$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BB1F3/4297D05245AE11EFB6237870C4F9AE02/dQ-le1kVZTnLFuVKYKbO21sQ654.mft File: dQ-le1kVZTnLFuVKYKbO21sQ654.mft (raw, json) Hash identifier: IPAiTUCzdUMnnCleOPBrYUBl4rHp7yT/OlWULvuMVeU= Subject key identifier: 63:A0:19:E6:92:2F:D9:28:3A:F9:E3:2C:60:A5:0E:72:68:DB:95:BD Authority key identifier: 75:0F:A5:7B:59:15:65:39:CB:16:E5:4A:60:A6:CE:DB:5B:10:EB:9E Certificate issuer: /CN=A91BB1F3/serialNumber=750FA57B59156539CB16E54A60A6CEDB5B10EB9E Certificate serial: 01A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQ-le1kVZTnLFuVKYKbO21sQ654.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB1F3/4297D05245AE11EFB6237870C4F9AE02/dQ-le1kVZTnLFuVKYKbO21sQ654.mft Manifest number: 019C Signing time: Fri 25 Sep 2026 04:20:52 +0000 Manifest this update: Fri 25 Sep 2026 04:20:51 +0000 Manifest next update: Fri 02 Oct 2026 04:20:51 +0000 Files and hashes: 1: dQ-le1kVZTnLFuVKYKbO21sQ654.crl (hash: 3+z4918hW6z5j3WX5RUQPUlD15BO7tDrYXjV9W9wTiw=) 2: F9E4E14645AE11EF8870C771C4F9AE02.roa (hash: 92+MCvev4Dufdf+wuDOQcin6Fkp7+RWjlESgBq/RGGs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB1F3/4297D05245AE11EFB6237870C4F9AE02/dQ-le1kVZTnLFuVKYKbO21sQ654.crl rsync://rpki.apnic.net/member_repository/A91BB1F3/4297D05245AE11EFB6237870C4F9AE02/dQ-le1kVZTnLFuVKYKbO21sQ654.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQ-le1kVZTnLFuVKYKbO21sQ654.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 04:20:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 417 (0x1a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB1F3, serialNumber=750FA57B59156539CB16E54A60A6CEDB5B10EB9E Validity Not Before: Sep 25 04:20:51 2026 GMT Not After : Oct 2 04:20:51 2026 GMT Subject: CN=6ab5f6a4-a1d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:27:b6:ed:46:c4:f2:bc:75:8b:c7:51:29:89: af:d7:5b:de:39:63:de:b6:48:58:fe:19:4a:ed:e3: 64:0c:c4:17:aa:26:9f:2b:92:51:43:c4:69:b4:16: 77:43:e9:2d:f8:8f:6b:62:05:d7:f2:57:54:03:84: 7a:96:18:32:1c:11:78:83:3a:0d:b5:84:54:9d:68: c6:d6:a0:bb:df:88:91:b6:37:e2:43:4b:96:4f:e4: ea:47:3f:4a:48:67:83:72:30:30:ca:41:c6:ed:79: 55:56:87:95:82:02:15:76:cf:a5:a6:42:10:4b:f3: 65:29:14:03:4d:7c:db:e9:1e:03:ba:7c:62:b2:bb: af:95:0e:85:7e:26:00:a9:de:22:36:ef:23:91:e5: 85:3f:09:d3:98:b0:e3:01:16:16:6d:d0:de:6e:74: dd:93:8c:2c:96:77:17:0d:25:b9:66:3c:26:5b:39: 4d:b8:13:5f:d3:ad:32:c5:e8:8b:59:f9:88:09:75: 25:27:cb:95:bb:8b:8e:f5:fa:ae:00:cd:9f:80:01: a8:56:7b:31:f4:8d:6f:a4:8c:14:99:0d:1b:a4:56: 35:97:2c:78:99:93:19:3a:e7:4a:19:da:59:a6:9b: db:12:25:5d:90:aa:20:a1:c1:9e:d9:8d:20:39:0a: 07:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:A0:19:E6:92:2F:D9:28:3A:F9:E3:2C:60:A5:0E:72:68:DB:95:BD X509v3 Authority Key Identifier: keyid:75:0F:A5:7B:59:15:65:39:CB:16:E5:4A:60:A6:CE:DB:5B:10:EB:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB1F3/4297D05245AE11EFB6237870C4F9AE02/dQ-le1kVZTnLFuVKYKbO21sQ654.