$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.mft File: QELCSQ19r-wzIDFu1ap04L7Kqak.mft (raw, json) Hash identifier: dvkE8zU85SaVWib8NH0EBuq+//DozJ11lmpd6JhqYfQ= Subject key identifier: 58:8C:57:80:5A:E9:AA:0B:E6:E3:EC:A7:14:79:D8:5D:86:1D:B1:82 Authority key identifier: 40:42:C2:49:0D:7D:AF:EC:33:20:31:6E:D5:AA:74:E0:BE:CA:A9:A9 Certificate issuer: /CN=A91A7169/serialNumber=4042C2490D7DAFEC3320316ED5AA74E0BECAA9A9 Certificate serial: 027D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.mft Manifest number: 0231 Signing time: Fri 13 Nov 2026 03:32:43 +0000 Manifest this update: Fri 13 Nov 2026 03:32:42 +0000 Manifest next update: Fri 20 Nov 2026 03:32:42 +0000 Files and hashes: 1: QELCSQ19r-wzIDFu1ap04L7Kqak.crl (hash: Tg3bf8dA06E02pJXMlHh2HV2HaXgXQRONM1dlt+za/g=) 2: 3C0376CC6FD511F0BF33C829C4F9AE02.roa (hash: tkIQFKk/Mo9h+Y6zoIuiaKelqp3EP1aM68bZaSbBy0M=) 3: 3B8DEBA06FD511F0BF33C829C4F9AE02.roa (hash: Et35taMHrzzZx//1uz1X2k2usz0PCpjA6ZgM0w/qGlc=) 4: 3E0BA21CEBB211EEA93D9B14C4F9AE02.roa (hash: yxilBFlE1MgXEF3lGJREKxdKcg1wggFTb7Z4QOAKfZc=) 5: FCF99042301011EFBC350682C4F9AE02.roa (hash: eSUAI4AAApfP7epJ5sEwL+VCggzqIoTDDfYr32F9B9I=) 6: 3D937A30EBB211EEA93D9B14C4F9AE02.roa (hash: EoV7X+CPLPt1PwJmt/C6xwl6Rd3EK1Ujxhgn/dIQJh4=) 7: 72E97B3A1BDB11F0B77B1344C4F9AE02.roa (hash: DlhDgTG7w84Ovj2w/3S1GtqzEGfOWk6+fiHNLhzsPdE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.crl rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Nov 2026 03:32:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 637 (0x27d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7169, serialNumber=4042C2490D7DAFEC3320316ED5AA74E0BECAA9A9 Validity Not Before: Nov 13 03:32:42 2026 GMT Not After : Nov 20 03:32:42 2026 GMT Subject: CN=6af684da-baa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:f4:8f:6f:68:e6:ab:cd:c2:40:ac:cd:9f:d6: e4:d2:bb:27:48:81:af:ef:a2:6d:c0:8c:45:a9:b1: ff:0a:da:d1:d5:4c:6f:90:97:67:84:b2:39:5c:b2: 23:3e:04:38:83:e4:de:87:a1:22:30:ec:ad:de:b6: 75:20:20:3a:6c:f5:74:61:06:e0:23:f3:d8:fc:62: 7c:b9:71:80:01:36:ef:51:66:8f:51:6b:61:8f:cf: da:c4:52:6b:e1:97:15:59:a6:e6:79:ed:51:4b:21: 8a:3c:59:43:17:01:ad:e2:fc:76:0d:a1:25:41:b8: ee:58:c0:8b:82:a5:31:f8:a4:42:77:9e:d4:c8:b9: 25:cc:f5:5e:f2:c6:5b:79:6b:36:6f:31:ca:9f:07: af:27:1d:07:26:f9:cb:06:b2:b1:fb:75:82:bb:02: 89:b5:17:eb:71:32:64:5b:6e:3b:34:33:7c:73:bb: 94:63:50:f8:6e:60:72:aa:56:9c:a6:23:db:4d:4b: 85:28:b7:ec:1c:86:90:ce:aa:eb:fa:db:5b:51:48: c1:85:da:78:88:78:b4:c6:b9:19:b7:db:14:c7:ec: f9:c8:05:8f:62:94:59:2d:d1:a5:03:93:5c:95:00: 58:ce:08:80:19:92:19:6b:f9:a3:8d:56:90:0c:a0: a0:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:8C:57:80:5A:E9:AA:0B:E6:E3:EC:A7:14:79:D8:5D:86:1D:B1:82 X509v3 Authority Key Identifier: keyid:40:42:C2:49:0D:7D:AF:EC:33:20:31:6E:D5:AA:74:E0:BE:CA:A9:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:39:d6:c8:8a:b2:20:f1:67:04:cc:eb:11:2d:0a:cc:04:12: 94:79:70:c2:76:3c:05:08:dc:43:8f:93:fe:97:61:48:d8:7b: 44:42:99:aa:db:86:14:51:4a:67:4d:25:a3:a5:52:c8:32:8f: d5:6d:69:1e:40:82:35:12:80:ae:9a:7e:70:8a:2c:d4:0e:42: 1f:cb:fc:3d:54:69:af:fa:4a:8e:d3:85:86:e9:97:e6:24:d8: 13:88:aa:b7:08:9f:ab:d3:ac:72:23:11:c3:d4:e0:99:9a:5a: b3:8c:46:04:90:77:e7:0a:f9:e0:b5:3a:3d:a9:a5:32:dc:86: 31:91:92:b7:3b:0e:7a:56:6c:25:c5:c8:26:d8:99:a3:5d:ba: 28:af:01:a0:03:4e:0a:ee:46:1b:a3:ba:12:cd:47:ae:1e:62: f7:84:31:04:68:f6:53:f1:b7:f8:bf:90:0e:48:79:ef:e9:54: 00:ce:30:9f:26:d8:e4:a1:6a:78:c8:61:49:10:99:ed:95:2a: 12:0c:ff:f0:96:2a:a6:10:ad:c6:40:07:ac:d7:17:2f:47:53: cb:50:c8:9d:3e:32:e7:03:d5:ae:4f:4b:dd:fd:be:40:19:f7: ce:99:dc:a2:cd:e0:e6:32:92:e9:47:b0:3d:df:44:eb:98:8f: b6:02:47:51 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAn0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTcxNjkxMTAvBgNVBAUTKDQwNDJDMjQ5MEQ3REFGRUMzMzIwMzE2RUQ1QUE3NEUw QkVDQUE5QTkwHhcNMjYxMTEzMDMzMjQyWhcNMjYxMTIwMDMzMjQyWjAYMRYwFAYD VQQDEw02YWY2ODRkYS1iYWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAgvSPb2jmq83CQKzNn9bk0rsnSIGv76JtwIxFqbH/CtrR1UxvkJdnhLI5XLIj PgQ4g+Teh6EiMOyt3rZ1ICA6bPV0YQbgI/PY/GJ8uXGAATbvUWaPUWthj8/axFJr 4ZcVWabmee1RSyGKPFlDFwGt4vx2DaElQbjuWMCLgqUx+KRCd57UyLklzPVe8sZb eWs2bzHKnwevJx0HJvnLBrKx+3WCuwKJtRfrcTJkW247NDN8c7uUY1D4bmByqlac piPbTUuFKLfsHIaQzqrr+ttbUUjBhdp4iHi0xrkZt9sUx+z5yAWPYpRZLdGlA5Nc lQBYzgiAGZIZa/mjjVaQDKCgxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFiMV4Ba 6aoL5uPspxR52F2GHbGCMB8GA1UdIwQYMBaAFEBCwkkNfa/sMyAxbtWqdOC+yqmp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzE2OS82MjMzREQzRUVC QUUxMUVFOEEwRUQ5NjRDNEY5QUUwMi9RRUxDU1ExOXItd3pJREZ1MWFwMDRMN0tx YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FFTENTUTE5ci13eklERnUxYXAwNEw3S3Fhay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzE2OS82MjMzREQzRUVCQUUxMUVFOEEwRUQ5NjRDNEY5QUUwMi9RRUxDU1ExOXIt d3pJREZ1MWFwMDRMN0txYWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGjnWyIqyIPFnBMzrES0KzAQSlHlwwnY8BQjcQ4+T/pdhSNh7REKZqtuGFFFK Z00lo6VSyDKP1W1pHkCCNRKArpp+cIos1A5CH8v8PVRpr/pKjtOFhumX5iTYE4iq twifq9OsciMRw9TgmZpas4xGBJB35wr54LU6PamlMtyGMZGStzsOelZsJcXIJtiZ o126KK8BoANOCu5GG6O6Es1Hrh5i94QxBGj2U/G3+L+QDkh57+lUAM4wnybY5KFq eMhhSRCZ7ZUqEgz/8JYqphCtxkAHrNcXL0dTy1DInT4y5wPVrk9L3f2+QBn3zpnc os3g5jKS6UewPd9E65iPtgJHUQ== -----END CERTIFICATE-----Generated at Sun Nov 15 04:59:44 2026 by rpki-client