$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft File: QOWCY5crniQUK6qbWvoFNIGjcZ4.mft (raw, json) Hash identifier: geHtD7oTMHsNQe4CYfs21vo/DEYsTSXl2VrR3PB8rrc= Subject key identifier: 96:DD:F0:8F:53:41:9B:94:9D:09:7C:D0:54:DD:A9:3B:DE:74:06:5C Authority key identifier: 40:E5:82:63:97:2B:9E:24:14:2B:AA:9B:5A:FA:05:34:81:A3:71:9E Certificate issuer: /CN=A91C31A2/serialNumber=40E58263972B9E24142BAA9B5AFA053481A3719E Certificate serial: 0365 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft Manifest number: 0349 Signing time: Sun 15 Nov 2026 00:47:31 +0000 Manifest this update: Sun 15 Nov 2026 00:47:31 +0000 Manifest next update: Sun 22 Nov 2026 00:47:31 +0000 Files and hashes: 1: QOWCY5crniQUK6qbWvoFNIGjcZ4.crl (hash: hqTjiOqW2GWQULQtdG34GRpELAdMaYMxpACA0SyFTKU=) 2: 4F9ACB7461F511F0A6467D40C4F9AE02.roa (hash: Kp6nhlIWiSEv3o8kjtdJQRQ6WBFrZkqBEq1j7bnbEso=) 3: 94855EA0357711EDB81B8A34C4F9AE02.roa (hash: WEQNjKUUarvWFek2QKEOk5VWDSS6XlisXMiNSu5mDsg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.crl rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 00:47:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 869 (0x365) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C31A2, serialNumber=40E58263972B9E24142BAA9B5AFA053481A3719E Validity Not Before: Nov 15 00:47:31 2026 GMT Not After : Nov 22 00:47:31 2026 GMT Subject: CN=6af90123-d8c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:0a:87:72:a1:dc:4e:c0:5d:15:5e:b7:1f:dd: 3a:04:68:6b:c9:41:2c:c9:46:8a:5a:6e:7b:9c:00: 54:28:25:5e:15:1f:3a:ab:2b:fb:81:fe:b7:ee:92: 92:34:45:b1:23:c3:46:c5:ec:0b:6a:3c:24:6f:72: 53:48:8b:b6:1c:20:e6:21:10:0b:bd:c9:60:81:ac: d5:2b:96:33:a8:63:8d:c5:30:5c:c5:6d:63:a0:e6: bb:b3:5e:5f:6e:2c:94:3d:a7:1b:87:8e:74:95:fe: 92:b0:dd:47:a3:f2:8e:71:31:db:de:04:91:71:2a: 9f:21:6e:d7:f9:0f:fb:29:62:f0:ed:6f:89:3e:fb: c4:85:52:32:60:26:70:a9:da:6f:69:dc:eb:31:ba: 72:92:ab:43:fd:54:d9:08:9a:77:17:6e:d4:85:c5: 45:e3:5e:5f:b3:da:42:3d:d0:64:f6:f3:f2:28:69: 0e:93:03:56:38:ab:4c:bf:22:bc:5f:94:e6:cb:1f: ea:71:2b:6d:ec:9f:d1:7e:41:82:b7:9b:11:c5:84: 3f:42:71:f6:81:fb:fd:fa:f4:74:58:61:f9:b1:3f: 3b:2b:09:35:5f:15:f8:08:0b:65:c5:ff:8c:e5:61: 26:e7:14:01:a7:2e:10:aa:66:68:c3:a4:94:e6:01: fd:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:DD:F0:8F:53:41:9B:94:9D:09:7C:D0:54:DD:A9:3B:DE:74:06:5C X509v3 Authority Key Identifier: keyid:40:E5:82:63:97:2B:9E:24:14:2B:AA:9B:5A:FA:05:34:81:A3:71:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:96:c2:0e:bc:49:22:e2:e3:8c:4d:83:cf:64:c1:02:0e:f6: