$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AF0E8/45796AD21DA311E29FFB8C9808B02CD2/-qIKGvsgkct_URR4g_NkpFMJQTE.mft File: -qIKGvsgkct_URR4g_NkpFMJQTE.mft (raw, json) Hash identifier: so1SCttEBHlY0smkTr97Km/WT5xOS2vTfAkYmQrgatk= Subject key identifier: A3:7A:47:BE:CC:CA:15:61:8D:88:12:90:23:8E:EA:4A:6E:D3:2D:D5 Authority key identifier: FA:A2:0A:1A:FB:20:91:CB:7F:51:14:78:83:F3:64:A4:53:09:41:31 Certificate issuer: /CN=A91AF0E8/serialNumber=FAA20A1AFB2091CB7F51147883F364A453094131 Certificate serial: 3598 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-qIKGvsgkct_URR4g_NkpFMJQTE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF0E8/45796AD21DA311E29FFB8C9808B02CD2/-qIKGvsgkct_URR4g_NkpFMJQTE.mft Manifest number: 358A Signing time: Thu 24 Sep 2026 15:05:10 +0000 Manifest this update: Thu 24 Sep 2026 15:05:09 +0000 Manifest next update: Thu 01 Oct 2026 15:05:09 +0000 Files and hashes: 1: -qIKGvsgkct_URR4g_NkpFMJQTE.crl (hash: Sn87kxZtkgwuSl5LWNVsBOZQFZukkTJbVk6CpWfzhY4=) 2: RrKb9OA4qZhDi45FR8cCEU4H8YI.asa (hash: Qgr7dmGPHjgJ8QOrzeOvLzb+XS21ZRwZ3oyYq/vSi8I=) 3: 0A956A80B48711EC83327546C4F9AE02.roa (hash: DWDLfS9VFoRUspo4gPt0SLH/400cssY5io0TF9oRBK0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF0E8/45796AD21DA311E29FFB8C9808B02CD2/-qIKGvsgkct_URR4g_NkpFMJQTE.crl rsync://rpki.apnic.net/member_repository/A91AF0E8/45796AD21DA311E29FFB8C9808B02CD2/-qIKGvsgkct_URR4g_NkpFMJQTE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-qIKGvsgkct_URR4g_NkpFMJQTE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 15:05:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13720 (0x3598) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF0E8, serialNumber=FAA20A1AFB2091CB7F51147883F364A453094131 Validity Not Before: Sep 24 15:05:09 2026 GMT Not After : Oct 1 15:05:09 2026 GMT Subject: CN=6ab53c26-04f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ea:61:41:8b:96:6a:a0:9c:ba:14:ae:ec:e8: 24:c1:3b:42:8f:cc:ea:da:48:3e:56:e8:aa:15:e0: 13:40:c8:aa:bd:e4:8b:f5:0a:cf:e7:9a:39:84:a5: d3:52:24:97:a9:a2:a3:92:7b:98:52:8d:c2:75:82: 09:ca:0e:c4:23:c0:bf:3b:d7:cd:45:c0:54:ac:51: a3:1d:81:42:0c:5c:94:d5:7d:08:86:22:d4:76:03: 15:a2:f6:98:23:1a:c0:c7:76:c2:55:0e:1e:a2:7f: fd:18:62:f2:e6:74:42:aa:cd:e9:7d:d4:a4:f3:bf: 31:b8:4b:9c:67:97:35:49:cd:d4:0e:cd:f5:02:62: 09:83:84:b6:31:c4:38:9d:87:a7:9b:39:cc:f3:d0: 06:b5:1a:5f:08:0d:55:96:6e:9a:6c:17:64:44:fd: 9f:e6:f1:3a:34:e9:76:35:4a:ff:ec:91:a1:6d:74: 62:c3:ee:9a:85:cd:ed:7a:79:c2:4c:3a:1d:7a:a8: 46:4e:53:9d:8a:4d:b0:73:9d:8b:0b:88:9e:74:ff: 44:bf:5b:7b:34:53:5a:e8:55:ca:69:1a:d3:d8:a4: f2:3f:27:18:f7:0a:74:68:9c:3f:06:a2:5d:76:40: 0e:cb:d2:8a:56:65:7f:77:dc:c9:a0:50:56:c9:d2: 5a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:7A:47:BE:CC:CA:15:61:8D:88:12:90:23:8E:EA:4A:6E:D3:2D:D5 X509v3 Authority Key