$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CB6E8/32E34DEEAE2B11F098EA2E85C4F9AE02/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.mft File: 1Qh-tx-4EvEAL_iEsvnVbjvdTPI.mft (raw, json) Hash identifier: +8R0eKPfrviwpqOa6rGTWZkmNIP2R8fp5bprIyNhlbY= Subject key identifier: 27:DA:C4:30:D2:66:08:A4:A3:C8:C5:61:A6:D6:80:B2:EF:7F:03:2D Authority key identifier: D5:08:7E:B7:1F:B8:12:F1:00:2F:F8:84:B2:F9:D5:6E:3B:DD:4C:F2 Certificate issuer: /CN=A91CB6E8/serialNumber=D5087EB71FB812F1002FF884B2F9D56E3BDD4CF2 Certificate serial: AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB6E8/32E34DEEAE2B11F098EA2E85C4F9AE02/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.mft Manifest number: AF Signing time: Wed 23 Sep 2026 06:50:08 +0000 Manifest this update: Wed 23 Sep 2026 06:50:08 +0000 Manifest next update: Wed 30 Sep 2026 06:50:08 +0000 Files and hashes: 1: 1Qh-tx-4EvEAL_iEsvnVbjvdTPI.crl (hash: 7CLf4zRSK2gekQE8NfkUYWK9hAYjzUA7OxQWrN3z4Ko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB6E8/32E34DEEAE2B11F098EA2E85C4F9AE02/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.crl rsync://rpki.apnic.net/member_repository/A91CB6E8/32E34DEEAE2B11F098EA2E85C4F9AE02/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 06:50:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 175 (0xaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB6E8, serialNumber=D5087EB71FB812F1002FF884B2F9D56E3BDD4CF2 Validity Not Before: Sep 23 06:50:08 2026 GMT Not After : Sep 30 06:50:08 2026 GMT Subject: CN=6ab376a0-4407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:70:86:37:a6:50:10:bb:32:d7:ae:4f:dd:1b: b6:61:07:9c:d7:b2:3f:7d:8d:3e:37:9f:9a:75:69: 12:b5:b8:73:d3:bc:13:d5:f0:e0:6b:31:28:12:ee: a9:58:91:bb:5d:36:30:90:2a:c0:06:f1:71:2e:6c: 38:d6:55:57:73:18:4a:cf:e7:a8:7d:18:2d:ba:4f: 78:41:b2:0d:4f:c5:4c:a5:3c:50:79:8d:01:05:8c: 23:a5:fb:a8:35:00:42:1a:61:85:29:94:72:ef:03: c7:cf:39:73:12:31:f2:c4:31:e2:0e:bd:74:ed:ed: 98:b9:8b:44:5e:e7:fc:8a:d3:d2:73:a1:70:eb:08: 89:a6:f7:38:81:a3:e4:e8:85:2c:5a:8f:4d:e7:99: a7:d3:ca:15:85:49:89:74:fb:df:62:64:22:a9:81: 18:f4:06:1e:c1:9e:e0:b9:84:40:0a:07:c5:92:aa: 65:f1:1f:3e:6a:73:dd:6d:8a:13:11:46:28:b9:67: 83:92:25:0e:b8:cf:14:49:7a:84:e8:44:37:e6:0b: b9:7f:22:f1:64:4d:18:56:7a:7f:b4:81:1a:1f:ec: ec:8c:d9:01:d8:11:1e:aa:ff:95:6e:85:3c:c0:b5: 3d:df:d1:f5:ef:3a:f8:b0:a1:24:82:19:d8:7e:c9: 12:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:DA:C4:30:D2:66:08:A4:A3:C8:C5:61:A6:D6:80:B2:EF:7F:03:2D X509v3 Authority Key Identifier: keyid:D5:08:7E:B7:1F:B8:12:F1:00:2F:F8:84:B2:F9:D5:6E:3B:DD:4C:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB6E8/32E34DEEAE2B11F098EA2E85C4F9AE02/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB6E8/32E34DEEAE2B11F098EA2E85C4F9AE02/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:be:b5:f9:f0:8f:22:f3:3e:08:34:2a:2d:37:56:19:98:ce: 71:ee:24:29:4b:5c:fa:d2:02:4a:81:20:5e:f0:d7:cf:09:0e: 39:44:8f:39:d5:b2:55:25:c8:c8:f5:ce:dd:20:5a:99:01:ca: 9c:4b:4b:60:6e:7f:98:85:b9:b3:73:ca:99:c7:17:a9:d9:2a: f0:2a:26:c0:f1:ba:fa:57:6b:46:4d:52:ba:a3:59:72:ff:c5: 4a:c0:f6:41:95:3d:93:6e:30:d3:69:4e:e0:15:2c:e6:60:e3: 35:a4:2f:61:01:b4:9b:8f:8d:b3:68:c3:c5:f6:fa:54:f6:3b: 55:3c:de:b9:bf:88:c6:25:49:cb:25:19:2a:3a:bb:26:f4:0e: 30:73:d1:95:c1:7c:c6:32:f4:80:9f:13:01:90:d5:03:dc:cd: 09:7b:bf:49:e4:db:f6:66:1a:6c:99:72:05:82:2d:37:1f:6f: 95:d0:69:10:08:9a:20:2e:d0:97:d3:f1:6c:38:fb:78:56:f2: 3f:76:1e:ed:64:b5:55:a7:62:11:26:7d:a9:c6:40:3d:80:0f: f9:35:25:b9:e6:93:8a:53:80:7b:2f:2d:e9:88:b6:12:05:fe: 1e:86:91:01:74:a3:23:89:46:3d:1f:55:92:12:d6:d4:38:c3: e6:6c:84:f9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I2RTgxMTAvBgNVBAUTKEQ1MDg3RUI3MUZCODEyRjEwMDJGRjg4NEIyRjlENTZF M0JERDRDRjIwHhcNMjYwOTIzMDY1MDA4WhcNMjYwOTMwMDY1MDA4WjAYMRYwFAYD VQQDEw02YWIzNzZhMC00NDA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApnCGN6ZQELsy165P3Ru2YQec17I/fY0+N5+adWkStbhz07wT1fDgazEoEu6p WJG7XTYwkCrABvFxLmw41lVXcxhKz+eofRgtuk94QbINT8VMpTxQeY0BBYwjpfuo NQBCGmGFKZRy7wPHzzlzEjHyxDHiDr107e2YuYtEXuf8itPSc6Fw6wiJpvc4gaPk 6IUsWo9N55mn08oVhUmJdPvfYmQiqYEY9AYewZ7guYRACgfFkqpl8R8+anPdbYoT EUYouWeDkiUOuM8USXqE6EQ35gu5fyLxZE0YVnp/tIEaH+zsjNkB2BEeqv+VboU8 wLU939H17zr4sKEkghnYfskSwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCfaxDDS Zgiko8jFYabWgLLvfwMtMB8GA1UdIwQYMBaAFNUIfrcfuBLxAC/4hLL51W473Uzy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjZFOC8zMkUzNERFRUFF MkIxMUYwOThFQTJFODVDNEY5QUUwMi8xUWgtdHgtNEV2RUFMX2lFc3ZuVmJqdmRU UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFRaC10eC00RXZFQUxfaUVzdm5WYmp2ZFRQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjZFOC8zMkUzNERFRUFFMkIxMUYwOThFQTJFODVDNEY5QUUwMi8xUWgtdHgtNEV2 RUFMX2lFc3ZuVmJqdmRUUEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADb61+fCPIvM+CDQqLTdWGZjOce4kKUtc+tICSoEgXvDXzwkOOUSPOdWyVSXI yPXO3SBamQHKnEtLYG5/mIW5s3PKmccXqdkq8ComwPG6+ldrRk1SuqNZcv/FSsD2 QZU9k24w02lO4BUs5mDjNaQvYQG0m4+Ns2jDxfb6VPY7VTzeub+IxiVJyyUZKjq7 JvQOMHPRlcF8xjL0gJ8TAZDVA9zNCXu/SeTb9mYabJlyBYItNx9vldBpEAiaIC7Q l9PxbDj7eFbyP3Ye7WS1VadiESZ9qcZAPYAP+TUlueaTilOAey8t6Yi2EgX+HoaR AXSjI4lGPR9VkhLW1DjD5myE+Q== -----END CERTIFICATE-----Generated at Wed Sep 23 11:58:56 2026 by rpki-client