fc:be:41:72:50:8b:93:7a:3b:31:d4:e7:6d:70:bc:25:58:2b: dd:94:14:41:11:a0:0e:ca:da:25:4f:92:3d:06:56:1a:65:ae: f7:f6:78:c1:ee:b8:a1:66:7b:35:84:93:fc:ff:3e:9c:2f:44: a3:9a:70:0d:02:9b:1a:1d:62:32:66:5b:c4:38:98:64:d9:c7: 95:0a:e3:dd:fb:20:cc:03:ce:47:78:77:8e:ab:bd:88:39:9e: 09:ca:aa:6c:d7:54:e9:41:93:35:d7:ee:ed:b7:90:cc:c8:70: d0:48:d9:39:ac:6c:86:5f:3c:ea:46:20:e4:c0:11:92:af:43: 2d:e8:9b:ec:87:51:02:60:52:6b:e5:8d:eb:b1:19:ee:26:b6: c5:8c:e7:44:09:51:e8:b7:ad:a1:1c:82:32:f7:62:71:15:f1: 3d:92:9b:43:87:9d:54:e0:39:b0:3a:4c:41:9c:47:5f:88:93: 6e:c6:d6:c6:59:3f:e8:fd:86:22:5c:b2:57:99:d5:88:a0:72: a9:dd:4b:14:d8:3b:79:67:69:45:8f:23:5b:38:60:38:40:23: 5f:36:1d:e9:5f:3a:5a:c6:d6:41:b9:32:3e:c6:6d:79:a5:7b: 39:8c:ce:f9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA2UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzMxQTIxMTAvBgNVBAUTKDQwRTU4MjYzOTcyQjlFMjQxNDJCQUE5QjVBRkEwNTM0 ODFBMzcxOUUwHhcNMjYxMTE1MDA0NzMxWhcNMjYxMTIyMDA0NzMxWjAYMRYwFAYD VQQDEw02YWY5MDEyMy1kOGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1AqHcqHcTsBdFV63H906BGhryUEsyUaKWm57nABUKCVeFR86qyv7gf637pKS NEWxI8NGxewLajwkb3JTSIu2HCDmIRALvclggazVK5YzqGONxTBcxW1joOa7s15f biyUPacbh450lf6SsN1Ho/KOcTHb3gSRcSqfIW7X+Q/7KWLw7W+JPvvEhVIyYCZw qdpvadzrMbpykqtD/VTZCJp3F27UhcVF415fs9pCPdBk9vPyKGkOkwNWOKtMvyK8 X5Tmyx/qcStt7J/RfkGCt5sRxYQ/QnH2gfv9+vR0WGH5sT87Kwk1XxX4CAtlxf+M 5WEm5xQBpy4QqmZow6SU5gH9xQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJbd8I9T QZuUnQl80FTdqTvedAZcMB8GA1UdIwQYMBaAFEDlgmOXK54kFCuqm1r6BTSBo3Ge MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzFBMi9ENDc2RUQ3NjM1 NzIxMUVEQUU5Nzc4MzlDNEY5QUUwMi9RT1dDWTVjcm5pUVVLNnFiV3ZvRk5JR2pj WjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FPV0NZNWNybmlRVUs2cWJXdm9GTklHamNaNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzFBMi9ENDc2RUQ3NjM1NzIxMUVEQUU5Nzc4MzlDNEY5QUUwMi9RT1dDWTVjcm5p UVVLNnFiV3ZvRk5JR2pjWjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAH5bCDrxJIuLjjE2Dz2TBAg72/L5BclCLk3o7MdTnbXC8JVgr3ZQUQRGgDsra JU+SPQZWGmWu9/Z4we64oWZ7NYST/P8+nC9Eo5pwDQKbGh1iMmZbxDiYZNnHlQrj 3fsgzAPOR3h3jqu9iDmeCcqqbNdU6UGTNdfu7beQzMhw0EjZOaxshl886kYg5MAR kq9DLeib7IdRAmBSa+WN67EZ7ia2xYznRAlR6LetoRyCMvdicRXxPZKbQ4edVOA5 sDpMQZxHX4iTbsbWxlk/6P2GIlyyV5nViKByqd1LFNg7eWdpRY8jWzhgOEAjXzYd 6V86WsbWQbkyPsZteaV7OYzO+Q== -----END CERTIFICATE-----Generated at Sun Nov 15 19:24:07 2026 by rpki-client