$ rpki-client -vvvf rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.mft File: Q2NMcBuh8e_Oj1aqatHbKUWh258.mft (raw, json) Hash identifier: OMSGOQPB6JGw64qj1RC51GBS21qUnrIXt3P0xTFOyio= Subject key identifier: D8:76:3B:E9:0B:55:9B:43:C6:64:35:77:36:1E:DA:88:97:5E:33:79 Authority key identifier: 43:63:4C:70:1B:A1:F1:EF:CE:8F:56:AA:6A:D1:DB:29:45:A1:DB:9F Certificate issuer: /CN=A918549C/serialNumber=43634C701BA1F1EFCE8F56AA6AD1DB2945A1DB9F Certificate serial: 0195 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q2NMcBuh8e_Oj1aqatHbKUWh258.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.mft Manifest number: 018A Signing time: Tue 25 Aug 2026 04:27:38 +0000 Manifest this update: Tue 25 Aug 2026 04:27:38 +0000 Manifest next update: Tue 01 Sep 2026 04:27:38 +0000 Files and hashes: 1: Q2NMcBuh8e_Oj1aqatHbKUWh258.crl (hash: 3xzbeMqoocmr2MqEwbAnlQyzvD1i2NklyFrvCau0aVU=) 2: 9C6F77784A3211EFBDBCEB2FC4F9AE02.roa (hash: POI2gtWNO02fmkeuPIBgEnMpIQB9HpbIZTb9ltFjGKA=) 3: ABA45B1A740611F0B304387CC4F9AE02.roa (hash: NoRAYMKDz7ruenjU4EI/k6TTzNlrpDAvnAEzcechXd0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.crl rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q2NMcBuh8e_Oj1aqatHbKUWh258.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Sep 2026 04:27:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 405 (0x195) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918549C, serialNumber=43634C701BA1F1EFCE8F56AA6AD1DB2945A1DB9F Validity Not Before: Aug 25 04:27:38 2026 GMT Not After : Sep 1 04:27:38 2026 GMT Subject: CN=6a8d19ba-5cfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6e:02:02:d4:22:df:1c:60:c8:a3:b5:bb:b4: f8:35:52:73:fd:03:0d:87:82:70:fe:01:6d:17:af: 2e:3c:da:27:f5:fe:74:56:b9:a6:1f:ce:50:d9:00: dc:f2:e6:e7:8a:80:f4:a4:17:da:16:46:c2:9c:d2: 44:99:82:b9:d5:47:2d:9e:85:2c:31:56:79:89:19: 8e:c0:6c:4f:75:1b:1a:86:cf:1a:16:18:ba:f9:18: 43:14:5a:02:3b:18:07:1d:0c:cc:6c:23:b0:f6:2b: 3e:df:fe:1a:43:e3:16:4d:a3:8e:9c:04:a0:3c:5c: 0a:04:1f:55:04:be:61:8c:a6:3d:d2:da:f5:ea:5b: cf:a3:22:ce:d1:aa:49:a2:31:59:48:55:3a:dc:47: 6c:e9:10:e2:28:79:14:ba:ba:de:67:f1:fd:36:33: 2e:13:52:a9:13:81:cc:d2:3d:53:b2:cc:0e:ac:fa: 4d:17:ae:7f:70:8f:d2:c0:ac:2e:15:75:62:b7:3c: 3f:e7:fd:7a:4f:28:19:24:ad:dc:31:36:08:98:8b: a0:5a:c4:0a:14:50:a8:84:96:a7:f7:aa:bf:68:33: 0d:70:fd:3c:ea:58:a2:86:82:c1:07:18:a3:c1:a9: 36:a3:8b:33:d8:e3:37:eb:17:07:ca:28:a6:d1:85: de:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:76:3B:E9:0B:55:9B:43:C6:64:35:77:36:1E:DA:88:97:5E:33:79 X509v3 Authority Key Identifier: keyid:43:63:4C:70:1B:A1:F1:EF:CE:8F:56:AA:6A:D1:DB:29:45:A1:DB:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q2NMcBuh8e_Oj1aqatHbKUWh258.