$ rpki-client -vvvf rpki.apnic.net/member_repository/A9195F49/9D3C749266A211ECBB7A0A3CC4F9AE02/qHH05sNy2xC2TfOZX6FR77OfmYs.mft File: qHH05sNy2xC2TfOZX6FR77OfmYs.mft (raw, json) Hash identifier: ZAzc6Y8eSwYk06kTVHIF5bKvuhkfxG9HEQqRv20yd7A= Subject key identifier: A3:FF:1B:97:F6:B8:3D:7F:1C:3A:13:64:78:B8:36:3F:C9:DF:7F:E4 Authority key identifier: A8:71:F4:E6:C3:72:DB:10:B6:4D:F3:99:5F:A1:51:EF:B3:9F:99:8B Certificate issuer: /CN=A9195F49/serialNumber=A871F4E6C372DB10B64DF3995FA151EFB39F998B Certificate serial: 0534 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHH05sNy2xC2TfOZX6FR77OfmYs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195F49/9D3C749266A211ECBB7A0A3CC4F9AE02/qHH05sNy2xC2TfOZX6FR77OfmYs.mft Manifest number: 052A Signing time: Tue 06 Oct 2026 23:42:56 +0000 Manifest this update: Tue 06 Oct 2026 23:42:56 +0000 Manifest next update: Tue 13 Oct 2026 23:42:56 +0000 Files and hashes: 1: qHH05sNy2xC2TfOZX6FR77OfmYs.crl (hash: K0xNTVBCNHTJ8zEMUnRwF3ofci5Ce7Xfizvo5PG73XE=) 2: 5FC75DCC66A511EC9C199341C4F9AE02.roa (hash: 7aFNsUg1I4C5V9F/LA66NxWgGO8Ce4SasYs9BxONMfo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195F49/9D3C749266A211ECBB7A0A3CC4F9AE02/qHH05sNy2xC2TfOZX6FR77OfmYs.crl rsync://rpki.apnic.net/member_repository/A9195F49/9D3C749266A211ECBB7A0A3CC4F9AE02/qHH05sNy2xC2TfOZX6FR77OfmYs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHH05sNy2xC2TfOZX6FR77OfmYs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 23:42:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1332 (0x534) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195F49, serialNumber=A871F4E6C372DB10B64DF3995FA151EFB39F998B Validity Not Before: Oct 6 23:42:56 2026 GMT Not After : Oct 13 23:42:56 2026 GMT Subject: CN=6ac58780-46a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:25:33:82:f6:6b:66:a0:1d:83:73:e4:d6:2c: 78:e3:42:45:99:ef:7b:5a:eb:7e:20:18:d6:97:04: 0b:b3:57:7e:4a:31:db:d4:1b:de:65:4e:9a:6f:83: 99:f9:32:e6:c4:dc:a4:7d:e7:84:8e:2f:49:ae:5e: a3:06:a2:e4:69:02:3e:eb:18:bd:1b:e0:b0:50:6f: 52:ad:e6:05:47:23:ae:ba:d7:c9:85:c7:2e:8c:0e: cb:e0:c8:3e:02:97:2d:74:94:35:e7:81:ad:f9:a8: 92:4e:31:c4:95:65:83:df:6c:2a:ed:9f:59:5d:3c: cf:e9:2e:cb:9a:9e:4e:86:7f:5e:c2:45:14:c5:b8: ef:7f:40:bd:92:c3:69:cd:76:8b:cd:65:c9:10:24: e0:56:06:d2:8b:e8:65:9c:cf:af:b8:4c:35:d6:c8: d2:8c:d6:38:36:88:cd:7e:9f:a6:b7:3c:a9:2f:2a: 5f:71:d7:51:47:76:50:f2:aa:27:83:a8:c5:aa:b8: 7e:76:5a:79:6c:09:9e:6e:ed:ac:24:94:7d:9a:f3: f8:55:3d:41:e1:3b:1b:30:d3:ca:12:60:dc:c4:ce: f5:68:f4:e1:d3:e5:bd:c3:e9:0e:f1:7c:7f:11:80: 3a:2f:a8:94:5e:be:9b:41:52:45:59:8b:65:b2:c7: bd:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:FF:1B:97:F6:B8:3D:7F:1C:3A:13:64:78:B8:36:3F:C9:DF:7F:E4 X509v3 Authority Key Identifier: