: Tue 27 Oct 2026 12:48:45 +0000 Manifest next update: Tue 03 Nov 2026 12:48:45 +0000 Files and hashes: 1: QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl (hash: CfckXLKL0oCQVb1fvSBK9SW139F6R5K2tOShdh2EBh0=) 2: 632982C478E411F0B36C2173C4F9AE02.roa (hash: qJHNInkkLUDjF8Std1fFlLs2dkTvsMn5hYhhfgfxfDk=) 3: 2E96A63A690A11EF9525E980C4F9AE02.roa (hash: w1BNk+zUtKJ1Q1s5Fl9UiShG29HhfIKgejd+qqeEDdk=) 4: 03BA8B36824411EF94479387C4F9AE02.roa (hash: yblVKBomAmKdFLx7E1GhA7lmIOLPIfTo5ijL1IDIgeY=) 5: 324F926C3BAC11F09BF98E0EC4F9AE02.roa (hash: VwsX+aayGFk3FRmuL/HgkrJaCVx405LJHEL44d7J7/w=) 6: C186DD80331A11EC8F33C209C4F9AE02.roa (hash: SldeaCZGSwTt8m25XecGitCIUSJt0D3MD87GNQPgihE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 12:48:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2314 (0x90a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157D7A, serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379 Validity Not Before: Oct 27 12:48:45 2026 GMT Not After : Nov 3 12:48:45 2026 GMT Subject: CN=6ae09dae-14d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:66:44:83:ea:24:0d:17:77:1a:10:6e:30:19: ac:bf:b2:62:ab:a7:35:b5:15:40:86:e3:25:b8:d1: 7b:4a:5b:eb:f0:da:04:d0:8e:a6:15:a1:4c:2c:06: f2:6e:b3:32:3a:a6:f2:ad:64:98:38:aa:62:71:7e: 78:b7:3e:bf:c0:85:15:db:45:a0:c7:82:26:88:a1: 9b:8b:22:a3:6b:b1:e1:2e:9c:da:2d:37:38:cf:89: 00:1a:09:84:20:10:d9:00:18:c9:ac:6e:cc:10:84: 86:50:eb:66:14:52:c3:3b:2f:37:96:30:f7:3a:17: b3:05:e7:98:38:63:54:99:f8:dd:0e:63:50:5d:87: a8:d1:f4:05:f2:dd:6d:e1:31:e1:27:1a:63:ed:2a: 78:a9:6c:35:51:9a:9f:70:01:f3:73:6d:53:5d:38: b6:9f:f1:3c:d5:4c:1e:d3:37:6a:29:f0:35:6d:ab: 65:12:96:e7:14:28:6b:07:ef:0c:11:12:b1:37:d9: 80:d9:81:af:0c:80:cb:7a:80:60:40:e3:13:03:6b: 9e:59:01:2b:a2:a7:b9:77:c1:36:f7:ac:9d:4a:1e: f9:d9:77:6e:67:3b:5e:2e:27:70:1d:14:ab:ab:f6: 7d:3a:8d:6f:3c:e2:9d:3d:b3:b3:08:9c:d0:83:ee: d8:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:5F:5C:DD:11:4B:1E:12:20:2B:19:63:B8:D5:9B:0A:2E:CF:D0:81 X509v3 Authority Key Identifier: keyid:40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:cf:fe:83:05:40:b8:f2:b2:30:e3:6d:96:79:81:86:bb:81: 9f:cf:31:2c:06:26:0b:37:3c:b2:51:31:c2:97:bf:2c:55:ba: c8:7d:38:ed:4d:2d:64:e7:3c:dd:1e:97:55:f5:68:d0:b0:4e: 