$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.mft File: QcdXFCmaV43RkP0fcwlVsf2awfQ.mft (raw, json) Hash identifier: eUmOymeVrFzXnFB7Blqm1MhEow+7QCvcKhyOamey0O8= Subject key identifier: F2:72:91:67:9C:BF:90:DE:7D:5B:23:52:C5:CE:AD:8B:C3:2B:B1:C0 Authority key identifier: 41:C7:57:14:29:9A:57:8D:D1:90:FD:1F:73:09:55:B1:FD:9A:C1:F4 Certificate issuer: /CN=A91BEA8B/serialNumber=41C75714299A578DD190FD1F730955B1FD9AC1F4 Certificate serial: 0127 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QcdXFCmaV43RkP0fcwlVsf2awfQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.mft Manifest number: 0119 Signing time: Sun 15 Nov 2026 06:17:52 +0000 Manifest this update: Sun 15 Nov 2026 06:17:51 +0000 Manifest next update: Sun 22 Nov 2026 06:17:51 +0000 Files and hashes: 1: QcdXFCmaV43RkP0fcwlVsf2awfQ.crl (hash: ylCa7nDzH/a0hyvCiP3n+byNZ3M2Ziw+THxV7LwgT+o=) 2: B87594FC08B311F1954B37591C3D8C67.roa (hash: H6vYE+gxhuAKlVgXnsRMmqmTt0CZdQJgg6x87GzOftE=) 3: D999F880AF4411F0A866CC48C4F9AE02.roa (hash: 2rQsXi5kIwQ2IE+rYx9M2psZsNK3ECigUyxfaVNd7kI=) 4: C425CEE64B8211F0A94CFD82C4F9AE02.roa (hash: XTg2evwkR4VvSVQWu251hii2ssGz9ZlroApKBF0azrE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.crl rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QcdXFCmaV43RkP0fcwlVsf2awfQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 06:17:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 295 (0x127) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEA8B, serialNumber=41C75714299A578DD190FD1F730955B1FD9AC1F4 Validity Not Before: Nov 15 06:17:51 2026 GMT Not After : Nov 22 06:17:51 2026 GMT Subject: CN=6af94e90-26f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:3f:ec:b0:fe:00:9a:d8:38:11:5d:b3:63:9b: 1d:0b:26:d0:07:f0:1c:ff:45:0d:99:2c:cc:77:11: b4:89:df:75:9a:c0:03:3d:bd:30:1e:49:fe:4f:cc: 2f:67:e6:41:5a:bd:de:12:de:da:06:ce:17:ab:40: 48:b6:ff:d8:91:6b:c2:d4:9a:75:98:12:7c:22:8f: 0a:b6:2e:39:a9:ee:a3:38:70:8a:0b:6d:d5:81:24: 38:b4:12:06:03:60:16:7b:b2:a1:56:28:ba:67:72: 4e:93:da:d9:4c:e9:4b:d3:b6:c5:ac:96:32:f1:c7: 07:20:5d:09:ad:14:84:f8:ca:8f:79:4f:09:7d:cd: 51:fd:7e:c1:fa:b5:16:6e:4b:3f:f6:15:2f:40:01: 29:74:9a:ea:01:c6:bd:d8:c9:95:af:e1:58:92:9b: fd:85:97:3b:3e:e0:78:68:27:29:b3:bd:e1:3f:60: a4:b7:42:a9:62:e6:2d:6f:47:fc:c9:ce:63:fc:68: 18:97:da:23:9d:5c:a6:cc:48:bb:43:bd:66:c3:1d: de:07:48:4c:31:aa:9f:01:2e:8f:c2:63:a4:9b:48: 55:10:a2:e9:62:53:41:b5:24:82:1c:db:71:14:de: ab:10:57:d9:26:10:3e:a0:7b:ff:ab:18:c3:06:fc: a5:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:72:91:67:9C:BF:90:DE:7D:5B:23:52:C5:CE:AD:8B:C3:2B:B1:C0 X509v3 