$ rpki-client -vvvf rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.mft File: QgBM9ryh-lZCT17qJPYqkrJc3s8.mft (raw, json) Hash identifier: 3vkeWz6tV8jjv6Tukkfkx6b91YDQ00rXMET1ky8foxk= Subject key identifier: 85:18:8E:65:6F:0B:11:74:2A:C5:06:9A:14:63:D8:1C:2F:A0:98:C2 Authority key identifier: 42:00:4C:F6:BC:A1:FA:56:42:4F:5E:EA:24:F6:2A:92:B2:5C:DE:CF Certificate issuer: /CN=A919960D/serialNumber=42004CF6BCA1FA56424F5EEA24F62A92B25CDECF Certificate serial: 02D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgBM9ryh-lZCT17qJPYqkrJc3s8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.mft Manifest number: 02CD Signing time: Thu 29 Oct 2026 01:47:36 +0000 Manifest this update: Thu 29 Oct 2026 01:47:35 +0000 Manifest next update: Thu 05 Nov 2026 01:47:35 +0000 Files and hashes: 1: QgBM9ryh-lZCT17qJPYqkrJc3s8.crl (hash: zwkGnOoNzPwvMyzTk4SqZBmvku09wy8dXsd67sOeyhY=) 2: BE9174768DDE11ED97AFDA82C4F9AE02.roa (hash: lWqXr9OCi9y8igTWAmlmDXkw3mBGBTPXv9Xm5W9NawI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.crl rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgBM9ryh-lZCT17qJPYqkrJc3s8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 01:47:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 725 (0x2d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919960D, serialNumber=42004CF6BCA1FA56424F5EEA24F62A92B25CDECF Validity Not Before: Oct 29 01:47:35 2026 GMT Not After : Nov 5 01:47:35 2026 GMT Subject: CN=6ae2a5b8-30b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:70:e7:65:9a:51:5f:da:7a:cb:6b:f6:eb:2a: a4:b7:69:9b:7d:c2:a7:ea:8f:8d:8b:0b:cc:20:45: 5d:c4:8f:af:47:d8:c6:46:a0:a1:af:f2:1d:95:11: 98:ef:bb:08:1e:8d:f3:41:8b:b5:f4:5e:97:da:91: c4:fe:87:46:ac:9c:1b:64:4c:ed:d6:95:b9:71:f9: d4:5c:89:41:1c:e5:32:d4:1f:2a:71:7b:7d:f5:39: 59:c1:f8:a8:76:70:3d:37:af:f4:0c:d1:6f:11:24: ce:5d:c9:51:f8:ab:a2:03:77:e8:26:76:50:c5:5a: 67:fc:f9:fc:49:07:c3:41:c5:01:8d:d4:cd:c3:ab: 94:f0:ed:08:49:3f:26:d9:2e:30:26:7a:2d:64:97: ec:ca:a9:51:4b:32:aa:11:35:49:59:2d:9a:5e:51: ca:5a:c6:3f:5f:35:48:a6:af:0a:e5:12:bc:63:3c: 3b:df:f9:d6:2b:20:40:bc:9a:16:f9:78:eb:fd:90: 77:6b:09:39:e1:a1:43:ca:96:47:59:8d:4d:37:97: 42:b7:ce:2a:55:70:a2:a8:67:e9:a2:c2:6f:2c:c1: ae:d8:44:95:00:42:90:f8:f4:3e:80:b5:d1:57:0b: 87:81:6a:b2:5c:72:89:8e:5f:ae:67:1c:5c:5f:74: 7b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:18:8E:65:6F:0B:11:74:2A:C5:06:9A:14:63:D8:1C:2F:A0:98:C2 X509v3 Authority Key Identifier: keyid:42:00:4C:F6:BC:A1:FA:56:42:4F:5E:EA:24:F6:2A:92:B2:5C:DE:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgBM9ryh-lZCT17qJPYqkrJc3s8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:51:17:19:ea:2a:6d:14:fd:d9:84:47:4d:09:cf:d3:ed:b9: 3a:c9:9d:06:a3:31:87:45:1a:f8:2a:7f:51:24:5d:c4:b9:73: 78:f3:bd:cb:c5:7f:3d:c7:73:ee:2a:7a:cc:87:e3:d5:56:79: 1e:2e:ec:96:65:e2:39:ca:56:cd:e4:cb:1e:ab:7c:25:0d:c0: 97:b2:f5:1e:50:a5:bb:07:1f:51:67:12:92:19:25:96:da:79: 69:97:dc:23:aa:d7:c1:7b:1e:30:f4:44:86:ac:8e:7a:1f:8c: bb:47:68:e6:fb:21:26:42:76:ed:ab:df:30:66:63:41:f2:39: 26:3f:7a:aa:89:6d:36:b2:25:99:b9:79:42:5a:62:05:18:5c: 68:45:93:dd:04:06:a5:25:8b:fd:97:f7:98:5b:f2:60:ca:a7: 19:85:a8:37:6d:fe:11:7f:05:1c:5e:c0:4e:14:d8:32:ce:47: 05:2b:92:6c:4f:ad:f8:0d:bc:e6:d0:74:38:be:a3:55:24:29: c0:bd:35:a0:f3:0a:14:6d:c7:1c:ae:0e:d7:b5:e2:7f:ef:ee: 06:51:4e:9b:30:9c:fc:fe:7c:94:b6:a6:37:5e:ad:43:8b:d3: a1:a2:97:7b:99:2e:f7:97:7d:95:db:00:84:f0:e4:e0:de:a5: 84:26:b2:f7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAtUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk2MEQxMTAvBgNVBAUTKDQyMDA0Q0Y2QkNBMUZBNTY0MjRGNUVFQTI0RjYyQTky QjI1Q0RFQ0YwHhcNMjYxMDI5MDE0NzM1WhcNMjYxMTA1MDE0NzM1WjAYMRYwFAYD VQQDEw02YWUyYTViOC0zMGIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwXDnZZpRX9p6y2v26yqkt2mbfcKn6o+NiwvMIEVdxI+vR9jGRqChr/IdlRGY 77sIHo3zQYu19F6X2pHE/odGrJwbZEzt1pW5cfnUXIlBHOUy1B8qcXt99TlZwfio dnA9N6/0DNFvESTOXclR+KuiA3foJnZQxVpn/Pn8SQfDQcUBjdTNw6uU8O0IST8m 2S4wJnotZJfsyqlRSzKqETVJWS2aXlHKWsY/XzVIpq8K5RK8Yzw73/nWKyBAvJoW +Xjr/ZB3awk54aFDypZHWY1NN5dCt84qVXCiqGfposJvLMGu2ESVAEKQ+PQ+gLXR VwuHgWqyXHKJjl+uZxxcX3R7eQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIUYjmVv CxF0KsUGmhRj2BwvoJjCMB8GA1UdIwQYMBaAFEIATPa8ofpWQk9e6iT2KpKyXN7P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTYwRC9CRDBCNjRDNjhE REExMUVEODczQTc0ODdDNEY5QUUwMi9RZ0JNOXJ5aC1sWkNUMTdxSlBZcWtySmMz czguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FnQk05cnloLWxaQ1QxN3FKUFlxa3JKYzNzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTYwRC9CRDBCNjRDNjhEREExMUVEODczQTc0ODdDNEY5QUUwMi9RZ0JNOXJ5aC1s WkNUMTdxSlBZcWtySmMzczgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAq1EXGeoqbRT92YRHTQnP0+25OsmdBqMxh0Ua+Cp/USRdxLlzePO9y8V/Pcdz 7ip6zIfj1VZ5Hi7slmXiOcpWzeTLHqt8JQ3Al7L1HlCluwcfUWcSkhklltp5aZfc I6rXwXseMPREhqyOeh+Mu0do5vshJkJ27avfMGZjQfI5Jj96qoltNrIlmbl5Qlpi BRhcaEWT3QQGpSWL/Zf3mFvyYMqnGYWoN23+EX8FHF7AThTYMs5HBSuSbE+t+A28 5tB0OL6jVSQpwL01oPMKFG3HHK4O17Xif+/uBlFOmzCc/P58lLamN16tQ4vToaKX e5ku95d9ldsAhPDk4N6lhCay9w== -----END CERTIFICATE-----Generated at Thu Oct 29 08:06:22 2026 by rpki-client