$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.mft File: q1PZkoECuRnbfFRlyN1f8mZ0Q7M.mft (raw, json) Hash identifier: 6ztLEU92EvrD9Zc1LFA0qTpYHMNniKinLABXNk6cvK0= Subject key identifier: CC:3E:11:93:7F:28:DF:AE:B8:11:FD:41:75:45:72:21:89:B0:5E:3E Authority key identifier: AB:53:D9:92:81:02:B9:19:DB:7C:54:65:C8:DD:5F:F2:66:74:43:B3 Certificate issuer: /CN=A91C7E5B/serialNumber=AB53D9928102B919DB7C5465C8DD5FF2667443B3 Certificate serial: 0113 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.mft Manifest number: 0106 Signing time: Wed 23 Sep 2026 06:04:06 +0000 Manifest this update: Wed 23 Sep 2026 06:04:05 +0000 Manifest next update: Wed 30 Sep 2026 06:04:05 +0000 Files and hashes: 1: q1PZkoECuRnbfFRlyN1f8mZ0Q7M.crl (hash: eOIakq3tY7QIWnEBgf0jWwAbogWtA8Chk51iVMeYUYQ=) 2: 9BE1C9D08C4511F1BC8E54F45411F970.roa (hash: Sbq/BmihJlFQZ8/ZS3AcJsWDmVD1eWHySOf7VOwUdak=) 3: C3DCFE54EB2911F0BD7173483B6F56BC.roa (hash: hZQbMZ8wBZ3CYwiXTphoVD9Fsf34oefbQ7yrGVzjULw=) 4: 1FC17CE2EB2D11F0971959663D6F56BC.roa (hash: aI9DlzDvvLFMVVyO/coQSpjqyPYkqJnDOZuQHUXRHk8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.crl rsync://rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 06:04:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 275 (0x113) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7E5B, serialNumber=AB53D9928102B919DB7C5465C8DD5FF2667443B3 Validity Not Before: Sep 23 06:04:05 2026 GMT Not After : Sep 30 06:04:05 2026 GMT Subject: CN=6ab36bd5-7958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f2:e8:41:32:12:f6:9a:08:3d:39:84:de:8d: 21:cb:55:6b:c4:cd:da:26:e8:91:f4:69:49:91:ef: 4b:7a:0a:dd:3c:a8:f6:c8:ce:24:95:02:40:79:b3: 20:6f:03:2a:ed:79:c7:ff:0f:6f:c1:59:fb:f5:17: 32:cd:4e:d8:f2:71:b3:58:24:e3:ba:b4:52:09:87: f6:17:07:d3:dd:fb:a4:7e:d4:8d:0c:ff:a6:5f:f5: 24:28:62:a7:ea:a6:e6:8a:f9:e3:aa:2d:74:85:ae: 6b:be:bf:4f:e3:1a:9e:f2:62:77:ef:08:81:c5:37: 05:04:45:17:88:99:a7:9d:e8:5a:6d:8b:ff:2e:e1: 71:9d:ed:79:0f:c9:17:c3:4b:8f:91:1a:f4:de:9f: 7d:d6:1d:f6:d2:aa:8a:a7:71:85:fb:b1:d2:15:f1: ac:f5:62:e1:15:e7:de:30:7a:a3:10:b9:8a:82:07: e3:1a:0c:d4:cb:3a:b8:69:20:4a:16:a9:1d:04:29: 03:ad:f8:1f:13:78:3d:5e:c5:dd:83:c0:d3:57:e3: c6:c3:e5:fe:cd:86:d4:22:7e:c6:9c:2d:c3:4a:a5: aa:c6:36:c2:fa:9a:40:13:dc:2c:2a:4a:8f:60:ab: fd:4c:04:81:e2:05:d5:88:31:75:70:db:cb:05:67: 53:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:3E:11:93:7F:28:DF:AE:B8:11:FD:41:75:45:72:21:89:B0:5E:3E X509v3 Authority Key Identifier: