$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft File: qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft (raw, json) Hash identifier: tE2kvwJX2ChiKvC3CF7G/84Y5+TLJFY6/kXYG+uvsYY= Subject key identifier: 44:36:29:3C:24:A3:BA:0B:DE:F2:70:3F:45:60:71:97:CD:44:E1:A8 Authority key identifier: A9:BC:CA:6D:34:D3:D5:F1:EF:F8:BB:E7:83:D4:97:73:81:3E:5E:F8 Certificate issuer: /CN=A9186E8A/serialNumber=A9BCCA6D34D3D5F1EFF8BBE783D49773813E5EF8 Certificate serial: 08EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft Manifest number: 0897 Signing time: Fri 04 Sep 2026 20:58:35 +0000 Manifest this update: Fri 04 Sep 2026 20:58:34 +0000 Manifest next update: Fri 11 Sep 2026 20:58:34 +0000 Files and hashes: 1: qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl (hash: 3bOZK4uFFi6AnxPX1Ic8LhG3E6Qi3eg4LevH/Nb7Siw=) 2: 8554A0A86A8A11F0BBF66881C4F9AE02.roa (hash: jG2eCQQta7MNjU1JK1KYAfsYHPf3A4prUFHK/JzlfnI=) 3: 2FF53AF2A76811F1902C56043911F970.roa (hash: 0nCIpbx0cZSLgZnV2ZLspg0PdVVrZOLg3DNBm3/V48Y=) 4: 54EE7326A80F11F18C0522946B11F970.roa (hash: 2bxAWvxSp4Q1OtM3ABhhN9Qmgeh5OF6qCpvnoPz0S34=) 5: 4CAE21E8A80F11F1B862E5936B11F970.roa (hash: Wid3pVWf3u3ZNqAvZO6deUovG6PECC9ggJmw69pHTYs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 20:14:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2284 (0x8ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186E8A, serialNumber=A9BCCA6D34D3D5F1EFF8BBE783D49773813E5EF8 Validity Not Before: Sep 4 20:58:34 2026 GMT Not After : Sep 11 20:58:34 2026 GMT Subject: CN=6a9b30fa-d036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b1:39:a1:e9:c6:e5:41:ba:0e:eb:b9:f8:b6: 67:14:49:e3:aa:67:75:96:ac:ef:15:f2:c2:ae:b8: f7:73:bc:ff:70:71:ba:f5:c8:37:87:da:27:62:69: cd:a7:6c:b1:48:1b:5e:c9:c7:64:ff:fe:67:da:79: 06:b7:e3:35:8b:17:f9:19:60:93:a3:97:6c:6f:89: b5:ba:90:eb:1b:44:34:9e:a8:b5:a5:f9:53:ba:11: 10:aa:49:5a:7f:45:26:12:5a:ae:1a:61:c9:81:16: 58:5b:37:ff:85:5b:fd:74:4d:dd:31:03:95:21:cd: de:12:66:c8:1e:96:bc:45:2d:ec:96:97:36:d3:36: 8f:d0:e7:f6:6c:77:42:95:46:e8:66:17:e4:f0:4b: 06:fd:4e:44:f8:3c:64:dc:93:e2:e5:c0:52:3a:08: e1:ff:75:e0:b1:fd:e8:f0:5e:f5:b3:d0:fe:07:6c: 19:e7:98:69:12:0f:09:b1:b2:6e:99:bd:66:92:67: a0:e7:6e:14:75:f5:04:7b:ab:48:31:49:22:6f:1d: 0e:55:ab:1f:3a:b1:6d:d5:4b:1a:c2:52:4c:83:94: 35:fb:48:0e:62:a2:03:f8:aa:e8:ca:c7:da:81:54: 9a:27:25:1e:98:c2:a3:c7:c7:a1:59:6f:18:32:0a: 17:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:36:29:3C:24:A3:BA:0B:DE:F2:70:3F:45:60:71:97:CD:44:E1:A8 X509v3 