$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E754/ACD1D7701DAB11E2BA2806AA08B02CD2/tQk3XiWpXStZwZWBw8Y1topJES0.mft File: tQk3XiWpXStZwZWBw8Y1topJES0.mft (raw, json) Hash identifier: eYUXKyiOOGg+SpIg0inRQVvKvT22LRmn9RECtU+m8Ik= Subject key identifier: 43:BC:24:23:59:02:57:E2:A4:1D:68:61:37:FE:A4:D2:56:B8:2E:87 Authority key identifier: B5:09:37:5E:25:A9:5D:2B:59:C1:95:81:C3:C6:35:B6:8A:49:11:2D Certificate issuer: /CN=A917E754/serialNumber=B509375E25A95D2B59C19581C3C635B68A49112D Certificate serial: 3596 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tQk3XiWpXStZwZWBw8Y1topJES0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E754/ACD1D7701DAB11E2BA2806AA08B02CD2/tQk3XiWpXStZwZWBw8Y1topJES0.mft Manifest number: 358C Signing time: Tue 06 Oct 2026 15:18:18 +0000 Manifest this update: Tue 06 Oct 2026 15:18:18 +0000 Manifest next update: Tue 13 Oct 2026 15:18:18 +0000 Files and hashes: 1: tQk3XiWpXStZwZWBw8Y1topJES0.crl (hash: UYwK+VeTy29wgvSXAq5INW59tk0Ep31WXyflgdMNcG8=) 2: 2F79F386050511EA87CC7D42C4F9AE02.roa (hash: bvmOeL2YXx3nWwBQZ93HrV/AoxQKQL3Er6wwEPR+cds=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E754/ACD1D7701DAB11E2BA2806AA08B02CD2/tQk3XiWpXStZwZWBw8Y1topJES0.crl rsync://rpki.apnic.net/member_repository/A917E754/ACD1D7701DAB11E2BA2806AA08B02CD2/tQk3XiWpXStZwZWBw8Y1topJES0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tQk3XiWpXStZwZWBw8Y1topJES0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 15:18:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13718 (0x3596) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E754, serialNumber=B509375E25A95D2B59C19581C3C635B68A49112D Validity Not Before: Oct 6 15:18:18 2026 GMT Not After : Oct 13 15:18:18 2026 GMT Subject: CN=6ac5113a-1153 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:89:70:22:6b:d7:38:23:32:c9:b4:36:54:a0: 29:91:d5:74:5d:b3:ff:27:1d:0e:50:d6:bc:0a:9f: fa:22:37:bc:bb:bb:ce:b2:4a:d8:34:06:4b:b8:41: 0c:5f:2a:eb:71:6d:8d:f6:a0:88:85:f8:91:98:b5: dc:b7:4e:2e:19:e8:1f:df:0c:d7:c0:f0:d9:55:f3: 67:68:41:5a:3f:d9:81:23:77:64:04:77:82:6a:39: e9:e4:39:34:5f:1f:87:8e:4b:14:56:7e:ba:2f:ee: e1:6d:c2:f0:e4:e7:ee:24:dd:36:89:e5:09:43:99: 06:cb:91:6b:99:ad:db:74:fd:06:b7:54:33:cc:96: 1f:c2:85:e6:50:9e:9f:63:ab:9b:b7:a4:35:72:44: fe:0a:e9:36:77:06:b8:cd:cd:2d:4a:84:fd:6b:69: e0:41:f3:f6:47:2b:d2:db:6b:58:5c:32:a1:15:d8: b5:8a:45:a6:35:c7:3b:a4:81:e9:e7:ce:71:ca:3c: 74:11:c1:86:0a:f2:71:76:ca:90:fb:08:24:f7:23: 76:fc:e7:ad:81:99:f7:d9:b2:2c:c0:23:7e:bc:5b: 86:b6:2b:eb:3d:5e:d4:b3:d4:55:20:b6:4c:df:25: eb:ea:2a:47:4c:87:a5:73:60:54:fa:97:87:04:70: 18:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:BC:24:23:59:02:57:E2:A4:1D:68:61:37:FE:A4:D2:56:B8:2E:87 X509v3 Authority Key Identifier: keyid:B5:09:37:5E:25:A9:5D:2B:59:C1:95:81:C3:C6:35:B6:8A:49:11:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E754/ACD1D7701DAB11E2BA2806AA08B02CD2/tQk3XiWpXStZwZWBw8Y1topJES0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tQk3XiWpXStZwZWBw8Y1topJES0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E754/ACD1D7701DAB11E2BA2806AA08B02CD2/tQk3XiWpXStZwZWBw8Y1topJES0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:a6:ea:a3:00:a0:35:1b:d6:1e:23:9d:0b:b4:c5:0b:d9:3f: f8:20:36:57:e1:53:e4:e5:1b:6e:28:55:d2:6a:e2:23:33:96: d1:fd:43:07:f7:7c:68:3c:ff:8e:fd:97:29:71:44:37:c5:83: 73:1c:cf:2f:72:85:4f:24:03:be:04:8e:bd:ce:67:a3:0e:45: fc:a8:6d:a4:ff:3c:68:5e:f2:97:78:e2:39:f9:26:55:31:de: 2d:e9:f2:f5:ea:4a:31:e1:09:5e:cc:62:6f:a2:e1:62:b5:d1: 35:81:5c:41:35:2a:27:87:f9:3c:d5:a5:a5:e9:dc:0e:6a:57: 93:ef:7f:e8:dc:5f:45:c8:c2:ad:5e:b5:c7:94:11:58:21:52: 35:3e:0b:87:14:67:3d:ad:48:39:e8:e4:5d:63:31:44:7d:cd: 2c:e2:16:e1:b1:c2:bb:ee:ac:1b:d8:55:96:f3:a3:0f:3b:5a: 14:48:aa:2e:c2:53:c9:14:ae:43:5a:2e:c5:54:a7:ef:72:c0: 4e:51:0e:db:eb:9e:0a:4d:59:a2:40:62:6a:fc:2d:25:78:f3: 5a:2e:e8:cd:7e:2b:67:73:8b:e4:03:7d:c6:d0:7d:fc:2f:a3: 34:43:c8:85:ee:1c:5b:dd:4c:08:89:d2:a6:33:3a:0f:9c:89: 27:20:e8:1e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U3NTQxMTAvBgNVBAUTKEI1MDkzNzVFMjVBOTVEMkI1OUMxOTU4MUMzQzYzNUI2 OEE0OTExMkQwHhcNMjYxMDA2MTUxODE4WhcNMjYxMDEzMTUxODE4WjAYMRYwFAYD VQQDEw02YWM1MTEzYS0xMTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvolwImvXOCMyybQ2VKApkdV0XbP/Jx0OUNa8Cp/6Ije8u7vOskrYNAZLuEEM XyrrcW2N9qCIhfiRmLXct04uGegf3wzXwPDZVfNnaEFaP9mBI3dkBHeCajnp5Dk0 Xx+HjksUVn66L+7hbcLw5OfuJN02ieUJQ5kGy5Frma3bdP0Gt1QzzJYfwoXmUJ6f Y6ubt6Q1ckT+Cuk2dwa4zc0tSoT9a2ngQfP2RyvS22tYXDKhFdi1ikWmNcc7pIHp 585xyjx0EcGGCvJxdsqQ+wgk9yN2/OetgZn32bIswCN+vFuGtivrPV7Us9RVILZM 3yXr6ipHTIelc2BU+peHBHAYrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEO8JCNZ AlfipB1oYTf+pNJWuC6HMB8GA1UdIwQYMBaAFLUJN14lqV0rWcGVgcPGNbaKSREt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTc1NC9BQ0QxRDc3MDFE QUIxMUUyQkEyODA2QUEwOEIwMkNEMi90UWszWGlXcFhTdFp3WldCdzhZMXRvcEpF UzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RRazNYaVdwWFN0WndaV0J3OFkxdG9wSkVTMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTc1NC9BQ0QxRDc3MDFEQUIxMUUyQkEyODA2QUEwOEIwMkNEMi90UWszWGlXcFhT dFp3WldCdzhZMXRvcEpFUzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnqbqowCgNRvWHiOdC7TFC9k/+CA2V+FT5OUbbihV0mriIzOW0f1DB/d8aDz/ jv2XKXFEN8WDcxzPL3KFTyQDvgSOvc5now5F/KhtpP88aF7yl3jiOfkmVTHeLeny 9epKMeEJXsxib6LhYrXRNYFcQTUqJ4f5PNWlpencDmpXk+9/6NxfRcjCrV61x5QR WCFSNT4LhxRnPa1IOejkXWMxRH3NLOIW4bHCu+6sG9hVlvOjDztaFEiqLsJTyRSu Q1ouxVSn73LATlEO2+ueCk1ZokBiavwtJXjzWi7ozX4rZ3OL5AN9xtB9/C+jNEPI he4cW91MCInSpjM6D5yJJyDoHg== -----END CERTIFICATE-----Generated at Thu Oct 8 10:58:48 2026 by rpki-client