keyid:AB:53:D9:92:81:02:B9:19:DB:7C:54:65:C8:DD:5F:F2:66:74:43:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:eb:b1:ef:a4:02:b9:7b:96:d7:34:2d:06:f8:3a:59:00:00: 06:55:d9:02:99:4e:05:d9:d7:f2:2e:1d:10:0f:42:41:1a:59: 89:2b:63:2e:eb:5b:1a:6f:c0:54:04:dd:88:c9:2d:23:b1:44: 6c:bf:e0:d6:3a:3b:e2:92:4f:92:5a:d6:f2:16:b4:f5:10:23: 3c:bb:21:74:45:46:27:8a:7b:c5:1d:75:73:d7:c0:ab:d7:1b: 15:7c:08:7c:d4:63:b6:c4:8e:42:c1:30:ea:2f:ae:84:c8:ba: f8:54:f9:31:ee:10:40:db:03:2c:c4:10:6c:f0:f4:57:88:01: bf:41:4f:1c:3a:58:99:8a:0c:e7:a2:84:62:30:49:2a:85:ab: cf:44:09:80:40:dd:34:d4:f7:38:e4:94:48:41:55:42:97:28: 14:4a:a6:a6:22:c2:9d:25:ef:2b:55:0f:57:77:1e:2a:10:75: 6b:cd:43:29:72:b7:ad:dd:eb:d0:2d:e3:3f:a4:4f:f4:04:1a: 5e:88:87:cd:38:f0:28:e4:61:7d:26:27:b8:57:d1:df:b3:03: a5:d4:1d:2a:a5:86:51:55:35:42:98:f1:ad:9c:4b:ed:61:59: 77:99:23:d3:c6:26:69:dc:ee:f6:ad:ca:90:e1:9c:4e:c3:6a: cd:ad:f1:bc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICARMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdFNUIxMTAvBgNVBAUTKEFCNTNEOTkyODEwMkI5MTlEQjdDNTQ2NUM4REQ1RkYy NjY3NDQzQjMwHhcNMjYwOTIzMDYwNDA1WhcNMjYwOTMwMDYwNDA1WjAYMRYwFAYD VQQDEw02YWIzNmJkNS03OTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvfLoQTIS9poIPTmE3o0hy1VrxM3aJuiR9GlJke9LegrdPKj2yM4klQJAebMg bwMq7XnH/w9vwVn79RcyzU7Y8nGzWCTjurRSCYf2FwfT3fukftSNDP+mX/UkKGKn 6qbmivnjqi10ha5rvr9P4xqe8mJ37wiBxTcFBEUXiJmnnehabYv/LuFxne15D8kX w0uPkRr03p991h320qqKp3GF+7HSFfGs9WLhFefeMHqjELmKggfjGgzUyzq4aSBK FqkdBCkDrfgfE3g9XsXdg8DTV+PGw+X+zYbUIn7GnC3DSqWqxjbC+ppAE9wsKkqP YKv9TASB4gXViDF1cNvLBWdTIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMw+EZN/ KN+uuBH9QXVFciGJsF4+MB8GA1UdIwQYMBaAFKtT2ZKBArkZ23xUZcjdX/JmdEOz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0U1Qi9EODRFN0JGMjND NkUxMUYwOUQ3NkEyNERDNEY5QUUwMi9xMVBaa29FQ3VSbmJmRlJseU4xZjhtWjBR N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ExUFprb0VDdVJuYmZGUmx5TjFmOG1aMFE3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0U1Qi9EODRFN0JGMjNDNkUxMUYwOUQ3NkEyNERDNEY5QUUwMi9xMVBaa29FQ3VS bmJmRlJseU4xZjhtWjBRN00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOeux76QCuXuW1zQtBvg6WQAABlXZAplOBdnX8i4dEA9CQRpZiStjLutbGm/A VATdiMktI7FEbL/g1jo74pJPklrW8ha09RAjPLshdEVGJ4p7xR11c9fAq9cbFXwI fNRjtsSOQsEw6i+uhMi6+FT5Me4QQNsDLMQQbPD0V4gBv0FPHDpYmYoM56KEYjBJ KoWrz0QJgEDdNNT3OOSUSEFVQpcoFEqmpiLCnSXvK1UPV3ceKhB1a81DKXK3rd3r 0C3jP6RP9AQaXoiHzTjwKORhfSYnuFfR37MDpdQdKqWGUVU1QpjxrZxL7WFZd5kj 08Ymadzu9q3KkOGcTsNqza3xvA== -----END CERTIFICATE-----Generated at Thu Sep 24 01:12:17 2026 by rpki-client