Identifier: keyid:FA:A2:0A:1A:FB:20:91:CB:7F:51:14:78:83:F3:64:A4:53:09:41:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF0E8/45796AD21DA311E29FFB8C9808B02CD2/-qIKGvsgkct_URR4g_NkpFMJQTE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-qIKGvsgkct_URR4g_NkpFMJQTE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF0E8/45796AD21DA311E29FFB8C9808B02CD2/-qIKGvsgkct_URR4g_NkpFMJQTE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:51:4f:cf:5f:07:9e:41:02:a1:67:fb:70:60:a9:ff:96:75: ae:1d:f1:94:38:ec:e0:6e:83:d9:f4:35:3c:02:59:2e:06:4c: dd:12:84:c7:7b:9b:24:10:12:bf:f4:f9:b0:ee:35:99:ea:3a: f6:89:72:88:96:ca:7e:d5:67:bd:a5:c3:dd:6d:15:19:4c:b0: b9:99:d6:14:b0:ee:34:c3:73:67:0b:60:ef:21:15:4c:fb:9b: 51:e8:d2:f6:80:44:99:5e:af:d4:08:89:1d:98:d3:aa:62:fb: d9:f7:52:72:b6:79:18:0a:8c:58:5b:6d:ca:7e:54:bb:ef:9e: 7c:2b:71:0a:bc:3c:2d:1a:25:76:2a:3d:d7:94:23:34:c6:0f: d5:6c:94:df:23:e0:88:c7:b4:a2:9a:d8:d3:2e:7c:23:fa:8a: e2:75:33:90:04:0e:31:1e:91:40:fa:ee:18:d1:cd:70:50:bc: d4:ac:ca:0c:9e:08:b1:34:3b:c3:fe:ca:6e:34:5d:0b:7f:8e: 87:82:ca:bc:1c:2a:f3:9b:93:38:64:2e:2b:76:68:f6:da:2e: 3f:f3:9d:27:f8:90:13:8b:10:48:e1:be:86:54:31:55:04:ad: f3:cf:17:97:97:23:65:23:73:0e:b8:f5:bf:03:3a:43:a6:04: 34:e7:ce:0b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYwRTgxMTAvBgNVBAUTKEZBQTIwQTFBRkIyMDkxQ0I3RjUxMTQ3ODgzRjM2NEE0 NTMwOTQxMzEwHhcNMjYwOTI0MTUwNTA5WhcNMjYxMDAxMTUwNTA5WjAYMRYwFAYD VQQDEw02YWI1M2MyNi0wNGY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwOphQYuWaqCcuhSu7OgkwTtCj8zq2kg+VuiqFeATQMiqveSL9QrP55o5hKXT UiSXqaKjknuYUo3CdYIJyg7EI8C/O9fNRcBUrFGjHYFCDFyU1X0IhiLUdgMVovaY IxrAx3bCVQ4eon/9GGLy5nRCqs3pfdSk878xuEucZ5c1Sc3UDs31AmIJg4S2McQ4 nYenmznM89AGtRpfCA1Vlm6abBdkRP2f5vE6NOl2NUr/7JGhbXRiw+6ahc3tennC TDodeqhGTlOdik2wc52LC4iedP9Ev1t7NFNa6FXKaRrT2KTyPycY9wp0aJw/BqJd dkAOy9KKVmV/d9zJoFBWydJa+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKN6R77M yhVhjYgSkCOO6kpu0y3VMB8GA1UdIwQYMBaAFPqiChr7IJHLf1EUeIPzZKRTCUEx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjBFOC80NTc5NkFEMjFE QTMxMUUyOUZGQjhDOTgwOEIwMkNEMi8tcUlLR3ZzZ2tjdF9VUlI0Z19Oa3BGTUpR VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1xSUtHdnNna2N0X1VSUjRnX05rcEZNSlFURS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjBFOC80NTc5NkFEMjFEQTMxMUUyOUZGQjhDOTgwOEIwMkNEMi8tcUlLR3ZzZ2tj dF9VUlI0Z19Oa3BGTUpRVEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApFFPz18HnkECoWf7cGCp/5Z1rh3xlDjs4G6D2fQ1PAJZLgZM3RKEx3ubJBAS v/T5sO41meo69olyiJbKftVnvaXD3W0VGUywuZnWFLDuNMNzZwtg7yEVTPubUejS 9oBEmV6v1AiJHZjTqmL72fdScrZ5GAqMWFttyn5Uu++efCtxCrw8LRoldio915Qj NMYP1WyU3yPgiMe0oprY0y58I/qK4nUzkAQOMR6RQPruGNHNcFC81KzKDJ4IsTQ7 w/7KbjRdC3+Oh4LKvBwq85uTOGQuK3Zo9touP/OdJ/iQE4sQSOG+hlQxVQSt888X l5cjZSNzDrj1vwM6Q6YENOfOCw== -----END CERTIFICATE-----Generated at Fri Sep 25 00:53:58 2026 by rpki-client