$ rpki-client -vvvf rpki.apnic.net/member_repository/A9172989/EFFDD714D6D511F0B06384B581D3641D/q2nHQCVImv1hdH_5M1sUfiC7JdQ.mft File: q2nHQCVImv1hdH_5M1sUfiC7JdQ.mft (raw, json) Hash identifier: pRlrH2cY3ELBsyoxagJoVzR52lm1dXS6TUJAVhcbwPM= Subject key identifier: 77:6E:71:FB:3F:D6:8D:F7:DD:59:0A:CC:6F:2D:32:B7:4A:34:61:5A Authority key identifier: AB:69:C7:40:25:48:9A:FD:61:74:7F:F9:33:5B:14:7E:20:BB:25:D4 Certificate issuer: /CN=A9172989/serialNumber=AB69C74025489AFD61747FF9335B147E20BB25D4 Certificate serial: 9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2nHQCVImv1hdH_5M1sUfiC7JdQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172989/EFFDD714D6D511F0B06384B581D3641D/q2nHQCVImv1hdH_5M1sUfiC7JdQ.mft Manifest number: 96 Signing time: Wed 23 Sep 2026 07:12:27 +0000 Manifest this update: Wed 23 Sep 2026 07:12:26 +0000 Manifest next update: Wed 30 Sep 2026 07:12:26 +0000 Files and hashes: 1: q2nHQCVImv1hdH_5M1sUfiC7JdQ.crl (hash: 2ukEefKJwfjM2jQKQkYmpOU4ByxT9jKpPwTgd1HPZHg=) 2: 0FB60AEED6D711F085B1D0E884D3641D.roa (hash: F1265JguS11gp2J6OEHqaooyI1SAzSWA0Nwq1O/s41g=) 3: 3CBCF5BED6D911F0B064CD5C85D3641D.roa (hash: sM6CeOH9Bgvv3iRWHhGYzH5sAI6j1iD3slAlqraB/mI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172989/EFFDD714D6D511F0B06384B581D3641D/q2nHQCVImv1hdH_5M1sUfiC7JdQ.crl rsync://rpki.apnic.net/member_repository/A9172989/EFFDD714D6D511F0B06384B581D3641D/q2nHQCVImv1hdH_5M1sUfiC7JdQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2nHQCVImv1hdH_5M1sUfiC7JdQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 07:12:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 156 (0x9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172989, serialNumber=AB69C74025489AFD61747FF9335B147E20BB25D4 Validity Not Before: Sep 23 07:12:26 2026 GMT Not After : Sep 30 07:12:26 2026 GMT Subject: CN=6ab37bdb-024a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:66:64:25:57:1e:ca:a4:f0:1f:bb:7c:85:09: ce:7f:d9:bd:be:16:be:55:a7:eb:5e:7a:2a:22:78: 7d:7c:27:09:7e:39:45:79:af:1d:e7:82:de:a8:ea: a6:01:b7:70:ed:62:6f:0c:5a:fe:42:be:76:21:23: d5:18:c4:0f:d9:79:06:d7:a8:84:f4:89:7d:84:40: 7c:24:56:91:ff:55:59:6b:3d:2d:51:41:75:cb:56: 6b:96:8e:bd:10:f4:e1:00:cd:0c:41:fc:c3:3a:10: 96:c9:92:b5:31:9e:af:a9:dd:59:56:dc:c0:4e:70: b9:74:c2:be:52:7d:5b:ed:d9:bb:f9:6d:9a:59:4d: 58:e4:80:f2:15:a8:fd:f0:12:ba:d6:28:2e:21:2f: 98:8f:ad:f7:fd:af:0a:99:8f:c4:26:e7:70:b2:0c: 41:36:d9:8e:4d:21:b8:af:81:cd:41:f0:4d:f4:da: 8f:37:c8:2b:f1:6c:a9:81:5b:d7:5f:ca:79:1d:f0: 55:0a:ad:e6:4a:2f:2c:0d:e7:d3:d4:f2:50:d8:e2: 03:df:89:43:cd:2d:a2:0f:6d:dc:00:fd:f9:0a:bd: 8d:f9:51:9d:ca:ac:22:e0:de:2b:0a:03:f6:60:b8: 52:5a:fe:9a:a0:3d:3f:ba:02:f2:1a:fd:e3:ad:f3: 46:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:6E:71:FB:3F:D6:8D:F7:DD:59:0A:CC:6F:2D:32:B7:4A:34:61:5A X509v3 Authority Key