$ rpki-client -vvvf rpki.apnic.net/member_repository/A916E9E3/4E0E3714A3A411F092013E29C4F9AE02/QRX9yGsnZiNgOztkXUcIQLgDm8g.mft File: QRX9yGsnZiNgOztkXUcIQLgDm8g.mft (raw, json) Hash identifier: sNeetCs6luc9TX41LyqsxTpJAIy5Bw7Q0GnS1lnRtvE= Subject key identifier: EE:48:AB:9F:9E:F2:CF:77:49:DD:91:5C:06:18:BE:D6:1A:B2:9D:61 Authority key identifier: 41:15:FD:C8:6B:27:66:23:60:3B:3B:64:5D:47:08:40:B8:03:9B:C8 Certificate issuer: /CN=A916E9E3/serialNumber=4115FDC86B276623603B3B645D470840B8039BC8 Certificate serial: BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRX9yGsnZiNgOztkXUcIQLgDm8g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E9E3/4E0E3714A3A411F092013E29C4F9AE02/QRX9yGsnZiNgOztkXUcIQLgDm8g.mft Manifest number: BA Signing time: Sat 03 Oct 2026 07:37:43 +0000 Manifest this update: Sat 03 Oct 2026 07:37:43 +0000 Manifest next update: Sat 10 Oct 2026 07:37:43 +0000 Files and hashes: 1: QRX9yGsnZiNgOztkXUcIQLgDm8g.crl (hash: UGAijSDkAmRpEl8bGU/3NZPL0mvt3d5WSJ7t2eL3pRI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E9E3/4E0E3714A3A411F092013E29C4F9AE02/QRX9yGsnZiNgOztkXUcIQLgDm8g.crl rsync://rpki.apnic.net/member_repository/A916E9E3/4E0E3714A3A411F092013E29C4F9AE02/QRX9yGsnZiNgOztkXUcIQLgDm8g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRX9yGsnZiNgOztkXUcIQLgDm8g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 07:37:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 186 (0xba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E9E3, serialNumber=4115FDC86B276623603B3B645D470840B8039BC8 Validity Not Before: Oct 3 07:37:43 2026 GMT Not After : Oct 10 07:37:43 2026 GMT Subject: CN=6ac0b0c7-60ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:44:09:6c:65:a9:a0:5b:e5:31:89:7e:d5:33: 80:51:18:98:7b:05:c7:11:68:f4:51:5b:7c:dc:fc: 08:a6:e5:dc:3b:4f:dc:02:fa:14:38:62:71:b4:19: be:86:89:5c:d9:95:4a:4a:a4:29:db:6d:3e:22:04: 19:97:0f:a1:75:2d:48:8b:45:6b:bd:1b:52:25:85: d4:41:bc:b0:e5:fe:44:8c:d1:39:83:ce:22:4a:88: e1:1a:6c:49:4c:0c:34:18:da:21:a1:41:7c:fe:ff: 6d:16:70:dc:59:3a:59:e8:71:50:d6:94:e3:7a:dc: 87:9d:4b:7a:ea:ac:66:13:fb:18:83:3e:55:c7:bb: a5:4e:55:6f:91:99:cd:54:ab:3d:1d:18:13:19:ca: 52:57:b7:13:61:31:d3:ca:7f:3a:a0:d7:81:4b:fb: c2:a5:56:2c:ae:c2:c4:bf:7e:34:65:85:0f:a7:4f: fe:ac:a5:43:f2:4b:77:8f:55:c4:5b:4d:eb:a3:01: 36:96:d9:21:9a:48:11:1a:7c:3d:de:de:77:df:73: f8:b7:5c:60:1a:94:d4:0d:06:db:e6:a0:73:4a:a9: 1e:d8:88:50:4d:82:55:4a:81:d8:2b:ab:8c:7a:d0: dd:9d:9d:90:57:0a:3d:9f:3a:f6:15:b6:a7:b5:47: 2c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:48:AB:9F:9E:F2:CF:77:49:DD:91:5C:06:18:BE:D6:1A:B2:9D:61 X509v3 Authority Key Identifier: