$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft File: qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft (raw, json) Hash identifier: ldThKi71b/WGBIELVQOJJvBNNFUVraqhSnqjCaw6txA= Subject key identifier: B5:56:EE:70:18:44:22:22:2F:FE:C0:0B:67:27:E1:46:E0:80:96:82 Authority key identifier: A9:BC:CA:6D:34:D3:D5:F1:EF:F8:BB:E7:83:D4:97:73:81:3E:5E:F8 Certificate issuer: /CN=A9186E8A/serialNumber=A9BCCA6D34D3D5F1EFF8BBE783D49773813E5EF8 Certificate serial: 090A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft Manifest number: 08B2 Signing time: Thu 22 Oct 2026 21:09:22 +0000 Manifest this update: Thu 22 Oct 2026 21:09:21 +0000 Manifest next update: Thu 29 Oct 2026 21:09:21 +0000 Files and hashes: 1: qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl (hash: nJ0DfV8rv1S+tZ2WvMQ8OQ0919BpdPTqdNI0xaj6fY0=) 2: 4CAE21E8A80F11F1B862E5936B11F970.roa (hash: /lRSXnCOe0ZqwnNdFGGDEkdQtTUnWqE6TBZzsRRNdXs=) 3: 54EE7326A80F11F18C0522946B11F970.roa (hash: 2bxAWvxSp4Q1OtM3ABhhN9Qmgeh5OF6qCpvnoPz0S34=) 4: 2FF53AF2A76811F1902C56043911F970.roa (hash: 0nCIpbx0cZSLgZnV2ZLspg0PdVVrZOLg3DNBm3/V48Y=) 5: 8554A0A86A8A11F0BBF66881C4F9AE02.roa (hash: jG2eCQQta7MNjU1JK1KYAfsYHPf3A4prUFHK/JzlfnI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Oct 2026 21:09:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2314 (0x90a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186E8A, serialNumber=A9BCCA6D34D3D5F1EFF8BBE783D49773813E5EF8 Validity Not Before: Oct 22 21:09:21 2026 GMT Not After : Oct 29 21:09:21 2026 GMT Subject: CN=6ada7b82-5d9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:62:06:91:46:7e:e1:6a:ed:fe:10:2b:20:f1: ac:c0:7c:60:11:e1:ab:d7:71:34:7a:a5:b9:99:2d: 28:b9:b3:9a:b1:5f:b5:37:83:8a:ae:b9:be:30:56: 7c:5c:81:35:ab:ab:c9:62:4f:9d:9d:ad:7d:f9:09: 26:04:db:4e:95:95:f2:3f:67:0d:79:d4:a8:30:32: 97:7c:52:1b:05:2d:f2:75:9d:3f:6f:62:52:62:77: e8:16:94:41:fc:58:91:89:44:82:d9:60:c6:12:2c: 7a:fc:7d:ab:5f:46:c4:57:41:34:b2:46:8d:66:72: 26:d1:0e:15:51:62:93:da:ec:ef:32:74:55:2c:64: 92:2c:7d:68:8f:ce:02:27:a5:7b:8e:e0:58:7c:50: 6f:f9:a5:bf:07:37:96:48:16:af:41:c5:ee:45:73: 39:af:f7:e8:7d:1c:90:bb:f8:22:d2:96:84:b5:14: 61:57:46:0f:4e:7e:21:95:4c:15:4b:1f:a9:e6:92: 9f:e7:66:3a:da:46:5e:74:65:63:d6:4b:c9:b5:a1: 34:25:03:4b:17:33:8a:db:2c:21:0f:d4:7a:b6:7d: 78:d5:94:cf:8c:43:01:50:b2:d6:a0:15:a1:7a:ab: 0a:8c:f5:ca:78:4b:65:89:a1:3d:ac:96:db:5d:a5: a7:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:56:EE:70:18:44:22:22:2F:FE:C0:0B:67:27:E1:46:E0:80:96:82 