Identifier: keyid:AB:69:C7:40:25:48:9A:FD:61:74:7F:F9:33:5B:14:7E:20:BB:25:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172989/EFFDD714D6D511F0B06384B581D3641D/q2nHQCVImv1hdH_5M1sUfiC7JdQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2nHQCVImv1hdH_5M1sUfiC7JdQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172989/EFFDD714D6D511F0B06384B581D3641D/q2nHQCVImv1hdH_5M1sUfiC7JdQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:c0:2b:ab:b2:dd:38:34:36:55:81:13:69:14:44:bb:ff:93: 4b:ec:0c:ae:ee:51:21:84:65:7f:c5:9c:84:4a:bd:c2:a9:3e: d7:64:9a:d2:d6:1e:9b:cf:4c:61:5a:97:15:a6:3e:c3:3e:05: b5:ab:5b:26:02:d9:d8:a8:c6:a4:a8:aa:52:8e:fc:c1:12:a2: b8:4c:ef:bd:a0:94:94:de:ec:36:2f:9e:4b:0a:80:b9:42:db: 50:a9:4f:c8:cd:2b:06:24:70:ea:3d:27:e6:a1:74:62:5b:12: c2:0c:5b:4b:55:e4:78:28:c7:a0:49:08:16:00:be:b1:b6:6f: 81:e4:0e:fe:69:4c:dd:b9:17:79:14:fa:4d:09:ec:c1:05:e6: 2f:49:63:12:0c:8f:8a:4d:62:7e:79:fa:ca:d3:26:cf:dc:ae: ed:13:3e:ed:df:9f:0c:50:b2:4c:bc:11:48:8d:0c:1a:60:36: 5a:64:15:07:51:42:81:70:cc:d0:24:fe:3e:8a:5e:24:f4:09: 94:80:69:99:0a:30:f6:db:2e:43:d2:39:07:c8:80:65:e0:04: e7:75:d0:48:4d:c2:bb:a0:b9:d8:eb:8a:ef:99:b7:b2:60:15: c7:b2:41:02:ae:ea:20:55:1f:62:9a:d5:29:23:4d:60:fd:fc: 5d:64:fe:29 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI5ODkxMTAvBgNVBAUTKEFCNjlDNzQwMjU0ODlBRkQ2MTc0N0ZGOTMzNUIxNDdF MjBCQjI1RDQwHhcNMjYwOTIzMDcxMjI2WhcNMjYwOTMwMDcxMjI2WjAYMRYwFAYD VQQDEw02YWIzN2JkYi0wMjRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxmZkJVceyqTwH7t8hQnOf9m9vha+VafrXnoqInh9fCcJfjlFea8d54LeqOqm Abdw7WJvDFr+Qr52ISPVGMQP2XkG16iE9Il9hEB8JFaR/1VZaz0tUUF1y1Zrlo69 EPThAM0MQfzDOhCWyZK1MZ6vqd1ZVtzATnC5dMK+Un1b7dm7+W2aWU1Y5IDyFaj9 8BK61iguIS+Yj633/a8KmY/EJudwsgxBNtmOTSG4r4HNQfBN9NqPN8gr8WypgVvX X8p5HfBVCq3mSi8sDefT1PJQ2OID34lDzS2iD23cAP35Cr2N+VGdyqwi4N4rCgP2 YLhSWv6aoD0/ugLyGv3jrfNGyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHducfs/ 1o333VkKzG8tMrdKNGFaMB8GA1UdIwQYMBaAFKtpx0AlSJr9YXR/+TNbFH4guyXU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjk4OS9FRkZERDcxNEQ2 RDUxMUYwQjA2Mzg0QjU4MUQzNjQxRC9xMm5IUUNWSW12MWhkSF81TTFzVWZpQzdK ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3EybkhRQ1ZJbXYxaGRIXzVNMXNVZmlDN0pkUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Mjk4OS9FRkZERDcxNEQ2RDUxMUYwQjA2Mzg0QjU4MUQzNjQxRC9xMm5IUUNWSW12 MWhkSF81TTFzVWZpQzdKZFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhcArq7LdODQ2VYETaRREu/+TS+wMru5RIYRlf8WchEq9wqk+12Sa0tYem89M YVqXFaY+wz4FtatbJgLZ2KjGpKiqUo78wRKiuEzvvaCUlN7sNi+eSwqAuULbUKlP yM0rBiRw6j0n5qF0YlsSwgxbS1XkeCjHoEkIFgC+sbZvgeQO/mlM3bkXeRT6TQns wQXmL0ljEgyPik1ifnn6ytMmz9yu7RM+7d+fDFCyTLwRSI0MGmA2WmQVB1FCgXDM 0CT+PopeJPQJlIBpmQow9tsuQ9I5B8iAZeAE53XQSE3Cu6C52OuK75m3smAVx7JB Aq7qIFUfYprVKSNNYP38XWT+KQ== -----END CERTIFICATE-----Generated at Fri Sep 25 10:53:29 2026 by rpki-client