$ rpki-client -vvvf rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.mft File: Qg2MLsPSR5xUI6v_dHgriopLfeo.mft (raw, json) Hash identifier: +zv3PigLK5GNq9LVF08+ZehvIta1+9sMQ57qJpVp0Tk= Subject key identifier: 8F:AA:1D:2B:EB:69:17:4A:DF:80:FE:B4:A6:C7:EB:21:38:B3:70:B1 Authority key identifier: 42:0D:8C:2E:C3:D2:47:9C:54:23:AB:FF:74:78:2B:8A:8A:4B:7D:EA Certificate issuer: /CN=A9182F75/serialNumber=420D8C2EC3D2479C5423ABFF74782B8A8A4B7DEA Certificate serial: 1CF3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg2MLsPSR5xUI6v_dHgriopLfeo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.mft Manifest number: 1CCB Signing time: Fri 04 Sep 2026 16:09:04 +0000 Manifest this update: Fri 04 Sep 2026 16:09:03 +0000 Manifest next update: Fri 11 Sep 2026 16:09:03 +0000 Files and hashes: 1: Qg2MLsPSR5xUI6v_dHgriopLfeo.crl (hash: cZCznsl+yMeicGYEgvz5Js4i3nxQPR/3yc2foo1hE5Q=) 2: 6892F5F2663C11F08C247C68C4F9AE02.roa (hash: QLCbgoMVS3G9VHYM06+C4WObA6B/KseYMNiE38jKgGw=) 3: DD55266E1E5611EFAFFD4839C4F9AE02.roa (hash: wBGm4fFHkS0MsUDVoFS2mN9ly3H+yMyEnIGfWIGaVpk=) 4: A770EFB01E5611EFAF3FCB38C4F9AE02.roa (hash: EvrlKUJ7eCvu6YP+MtDTuqMrMSZ2GeflApGRKT/txT4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.crl rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg2MLsPSR5xUI6v_dHgriopLfeo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 16:09:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7411 (0x1cf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182F75, serialNumber=420D8C2EC3D2479C5423ABFF74782B8A8A4B7DEA Validity Not Before: Sep 4 16:09:03 2026 GMT Not After : Sep 11 16:09:03 2026 GMT Subject: CN=6a9aed20-a226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5a:3f:19:04:e2:7d:9b:9a:19:1e:c0:f0:8c: fa:7c:4e:ec:ac:97:62:14:af:65:72:99:59:18:03: e2:57:7b:5b:ed:30:74:2d:da:1c:4f:a1:e4:c5:cd: db:54:6e:0e:e7:a2:0e:5b:5b:e9:49:ee:6f:06:10: 34:82:54:fc:6d:5a:5d:46:61:bb:d9:78:83:c5:7c: f2:50:6a:42:44:23:e7:dc:82:c6:99:67:26:d0:99: d9:ae:24:7a:94:54:a9:e9:52:73:6d:21:c3:fa:a9: bf:0f:4d:06:16:9d:3b:69:87:1d:c8:4c:4c:e6:1d: 4d:d4:79:3d:3a:08:86:a0:6c:39:57:a9:1c:ef:24: 30:3c:68:ef:95:bd:f0:0e:3e:bf:8b:73:75:9d:45: 00:1f:1f:ec:f6:d8:43:e1:1c:1c:98:37:b8:6b:94: ec:25:65:03:81:fa:b4:e1:4b:af:2c:fa:3a:ac:9e: a8:cb:b0:81:a1:d1:f3:a6:35:9e:f3:91:c1:34:fc: 1b:2b:99:e6:d8:40:42:a9:c2:f5:fd:da:ca:fb:93: 2f:43:1e:30:18:66:a4:09:a3:cc:e3:58:1b:ae:2f: a2:b2:84:e5:30:13:7b:5c:17:cb:6a:88:a8:bd:9c: 10:c1:c0:35:e7:e0:58:dc:bd:0c:fe:cc:26:8e:e3: 38:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:AA:1D:2B:EB:69:17:4A:DF:80:FE:B4:A6:C7:EB:21:38:B3:70:B1 