Authority Key Identifier: keyid:A9:BC:CA:6D:34:D3:D5:F1:EF:F8:BB:E7:83:D4:97:73:81:3E:5E:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:48:6f:ee:b2:e7:4b:0a:9f:89:58:6d:6d:d4:9c:1a:b2:c1: e7:6c:ec:47:e4:d8:3d:cf:5e:25:ab:b9:2e:6e:de:f9:b5:d7: 69:c6:9c:9e:c5:e8:23:24:28:f9:4b:fb:5d:e4:db:82:89:6e: 77:01:a0:be:84:03:e2:4d:c7:71:5d:29:9c:0d:b0:e4:9b:92: a2:37:96:78:9b:4b:b3:09:f8:5c:85:0c:52:5f:80:14:1f:93: 41:f2:b2:62:59:9c:44:05:73:4d:b3:d6:e9:d1:77:48:ed:bf: 62:37:99:5c:3b:26:4c:6a:46:13:0e:4b:eb:96:c2:55:4a:b8: 8c:01:95:87:c2:6f:d8:9d:4c:74:ff:65:db:9e:66:5e:e9:5b: 0c:94:f6:a0:8a:4e:c2:22:80:36:ae:b0:b3:01:df:82:5e:82: b9:ad:0e:2f:70:a1:fc:ac:0e:29:01:fd:29:9b:ed:3d:0b:78: d3:bf:dd:70:b8:8b:cd:2c:33:2e:1f:0a:96:b5:6b:f1:79:c7: c1:68:71:0e:1b:49:d5:56:00:04:85:b6:c1:78:a9:82:83:c0: 5d:d5:86:49:32:43:60:18:56:78:fa:62:35:75:09:be:e0:fd: ea:ac:d7:d9:11:a8:ac:d5:4c:e7:c1:98:18:03:ff:c2:96:44: 2d:1c:4b:d3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZFOEExMTAvBgNVBAUTKEE5QkNDQTZEMzREM0Q1RjFFRkY4QkJFNzgzRDQ5Nzcz ODEzRTVFRjgwHhcNMjYwOTA0MjA1ODM0WhcNMjYwOTExMjA1ODM0WjAYMRYwFAYD VQQDEw02YTliMzBmYS1kMDM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3bE5oenG5UG6Duu5+LZnFEnjqmd1lqzvFfLCrrj3c7z/cHG69cg3h9onYmnN p2yxSBteycdk//5n2nkGt+M1ixf5GWCTo5dsb4m1upDrG0Q0nqi1pflTuhEQqkla f0UmElquGmHJgRZYWzf/hVv9dE3dMQOVIc3eEmbIHpa8RS3slpc20zaP0Of2bHdC lUboZhfk8EsG/U5E+Dxk3JPi5cBSOgjh/3Xgsf3o8F71s9D+B2wZ55hpEg8JsbJu mb1mkmeg524UdfUEe6tIMUkibx0OVasfOrFt1UsawlJMg5Q1+0gOYqID+Kroysfa gVSaJyUemMKjx8ehWW8YMgoXdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEQ2KTwk o7oL3vJwP0VgcZfNROGoMB8GA1UdIwQYMBaAFKm8ym0009Xx7/i754PUl3OBPl74 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkU4QS8zQjQ3NkU3QzJE RkYxMUVCODY4QTkxMzVDNEY5QUUwMi9xYnpLYlRUVDFmSHYtTHZuZzlTWGM0RS1Y dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FiektiVFRUMWZIdi1Mdm5nOVNYYzRFLVh2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkU4QS8zQjQ3NkU3QzJERkYxMUVCODY4QTkxMzVDNEY5QUUwMi9xYnpLYlRUVDFm SHYtTHZuZzlTWGM0RS1YdmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWkhv7rLnSwqfiVhtbdScGrLB52zsR+TYPc9eJau5Lm7e+bXXacacnsXoIyQo +Uv7XeTbgoludwGgvoQD4k3HcV0pnA2w5JuSojeWeJtLswn4XIUMUl+AFB+TQfKy YlmcRAVzTbPW6dF3SO2/YjeZXDsmTGpGEw5L65bCVUq4jAGVh8Jv2J1MdP9l255m XulbDJT2oIpOwiKANq6wswHfgl6Cua0OL3Ch/KwOKQH9KZvtPQt407/dcLiLzSwz Lh8KlrVr8XnHwWhxDhtJ1VYABIW2wXipgoPAXdWGSTJDYBhWePpiNXUJvuD96qzX 2RGorNVM58GYGAP/wpZELRxL0w== -----END CERTIFICATE-----Generated at Sat Sep 5 02:38:05 2026 by rpki-client