keyid:A8:71:F4:E6:C3:72:DB:10:B6:4D:F3:99:5F:A1:51:EF:B3:9F:99:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195F49/9D3C749266A211ECBB7A0A3CC4F9AE02/qHH05sNy2xC2TfOZX6FR77OfmYs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHH05sNy2xC2TfOZX6FR77OfmYs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195F49/9D3C749266A211ECBB7A0A3CC4F9AE02/qHH05sNy2xC2TfOZX6FR77OfmYs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:f4:a1:f9:b9:7c:02:78:8b:3c:15:02:86:5d:a9:7a:dd:61: 97:d5:fe:d4:95:ef:65:a3:8c:ac:fc:3a:19:f3:25:34:6e:e0: 64:ca:b2:50:26:59:60:9d:83:60:59:e5:24:8b:c2:eb:00:17: 34:49:08:a2:7e:1c:4f:37:40:cb:dd:ed:b6:de:9e:4d:80:7d: 28:49:be:d0:fd:4c:20:48:99:15:c2:79:f3:ba:57:9d:3c:64: 74:d9:18:45:6f:ae:ee:0f:59:4e:ec:81:40:3c:56:9a:ad:35: aa:f5:db:75:06:33:65:4f:cb:45:1b:2b:7e:e6:5c:2b:78:dd: 1b:7d:5d:7e:f4:20:60:ef:f6:38:6a:01:54:ab:bb:9d:0e:64: 7e:a5:cc:64:6d:64:a9:e4:0a:07:f4:21:71:91:fc:b5:83:cd: fe:49:0b:0e:13:84:c2:9c:5b:26:44:38:b3:37:e0:f3:47:1a: 2e:d7:e6:ae:da:6b:1a:b9:ad:c2:ab:62:b6:69:01:f5:2f:0b: 60:34:9f:57:2e:6f:77:7a:41:98:55:63:9d:b7:a8:a1:4b:f9: 43:c8:3a:ff:8b:eb:89:f7:30:50:f7:9f:d3:84:c3:50:3a:84: 7e:f8:f5:af:86:de:0f:47:e9:36:69:52:97:45:ae:04:d6:a3: 1c:7e:dd:a6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBTQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVGNDkxMTAvBgNVBAUTKEE4NzFGNEU2QzM3MkRCMTBCNjRERjM5OTVGQTE1MUVG QjM5Rjk5OEIwHhcNMjYxMDA2MjM0MjU2WhcNMjYxMDEzMjM0MjU2WjAYMRYwFAYD VQQDEw02YWM1ODc4MC00NmEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnSUzgvZrZqAdg3Pk1ix440JFme97Wut+IBjWlwQLs1d+SjHb1BveZU6ab4OZ +TLmxNykfeeEji9Jrl6jBqLkaQI+6xi9G+CwUG9SreYFRyOuutfJhccujA7L4Mg+ ApctdJQ154Gt+aiSTjHElWWD32wq7Z9ZXTzP6S7Lmp5Ohn9ewkUUxbjvf0C9ksNp zXaLzWXJECTgVgbSi+hlnM+vuEw11sjSjNY4NojNfp+mtzypLypfcddRR3ZQ8qon g6jFqrh+dlp5bAmebu2sJJR9mvP4VT1B4TsbMNPKEmDcxM71aPTh0+W9w+kO8Xx/ EYA6L6iUXr6bQVJFWYtlsse96QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKP/G5f2 uD1/HDoTZHi4Nj/J33/kMB8GA1UdIwQYMBaAFKhx9ObDctsQtk3zmV+hUe+zn5mL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUY0OS85RDNDNzQ5MjY2 QTIxMUVDQkI3QTBBM0NDNEY5QUUwMi9xSEgwNXNOeTJ4QzJUZk9aWDZGUjc3T2Zt WXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FISDA1c055MnhDMlRmT1pYNkZSNzdPZm1Zcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUY0OS85RDNDNzQ5MjY2QTIxMUVDQkI3QTBBM0NDNEY5QUUwMi9xSEgwNXNOeTJ4 QzJUZk9aWDZGUjc3T2ZtWXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAa/Sh+bl8AniLPBUChl2pet1hl9X+1JXvZaOMrPw6GfMlNG7gZMqyUCZZYJ2D YFnlJIvC6wAXNEkIon4cTzdAy93ttt6eTYB9KEm+0P1MIEiZFcJ587pXnTxkdNkY RW+u7g9ZTuyBQDxWmq01qvXbdQYzZU/LRRsrfuZcK3jdG31dfvQgYO/2OGoBVKu7 nQ5kfqXMZG1kqeQKB/QhcZH8tYPN/kkLDhOEwpxbJkQ4szfg80caLtfmrtprGrmt wqtitmkB9S8LYDSfVy5vd3pBmFVjnbeooUv5Q8g6/4vrifcwUPef04TDUDqEfvj1 r4beD0fpNmlSl0WuBNajHH7dpg== -----END CERTIFICATE-----Generated at Thu Oct 8 20:05:06 2026 by rpki-client