$ rpki-client -vvf rpki.apnic.net/member_repository/A9198D20/3F7703C21CE911EA98897487C4F9AE02/Q8PPEXS9crQ0xpKLir6_BdYxP0A.mft File: Q8PPEXS9crQ0xpKLir6_BdYxP0A.mft (raw, json) Hash identifier: 27yxOUjYZiTwb6yrFLrULbc0roG49mTQNCJUNUFHZl8= Subject key identifier: 35:64:68:0E:D9:BD:A9:65:B7:EC:9A:D1:A6:C2:66:F1:51:0B:9D:A5 Authority key identifier: 43:C3:CF:11:74:BD:72:B4:34:C6:92:8B:8A:BE:BF:05:D6:31:3F:40 Certificate issuer: /CN=A9198D20/serialNumber=43C3CF1174BD72B434C6928B8ABEBF05D6313F40 Certificate serial: 0C9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q8PPEXS9crQ0xpKLir6_BdYxP0A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198D20/3F7703C21CE911EA98897487C4F9AE02/Q8PPEXS9crQ0xpKLir6_BdYxP0A.mft Manifest number: 0C91 Signing time: Mon 22 Jun 2026 18:35:32 +0000 Manifest this update: Mon 22 Jun 2026 18:35:31 +0000 Manifest next update: Mon 29 Jun 2026 18:35:31 +0000 Files and hashes: 1: Q8PPEXS9crQ0xpKLir6_BdYxP0A.crl (hash: 9p+vdloSHlwlnXPzP65b3KSxIQDB0WNjGjfuD2IAO5Q=) 2: EE985C561CEA11EA8B382C0BC4F9AE02.roa (hash: DJMUXwUzwbPlOgQB+UtvzG/7I16IrRMq3UM2uKL9s14=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198D20/3F7703C21CE911EA98897487C4F9AE02/Q8PPEXS9crQ0xpKLir6_BdYxP0A.crl rsync://rpki.apnic.net/member_repository/A9198D20/3F7703C21CE911EA98897487C4F9AE02/Q8PPEXS9crQ0xpKLir6_BdYxP0A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q8PPEXS9crQ0xpKLir6_BdYxP0A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Jun 2026 18:35:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3226 (0xc9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198D20, serialNumber=43C3CF1174BD72B434C6928B8ABEBF05D6313F40 Validity Not Before: Jun 22 18:35:31 2026 GMT Not After : Jun 29 18:35:31 2026 GMT Subject: CN=6a398073-2c6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3d:f2:63:56:50:bc:ef:6a:cb:45:a0:85:49: bf:95:9d:c2:7d:fd:76:28:ea:34:f4:62:d7:aa:fe: 5f:c4:b3:6b:05:86:90:a7:e2:78:4d:ad:4e:61:48: 42:ad:2d:a9:67:04:45:49:2a:fc:bc:45:4d:dc:50: bf:da:bb:d7:1e:a9:fe:44:1e:0e:5b:b3:a4:8d:46: fe:54:51:18:22:dc:a1:ec:4b:b0:7f:8e:a4:c9:35: e5:a4:9d:53:29:ea:09:dd:2a:f6:c1:b5:c4:6a:25: 60:73:19:9d:d4:c5:81:97:0f:4c:d4:20:0e:a7:10: e0:a0:b8:92:3f:67:3d:e5:ac:7b:a8:ef:04:f0:db: 78:39:39:2f:99:ed:8b:5a:7e:55:d7:14:10:39:9c: 98:8b:ca:7b:d0:8a:d1:ca:eb:44:42:36:12:58:c5: 63:02:be:62:24:90:e2:56:a3:e7:de:e9:d5:fc:a1: 83:d1:5b:2c:f2:9d:18:21:de:25:c7:49:c2:32:ac: fb:bf:65:8b:3d:93:61:2c:1d:e3:c4:ea:09:0c:86: ad:cd:c6:3c:b2:06:9e:7e:09:ba:91:f0:f9:7b:60: 76:c0:51:96:df:f3:51:b4:59:d9:a8:2e:7d:43:46: 1e:14:7e:9f:8d:f0:b8:42:9b:6a:c9:8a:cd:a7:90: b2:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:64:68:0E:D9:BD:A9:65:B7:EC:9A:D1:A6:C2:66:F1:51:0B:9D:A5 X509v3 Authority Key Identifier: keyid:43:C3:CF:11:74:BD:72:B4:34:C6:92:8B:8A:BE:BF:05:D6:31:3F:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198D20/3F7703C21CE911EA98897487C4F9AE02/Q8PPEXS9crQ0xpKLir6_BdYxP0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q8PPEXS9crQ0xpKLir6_BdYxP0A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198D20/3F7703C21CE911EA98897487C4F9AE02/Q8PPEXS9crQ0xpKLir6_BdYxP0A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:a9:68:b5:53:e8:d9:5a:02:f9:a7:d4:e3:2c:b9:38:82:8a: b9:f9:16:dc:9f:8e:d7:33:28:8f:73:6e:c3:8c:0e:e6:83:e2: 24:1c:55:af:44:d6:83:43:34:1e:6e:31:91:2b:cc:8e:15:91: b0:f6:d8:51:ea:bc:b2:79:25:7c:01:5b:f5:c1:04:85:6b:5d: 59:28:b9:0f:12:5d:b5:d0:60:46:6b:6c:75:d8:91:14:fd:d4: 2d:1a:bd:2d:10:1a:f0:7e:bf:34:90:98:d5:bb:c7:c3:4f:b9: b0:9d:40:f3:4e:ea:e2:78:7d:ee:88:d2:21:5f:34:1a:e1:eb: e0:52:33:ba:0a:4b:f2:37:1c:f7:af:a8:13:fa:36:ae:19:c3: fa:e3:a8:af:28:0e:e6:d4:9c:36:91:20:d2:d8:09:6f:37:be: 77:30:fb:17:d3:53:86:c6:83:08:84:0e:ba:5f:b1:07:7e:2b: 05:e7:38:49:c4:6b:82:0f:08:bc:53:43:8f:5e:1d:6f:2b:20: 42:71:8e:18:ce:64:f5:e1:0b:77:9e:45:be:0d:80:9a:ef:cb: e1:cb:61:27:d7:a4:4f:7d:10:0f:24:47:f3:4f:e4:43:80:27: e3:49:52:50:bf:bd:24:03:1c:dd:bd:49:e2:e9:06:c8:96:5d: c6:cd:7c:42 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OThEMjAxMTAvBgNVBAUTKDQzQzNDRjExNzRCRDcyQjQzNEM2OTI4QjhBQkVCRjA1 RDYzMTNGNDAwHhcNMjYwNjIyMTgzNTMxWhcNMjYwNjI5MTgzNTMxWjAYMRYwFAYD VQQDEw02YTM5ODA3My0yYzZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzD3yY1ZQvO9qy0WghUm/lZ3Cff12KOo09GLXqv5fxLNrBYaQp+J4Ta1OYUhC rS2pZwRFSSr8vEVN3FC/2rvXHqn+RB4OW7OkjUb+VFEYItyh7Euwf46kyTXlpJ1T KeoJ3Sr2wbXEaiVgcxmd1MWBlw9M1CAOpxDgoLiSP2c95ax7qO8E8Nt4OTkvme2L Wn5V1xQQOZyYi8p70IrRyutEQjYSWMVjAr5iJJDiVqPn3unV/KGD0Vss8p0YId4l x0nCMqz7v2WLPZNhLB3jxOoJDIatzcY8sgaefgm6kfD5e2B2wFGW3/NRtFnZqC59 Q0YeFH6fjfC4QptqyYrNp5CyhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDVkaA7Z vallt+ya0abCZvFRC52lMB8GA1UdIwQYMBaAFEPDzxF0vXK0NMaSi4q+vwXWMT9A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OEQyMC8zRjc3MDNDMjFD RTkxMUVBOTg4OTc0ODdDNEY5QUUwMi9ROFBQRVhTOWNyUTB4cEtMaXI2X0JkWXhQ MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1E4UFBFWFM5Y3JRMHhwS0xpcjZfQmRZeFAwQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OEQyMC8zRjc3MDNDMjFDRTkxMUVBOTg4OTc0ODdDNEY5QUUwMi9ROFBQRVhTOWNy UTB4cEtMaXI2X0JkWXhQMEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASalotVPo2VoC+afU4yy5OIKKufkW3J+O1zMoj3Nuw4wO5oPiJBxVr0TWg0M0 Hm4xkSvMjhWRsPbYUeq8snklfAFb9cEEhWtdWSi5DxJdtdBgRmtsddiRFP3ULRq9 LRAa8H6/NJCY1bvHw0+5sJ1A807q4nh97ojSIV80GuHr4FIzugpL8jcc96+oE/o2 rhnD+uOorygO5tScNpEg0tgJbze+dzD7F9NThsaDCIQOul+xB34rBec4ScRrgg8I vFNDj14dbysgQnGOGM5k9eELd55Fvg2Amu/L4cthJ9ekT30QDyRH80/kQ4An40lS UL+9JAMc3b1J4ukGyJZdxs18Qg== -----END CERTIFICATE-----Generated at Wed Jun 24 11:19:59 2026 by rpki-client