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:16:81:c3:f7:9c:ce:8c:77:31:09:da:31:12:14:1c:11:38: 0c:d2:fc:d9:2b:2e:87:20:e9:3e:0f:52:3d:7f:9e:e9:2a:ce: ff:9a:65:7a:4c:97:01:d8:90:a5:20:c1:c9:a1:fe:89:fa:a7: 4c:ad:09:4b:bf:83:41:01:d1:92:02:b0:7f:29:92:1e:cc:61: 54:4a:26:5b:04:16:05:38:e5:60:fd:c3:ff:b9:b8:fa:0f:1f: 1a:d4:05:f7:d2:07:70:9b:b1:69:c9:87:57:88:d7:5b:3b:6e: 8e:58:06:0c:27:f9:86:bf:6e:96:7a:7d:9b:df:8b:df:98:c0: 0d:08:16:8c:d0:a5:bf:60:c1:06:d4:14:77:89:e0:81:c5:c9: de:54:bf:31:69:34:43:44:c0:a2:a9:08:89:f9:3d:29:04:b5: f4:a9:cc:6a:93:ee:d1:7f:37:3e:56:e5:fe:5d:ac:5a:60:a1: 9a:f5:a2:a2:cb:a0:f7:c0:b3:4c:8f:53:77:68:9e:25:64:4c: 7a:52:2b:c6:b7:f1:84:4b:ad:f5:ec:2b:16:cf:2f:eb:3f:47: c7:9c:3e:ff:42:b5:61:12:76:ab:68:0e:64:6b:e5:26:e6:41: ed:13:11:c3:cd:b4:e6:f3:df:d2:a2:e5:52:a5:c6:52:95:42: c4:66:a8:03 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU0OUMxMTAvBgNVBAUTKDQzNjM0QzcwMUJBMUYxRUZDRThGNTZBQTZBRDFEQjI5 NDVBMURCOUYwHhcNMjYwODI1MDQyNzM4WhcNMjYwOTAxMDQyNzM4WjAYMRYwFAYD VQQDEw02YThkMTliYS01Y2ZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtW4CAtQi3xxgyKO1u7T4NVJz/QMNh4Jw/gFtF68uPNon9f50VrmmH85Q2QDc 8ubnioD0pBfaFkbCnNJEmYK51UctnoUsMVZ5iRmOwGxPdRsahs8aFhi6+RhDFFoC OxgHHQzMbCOw9is+3/4aQ+MWTaOOnASgPFwKBB9VBL5hjKY90tr16lvPoyLO0apJ ojFZSFU63Eds6RDiKHkUurreZ/H9NjMuE1KpE4HM0j1TsswOrPpNF65/cI/SwKwu FXVitzw/5/16TygZJK3cMTYImIugWsQKFFCohJan96q/aDMNcP086liihoLBBxij wak2o4sz2OM36xcHyiim0YXeEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNh2O+kL VZtDxmQ1dzYe2oiXXjN5MB8GA1UdIwQYMBaAFENjTHAbofHvzo9WqmrR2ylFoduf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTQ5Qy9ERTg3MThDNDRB MzExMUVGQjdCQkQ1MUNDNEY5QUUwMi9RMk5NY0J1aDhlX09qMWFxYXRIYktVV2gy NTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1EyTk1jQnVoOGVfT2oxYXFhdEhiS1VXaDI1OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTQ5Qy9ERTg3MThDNDRBMzExMUVGQjdCQkQ1MUNDNEY5QUUwMi9RMk5NY0J1aDhl X09qMWFxYXRIYktVV2gyNTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjhaBw/eczox3MQnaMRIUHBE4DNL82SsuhyDpPg9SPX+e6SrO/5plekyXAdiQ pSDByaH+ifqnTK0JS7+DQQHRkgKwfymSHsxhVEomWwQWBTjlYP3D/7m4+g8fGtQF 99IHcJuxacmHV4jXWztujlgGDCf5hr9ulnp9m9+L35jADQgWjNClv2DBBtQUd4ng gcXJ3lS/MWk0Q0TAoqkIifk9KQS19KnMapPu0X83Plbl/l2sWmChmvWiosug98Cz TI9Td2ieJWRMelIrxrfxhEut9ewrFs8v6z9Hx5w+/0K1YRJ2q2gOZGvlJuZB7RMR w8205vPf0qLlUqXGUpVCxGaoAw== -----END CERTIFICATE-----Generated at Wed Aug 26 11:32:37 2026 by rpki-client