X509v3 Authority Key Identifier: keyid:A9:BC:CA:6D:34:D3:D5:F1:EF:F8:BB:E7:83:D4:97:73:81:3E:5E:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:dc:76:a2:7f:91:c3:1d:f0:cf:bc:2f:03:cb:e3:64:53:0f: 10:f8:c0:3d:97:60:45:88:81:75:3d:e3:96:40:59:25:22:69: 94:cd:25:e0:90:97:00:5b:ec:48:a0:14:38:a1:22:3b:31:ba: 71:c2:c2:29:1c:d0:7a:cf:48:14:92:1f:19:ab:c7:c8:da:a5: b4:f1:89:a4:2f:13:05:b3:e8:c8:e7:da:5e:49:9d:0b:a6:b3: 6b:a4:4d:18:04:67:e9:81:21:e7:bc:04:38:71:21:65:9c:c6: f7:38:84:c3:46:35:b4:1c:59:e8:b6:dc:39:51:b9:37:f8:e8: 89:ef:3e:aa:04:50:0c:1e:bd:33:7e:28:28:21:42:d8:86:49: ca:e2:54:58:13:e8:ce:26:6a:e0:e2:38:9e:70:22:67:6c:47: 7a:09:6c:86:99:db:db:25:79:1a:fa:22:51:ae:82:64:d8:a5: ee:1f:ed:6d:36:5e:02:e2:73:c4:77:2b:87:e8:a4:c5:b8:60: 7b:56:c8:ba:d7:bd:76:5b:df:a0:51:be:2f:35:3a:a8:24:3f: 74:e9:05:07:f2:3d:7b:27:6f:27:5e:35:d7:e6:fd:36:93:72: fa:64:54:b4:1c:20:60:60:de:5e:2c:31:a3:16:a9:37:9f:5f: ae:2b:38:d0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZFOEExMTAvBgNVBAUTKEE5QkNDQTZEMzREM0Q1RjFFRkY4QkJFNzgzRDQ5Nzcz ODEzRTVFRjgwHhcNMjYxMDIyMjEwOTIxWhcNMjYxMDI5MjEwOTIxWjAYMRYwFAYD VQQDEw02YWRhN2I4Mi01ZDlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0WIGkUZ+4Wrt/hArIPGswHxgEeGr13E0eqW5mS0oubOasV+1N4OKrrm+MFZ8 XIE1q6vJYk+dna19+QkmBNtOlZXyP2cNedSoMDKXfFIbBS3ydZ0/b2JSYnfoFpRB /FiRiUSC2WDGEix6/H2rX0bEV0E0skaNZnIm0Q4VUWKT2uzvMnRVLGSSLH1oj84C J6V7juBYfFBv+aW/BzeWSBavQcXuRXM5r/fofRyQu/gi0paEtRRhV0YPTn4hlUwV Sx+p5pKf52Y62kZedGVj1kvJtaE0JQNLFzOK2ywhD9R6tn141ZTPjEMBULLWoBWh eqsKjPXKeEtliaE9rJbbXaWnHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLVW7nAY RCIiL/7AC2cn4UbggJaCMB8GA1UdIwQYMBaAFKm8ym0009Xx7/i754PUl3OBPl74 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkU4QS8zQjQ3NkU3QzJE RkYxMUVCODY4QTkxMzVDNEY5QUUwMi9xYnpLYlRUVDFmSHYtTHZuZzlTWGM0RS1Y dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FiektiVFRUMWZIdi1Mdm5nOVNYYzRFLVh2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkU4QS8zQjQ3NkU3QzJERkYxMUVCODY4QTkxMzVDNEY5QUUwMi9xYnpLYlRUVDFm SHYtTHZuZzlTWGM0RS1YdmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATNx2on+Rwx3wz7wvA8vjZFMPEPjAPZdgRYiBdT3jlkBZJSJplM0l4JCXAFvs SKAUOKEiOzG6ccLCKRzQes9IFJIfGavHyNqltPGJpC8TBbPoyOfaXkmdC6aza6RN GARn6YEh57wEOHEhZZzG9ziEw0Y1tBxZ6LbcOVG5N/joie8+qgRQDB69M34oKCFC 2IZJyuJUWBPoziZq4OI4nnAiZ2xHeglshpnb2yV5GvoiUa6CZNil7h/tbTZeAuJz xHcrh+ikxbhge1bIute9dlvfoFG+LzU6qCQ/dOkFB/I9eydvJ1411+b9NpNy+mRU tBwgYGDeXiwxoxapN59fris40A== -----END CERTIFICATE-----Generated at Sat Oct 24 10:41:16 2026 by rpki-client