$ rpki-client -vvvf rpki.apnic.net/member_repository/A915F1EE/9F902FC6601D11F1AD70A0368C47A888/QK2YSqtZnI785foLPmXRxDaWLpo.mft File: QK2YSqtZnI785foLPmXRxDaWLpo.mft (raw, json) Hash identifier: A8pKozsVZOvFeigA73WOAGcGyPJ8OXXSOf5leKYWDHo= Subject key identifier: 63:40:F1:35:F0:47:2B:BA:4B:16:7A:A9:45:D5:0A:71:1B:8E:6F:62 Authority key identifier: 40:AD:98:4A:AB:59:9C:8E:FC:E5:FA:0B:3E:65:D1:C4:36:96:2E:9A Certificate issuer: /CN=A915F1EE/serialNumber=40AD984AAB599C8EFCE5FA0B3E65D1C436962E9A Certificate serial: 4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QK2YSqtZnI785foLPmXRxDaWLpo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F1EE/9F902FC6601D11F1AD70A0368C47A888/QK2YSqtZnI785foLPmXRxDaWLpo.mft Manifest number: 4A Signing time: Sun 25 Oct 2026 08:44:47 +0000 Manifest this update: Sun 25 Oct 2026 08:44:46 +0000 Manifest next update: Sun 01 Nov 2026 08:44:46 +0000 Files and hashes: 1: QK2YSqtZnI785foLPmXRxDaWLpo.crl (hash: 9vljlfADglXMBbQ4kokZjuS4qrAkjdlnwYHhlvJOVcs=) 2: 0208B39E601E11F1B4F202588C47A888.roa (hash: dZXspaelPSf6p7zRYrOdmCIidl6IgNDXHd3ZtaJRbVk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F1EE/9F902FC6601D11F1AD70A0368C47A888/QK2YSqtZnI785foLPmXRxDaWLpo.crl rsync://rpki.apnic.net/member_repository/A915F1EE/9F902FC6601D11F1AD70A0368C47A888/QK2YSqtZnI785foLPmXRxDaWLpo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QK2YSqtZnI785foLPmXRxDaWLpo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 08:44:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75 (0x4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F1EE, serialNumber=40AD984AAB599C8EFCE5FA0B3E65D1C436962E9A Validity Not Before: Oct 25 08:44:46 2026 GMT Not After : Nov 1 08:44:46 2026 GMT Subject: CN=6addc17f-8e78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a6:3c:dc:1d:8f:70:04:44:31:18:67:d8:58: b3:1d:cc:b0:07:1f:31:bd:62:e7:2c:b8:1f:9b:bf: 4c:f3:f7:f7:99:5d:de:34:f2:75:b1:4f:76:00:c1: 2a:54:59:6c:48:e6:d7:12:56:5d:a8:3e:60:25:9a: db:82:da:9e:36:d1:cc:e3:62:d4:b5:6e:54:98:c3: f3:64:1b:21:e9:28:20:be:67:3b:96:72:45:74:b5: 3d:52:9d:a3:48:f9:ee:90:67:e4:50:27:da:17:98: 31:3b:84:06:ff:6a:a0:85:b9:d1:19:ca:dd:7c:62: d0:57:c7:77:c1:91:61:fd:b3:8a:a8:32:0e:79:60: 26:c2:1b:4d:cb:7a:98:f9:a6:c8:34:d5:c8:21:f7: 42:00:e4:33:9c:4b:29:c3:63:21:32:22:66:2f:90: 6c:9e:6e:56:d5:a4:b5:dd:6b:37:3a:6f:8c:0b:dc: 94:a1:18:eb:70:0f:8a:67:84:92:45:03:a8:8d:d1: 38:02:c2:25:c4:71:7d:e3:95:7c:08:2d:79:0b:28: 12:f2:9d:73:06:af:65:ed:35:87:21:9a:57:c6:75: 55:f0:ea:a3:62:59:57:0f:72:e6:cd:66:dc:9e:16: 4a:bb:a7:4c:70:6d:a5:d5:48:eb:95:fe:1a:28:ca: 5a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:40:F1:35:F0:47:2B:BA:4B:16:7A:A9:45:D5:0A:71:1B:8E:6F:62 X509v3 Authority Key Identifier: