$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.mft File: qkHKgdI-9YhhkyqtErMWkNvPEAM.mft (raw, json) Hash identifier: gOXY9vBGG0wi6FRjKjSUK+9WTS2dVekJan3hbL9SZl4= Subject key identifier: 98:8F:7F:18:A1:A6:55:28:09:88:24:91:4A:2D:A2:24:4B:03:C3:5D Authority key identifier: AA:41:CA:81:D2:3E:F5:88:61:93:2A:AD:12:B3:16:90:DB:CF:10:03 Certificate issuer: /CN=A91A5744/serialNumber=AA41CA81D23EF58861932AAD12B31690DBCF1003 Certificate serial: 0D45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkHKgdI-9YhhkyqtErMWkNvPEAM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.mft Manifest number: 0D3D Signing time: Fri 02 Oct 2026 18:21:52 +0000 Manifest this update: Fri 02 Oct 2026 18:21:52 +0000 Manifest next update: Fri 09 Oct 2026 18:21:52 +0000 Files and hashes: 1: qkHKgdI-9YhhkyqtErMWkNvPEAM.crl (hash: C9APRcRzK/F5JtQ2Vh19TMfxc7Q+pn0eum9Fyad2xQY=) 2: 220DBB66054011EA90A20C7EC4F9AE02.roa (hash: yHmDa4+sZL/pjlW06ii7KVBbPXMP7FrwSa8y+N4oSFo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.crl rsync://rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkHKgdI-9YhhkyqtErMWkNvPEAM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 18:21:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3397 (0xd45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5744, serialNumber=AA41CA81D23EF58861932AAD12B31690DBCF1003 Validity Not Before: Oct 2 18:21:52 2026 GMT Not After : Oct 9 18:21:52 2026 GMT Subject: CN=6abff640-e5ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:45:e9:a0:81:9a:8d:1c:ef:f9:5a:c7:5e:14: 9a:fe:7e:ef:04:fa:16:a5:1d:53:36:57:b5:80:d9: c4:f0:c6:3c:fd:f4:2c:04:2d:22:6d:a2:26:f7:b4: f3:cb:8b:5a:61:7e:c4:c1:98:19:bc:ee:b0:4f:a7: 69:eb:88:f8:4f:82:66:f3:9e:75:9e:4e:49:87:7c: dd:e3:26:d7:a5:af:8f:90:00:45:cd:8d:d6:df:ff: 64:83:9f:eb:f4:21:d2:ef:a0:db:64:84:b0:00:82: 7b:14:a7:9e:0c:26:60:2e:3c:83:56:83:75:bb:31: a2:c5:9e:f3:8d:b4:79:26:9b:ad:34:45:d4:65:f5: 10:0f:da:ac:b0:24:fa:a4:56:99:5a:ea:d2:78:35: 6a:a2:73:24:7c:f7:da:0a:d2:bc:61:ab:7f:9a:23: 99:7a:1a:c1:96:00:74:b1:f2:2a:2c:8e:2c:82:90: 41:17:19:ce:dc:e0:7e:49:73:96:92:83:57:75:8f: 15:88:71:20:d6:43:51:5d:95:09:6a:d5:f2:0a:b2: 69:9d:59:db:29:27:19:db:19:41:12:d3:14:2c:bb: b6:9e:f7:25:ef:f5:e3:8d:fa:b5:0d:12:c9:83:cd: 8d:32:bc:e6:4a:01:b2:dc:97:aa:40:2e:7c:25:25: 08:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:8F:7F:18:A1:A6:55:28:09:88:24:91:4A:2D:A2:24:4B:03:C3:5D X509v3 Authority Key Identifier: keyid:AA:41:CA:81:D2:3E:F5:88:61:93:2A:AD:12:B3:16:90:DB:CF:10:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkHKgdI-9YhhkyqtErMWkNvPEAM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:81:23:15:cf:6a:b4:d3:3c:dd:4a:e2:80:7a:57:80:b1:8e: e6:38:a1:d2:62:4a:1d:24:5a:bd:af:97:0c:5a:dd:3e:8d:ce: 28:92:0e:ba:33:f4:c5:a4:e8:1b:05:62:cf:e9:7c:5f:f2:bb: 9f:fb:1f:ce:4d:dc:a6:2c:4d:62:fd:9e:c9:b1:6b:90:a9:d0: 99:82:07:e8:1f:8a:37:ed:26:a4:a7:06:dd:78:51:f0:aa:f1: 7e:e6:af:2a:03:57:df:1b:37:86:a9:c2:44:1a:3f:73:c2:0c: 7b:27:49:7f:e0:cc:7e:d3:dd:05:4b:81:83:b3:37:53:de:c4: 35:57:75:fa:90:7b:bb:b7:4b:50:ec:e6:e5:26:ca:9b:d5:9f: b3:ea:e2:be:e0:a3:53:0a:77:cb:27:b7:6d:a1:af:11:ce:95: 17:8a:8b:ef:ad:75:f5:94:d6:70:b5:ab:4a:07:16:a6:9a:af: a6:e8:03:5a:7e:a4:93:4d:b1:45:76:ac:cd:f9:e7:94:08:a0: ff:f6:10:e4:ee:39:f5:c4:d3:e5:94:94:57:13:d8:c9:65:b1: 26:b3:6f:5c:da:43:c0:16:d5:a3:68:90:3d:36:7c:cc:43:4a: 75:22:49:1c:68:27:b0:a6:72:c7:a8:e9:16:4f:db:85:ba:a7: 63:fb:4a:2c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU3NDQxMTAvBgNVBAUTKEFBNDFDQTgxRDIzRUY1ODg2MTkzMkFBRDEyQjMxNjkw REJDRjEwMDMwHhcNMjYxMDAyMTgyMTUyWhcNMjYxMDA5MTgyMTUyWjAYMRYwFAYD VQQDEw02YWJmZjY0MC1lNWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA00XpoIGajRzv+VrHXhSa/n7vBPoWpR1TNle1gNnE8MY8/fQsBC0ibaIm97Tz y4taYX7EwZgZvO6wT6dp64j4T4Jm8551nk5Jh3zd4ybXpa+PkABFzY3W3/9kg5/r 9CHS76DbZISwAIJ7FKeeDCZgLjyDVoN1uzGixZ7zjbR5JputNEXUZfUQD9qssCT6 pFaZWurSeDVqonMkfPfaCtK8Yat/miOZehrBlgB0sfIqLI4sgpBBFxnO3OB+SXOW koNXdY8ViHEg1kNRXZUJatXyCrJpnVnbKScZ2xlBEtMULLu2nvcl7/Xjjfq1DRLJ g82NMrzmSgGy3JeqQC58JSUImwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJiPfxih plUoCYgkkUotoiRLA8NdMB8GA1UdIwQYMBaAFKpByoHSPvWIYZMqrRKzFpDbzxAD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTc0NC8zOTdGNkNENDA1 MkUxMUVBOUQzMTQxNDVDNEY5QUUwMi9xa0hLZ2RJLTlZaGhreXF0RXJNV2tOdlBF QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FrSEtnZEktOVloaGt5cXRFck1Xa052UEVBTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTc0NC8zOTdGNkNENDA1MkUxMUVBOUQzMTQxNDVDNEY5QUUwMi9xa0hLZ2RJLTlZ aGhreXF0RXJNV2tOdlBFQU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZoEjFc9qtNM83UrigHpXgLGO5jih0mJKHSRava+XDFrdPo3OKJIOujP0xaTo GwViz+l8X/K7n/sfzk3cpixNYv2eybFrkKnQmYIH6B+KN+0mpKcG3XhR8Krxfuav KgNX3xs3hqnCRBo/c8IMeydJf+DMftPdBUuBg7M3U97ENVd1+pB7u7dLUOzm5SbK m9Wfs+rivuCjUwp3yye3baGvEc6VF4qL76119ZTWcLWrSgcWppqvpugDWn6kk02x RXaszfnnlAig//YQ5O459cTT5ZSUVxPYyWWxJrNvXNpDwBbVo2iQPTZ8zENKdSJJ HGgnsKZyx6jpFk/bhbqnY/tKLA== -----END CERTIFICATE-----Generated at Sat Oct 3 15:16:57 2026 by rpki-client