68:cf:21:42:61:83:c6:79:bf:38:e0:e6:05:c6:fd:e8:9b:05: f3:df:cb:08:ed:99:a2:bb:b0:37:e4:4a:4b:64:fb:bb:b0:82: 89:7d:dd:2d:55:df:e4:59:50:37:5e:62:51:0e:3a:81:c6:7d: 6b:4b:5b:6d:cf:c7:8f:c1:d9:c0:31:5f:e7:5b:39:be:d0:50: 11:43:49:93:de:e6:5e:5d:30:fd:0e:23:42:9c:2d:11:78:a4: 6f:c5:c5:83:f3:4f:c2:88:4b:42:71:0f:22:46:8f:f2:0f:da: 08:39:12:89:26:f9:c8:a4:90:39:30:6f:65:97:97:bc:e1:28: dd:c9:5b:2d:95:7b:97:2a:a7:ba:f1:34:64:4c:d0:39:44:cc: 0e:16:f8:57:76:61:ec:ab:3c:20:63:25:99:aa:e8:97:84:5f: cd:38:25:4b:15:2e:a7:45:6a:fb:4c:cf:9b:66:25:f5:68:32: 63:c8:34:54:f5:a5:db:ad:14:4c:37:a2:1f:1d:78:e9:82:59: ed:99:a8:3d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdEN0ExMTAvBgNVBAUTKDQwMUI0Mjk5MDZDOTBFQTAzRUNGQzYxQjE1QkE0RUYx MjM5MDMzNzkwHhcNMjYxMDI3MTI0ODQ1WhcNMjYxMTAzMTI0ODQ1WjAYMRYwFAYD VQQDEw02YWUwOWRhZS0xNGQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqWZEg+okDRd3GhBuMBmsv7Jiq6c1tRVAhuMluNF7Slvr8NoE0I6mFaFMLAby brMyOqbyrWSYOKpicX54tz6/wIUV20Wgx4ImiKGbiyKja7HhLpzaLTc4z4kAGgmE IBDZABjJrG7MEISGUOtmFFLDOy83ljD3OhezBeeYOGNUmfjdDmNQXYeo0fQF8t1t 4THhJxpj7Sp4qWw1UZqfcAHzc21TXTi2n/E81Uwe0zdqKfA1batlEpbnFChrB+8M ERKxN9mA2YGvDIDLeoBgQOMTA2ueWQEroqe5d8E296ydSh752XduZzteLidwHRSr q/Z9Oo1vPOKdPbOzCJzQg+7YwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKRfXN0R Sx4SICsZY7jVmwouz9CBMB8GA1UdIwQYMBaAFEAbQpkGyQ6gPs/GGxW6TvEjkDN5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q3QS81RERDQ0NDNjk5 MTUxMUVCOTY3MjcyNDNDNEY5QUUwMi9RQnRDbVFiSkRxQS16OFliRmJwTzhTT1FN M2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FCdENtUWJKRHFBLXo4WWJGYnBPOFNPUU0zay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0Q3QS81RERDQ0NDNjk5MTUxMUVCOTY3MjcyNDNDNEY5QUUwMi9RQnRDbVFiSkRx QS16OFliRmJwTzhTT1FNM2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAs8/+gwVAuPKyMONtlnmBhruBn88xLAYmCzc8slExwpe/LFW6yH047U0tZOc8 3R6XVfVo0LBOaM8hQmGDxnm/OODmBcb96JsF89/LCO2ZoruwN+RKS2T7u7CCiX3d LVXf5FlQN15iUQ46gcZ9a0tbbc/Hj8HZwDFf51s5vtBQEUNJk97mXl0w/Q4jQpwt EXikb8XFg/NPwohLQnEPIkaP8g/aCDkSiSb5yKSQOTBvZZeXvOEo3clbLZV7lyqn uvE0ZEzQOUTMDhb4V3Zh7Ks8IGMlmarol4RfzTglSxUup0Vq+0zPm2Yl9WgyY8g0 VPWl260UTDeiHx146YJZ7ZmoPQ== -----END CERTIFICATE-----Generated at Wed Oct 28 16:34:31 2026 by rpki-client