keyid:40:AD:98:4A:AB:59:9C:8E:FC:E5:FA:0B:3E:65:D1:C4:36:96:2E:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F1EE/9F902FC6601D11F1AD70A0368C47A888/QK2YSqtZnI785foLPmXRxDaWLpo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QK2YSqtZnI785foLPmXRxDaWLpo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F1EE/9F902FC6601D11F1AD70A0368C47A888/QK2YSqtZnI785foLPmXRxDaWLpo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:50:93:82:7f:b3:ff:7e:7e:ac:c2:ad:1f:0d:8e:f8:58:0e: b3:8e:78:1d:0c:a4:af:e0:d3:60:07:ca:ad:6f:b2:46:e7:56: 3c:46:36:da:2e:03:48:1c:65:7b:2e:42:79:97:f2:33:25:02: 30:04:72:80:12:db:59:2f:e2:37:e1:fb:f7:0a:32:76:84:dc: 36:02:b5:aa:4d:8d:a1:19:7b:7a:8d:f4:bb:e8:bf:6c:19:5f: 64:7d:fe:78:4d:e2:c7:2e:93:96:5b:98:dc:f0:36:60:1e:cb: f2:f4:fe:05:ed:f1:e9:4a:ae:e3:1c:01:85:b1:e7:63:27:31: 01:fb:a3:9c:02:2f:1d:f4:2b:c0:1e:7d:c5:8b:4f:80:af:bd: 4a:4f:f2:d0:90:f9:7a:c7:2c:bd:ac:0b:ad:cf:79:0c:3c:0e: ec:07:b2:64:90:d4:f8:9c:37:82:8b:0a:fe:74:69:bd:ae:46: 7a:d4:2f:34:f3:6e:e2:17:be:03:e2:e8:2c:cb:92:81:da:76: 9f:1c:0b:6b:3f:38:79:28:9f:6d:8e:0a:c8:57:2e:65:ad:97: 01:bf:fc:3a:80:88:59:f6:57:06:4c:08:d3:dc:fd:d1:87:33: 2d:d6:47:2b:6b:9d:bf:ba:c6:7a:04:cb:ff:81:eb:39:dd:45: ff:01:2f:c6 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBSzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RjFFRTExMC8GA1UEBRMoNDBBRDk4NEFBQjU5OUM4RUZDRTVGQTBCM0U2NUQxQzQz Njk2MkU5QTAeFw0yNjEwMjUwODQ0NDZaFw0yNjExMDEwODQ0NDZaMBgxFjAUBgNV BAMTDTZhZGRjMTdmLThlNzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCupjzcHY9wBEQxGGfYWLMdzLAHHzG9YucsuB+bv0zz9/eZXd408nWxT3YAwSpU WWxI5tcSVl2oPmAlmtuC2p420czjYtS1blSYw/NkGyHpKCC+ZzuWckV0tT1SnaNI +e6QZ+RQJ9oXmDE7hAb/aqCFudEZyt18YtBXx3fBkWH9s4qoMg55YCbCG03Lepj5 psg01cgh90IA5DOcSynDYyEyImYvkGyeblbVpLXdazc6b4wL3JShGOtwD4pnhJJF A6iN0TgCwiXEcX3jlXwILXkLKBLynXMGr2XtNYchmlfGdVXw6qNiWVcPcubNZtye Fkq7p0xwbaXVSOuV/hooylqtAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUY0DxNfBH K7pLFnqpRdUKcRuOb2IwHwYDVR0jBBgwFoAUQK2YSqtZnI785foLPmXRxDaWLpow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVGMUVFLzlGOTAyRkM2NjAx RDExRjFBRDcwQTAzNjhDNDdBODg4L1FLMllTcXRabkk3ODVmb0xQbVhSeERhV0xw by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUUsyWVNxdFpuSTc4NWZvTFBtWFJ4RGFXTHBvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVG MUVFLzlGOTAyRkM2NjAxRDExRjFBRDcwQTAzNjhDNDdBODg4L1FLMllTcXRabkk3 ODVmb0xQbVhSeERhV0xwby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQApUJOCf7P/fn6swq0fDY74WA6zjngdDKSv4NNgB8qtb7JG51Y8RjbaLgNIHGV7 LkJ5l/IzJQIwBHKAEttZL+I34fv3CjJ2hNw2ArWqTY2hGXt6jfS76L9sGV9kff54 TeLHLpOWW5jc8DZgHsvy9P4F7fHpSq7jHAGFsedjJzEB+6OcAi8d9CvAHn3Fi0+A r71KT/LQkPl6xyy9rAutz3kMPA7sB7JkkNT4nDeCiwr+dGm9rkZ61C80827iF74D 4ugsy5KB2nafHAtrPzh5KJ9tjgrIVy5lrZcBv/w6gIhZ9lcGTAjT3P3RhzMt1kcr a52/usZ6BMv/ges53UX/AS/G -----END CERTIFICATE-----Generated at Tue Oct 27 09:20:04 2026 by rpki-client