keyid:41:15:FD:C8:6B:27:66:23:60:3B:3B:64:5D:47:08:40:B8:03:9B:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E9E3/4E0E3714A3A411F092013E29C4F9AE02/QRX9yGsnZiNgOztkXUcIQLgDm8g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRX9yGsnZiNgOztkXUcIQLgDm8g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E9E3/4E0E3714A3A411F092013E29C4F9AE02/QRX9yGsnZiNgOztkXUcIQLgDm8g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:35:6c:e6:63:d2:cb:66:64:6a:33:b7:e6:52:b0:2b:86:85: c7:aa:8c:56:0d:4c:c5:33:bf:60:79:aa:92:f3:89:05:af:d1: 57:e6:54:b1:60:45:91:1f:51:fe:7e:4d:de:fa:69:85:82:47: 32:da:f7:c5:06:62:f0:dd:7d:5f:3c:53:92:ab:84:d5:b8:87: 71:72:15:2e:10:d0:01:3f:96:3a:dd:a6:af:47:1d:6f:a2:ed: ab:81:f2:bc:75:fd:c0:74:cb:67:54:dc:c1:12:d4:df:4d:6a: ec:f9:08:91:ad:52:21:e9:26:a5:73:0d:6a:45:94:df:e3:d5: 93:f2:21:ae:8a:49:21:8b:bd:b5:f7:df:a3:08:9e:3e:c7:73: 8b:fc:b5:07:ba:bf:03:bd:da:44:15:db:07:c5:15:1d:dc:4b: c9:49:5f:1e:75:cf:53:11:79:b7:ce:dc:7b:24:eb:d0:ff:71: 6f:e2:36:0e:38:a1:a3:e8:cc:d6:0d:b8:b4:d2:04:6d:a3:97: 08:66:0d:8f:39:ce:85:86:fa:01:8e:e2:b5:37:b6:4d:16:56: 47:dc:d3:a8:40:62:f5:19:77:11:cd:3f:4f:99:f7:16:b2:aa: 38:62:72:bc:96:b2:08:0e:4a:c6:06:af:d8:24:c8:8a:74:4f: 9d:bd:03:72 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICALowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkU5RTMxMTAvBgNVBAUTKDQxMTVGREM4NkIyNzY2MjM2MDNCM0I2NDVENDcwODQw QjgwMzlCQzgwHhcNMjYxMDAzMDczNzQzWhcNMjYxMDEwMDczNzQzWjAYMRYwFAYD VQQDEw02YWMwYjBjNy02MGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnEQJbGWpoFvlMYl+1TOAURiYewXHEWj0UVt83PwIpuXcO0/cAvoUOGJxtBm+ holc2ZVKSqQp220+IgQZlw+hdS1Ii0VrvRtSJYXUQbyw5f5EjNE5g84iSojhGmxJ TAw0GNohoUF8/v9tFnDcWTpZ6HFQ1pTjetyHnUt66qxmE/sYgz5Vx7ulTlVvkZnN VKs9HRgTGcpSV7cTYTHTyn86oNeBS/vCpVYsrsLEv340ZYUPp0/+rKVD8kt3j1XE W03rowE2ltkhmkgRGnw93t5333P4t1xgGpTUDQbb5qBzSqke2IhQTYJVSoHYK6uM etDdnZ2QVwo9nzr2FbantUcs/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO5Iq5+e 8s93Sd2RXAYYvtYasp1hMB8GA1UdIwQYMBaAFEEV/chrJ2YjYDs7ZF1HCEC4A5vI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTlFMy80RTBFMzcxNEEz QTQxMUYwOTIwMTNFMjlDNEY5QUUwMi9RUlg5eUdzblppTmdPenRrWFVjSVFMZ0Rt OGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FSWDl5R3NuWmlOZ096dGtYVWNJUUxnRG04Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTlFMy80RTBFMzcxNEEzQTQxMUYwOTIwMTNFMjlDNEY5QUUwMi9RUlg5eUdzblpp TmdPenRrWFVjSVFMZ0RtOGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtDVs5mPSy2ZkajO35lKwK4aFx6qMVg1MxTO/YHmqkvOJBa/RV+ZUsWBFkR9R /n5N3vpphYJHMtr3xQZi8N19XzxTkquE1biHcXIVLhDQAT+WOt2mr0cdb6Ltq4Hy vHX9wHTLZ1TcwRLU301q7PkIka1SIekmpXMNakWU3+PVk/IhropJIYu9tfffowie Psdzi/y1B7q/A73aRBXbB8UVHdxLyUlfHnXPUxF5t87ceyTr0P9xb+I2Djiho+jM 1g24tNIEbaOXCGYNjznOhYb6AY7itTe2TRZWR9zTqEBi9Rl3Ec0/T5n3FrKqOGJy vJayCA5Kxgav2CTIinRPnb0Dcg== -----END CERTIFICATE-----Generated at Mon Oct 5 06:32:18 2026 by rpki-client