$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CDCF5/5996712CF1E311F0BDEC72B5416F56BC/QwlkOa1FN43F5xIj-HJhJ7EZZe0.mft File: QwlkOa1FN43F5xIj-HJhJ7EZZe0.mft (raw, json) Hash identifier: x2P3z0jzOJytLsw5VlCl5xFaF7bspthS+lYtE7HBzY8= Subject key identifier: CF:7C:3F:A9:BC:47:6C:1F:42:29:12:AA:2F:0E:DC:A9:C1:C7:27:B2 Authority key identifier: 43:09:64:39:AD:45:37:8D:C5:E7:12:23:F8:72:61:27:B1:19:65:ED Certificate issuer: /CN=A91CDCF5/serialNumber=43096439AD45378DC5E71223F8726127B11965ED Certificate serial: 88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QwlkOa1FN43F5xIj-HJhJ7EZZe0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDCF5/5996712CF1E311F0BDEC72B5416F56BC/QwlkOa1FN43F5xIj-HJhJ7EZZe0.mft Manifest number: 86 Signing time: Sun 27 Sep 2026 08:11:23 +0000 Manifest this update: Sun 27 Sep 2026 08:11:22 +0000 Manifest next update: Sun 04 Oct 2026 08:11:22 +0000 Files and hashes: 1: QwlkOa1FN43F5xIj-HJhJ7EZZe0.crl (hash: xLqg6FxaT44gMQTueor5+r0/4n7pVDiKzNlYWPEeSDU=) 2: D735EAACF1EF11F0A394FA90446F56BC.roa (hash: Ys/2qaSppEBebOfLXvRLlfClHojsR1MQFiAQ4UPY7vM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDCF5/5996712CF1E311F0BDEC72B5416F56BC/QwlkOa1FN43F5xIj-HJhJ7EZZe0.crl rsync://rpki.apnic.net/member_repository/A91CDCF5/5996712CF1E311F0BDEC72B5416F56BC/QwlkOa1FN43F5xIj-HJhJ7EZZe0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QwlkOa1FN43F5xIj-HJhJ7EZZe0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 08:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 136 (0x88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDCF5, serialNumber=43096439AD45378DC5E71223F8726127B11965ED Validity Not Before: Sep 27 08:11:22 2026 GMT Not After : Oct 4 08:11:22 2026 GMT Subject: CN=6ab8cfab-4e94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:64:77:2b:94:46:82:dd:0d:52:de:a0:ca:ed: 20:69:8c:ff:1e:51:54:7e:c7:95:d2:72:ac:d7:1f: 38:63:bd:6e:41:20:cf:08:e5:9b:a9:e4:0a:4c:c0: ee:30:b7:74:df:9f:c4:ce:2f:b2:39:b2:f5:96:cc: 35:56:26:2a:06:80:16:4c:59:25:a9:7a:48:d8:30: 20:59:78:12:5e:b2:b9:02:3d:89:c9:de:41:31:ab: a4:ee:27:5b:44:4b:01:c0:4b:93:ab:16:ce:59:e7: 4b:ee:d0:ef:fd:ee:33:d6:37:f8:9f:89:8c:cb:16: 1c:b3:6b:51:18:a2:58:b9:6e:97:a2:15:be:4c:c0: 21:87:b5:f8:d1:54:a7:1e:46:cd:46:6c:1e:8b:32: e2:1c:9d:6c:fe:e0:d6:7f:fb:bd:da:93:ee:7a:68: 29:e0:dd:90:ab:95:bb:d7:20:82:c1:4f:73:eb:45: 53:e3:70:74:85:22:ae:86:fa:ab:97:a3:08:f3:60: 36:e8:63:f0:a0:83:16:49:b3:4f:2f:62:0e:6b:42: 55:0d:78:48:e0:03:36:fe:89:20:16:ba:1e:30:92: 20:e5:3e:ab:84:c3:52:65:48:5d:e1:82:e9:cd:f9: 32:45:f6:d8:b2:91:c5:fb:4d:c8:06:c6:71:0d:65: 46:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:7C:3F:A9:BC:47:6C:1F:42:29:12:AA:2F:0E:DC:A9:C1:C7:27:B2 X509v3 Authority Key Identifier: keyid:43:09:64:39:AD:45:37:8D:C5:E7:12:23:F8:72:61:27:B1:19:65:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDCF5/5996712CF1E311F0BDEC72B5416F56BC/QwlkOa1FN43F5xIj-HJhJ7EZZe0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QwlkOa1FN43F5xIj-HJhJ7EZZe0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDCF5/5996712CF1E311F0BDEC72B5416F56BC/QwlkOa1FN43F5xIj-HJhJ7EZZe0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:e3:9b:60:90:d8:1c:72:db:ed:5a:99:9f:99:a6:27:91:4f: 85:d9:1a:f6:1b:ca:4c:20:aa:e8:63:05:70:c9:e7:b0:98:7f: 2c:59:df:16:83:8b:ee:65:1d:4a:ff:ee:c0:0b:25:be:42:61: 58:e7:6b:2e:ff:c7:07:3a:f8:b8:e6:b4:6b:0b:5f:59:4a:87: 0e:72:3b:62:a5:d5:c7:0e:4d:c6:c8:a4:1d:b9:7d:36:51:13: ec:73:03:5b:1a:fd:d5:16:b6:8e:c0:b5:40:1e:99:6c:ed:34: 78:f4:2d:e7:8b:71:5b:5f:24:af:e9:30:b8:6c:60:78:af:91: 65:47:d1:09:4a:d3:5c:2e:95:46:41:9b:60:e8:9c:4b:73:f1: 32:40:b7:a9:6b:d4:e5:42:b0:23:b1:f0:71:89:e1:8d:73:e4: 11:d3:b3:82:96:d4:0d:31:dc:fb:9b:c5:76:b3:a3:be:cd:73: d0:69:10:f1:3e:e0:01:46:6e:7a:e1:cd:66:aa:46:c2:93:6e: 79:23:34:20:22:68:b9:34:81:80:99:80:8f:41:46:60:c6:bf: bb:54:10:91:6e:21:e1:45:71:84:d9:eb:f7:f7:0e:bd:43:ac: 08:34:81:d3:01:80:87:41:e7:90:47:55:60:33:1e:54:bf:69: ff:d1:bb:8c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RDRjUxMTAvBgNVBAUTKDQzMDk2NDM5QUQ0NTM3OERDNUU3MTIyM0Y4NzI2MTI3 QjExOTY1RUQwHhcNMjYwOTI3MDgxMTIyWhcNMjYxMDA0MDgxMTIyWjAYMRYwFAYD VQQDEw02YWI4Y2ZhYi00ZTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxmR3K5RGgt0NUt6gyu0gaYz/HlFUfseV0nKs1x84Y71uQSDPCOWbqeQKTMDu MLd035/Ezi+yObL1lsw1ViYqBoAWTFklqXpI2DAgWXgSXrK5Aj2Jyd5BMauk7idb REsBwEuTqxbOWedL7tDv/e4z1jf4n4mMyxYcs2tRGKJYuW6XohW+TMAhh7X40VSn HkbNRmweizLiHJ1s/uDWf/u92pPuemgp4N2Qq5W71yCCwU9z60VT43B0hSKuhvqr l6MI82A26GPwoIMWSbNPL2IOa0JVDXhI4AM2/okgFroeMJIg5T6rhMNSZUhd4YLp zfkyRfbYspHF+03IBsZxDWVG8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM98P6m8 R2wfQikSqi8O3KnBxyeyMB8GA1UdIwQYMBaAFEMJZDmtRTeNxecSI/hyYSexGWXt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRENGNS81OTk2NzEyQ0Yx RTMxMUYwQkRFQzcyQjU0MTZGNTZCQy9Rd2xrT2ExRk40M0Y1eElqLUhKaEo3RVpa ZTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1F3bGtPYTFGTjQzRjV4SWotSEpoSjdFWlplMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RENGNS81OTk2NzEyQ0YxRTMxMUYwQkRFQzcyQjU0MTZGNTZCQy9Rd2xrT2ExRk40 M0Y1eElqLUhKaEo3RVpaZTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAe+ObYJDYHHLb7VqZn5mmJ5FPhdka9hvKTCCq6GMFcMnnsJh/LFnfFoOL7mUd Sv/uwAslvkJhWOdrLv/HBzr4uOa0awtfWUqHDnI7YqXVxw5NxsikHbl9NlET7HMD Wxr91Ra2jsC1QB6ZbO00ePQt54txW18kr+kwuGxgeK+RZUfRCUrTXC6VRkGbYOic S3PxMkC3qWvU5UKwI7HwcYnhjXPkEdOzgpbUDTHc+5vFdrOjvs1z0GkQ8T7gAUZu euHNZqpGwpNueSM0ICJouTSBgJmAj0FGYMa/u1QQkW4h4UVxhNnr9/cOvUOsCDSB 0wGAh0HnkEdVYDMeVL9p/9G7jA== -----END CERTIFICATE-----Generated at Sun Sep 27 23:45:42 2026 by rpki-client