$ rpki-client -vvf rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft File: qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft (raw, json) Hash identifier: UeK1OVhvNr/TIJOIJhMQX8oIwQfV2DjcQ7rmAoKQR0I= Subject key identifier: AF:EF:67:3A:DF:B4:71:74:FA:9E:83:88:80:49:AE:E1:CB:36:D9:FD Authority key identifier: A9:BC:CA:6D:34:D3:D5:F1:EF:F8:BB:E7:83:D4:97:73:81:3E:5E:F8 Certificate issuer: /CN=A9186E8A/serialNumber=A9BCCA6D34D3D5F1EFF8BBE783D49773813E5EF8 Certificate serial: 08AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft Manifest number: 0861 Signing time: Thu 04 Jun 2026 21:17:34 +0000 Manifest this update: Thu 04 Jun 2026 21:17:33 +0000 Manifest next update: Thu 11 Jun 2026 21:17:33 +0000 Files and hashes: 1: qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl (hash: 0eZTX8F799I0dIbNpD38fK3Jj+yEqn26y25/npEBGuo=) 2: 66C1BA862FBB11EB9B861059C4F9AE02.roa (hash: azCvE0MXDPIZCtICB6ofLTQq6LREywUXev2jJIJ9EIU=) 3: 26E184C2B56D11F0939EAE46C4F9AE02.roa (hash: azCbrnSmOuKDp+iW9o/dWdbmL/D2BIUAZALDZgMZy1k=) 4: 8554A0A86A8A11F0BBF66881C4F9AE02.roa (hash: jG2eCQQta7MNjU1JK1KYAfsYHPf3A4prUFHK/JzlfnI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Jun 2026 21:17:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2223 (0x8af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186E8A, serialNumber=A9BCCA6D34D3D5F1EFF8BBE783D49773813E5EF8 Validity Not Before: Jun 4 21:17:33 2026 GMT Not After : Jun 11 21:17:33 2026 GMT Subject: CN=6a21eb6e-cdd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:42:36:13:15:35:01:aa:ea:ec:27:a5:f1:35: 68:96:93:db:29:c3:8a:f5:a1:60:23:9b:8e:d8:90: 47:81:d7:40:95:72:0a:f7:73:72:1a:ed:54:8d:72: d6:bf:0b:ce:fb:33:d3:4a:a5:48:3a:93:b8:1c:4d: 8e:6a:94:28:d6:e6:41:1f:f8:83:6d:62:0c:d3:a5: 58:97:8d:10:2d:78:02:2d:3d:55:8a:99:37:14:52: d9:d8:98:33:a3:65:93:8b:92:0f:ba:7d:59:93:10: 62:2e:b3:07:1a:1e:06:e6:02:d7:9f:8b:28:dc:d0: 76:fa:00:28:f3:42:14:fa:ad:c4:29:cc:b7:6c:82: 44:ef:4d:87:4e:5c:7f:5c:56:1c:9e:5c:6b:ee:ae: 40:88:83:1d:7a:1f:fa:f5:cb:32:9f:d7:bc:80:d6: a3:ea:19:fc:25:15:55:33:c3:37:ba:7c:aa:e2:74: c8:d2:65:d4:dc:77:f0:ee:34:00:ff:b3:bf:4c:da: 29:28:3a:a2:63:4c:e8:d9:0d:90:10:49:2d:53:5c: 22:cf:ae:a0:57:e6:36:51:4d:14:91:2a:99:77:c5: 2b:ec:94:a6:a9:ff:d8:32:58:ef:e4:02:16:e7:64: 19:6d:a0:d1:64:15:e0:9c:d2:ee:38:21:7e:9b:a0: 7a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:EF:67:3A:DF:B4:71:74:FA:9E:83:88:80:49:AE:E1:CB:36:D9:FD X509v3 Authority Key Identifier: keyid:A9:BC:CA:6D:34:D3:D5:F1:EF:F8:BB:E7:83:D4:97:73:81:3E:5E:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:8d:99:bb:5e:af:b8:a6:9f:8b:0f:e0:66:31:63:2c:5f:69: 90:34:41:7e:d1:f4:17:c8:31:bc:80:7e:4a:e9:f8:08:83:e1: d8:96:fb:d8:b4:41:3e:94:de:d8:f8:22:32:5f:13:8f:df:d3: f7:c8:df:ed:ad:22:88:9f:e9:74:72:5d:04:5c:73:eb:ab:87: a2:2f:6c:10:0b:98:21:d0:f6:9b:0d:2d:e9:d5:09:d4:2c:b0: 77:17:6e:a5:52:de:30:d5:11:8e:b2:f1:28:e5:d4:42:82:c1: 26:b5:10:47:5c:21:5d:7f:1c:de:da:c4:1b:f1:1c:97:88:ad: 53:a4:32:18:07:32:75:18:e0:89:c3:23:00:5c:25:82:fc:88: 63:bd:49:11:0e:90:67:ac:0e:42:fe:d7:1a:0d:d8:24:e6:4f: ed:2e:1d:63:42:ab:5d:0f:5c:bb:fe:4f:4d:98:6b:ac:2f:92: e6:3d:c9:cc:8e:0a:e4:54:5a:5a:cd:f7:4a:62:29:81:52:ba: 96:f0:a3:61:1a:27:9a:54:e2:b5:ef:e8:67:2a:02:54:10:c2: f1:88:06:a8:21:62:00:36:07:7d:5a:4a:76:3c:ad:7b:0d:4c: f0:a2:ab:d5:f1:16:2b:4c:a0:a4:b1:86:61:b9:e6:5f:6a:1e: dc:05:8d:82 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZFOEExMTAvBgNVBAUTKEE5QkNDQTZEMzREM0Q1RjFFRkY4QkJFNzgzRDQ5Nzcz ODEzRTVFRjgwHhcNMjYwNjA0MjExNzMzWhcNMjYwNjExMjExNzMzWjAYMRYwFAYD VQQDEw02YTIxZWI2ZS1jZGQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzUI2ExU1Aarq7Cel8TVolpPbKcOK9aFgI5uO2JBHgddAlXIK93NyGu1UjXLW vwvO+zPTSqVIOpO4HE2OapQo1uZBH/iDbWIM06VYl40QLXgCLT1Vipk3FFLZ2Jgz o2WTi5IPun1ZkxBiLrMHGh4G5gLXn4so3NB2+gAo80IU+q3EKcy3bIJE702HTlx/ XFYcnlxr7q5AiIMdeh/69csyn9e8gNaj6hn8JRVVM8M3unyq4nTI0mXU3Hfw7jQA /7O/TNopKDqiY0zo2Q2QEEktU1wiz66gV+Y2UU0UkSqZd8Ur7JSmqf/YMljv5AIW 52QZbaDRZBXgnNLuOCF+m6B6ZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK/vZzrf tHF0+p6DiIBJruHLNtn9MB8GA1UdIwQYMBaAFKm8ym0009Xx7/i754PUl3OBPl74 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkU4QS8zQjQ3NkU3QzJE RkYxMUVCODY4QTkxMzVDNEY5QUUwMi9xYnpLYlRUVDFmSHYtTHZuZzlTWGM0RS1Y dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FiektiVFRUMWZIdi1Mdm5nOVNYYzRFLVh2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkU4QS8zQjQ3NkU3QzJERkYxMUVCODY4QTkxMzVDNEY5QUUwMi9xYnpLYlRUVDFm SHYtTHZuZzlTWGM0RS1YdmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACI2Zu16vuKafiw/gZjFjLF9pkDRBftH0F8gxvIB+Sun4CIPh2Jb72LRBPpTe 2PgiMl8Tj9/T98jf7a0iiJ/pdHJdBFxz66uHoi9sEAuYIdD2mw0t6dUJ1Cywdxdu pVLeMNURjrLxKOXUQoLBJrUQR1whXX8c3trEG/Ecl4itU6QyGAcydRjgicMjAFwl gvyIY71JEQ6QZ6wOQv7XGg3YJOZP7S4dY0KrXQ9cu/5PTZhrrC+S5j3JzI4K5FRa Ws33SmIpgVK6lvCjYRonmlTite/oZyoCVBDC8YgGqCFiADYHfVpKdjytew1M8KKr 1fEWK0ygpLGGYbnmX2oe3AWNgg== -----END CERTIFICATE-----Generated at Sat Jun 6 14:51:32 2026 by rpki-client