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQ-le1kVZTnLFuVKYKbO21sQ654.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB1F3/4297D05245AE11EFB6237870C4F9AE02/dQ-le1kVZTnLFuVKYKbO21sQ654.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:e7:8f:e2:bb:a0:16:bb:c4:d9:b2:aa:12:f3:1e:e8:84:96: 2e:75:5b:d7:60:1d:a1:f6:14:b9:3f:fc:3a:04:3c:ac:88:ad: 2a:13:15:eb:86:0c:89:1a:9b:ae:01:e9:29:f8:dd:0f:53:fc: 3f:b4:be:3b:c4:5e:34:dd:fa:16:0c:90:d0:bf:4e:a3:43:7c: ce:5b:2b:ce:a3:65:21:7b:17:5d:ef:f3:8e:dd:77:4b:57:6f: f8:22:06:3b:44:4e:12:36:6b:db:72:e6:9b:0e:25:42:50:72: e8:42:9c:21:30:27:9d:77:63:62:ad:a9:c9:f6:6f:45:3b:74: 52:20:f0:26:7f:1c:77:0d:c1:77:14:2d:cf:62:b8:b7:68:42: 31:d6:f8:c0:87:87:57:f8:bd:ce:26:c4:99:42:56:0e:63:75: 1d:3e:95:45:1b:29:14:3d:7d:5c:c3:f1:e2:41:26:5d:f9:34: 79:00:fe:fd:95:a1:c2:10:af:f3:0a:87:08:58:42:1d:b9:44: 3d:aa:ca:50:75:d0:1f:9c:ec:7f:87:02:a5:57:4c:45:e1:f7: 71:f2:2d:d5:8e:f9:54:c3:77:73:62:42:2a:33:29:3d:d1:f3: d6:50:69:dc:7d:fc:11:80:65:a9:06:02:bf:5d:af:e6:83:67: 29:d6:fa:8f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkIxRjMxMTAvBgNVBAUTKDc1MEZBNTdCNTkxNTY1MzlDQjE2RTU0QTYwQTZDRURC NUIxMEVCOUUwHhcNMjYwOTI1MDQyMDUxWhcNMjYxMDAyMDQyMDUxWjAYMRYwFAYD VQQDEw02YWI1ZjZhNC1hMWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ie27UbE8rx1i8dRKYmv11veOWPetkhY/hlK7eNkDMQXqiafK5JRQ8RptBZ3 Q+kt+I9rYgXX8ldUA4R6lhgyHBF4gzoNtYRUnWjG1qC734iRtjfiQ0uWT+TqRz9K SGeDcjAwykHG7XlVVoeVggIVds+lpkIQS/NlKRQDTXzb6R4DunxisruvlQ6FfiYA qd4iNu8jkeWFPwnTmLDjARYWbdDebnTdk4wslncXDSW5ZjwmWzlNuBNf060yxeiL WfmICXUlJ8uVu4uO9fquAM2fgAGoVnsx9I1vpIwUmQ0bpFY1lyx4mZMZOudKGdpZ ppvbEiVdkKogocGe2Y0gOQoH4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGOgGeaS L9koOvnjLGClDnJo25W9MB8GA1UdIwQYMBaAFHUPpXtZFWU5yxblSmCmzttbEOue MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjFGMy80Mjk3RDA1MjQ1 QUUxMUVGQjYyMzc4NzBDNEY5QUUwMi9kUS1sZTFrVlpUbkxGdVZLWUtiTzIxc1E2 NTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RRLWxlMWtWWlRuTEZ1VktZS2JPMjFzUTY1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjFGMy80Mjk3RDA1MjQ1QUUxMUVGQjYyMzc4NzBDNEY5QUUwMi9kUS1sZTFrVlpU bkxGdVZLWUtiTzIxc1E2NTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABeeP4rugFrvE2bKqEvMe6ISWLnVb12AdofYUuT/8OgQ8rIitKhMV64YMiRqb rgHpKfjdD1P8P7S+O8ReNN36FgyQ0L9Oo0N8zlsrzqNlIXsXXe/zjt13S1dv+CIG O0ROEjZr23Lmmw4lQlBy6EKcITAnnXdjYq2pyfZvRTt0UiDwJn8cdw3BdxQtz2K4 t2hCMdb4wIeHV/i9zibEmUJWDmN1HT6VRRspFD19XMPx4kEmXfk0eQD+/ZWhwhCv 8wqHCFhCHblEParKUHXQH5zsf4cCpVdMReH3cfIt1Y75VMN3c2JCKjMpPdHz1lBp 3H38EYBlqQYCv12v5oNnKdb6jw== -----END CERTIFICATE-----Generated at Fri Sep 25 09:34:45 2026 by rpki-client