$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.mft File: QELCSQ19r-wzIDFu1ap04L7Kqak.mft (raw, json) Hash identifier: 7NSIvbzyoDhPR7HVjuspMHDGmnAXTgDLWydahDE6WKY= Subject key identifier: 82:ED:09:84:F8:9C:E0:45:09:24:83:B3:8B:26:DB:EC:04:74:13:62 Authority key identifier: 40:42:C2:49:0D:7D:AF:EC:33:20:31:6E:D5:AA:74:E0:BE:CA:A9:A9 Certificate issuer: /CN=A91A7169/serialNumber=4042C2490D7DAFEC3320316ED5AA74E0BECAA9A9 Certificate serial: 0263 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.mft Manifest number: 0217 Signing time: Wed 23 Sep 2026 14:31:32 +0000 Manifest this update: Wed 23 Sep 2026 14:31:31 +0000 Manifest next update: Wed 30 Sep 2026 14:31:31 +0000 Files and hashes: 1: QELCSQ19r-wzIDFu1ap04L7Kqak.crl (hash: fZbSJJ4GHe9P3lrwiQsWkSwwEsSGyZyY0RTZoSw3eKY=) 2: 3D937A30EBB211EEA93D9B14C4F9AE02.roa (hash: EoV7X+CPLPt1PwJmt/C6xwl6Rd3EK1Ujxhgn/dIQJh4=) 3: FCF99042301011EFBC350682C4F9AE02.roa (hash: eSUAI4AAApfP7epJ5sEwL+VCggzqIoTDDfYr32F9B9I=) 4: 3C0376CC6FD511F0BF33C829C4F9AE02.roa (hash: tkIQFKk/Mo9h+Y6zoIuiaKelqp3EP1aM68bZaSbBy0M=) 5: 3E0BA21CEBB211EEA93D9B14C4F9AE02.roa (hash: yxilBFlE1MgXEF3lGJREKxdKcg1wggFTb7Z4QOAKfZc=) 6: 3B8DEBA06FD511F0BF33C829C4F9AE02.roa (hash: Et35taMHrzzZx//1uz1X2k2usz0PCpjA6ZgM0w/qGlc=) 7: 72E97B3A1BDB11F0B77B1344C4F9AE02.roa (hash: DlhDgTG7w84Ovj2w/3S1GtqzEGfOWk6+fiHNLhzsPdE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.crl rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 14:31:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 611 (0x263) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7169, serialNumber=4042C2490D7DAFEC3320316ED5AA74E0BECAA9A9 Validity Not Before: Sep 23 14:31:31 2026 GMT Not After : Sep 30 14:31:31 2026 GMT Subject: CN=6ab3e2c3-f874 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0c:de:e9:2b:49:22:5e:a6:a9:b7:6a:4a:a1: e0:2d:2c:6a:e7:17:a2:2d:50:8e:5c:88:14:f4:2f: 4d:84:df:1c:11:de:c0:37:66:42:41:ad:34:2a:7d: 9c:b3:b4:8c:c4:f3:33:46:f8:c8:17:a4:94:5c:8e: 6f:59:30:43:71:7e:f5:4e:af:e5:0a:89:45:d6:d2: 08:9d:04:7a:5e:15:4d:a8:20:88:30:78:25:da:98: e4:00:1b:44:11:a5:2e:10:cf:8a:50:e7:8b:c4:50: 5f:0c:d1:0c:27:36:4c:f6:c6:f5:bd:4c:a2:98:e2: a2:0e:2f:84:ff:16:4b:a7:34:3d:d5:5a:d7:0d:98: eb:b2:c1:fe:55:53:0e:39:cd:05:c0:0d:f1:e1:03: bb:89:a9:b6:9e:a6:dd:87:ff:57:6e:de:d3:76:e6: ce:3b:73:00:0d:d3:1f:52:64:a2:12:a3:a8:06:df: 7e:9e:d3:4a:7e:ca:d2:aa:7e:16:d6:e2:4b:07:13: 6c:55:1a:57:2f:c0:e3:ad:96:d0:6a:f4:ff:64:a4: 86:fd:db:35:4c:bd:42:34:20:94:4e:62:02:f8:1b: 62:0a:3d:f2:96:c4:3a:c2:f4:14:79:7e:8f:51:e5: 1f:95:be:10:24:6b:d5:24:07:ff:95:46:27:9e:68: ff:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:ED:09:84:F8:9C:E0:45:09:24:83:B3:8B:26:DB:EC:04:74:13:62 X509v3 Authority Key Identifier: keyid:40:42:C2:49:0D:7D:AF:EC:33:20:31:6E:D5:AA:74:E0:BE:CA:A9:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:c1:3b:14:6b:e1:6f:e1:1b:99:d7:5d:0b:4e:ee:4b:c9:ea: ac:ab:39:74:ea:1b:14:e4:d2:00:90:3a:26:d5:7e:41:13:aa: 4a:dc:15:fb:39:bf:bf:42:fa:8b:9d:85:8f:b1:c3:76:6d:7e: 36:cd:2e:c8:5f:5b:3c:82:17:cd:9e:72:f5:4a:49:be:c0:8e: 18:d7:e6:d6:f3:3c:73:e8:16:ac:8d:76:f8:d0:c5:40:2c:05: f4:8b:92:42:5d:9a:6e:88:f7:50:be:d9:59:f3:8a:b6:03:4f: c3:f6:90:ca:1c:20:49:f9:6f:74:fb:cc:22:9b:b3:d8:0c:b3: 0b:db:c1:48:00:af:d6:84:c1:f0:4e:28:b1:a1:c2:6b:7f:95: ff:c4:01:e9:cc:7a:ad:9f:60:b1:36:95:80:f8:c1:a3:63:d2: ea:18:c8:9e:03:86:66:0e:ff:f7:51:30:82:2d:48:59:01:ec: d5:69:99:eb:1f:aa:dd:b7:63:12:7c:a1:e1:8b:84:8a:68:0d: b3:8f:66:d7:30:22:ae:e7:11:0d:15:9a:3d:12:83:5d:6e:2d: 82:e3:35:14:6c:bd:c4:50:e6:d6:72:50:b6:24:68:b5:db:b3: 08:08:e9:a3:a1:1e:3c:a3:88:37:d1:7c:1e:37:2a:3f:94:50: 91:e6:8b:1c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAmMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTcxNjkxMTAvBgNVBAUTKDQwNDJDMjQ5MEQ3REFGRUMzMzIwMzE2RUQ1QUE3NEUw QkVDQUE5QTkwHhcNMjYwOTIzMTQzMTMxWhcNMjYwOTMwMTQzMTMxWjAYMRYwFAYD VQQDEw02YWIzZTJjMy1mODc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAugze6StJIl6mqbdqSqHgLSxq5xeiLVCOXIgU9C9NhN8cEd7AN2ZCQa00Kn2c s7SMxPMzRvjIF6SUXI5vWTBDcX71Tq/lColF1tIInQR6XhVNqCCIMHgl2pjkABtE EaUuEM+KUOeLxFBfDNEMJzZM9sb1vUyimOKiDi+E/xZLpzQ91VrXDZjrssH+VVMO Oc0FwA3x4QO7iam2nqbdh/9Xbt7TdubOO3MADdMfUmSiEqOoBt9+ntNKfsrSqn4W 1uJLBxNsVRpXL8DjrZbQavT/ZKSG/ds1TL1CNCCUTmIC+BtiCj3ylsQ6wvQUeX6P UeUflb4QJGvVJAf/lUYnnmj/FQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFILtCYT4 nOBFCSSDs4sm2+wEdBNiMB8GA1UdIwQYMBaAFEBCwkkNfa/sMyAxbtWqdOC+yqmp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzE2OS82MjMzREQzRUVC QUUxMUVFOEEwRUQ5NjRDNEY5QUUwMi9RRUxDU1ExOXItd3pJREZ1MWFwMDRMN0tx YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FFTENTUTE5ci13eklERnUxYXAwNEw3S3Fhay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzE2OS82MjMzREQzRUVCQUUxMUVFOEEwRUQ5NjRDNEY5QUUwMi9RRUxDU1ExOXIt d3pJREZ1MWFwMDRMN0txYWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZsE7FGvhb+EbmdddC07uS8nqrKs5dOobFOTSAJA6JtV+QROqStwV+zm/v0L6 i52Fj7HDdm1+Ns0uyF9bPIIXzZ5y9UpJvsCOGNfm1vM8c+gWrI12+NDFQCwF9IuS Ql2aboj3UL7ZWfOKtgNPw/aQyhwgSflvdPvMIpuz2AyzC9vBSACv1oTB8E4osaHC a3+V/8QB6cx6rZ9gsTaVgPjBo2PS6hjIngOGZg7/91Ewgi1IWQHs1WmZ6x+q3bdj Enyh4YuEimgNs49m1zAirucRDRWaPRKDXW4tguM1FGy9xFDm1nJQtiRotduzCAjp o6EePKOIN9F8HjcqP5RQkeaLHA== -----END CERTIFICATE-----Generated at Thu Sep 24 00:53:25 2026 by rpki-client