$ rpki-client -vvvf rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft File: qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft (raw, json) Hash identifier: ld27yUn7wnu1hgv5+R8CQINP7+aWGT9j77OVT6GZO/k= Subject key identifier: 62:0F:83:A3:BB:B3:5B:DE:3B:0E:22:A2:3A:CE:1A:F2:BC:2E:31:A8 Authority key identifier: A8:56:8F:52:79:3C:C3:48:57:85:0C:4F:2E:D3:8A:E0:B1:89:70:F8 Certificate issuer: /CN=A9184324/serialNumber=A8568F52793CC34857850C4F2ED38AE0B18970F8 Certificate serial: 01A0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qFaPUnk8w0hXhQxPLtOK4LGJcPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft Manifest number: 018B Signing time: Wed 21 Oct 2026 05:05:35 +0000 Manifest this update: Wed 21 Oct 2026 05:05:34 +0000 Manifest next update: Wed 28 Oct 2026 05:05:34 +0000 Files and hashes: 1: qFaPUnk8w0hXhQxPLtOK4LGJcPg.crl (hash: 2/nGKaQnGCnRU1WpsmsRF9dkEDWNol1aaFrMsHp09vs=) 2: 5C8F63FE7C4911EF81434A2DC4F9AE02.roa (hash: FTfGtoGrUVwrnxaveaM8/TkkP8CeSjEWf8+UAR8ONdk=) 3: 49AD69BAB97A11F082553162C4F9AE02.roa (hash: u+AOQs7swlbtyTKzbGqH0JVVjQoXfbRTN0aGMPHqYwM=) 4: 48C56FF2B97A11F082553162C4F9AE02.roa (hash: OtWdgE0NfWAtdp3sq2GPul7fJB1+qypIA/v5t4925Qw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.crl rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qFaPUnk8w0hXhQxPLtOK4LGJcPg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 416 (0x1a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184324, serialNumber=A8568F52793CC34857850C4F2ED38AE0B18970F8 Validity Not Before: Oct 21 05:05:34 2026 GMT Not After : Oct 28 05:05:34 2026 GMT Subject: CN=6ad8481e-773c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:cb:a7:e8:66:12:cc:e8:c1:d7:17:af:d2:c6: 3a:e1:66:81:21:e4:39:b6:ed:50:f5:f1:08:f6:23: 9e:24:b7:a1:90:53:b1:27:7a:a7:3e:79:45:36:c0: 44:9c:ca:36:d8:e3:d3:7a:6c:c3:7b:d6:aa:6c:0b: 94:90:96:1a:6e:8c:b5:fa:ce:94:16:b6:94:44:49: 87:23:06:42:80:44:6f:42:97:eb:88:5b:5c:5d:c6: 53:34:45:52:78:13:b6:dd:67:34:02:38:88:0e:6a: 6e:28:d0:6d:db:73:6a:b1:81:47:d5:54:d3:9b:30: 4d:ee:cb:a6:0b:d5:c0:30:c2:09:41:e8:da:c0:a6: b8:7b:a9:33:2a:e7:32:b6:c5:41:66:df:f6:a3:2b: b2:f8:93:bf:22:e3:b2:b3:c8:50:0b:8d:94:9c:bb: f4:64:7c:4b:2c:7f:53:5c:fc:b9:aa:5f:f8:fd:f1: 8a:92:33:f6:03:fe:cb:09:fd:e0:9f:99:70:db:47: c0:3a:33:ef:c0:4d:8a:ae:7d:b5:9e:b4:5d:07:74: f0:e1:ca:65:7e:8d:c0:28:d4:94:db:3b:e1:c6:37: fb:b0:52:b1:4d:44:20:af:21:6a:5e:e8:2e:82:e1: 9b:b1:20:21:d9:e9:33:47:6b:86:90:d0:d4:ca:b1: 2d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:0F:83:A3:BB:B3:5B:DE:3B:0E:22:A2:3A:CE:1A:F2:BC:2E:31:A8 X509v3 Authority Key Identifier: keyid:A8:56:8F:52:79:3C:C3:48:57:85:0C:4F:2E:D3:8A:E0:B1:89:70:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qFaPUnk8w0hXhQxPLtOK4LGJcPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:1c:ae:e9:ea:36:c5:3a:75:09:99:cf:d8:60:2b:03:4b:2b: 89:bd:99:55:fb:0d:57:e4:6d:75:3b:df:f3:76:21:4a:a9:e2: 4d:bd:c6:f6:3e:4f:34:fc:b4:6f:33:0c:5f:70:cb:a6:c3:f0: 7a:93:cd:4c:08:19:f8:17:71:b7:c7:44:23:b7:97:00:47:c2: b9:a0:5a:4a:00:44:4a:6f:2f:35:52:cd:8c:9f:6d:e6:01:3b: e5:1b:fb:67:62:af:0a:7f:aa:61:4c:da:93:c2:5e:af:a7:33: 4c:d0:55:bf:32:7b:94:0e:e0:d6:8a:f2:8e:20:e6:f9:3e:95: 6d:30:af:e6:df:3a:a9:44:c7:23:35:11:75:df:6c:a9:55:8f: a4:1d:7d:c9:ab:cf:0f:42:35:31:fb:f1:ab:63:29:35:4d:51: d3:34:94:40:ec:a7:74:65:5b:94:26:e9:9f:08:85:e3:6a:59: 29:24:0a:8c:26:0c:e7:7b:38:e0:ee:e7:ac:5e:3d:97:37:4b: c7:cc:de:d3:b3:ac:7b:b2:67:79:48:7b:f9:42:00:9a:a7:6c: d6:e8:fa:d0:10:9a:32:97:8d:4f:5d:51:da:4b:18:d7:a6:6a: c6:8b:94:89:36:d8:b6:b5:f5:5f:ea:03:12:13:08:e8:aa:f4: 83:bb:8a:81 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAaAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQzMjQxMTAvBgNVBAUTKEE4NTY4RjUyNzkzQ0MzNDg1Nzg1MEM0RjJFRDM4QUUw QjE4OTcwRjgwHhcNMjYxMDIxMDUwNTM0WhcNMjYxMDI4MDUwNTM0WjAYMRYwFAYD VQQDEw02YWQ4NDgxZS03NzNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Mun6GYSzOjB1xev0sY64WaBIeQ5tu1Q9fEI9iOeJLehkFOxJ3qnPnlFNsBE nMo22OPTemzDe9aqbAuUkJYaboy1+s6UFraUREmHIwZCgERvQpfriFtcXcZTNEVS eBO23Wc0AjiIDmpuKNBt23NqsYFH1VTTmzBN7sumC9XAMMIJQejawKa4e6kzKucy tsVBZt/2oyuy+JO/IuOys8hQC42UnLv0ZHxLLH9TXPy5ql/4/fGKkjP2A/7LCf3g n5lw20fAOjPvwE2Krn21nrRdB3Tw4cplfo3AKNSU2zvhxjf7sFKxTUQgryFqXugu guGbsSAh2ekzR2uGkNDUyrEtPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGIPg6O7 s1veOw4iojrOGvK8LjGoMB8GA1UdIwQYMBaAFKhWj1J5PMNIV4UMTy7TiuCxiXD4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDMyNC9FQUE5Q0NENDdC MUMxMUVGQUMxMDk0MTZDNEY5QUUwMi9xRmFQVW5rOHcwaFhoUXhQTHRPSzRMR0pj UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3FGYVBVbms4dzBoWGhReFBMdE9LNExHSmNQZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDMyNC9FQUE5Q0NENDdCMUMxMUVGQUMxMDk0MTZDNEY5QUUwMi9xRmFQVW5rOHcw aFhoUXhQTHRPSzRMR0pjUGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIhyu6eo2xTp1CZnP2GArA0srib2ZVfsNV+RtdTvf83YhSqniTb3G9j5PNPy0 bzMMX3DLpsPwepPNTAgZ+Bdxt8dEI7eXAEfCuaBaSgBESm8vNVLNjJ9t5gE75Rv7 Z2KvCn+qYUzak8Jer6czTNBVvzJ7lA7g1oryjiDm+T6VbTCv5t86qUTHIzURdd9s qVWPpB19yavPD0I1Mfvxq2MpNU1R0zSUQOyndGVblCbpnwiF42pZKSQKjCYM53s4 4O7nrF49lzdLx8ze07Ose7JneUh7+UIAmqds1uj60BCaMpeNT11R2ksY16ZqxouU iTbYtrX1X+oDEhMI6Kr0g7uKgQ== -----END CERTIFICATE-----Generated at Wed Oct 21 17:13:59 2026 by rpki-client