$ rpki-client -vvvf rpki.apnic.net/member_repository/A9172CE3/5D7899F4405911ECA0AFAA4DC4F9AE02/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.mft File: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.mft (raw, json) Hash identifier: nbM1yKu/XuluVOuVA3w6iWnjpVxIF4xp3Rd64va5v6s= Subject key identifier: 38:C3:48:04:EB:19:98:67:29:C8:24:0F:C2:40:E8:F3:81:46:BE:E4 Authority key identifier: AB:C6:FB:A4:B7:84:28:38:79:19:0D:C7:17:E3:4B:4C:D8:82:DA:08 Certificate issuer: /CN=A9172CE3/serialNumber=ABC6FBA4B784283879190DC717E34B4CD882DA08 Certificate serial: 059E Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172CE3/5D7899F4405911ECA0AFAA4DC4F9AE02/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.mft Manifest number: 0594 Signing time: Mon 26 Oct 2026 23:07:21 +0000 Manifest this update: Mon 26 Oct 2026 23:07:21 +0000 Manifest next update: Mon 02 Nov 2026 23:07:21 +0000 Files and hashes: 1: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.crl (hash: sHzc0zFFbuXPaDkp1fH7jU6TYfiVWTQrN8UPKAcHweY=) 2: 887BE0D0405D11ECA642D813C4F9AE02.roa (hash: KHvp9huWR6D7V1yi6kkJocjAT/BK4ewK1tFBURi132k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172CE3/5D7899F4405911ECA0AFAA4DC4F9AE02/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.crl rsync://rpki.apnic.net/member_repository/A9172CE3/5D7899F4405911ECA0AFAA4DC4F9AE02/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 23:07:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1438 (0x59e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172CE3, serialNumber=ABC6FBA4B784283879190DC717E34B4CD882DA08 Validity Not Before: Oct 26 23:07:21 2026 GMT Not After : Nov 2 23:07:21 2026 GMT Subject: CN=6adfdd29-a268 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7d:d3:01:d1:b0:19:d9:47:11:f6:a7:c1:f7: 9d:51:9a:08:8b:d1:84:34:d6:9e:44:2f:3b:30:cc: 2b:f8:a9:ee:e9:b3:bc:09:bb:51:06:16:f3:74:ba: ea:0d:48:6c:fd:d0:0a:07:50:cb:be:cd:4c:e3:12: 8b:0a:83:d5:fc:1c:04:5e:cc:d5:77:17:8a:5f:58: 1b:be:f1:11:e3:5c:98:99:43:cc:44:de:92:10:17: 0d:70:7e:4e:f9:dd:74:60:78:ad:4e:04:04:c0:0c: a6:9d:ca:90:98:f4:fc:71:95:f6:cb:20:64:53:d1: 86:6c:26:42:01:28:80:74:ee:56:c3:5c:d1:38:ef: d2:ad:99:31:98:27:ff:4c:1a:b3:17:a2:86:f8:63: c9:7a:e6:1b:b1:92:6f:d7:85:59:28:dd:8a:3d:5c: d8:e7:73:43:62:fe:41:b7:8f:06:3b:23:6d:7e:0c: 18:b5:94:33:44:8d:a4:31:bd:90:19:73:5b:8a:a2: 12:b7:41:51:c8:12:2f:01:1f:61:b6:01:af:dd:4f: 7e:10:ef:bc:99:3a:b0:9e:3d:39:4a:bf:dc:70:c8: 47:07:1a:41:26:5a:16:c6:b2:a8:ce:1b:43:f4:35: f3:97:01:84:c0:3d:24:74:dd:f0:e0:28:78:7e:0b: 27:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:C3:48:04:EB:19:98:67:29:C8:24:0F:C2:40:E8:F3:81:46:BE:E4 X509v3 Authority Key Identifier: keyid:AB:C6:FB:A4:B7:84:28:38:79:19:0D:C7:17:E3:4B:4C:D8:82:DA:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172CE3/5D7899F4405911ECA0AFAA4DC4F9AE02/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172CE3/5D7899F4405911ECA0AFAA4DC4F9AE02/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:a9:ac:dc:ff:c6:68:82:7e:d2:33:0e:48:64:06:6e:b2:37: 69:4a:78:7c:0c:d4:d8:13:b9:45:e7:22:01:2c:3e:54:ab:47: 98:9a:52:cf:9e:eb:33:82:81:6e:3f:5d:b8:5b:d0:88:ab:fd: 76:78:da:1a:8f:30:16:ad:43:8a:d1:19:26:55:c7:5c:2c:90: d4:08:c2:cb:27:b9:3d:30:dd:03:9b:2d:df:fb:46:ae:43:9d: 73:d8:5c:25:77:9a:56:9c:55:5d:b3:66:f7:ca:83:b4:6b:76: 98:d1:f8:cb:51:25:b0:f5:20:8d:8d:19:b8:e2:63:44:b0:2b: 8d:0a:21:95:64:69:c0:d2:c8:6c:67:5c:0e:2f:00:66:22:c6: 6d:35:e1:9a:41:44:fa:2f:0a:fa:b5:a2:17:46:a1:8c:ba:fe: 40:6d:99:c2:f0:28:7e:07:1f:f0:f8:26:28:12:d3:e7:55:c0: 12:56:87:44:fb:1c:f3:75:6e:eb:92:10:84:4e:e7:d6:c7:c3: 5a:fe:c5:51:19:d8:f3:ca:32:07:6a:5d:97:2f:fd:45:7e:91: 62:00:e1:80:01:d0:c5:69:36:e3:1f:69:a3:71:33:49:ab:b6: bc:c1:d5:ab:e9:ee:0d:7e:0d:7c:63:70:eb:42:d5:ff:1f:b3: e4:ab:93:a4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJDRTMxMTAvBgNVBAUTKEFCQzZGQkE0Qjc4NDI4Mzg3OTE5MERDNzE3RTM0QjRD RDg4MkRBMDgwHhcNMjYxMDI2MjMwNzIxWhcNMjYxMTAyMjMwNzIxWjAYMRYwFAYD VQQDEw02YWRmZGQyOS1hMjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqX3TAdGwGdlHEfanwfedUZoIi9GENNaeRC87MMwr+Knu6bO8CbtRBhbzdLrq DUhs/dAKB1DLvs1M4xKLCoPV/BwEXszVdxeKX1gbvvER41yYmUPMRN6SEBcNcH5O +d10YHitTgQEwAymncqQmPT8cZX2yyBkU9GGbCZCASiAdO5Ww1zROO/SrZkxmCf/ TBqzF6KG+GPJeuYbsZJv14VZKN2KPVzY53NDYv5Bt48GOyNtfgwYtZQzRI2kMb2Q GXNbiqISt0FRyBIvAR9htgGv3U9+EO+8mTqwnj05Sr/ccMhHBxpBJloWxrKozhtD 9DXzlwGEwD0kdN3w4Ch4fgsnXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDjDSATr GZhnKcgkD8JA6POBRr7kMB8GA1UdIwQYMBaAFKvG+6S3hCg4eRkNxxfjS0zYgtoI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkNFMy81RDc4OTlGNDQw NTkxMUVDQTBBRkFBNERDNEY5QUUwMi9xOGI3cExlRUtEaDVHUTNIRi1OTFROaUMy Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy RkQxRkYyL3E4YjdwTGVFS0RoNUdRM0hGLU5MVE5pQzJnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkNFMy81RDc4OTlGNDQwNTkxMUVDQTBBRkFBNERDNEY5QUUwMi9xOGI3cExlRUtE aDVHUTNIRi1OTFROaUMyZ2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAa6ms3P/GaIJ+0jMOSGQGbrI3aUp4fAzU2BO5ReciASw+VKtHmJpSz57rM4KB bj9duFvQiKv9dnjaGo8wFq1DitEZJlXHXCyQ1AjCyye5PTDdA5st3/tGrkOdc9hc JXeaVpxVXbNm98qDtGt2mNH4y1ElsPUgjY0ZuOJjRLArjQohlWRpwNLIbGdcDi8A ZiLGbTXhmkFE+i8K+rWiF0ahjLr+QG2ZwvAofgcf8PgmKBLT51XAElaHRPsc83Vu 65IQhE7n1sfDWv7FURnY88oyB2pdly/9RX6RYgDhgAHQxWk24x9po3EzSau2vMHV q+nuDX4NfGNw60LV/x+z5KuTpA== -----END CERTIFICATE-----Generated at Tue Oct 27 06:07:38 2026 by rpki-client