X509v3 Authority Key Identifier: keyid:42:0D:8C:2E:C3:D2:47:9C:54:23:AB:FF:74:78:2B:8A:8A:4B:7D:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg2MLsPSR5xUI6v_dHgriopLfeo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:79:b9:f4:f3:f0:c5:27:b0:18:cb:11:ae:e0:ad:6a:1c:d6: 9e:5a:47:d2:1b:b8:db:aa:4a:fc:a3:23:c1:31:6c:9c:0a:d4: 21:4d:45:90:59:25:fd:4d:e3:d3:7c:d0:1c:44:38:29:c4:aa: ee:06:51:42:c2:d8:09:f5:4c:d7:d0:b6:e8:37:26:f7:f0:21: 2d:5f:17:f4:0c:3b:80:77:90:b7:2c:d7:8a:bc:94:8a:1d:b9: ac:7f:d6:06:48:e6:cf:88:d4:44:bc:33:18:6e:01:2b:cf:fa: 12:f3:cf:51:a5:fa:c1:fa:ec:e9:4e:fc:ae:27:43:f1:1c:63: 02:3c:13:ce:75:00:49:9f:2f:12:3b:69:9a:10:46:a7:9e:a3: c0:49:95:86:80:77:80:26:df:aa:6b:60:dc:f0:f7:d1:c0:0d: 08:96:21:d6:61:43:21:f1:87:21:63:f5:6f:c0:c6:b0:10:47: 08:e3:a4:d0:2b:f4:5c:88:4e:ef:3c:21:fc:3f:13:fb:8a:d6: 4e:c4:f8:52:80:c2:38:d6:2c:76:77:e9:8d:89:47:e3:7e:a2: 23:ca:b6:27:93:ac:56:2c:d4:3a:f5:ac:75:fe:3c:c0:23:93: 95:bb:8b:22:b9:45:07:60:e0:80:72:e4:ee:ca:2b:d1:c8:a1: ae:5d:5d:44 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODJGNzUxMTAvBgNVBAUTKDQyMEQ4QzJFQzNEMjQ3OUM1NDIzQUJGRjc0NzgyQjhB OEE0QjdERUEwHhcNMjYwOTA0MTYwOTAzWhcNMjYwOTExMTYwOTAzWjAYMRYwFAYD VQQDEw02YTlhZWQyMC1hMjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy1o/GQTifZuaGR7A8Iz6fE7srJdiFK9lcplZGAPiV3tb7TB0LdocT6Hkxc3b VG4O56IOW1vpSe5vBhA0glT8bVpdRmG72XiDxXzyUGpCRCPn3ILGmWcm0JnZriR6 lFSp6VJzbSHD+qm/D00GFp07aYcdyExM5h1N1Hk9OgiGoGw5V6kc7yQwPGjvlb3w Dj6/i3N1nUUAHx/s9thD4RwcmDe4a5TsJWUDgfq04UuvLPo6rJ6oy7CBodHzpjWe 85HBNPwbK5nm2EBCqcL1/drK+5MvQx4wGGakCaPM41gbri+isoTlMBN7XBfLaoio vZwQwcA15+BY3L0M/swmjuM4rwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI+qHSvr aRdK34D+tKbH6yE4s3CxMB8GA1UdIwQYMBaAFEINjC7D0kecVCOr/3R4K4qKS33q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MkY3NS8zQzhDRjYzRUZD QkQxMUU2ODhEMzEyNUVDNEY5QUUwMi9RZzJNTHNQU1I1eFVJNnZfZEhncmlvcExm ZW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FnMk1Mc1BTUjV4VUk2dl9kSGdyaW9wTGZlby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MkY3NS8zQzhDRjYzRUZDQkQxMUU2ODhEMzEyNUVDNEY5QUUwMi9RZzJNTHNQU1I1 eFVJNnZfZEhncmlvcExmZW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAY3m59PPwxSewGMsRruCtahzWnlpH0hu426pK/KMjwTFsnArUIU1FkFkl/U3j 03zQHEQ4KcSq7gZRQsLYCfVM19C26Dcm9/AhLV8X9Aw7gHeQtyzXiryUih25rH/W Bkjmz4jURLwzGG4BK8/6EvPPUaX6wfrs6U78ridD8RxjAjwTznUASZ8vEjtpmhBG p56jwEmVhoB3gCbfqmtg3PD30cANCJYh1mFDIfGHIWP1b8DGsBBHCOOk0Cv0XIhO 7zwh/D8T+4rWTsT4UoDCONYsdnfpjYlH436iI8q2J5OsVizUOvWsdf48wCOTlbuL IrlFB2DggHLk7sor0cihrl1dRA== -----END CERTIFICATE-----Generated at Sat Sep 5 04:23:59 2026 by rpki-client