$ rpki-client -vvvf rpki.apnic.net/member_repository/A91729D4/293A5888725111F1A5B3D6038DA30FBC/qvIbcGtV8TNNz2thfp4PMR1b9zM.mft File: qvIbcGtV8TNNz2thfp4PMR1b9zM.mft (raw, json) Hash identifier: 37lZ9g2ec2DSAr8vajaMhk3az8XXWUC9DiDxos+xI54= Subject key identifier: BD:F7:22:A1:2B:33:4A:16:F6:87:FF:B3:8A:01:C9:56:15:F4:1D:A4 Authority key identifier: AA:F2:1B:70:6B:55:F1:33:4D:CF:6B:61:7E:9E:0F:31:1D:5B:F7:33 Certificate issuer: /CN=A91729D4/serialNumber=AAF21B706B55F1334DCF6B617E9E0F311D5BF733 Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qvIbcGtV8TNNz2thfp4PMR1b9zM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91729D4/293A5888725111F1A5B3D6038DA30FBC/qvIbcGtV8TNNz2thfp4PMR1b9zM.mft Manifest number: 33 Signing time: Wed 23 Sep 2026 08:26:52 +0000 Manifest this update: Wed 23 Sep 2026 08:26:52 +0000 Manifest next update: Wed 30 Sep 2026 08:26:52 +0000 Files and hashes: 1: qvIbcGtV8TNNz2thfp4PMR1b9zM.crl (hash: YY5xN5yoOB2QYXUuAACLyePqMRIZAI/O3Gyx0nImTQw=) 2: 1CCC1F3C97F911F1A1B8040E6F11F970.roa (hash: nnpgZb8pphmld77O5HH0vZJrbo5b7MyF20Uu/zQGu1E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91729D4/293A5888725111F1A5B3D6038DA30FBC/qvIbcGtV8TNNz2thfp4PMR1b9zM.crl rsync://rpki.apnic.net/member_repository/A91729D4/293A5888725111F1A5B3D6038DA30FBC/qvIbcGtV8TNNz2thfp4PMR1b9zM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qvIbcGtV8TNNz2thfp4PMR1b9zM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 08:26:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91729D4, serialNumber=AAF21B706B55F1334DCF6B617E9E0F311D5BF733 Validity Not Before: Sep 23 08:26:52 2026 GMT Not After : Sep 30 08:26:52 2026 GMT Subject: CN=6ab38d4c-4c9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f2:d2:5b:d4:ee:78:2b:ed:c5:bb:37:c2:1c: 37:0f:18:f3:97:87:78:d2:a6:64:e1:c6:19:35:ca: 80:ba:b9:d1:f3:7c:e3:5f:ac:a4:32:e9:24:da:9b: 31:de:47:4c:b3:8f:99:5e:7b:2e:25:35:2b:ce:16: 5d:68:c0:2a:73:95:c0:5a:a7:76:4d:91:40:a8:5c: a8:65:70:4b:a1:b3:63:84:be:0c:1b:6c:f6:02:65: 02:63:d9:4f:7d:8b:1d:78:fc:be:04:cf:93:dd:dd: 54:ff:9e:b4:e7:eb:44:4a:10:6f:84:8d:ed:3f:c1: 6b:18:32:77:63:f1:79:7f:6d:68:b4:8a:a5:4f:48: c6:16:44:3f:93:07:51:03:1a:19:33:a5:34:e9:a2: d7:03:b5:cd:33:87:2d:03:75:25:01:8b:ac:a1:57: 88:5d:b5:e8:16:04:79:e0:21:c0:f8:94:a7:1e:b6: c3:60:a8:68:e3:5f:f3:89:70:33:72:7e:d6:fb:d7: 55:2a:b6:ea:89:e1:5b:c0:98:8e:a5:3c:cf:9a:38: aa:7c:5d:cc:8c:b1:a1:8b:e3:2e:96:af:0d:80:8b: 2b:a4:28:8a:bc:f6:15:00:33:eb:17:ea:ce:17:4b: 53:a3:da:76:45:fc:b9:41:f9:6a:1f:fa:f2:ea:19: 38:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:F7:22:A1:2B:33:4A:16:F6:87:FF:B3:8A:01:C9:56:15:F4:1D:A4 X509v3 Authority Key Identifier: keyid:AA:F2:1B:70:6B:55:F1:33:4D:CF:6B:61:7E:9E:0F:31:1D:5B:F7:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91729D4/293A5888725111F1A5B3D6038DA30FBC/qvIbcGtV8TNNz2thfp4PMR1b9zM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qvIbcGtV8TNNz2thfp4PMR1b9zM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91729D4/293A5888725111F1A5B3D6038DA30FBC/qvIbcGtV8TNNz2thfp4PMR1b9zM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:ff:d0:60:f2:f1:67:bf:4e:8e:13:8a:f5:6f:0f:f7:ff:c9: 4c:f0:d7:03:9c:b6:b2:24:57:32:b7:40:58:02:ae:92:41:22: 84:7a:33:50:74:fd:d9:a1:80:8b:8c:cb:a0:16:b2:e3:1e:21: 82:25:40:3f:73:fb:6a:6c:57:c9:37:3f:85:de:48:c6:83:c0: 35:bd:99:d9:01:8b:df:23:bf:54:b9:e2:11:ce:57:0b:7a:a5: 28:1e:11:09:ae:27:8f:fc:67:08:25:05:65:28:7a:25:de:83: fe:a3:a9:8e:28:44:67:2f:c1:6f:80:5f:b9:9c:83:f6:d8:31: 24:cc:2a:42:4e:db:7e:07:6d:74:f2:f2:4d:ef:a4:0e:90:a3: 53:e7:ce:f9:0d:d0:24:d8:0d:25:2b:f1:42:76:d2:5a:4d:89: 67:f7:8b:f4:42:25:06:76:82:b0:af:dc:3d:f4:c7:3d:63:f3: 70:47:89:e0:20:fa:ae:d1:d5:25:81:c4:89:df:48:bf:8b:87: 9a:ac:27:3b:c5:94:fa:38:73:db:dd:bc:f4:44:e9:81:bd:32: 1b:de:34:10:f9:ae:6c:a0:be:96:45:f8:26:7d:41:b3:b4:f6: a2:e3:ad:0d:49:94:85:4f:99:f9:a0:95:0b:84:ef:32:0b:7e: d7:b8:d8:48 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MjlENDExMC8GA1UEBRMoQUFGMjFCNzA2QjU1RjEzMzREQ0Y2QjYxN0U5RTBGMzEx RDVCRjczMzAeFw0yNjA5MjMwODI2NTJaFw0yNjA5MzAwODI2NTJaMBgxFjAUBgNV BAMTDTZhYjM4ZDRjLTRjOWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDS8tJb1O54K+3FuzfCHDcPGPOXh3jSpmThxhk1yoC6udHzfONfrKQy6STamzHe R0yzj5leey4lNSvOFl1owCpzlcBap3ZNkUCoXKhlcEuhs2OEvgwbbPYCZQJj2U99 ix14/L4Ez5Pd3VT/nrTn60RKEG+Eje0/wWsYMndj8Xl/bWi0iqVPSMYWRD+TB1ED GhkzpTTpotcDtc0zhy0DdSUBi6yhV4hdtegWBHngIcD4lKcetsNgqGjjX/OJcDNy ftb711UqtuqJ4VvAmI6lPM+aOKp8XcyMsaGL4y6Wrw2AiyukKIq89hUAM+sX6s4X S1Oj2nZF/LlB+Wof+vLqGTjNAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUvfcioSsz Shb2h/+zigHJVhX0HaQwHwYDVR0jBBgwFoAUqvIbcGtV8TNNz2thfp4PMR1b9zMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcyOUQ0LzI5M0E1ODg4NzI1 MTExRjFBNUIzRDYwMzhEQTMwRkJDL3F2SWJjR3RWOFROTnoydGhmcDRQTVIxYjl6 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcXZJYmNHdFY4VE5OejJ0aGZwNFBNUjFiOXpNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcy OUQ0LzI5M0E1ODg4NzI1MTExRjFBNUIzRDYwMzhEQTMwRkJDL3F2SWJjR3RWOFRO TnoydGhmcDRQTVIxYjl6TS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBQ/9Bg8vFnv06OE4r1bw/3/8lM8NcDnLayJFcyt0BYAq6SQSKEejNQdP3ZoYCL jMugFrLjHiGCJUA/c/tqbFfJNz+F3kjGg8A1vZnZAYvfI79UueIRzlcLeqUoHhEJ rieP/GcIJQVlKHol3oP+o6mOKERnL8FvgF+5nIP22DEkzCpCTtt+B2108vJN76QO kKNT5875DdAk2A0lK/FCdtJaTYln94v0QiUGdoKwr9w99Mc9Y/NwR4ngIPqu0dUl gcSJ30i/i4earCc7xZT6OHPb3bz0ROmBvTIb3jQQ+a5soL6WRfgmfUGztPai460N SZSFT5n5oJULhO8yC37XuNhI -----END CERTIFICATE-----Generated at Wed Sep 23 16:47:03 2026 by rpki-client