Authority Key Identifier: keyid:41:C7:57:14:29:9A:57:8D:D1:90:FD:1F:73:09:55:B1:FD:9A:C1:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QcdXFCmaV43RkP0fcwlVsf2awfQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:e3:6d:43:fa:87:65:b7:b9:53:9e:3f:d0:b5:1d:45:e5:09: 2d:46:f3:77:1a:7e:5a:90:7c:a8:b1:9a:1d:44:d3:9b:d3:29: 3a:c2:83:13:8a:e8:21:f3:2f:3f:70:99:71:ca:50:ae:c1:38: 9d:d6:17:15:04:0c:69:00:02:87:b2:c8:d2:01:18:6b:ba:ca: c7:6a:d2:a8:69:f1:80:36:9b:6b:d9:0b:a7:85:41:29:84:b1: 2e:98:8c:d9:0d:eb:61:36:84:1e:a5:72:d7:cc:46:13:36:ce: 1d:a4:55:d4:d3:4f:2d:11:c1:56:bd:ed:aa:8b:b8:9e:4b:f5: d9:28:97:73:4e:10:97:d2:34:83:9d:ac:1d:8d:89:46:0e:18: d3:72:d9:d5:ca:0a:65:d3:dc:2e:74:e8:14:66:e8:e5:63:cf: 61:91:54:8f:fd:17:6f:e5:75:96:89:3f:e9:f2:0a:96:e8:d2: fd:1c:f6:91:b3:65:2f:14:ab:d7:89:b6:25:b0:68:c2:51:fd: 8d:a5:d2:ff:9c:9c:91:1f:4f:8b:f9:e4:8e:de:d3:d2:ea:49: 9b:9c:5d:8d:74:19:be:67:55:85:e2:f2:bd:76:c2:3f:c8:4a: 8f:c4:84:b5:d8:1e:37:6a:bf:29:e4:2d:31:c2:52:dd:30:45: 2f:75:04:10 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkVBOEIxMTAvBgNVBAUTKDQxQzc1NzE0Mjk5QTU3OEREMTkwRkQxRjczMDk1NUIx RkQ5QUMxRjQwHhcNMjYxMTE1MDYxNzUxWhcNMjYxMTIyMDYxNzUxWjAYMRYwFAYD VQQDEw02YWY5NGU5MC0yNmY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzz/ssP4Amtg4EV2zY5sdCybQB/Ac/0UNmSzMdxG0id91msADPb0wHkn+T8wv Z+ZBWr3eEt7aBs4Xq0BItv/YkWvC1Jp1mBJ8Io8Kti45qe6jOHCKC23VgSQ4tBIG A2AWe7KhVii6Z3JOk9rZTOlL07bFrJYy8ccHIF0JrRSE+MqPeU8Jfc1R/X7B+rUW bks/9hUvQAEpdJrqAca92MmVr+FYkpv9hZc7PuB4aCcps73hP2Ckt0KpYuYtb0f8 yc5j/GgYl9ojnVymzEi7Q71mwx3eB0hMMaqfAS6PwmOkm0hVEKLpYlNBtSSCHNtx FN6rEFfZJhA+oHv/qxjDBvylJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPJykWec v5DefVsjUsXOrYvDK7HAMB8GA1UdIwQYMBaAFEHHVxQpmleN0ZD9H3MJVbH9msH0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUE4Qi9CQTA4QUE0MjRC ODExMUYwOEY2NTUwN0VDNEY5QUUwMi9RY2RYRkNtYVY0M1JrUDBmY3dsVnNmMmF3 ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FjZFhGQ21hVjQzUmtQMGZjd2xWc2YyYXdmUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RUE4Qi9CQTA4QUE0MjRCODExMUYwOEY2NTUwN0VDNEY5QUUwMi9RY2RYRkNtYVY0 M1JrUDBmY3dsVnNmMmF3ZlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAq+NtQ/qHZbe5U54/0LUdReUJLUbzdxp+WpB8qLGaHUTTm9MpOsKDE4roIfMv P3CZccpQrsE4ndYXFQQMaQACh7LI0gEYa7rKx2rSqGnxgDaba9kLp4VBKYSxLpiM 2Q3rYTaEHqVy18xGEzbOHaRV1NNPLRHBVr3tqou4nkv12SiXc04Ql9I0g52sHY2J Rg4Y03LZ1coKZdPcLnToFGbo5WPPYZFUj/0Xb+V1lok/6fIKlujS/Rz2kbNlLxSr 14m2JbBowlH9jaXS/5yckR9Pi/nkjt7T0upJm5xdjXQZvmdVheLyvXbCP8hKj8SE tdgeN2q/KeQtMcJS3TBFL3UEEA== -----END CERTIFICATE-----Generated at Sun Nov 15 20:13:38 2026 by rpki-client