$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B0E2D/DE08E61899F611F18466B77C4911F970/Q7RjBm9boWa-Ajr3-li0ISpCcwQ.mft File: Q7RjBm9boWa-Ajr3-li0ISpCcwQ.mft (raw, json) Hash identifier: KZj5sgkXHMCOFdimJSakRBA8XbhVnO2kRUFPuEZdfKs= Subject key identifier: 78:D3:8F:22:87:61:D7:1D:86:6C:78:B7:F8:3C:36:7F:12:39:6A:54 Authority key identifier: 43:B4:63:06:6F:5B:A1:66:BE:02:3A:F7:FA:58:B4:21:2A:42:73:04 Certificate issuer: /CN=A91B0E2D/serialNumber=43B463066F5BA166BE023AF7FA58B4212A427304 Certificate serial: 18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7RjBm9boWa-Ajr3-li0ISpCcwQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0E2D/DE08E61899F611F18466B77C4911F970/Q7RjBm9boWa-Ajr3-li0ISpCcwQ.mft Manifest number: 17 Signing time: Sun 27 Sep 2026 09:36:07 +0000 Manifest this update: Sun 27 Sep 2026 09:36:07 +0000 Manifest next update: Sun 04 Oct 2026 09:36:07 +0000 Files and hashes: 1: Q7RjBm9boWa-Ajr3-li0ISpCcwQ.crl (hash: u9fFevB9RjuQyjyF9JYIGxFfjK2zG6rnkzB0OTGdUc0=) 2: 831A285A99F811F1BFBF2EA14911F970.roa (hash: rZLgkUIG2I9KynMnivKmBbNyGpXP6BLLyC4/f2vDTdU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0E2D/DE08E61899F611F18466B77C4911F970/Q7RjBm9boWa-Ajr3-li0ISpCcwQ.crl rsync://rpki.apnic.net/member_repository/A91B0E2D/DE08E61899F611F18466B77C4911F970/Q7RjBm9boWa-Ajr3-li0ISpCcwQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7RjBm9boWa-Ajr3-li0ISpCcwQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 09:36:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0E2D, serialNumber=43B463066F5BA166BE023AF7FA58B4212A427304 Validity Not Before: Sep 27 09:36:07 2026 GMT Not After : Oct 4 09:36:07 2026 GMT Subject: CN=6ab8e387-d976 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:64:ff:b0:32:23:4a:ab:56:28:eb:d0:6e:8f: 8a:a9:de:18:cf:5b:46:5a:ed:77:9d:39:4d:4e:e9: ec:67:1a:fb:54:ba:84:e2:9e:5a:ba:3c:69:dc:7e: 82:bb:11:72:76:97:65:86:b8:1a:c3:29:58:45:9a: d2:1f:4e:3b:af:f2:8f:45:90:da:41:e0:49:79:f7: 08:bc:8c:e2:e0:aa:21:0c:84:32:50:dc:b5:5e:2d: 08:3e:dc:21:98:0e:7a:c9:8c:e1:7a:87:60:01:8e: 82:f9:5a:b6:76:9d:4c:e6:33:74:f2:ba:a0:f8:8e: 2a:c6:eb:79:db:4e:9d:a4:ba:7d:49:50:98:1a:2b: ad:dd:16:5d:c2:b2:7b:50:69:40:7d:79:d7:cc:fe: 03:86:60:2e:57:fb:59:95:6e:06:68:c7:d7:66:f9: 56:37:15:b3:06:6b:88:20:80:06:05:3a:f8:93:0b: 68:eb:c3:35:90:4f:54:20:a1:75:1b:49:16:50:e8: f1:d5:22:c0:85:93:e9:81:f2:87:dc:67:d2:de:b9: 55:9c:b0:65:f4:a0:02:f2:ed:c9:cd:a4:5a:90:5c: 3c:6b:a4:7c:67:d8:4f:53:af:f3:54:6c:09:db:eb: 46:90:89:56:48:ff:4b:26:37:07:80:92:c6:68:85: c0:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:D3:8F:22:87:61:D7:1D:86:6C:78:B7:F8:3C:36:7F:12:39:6A:54 X509v3 Authority Key Identifier: keyid:43:B4:63:06:6F:5B:A1:66:BE:02:3A:F7:FA:58:B4:21:2A:42:73:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0E2D/DE08E61899F611F18466B77C4911F970/Q7RjBm9boWa-Ajr3-li0ISpCcwQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7RjBm9boWa-Ajr3-li0ISpCcwQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0E2D/DE08E61899F611F18466B77C4911F970/Q7RjBm9boWa-Ajr3-li0ISpCcwQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:70:44:92:5b:92:6a:b0:ba:5b:a2:f8:ef:04:0d:11:d5:85: ab:dd:2b:ff:ce:98:9b:7c:8c:cd:73:d0:25:f1:4d:b5:8f:3a: 2d:80:00:6e:1b:74:c8:f6:ed:34:3d:7a:03:0a:e3:1b:b3:5f: 79:44:c4:95:ce:b5:33:22:73:ed:cb:2f:f6:63:44:86:d7:88: 01:8d:2a:99:67:d1:42:5e:97:34:61:27:40:5d:78:5b:29:e4: 13:cf:3f:f1:a3:ac:92:6e:fe:2e:36:5a:e1:4f:41:d3:2c:4e: 9f:8e:98:df:c3:f5:6e:43:32:5a:d6:7b:eb:12:b8:c0:9c:79: 3a:93:7b:5f:1b:35:da:30:52:08:a2:ec:c2:70:2d:c6:c5:c7: e5:be:58:13:8a:0d:c1:29:cf:46:f0:5a:ae:8b:39:fa:45:23: e9:7c:f5:a4:6a:70:10:22:b7:69:9c:e4:10:4e:6e:a2:7e:52: f9:1d:07:98:ec:ba:84:b6:0d:c7:95:ad:6a:2b:11:65:d3:d0: c1:f3:c1:c8:1d:38:55:57:91:c4:f4:4f:7f:18:8d:17:02:10: 9e:e0:dd:06:ea:3b:af:65:10:dd:86:5c:1b:d1:d8:be:45:bd: cd:6e:ac:3f:af:c0:53:ba:13:6b:d3:11:dd:47:42:30:f6:a2: bb:66:b7:29 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MEUyRDExMC8GA1UEBRMoNDNCNDYzMDY2RjVCQTE2NkJFMDIzQUY3RkE1OEI0MjEy QTQyNzMwNDAeFw0yNjA5MjcwOTM2MDdaFw0yNjEwMDQwOTM2MDdaMBgxFjAUBgNV BAMTDTZhYjhlMzg3LWQ5NzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvZP+wMiNKq1Yo69Buj4qp3hjPW0Za7XedOU1O6exnGvtUuoTinlq6PGncfoK7 EXJ2l2WGuBrDKVhFmtIfTjuv8o9FkNpB4El59wi8jOLgqiEMhDJQ3LVeLQg+3CGY DnrJjOF6h2ABjoL5WrZ2nUzmM3TyuqD4jirG63nbTp2kun1JUJgaK63dFl3CsntQ aUB9edfM/gOGYC5X+1mVbgZox9dm+VY3FbMGa4gggAYFOviTC2jrwzWQT1QgoXUb SRZQ6PHVIsCFk+mB8ofcZ9LeuVWcsGX0oALy7cnNpFqQXDxrpHxn2E9Tr/NUbAnb 60aQiVZI/0smNweAksZohcC3AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUeNOPIodh 1x2GbHi3+Dw2fxI5alQwHwYDVR0jBBgwFoAUQ7RjBm9boWa+Ajr3+li0ISpCcwQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIwRTJEL0RFMDhFNjE4OTlG NjExRjE4NDY2Qjc3QzQ5MTFGOTcwL1E3UmpCbTlib1dhLUFqcjMtbGkwSVNwQ2N3 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUTdSakJtOWJvV2EtQWpyMy1saTBJU3BDY3dRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIw RTJEL0RFMDhFNjE4OTlGNjExRjE4NDY2Qjc3QzQ5MTFGOTcwL1E3UmpCbTlib1dh LUFqcjMtbGkwSVNwQ2N3US5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB3cESSW5JqsLpbovjvBA0R1YWr3Sv/zpibfIzNc9Al8U21jzotgABuG3TI9u00 PXoDCuMbs195RMSVzrUzInPtyy/2Y0SG14gBjSqZZ9FCXpc0YSdAXXhbKeQTzz/x o6ySbv4uNlrhT0HTLE6fjpjfw/VuQzJa1nvrErjAnHk6k3tfGzXaMFIIouzCcC3G xcflvlgTig3BKc9G8Fquizn6RSPpfPWkanAQIrdpnOQQTm6iflL5HQeY7LqEtg3H la1qKxFl09DB88HIHThVV5HE9E9/GI0XAhCe4N0G6juvZRDdhlwb0di+Rb3Nbqw/ r8BTuhNr0xHdR0Iw9qK7Zrcp -----END CERTIFICATE-----Generated at Mon Sep 28 10:56:34 2026 by rpki-client