$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft File: q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft (raw, json) Hash identifier: m6N7XLwgir6WLrCLDVcnd8MODvr+NMzGUbDwkDbyKuY= Subject key identifier: 39:D0:B2:B1:6C:5A:73:5F:A2:E1:6E:8D:D8:CF:8D:CF:DD:DE:6D:DD Authority key identifier: AB:67:E8:2F:C8:6A:AC:A8:2A:CF:F8:DC:36:45:CD:71:61:01:3F:76 Certificate issuer: /CN=A91D1E4C/serialNumber=AB67E82FC86AACA82ACFF8DC3645CD7161013F76 Certificate serial: 03FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft Manifest number: 0CEF Signing time: Thu 24 Sep 2026 20:11:18 +0000 Manifest this update: Thu 24 Sep 2026 20:11:17 +0000 Manifest next update: Thu 01 Oct 2026 20:11:17 +0000 Files and hashes: 1: q2foL8hqrKgqz_jcNkXNcWEBP3Y.crl (hash: Jl9p/Lhf+/rdNkgPLFdGO5cgHJ/0L+5P1DzYWC7YSB8=) 2: FC358296CFA011EDA4AC5B18C4F9AE02.roa (hash: 0M6xdPEZ2aujF9/YY8xW4204AgcRunVSuM8Vw+Ja05Q=) 3: 2AD1C746940111F0B07D7068C4F9AE02.roa (hash: RT811XLV5/H+z9rXyjPOcwNWUnb5MPdvTXm8sb3lfDk=) 4: 3DD8C628940111F09204AF71C4F9AE02.roa (hash: qyRCCyei3MShGysWy2y27h9mS62xktJLIpfB6ltBCO4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.crl rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 20:11:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1021 (0x3fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1E4C, serialNumber=AB67E82FC86AACA82ACFF8DC3645CD7161013F76 Validity Not Before: Sep 24 20:11:17 2026 GMT Not After : Oct 1 20:11:17 2026 GMT Subject: CN=6ab583e6-cb79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:3b:c6:5a:7f:98:ab:bf:d7:35:94:04:6c:8f: 8a:f3:4d:ed:ad:59:b4:46:d8:ae:4b:ec:1a:e5:b5: f0:d1:2d:7d:c2:5e:d1:11:43:cc:22:b9:e0:5b:64: 35:5e:69:ee:11:0d:24:14:e5:61:ec:d9:f6:d2:50: 88:d7:32:b1:83:40:c3:04:63:fe:66:b6:3f:bb:11: 4c:31:a8:7b:c2:c4:be:dd:ff:de:fa:16:3e:ac:57: f0:89:13:35:14:5b:c7:ed:47:64:5c:17:fd:55:f8: a7:12:86:85:4a:d3:60:2f:ee:38:e0:c9:13:c6:89: c0:d7:47:83:4a:5a:a2:da:c3:de:5c:64:df:6e:00: 8e:56:6c:fa:50:63:b0:b1:38:66:58:48:5e:b2:87: 0a:61:4b:bd:24:ab:bb:b1:09:cf:57:64:b7:61:a2: 69:fb:18:e0:34:60:d2:6d:e6:56:1b:64:3d:5c:98: 04:cf:13:b7:e7:81:d1:59:6d:12:0a:16:b6:34:e2: ce:6b:23:5a:b9:f2:fc:17:2c:b7:42:93:45:60:34: a4:de:97:b7:46:6d:0a:5e:0e:aa:61:c3:d0:3a:6f: 2c:36:e3:13:1f:9e:58:52:56:7b:ca:82:ad:fa:c1: 4d:47:93:cc:5b:d3:da:88:01:8f:54:76:09:89:cc: fb:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:D0:B2:B1:6C:5A:73:5F:A2:E1:6E:8D:D8:CF:8D:CF:DD:DE:6D:DD X509v3 Authority Key Identifier: keyid:AB:67:E8:2F:C8:6A:AC:A8:2A:CF:F8:DC:36:45:CD:71:61:01:3F:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:dc:7d:11:43:18:65:48:b8:3a:0a:3e:5b:6d:35:3a:04:8e: 9f:0f:c0:e2:dc:45:ff:bd:b3:79:cc:73:49:0c:40:ac:c1:63: 2c:f1:5f:a8:17:dc:65:61:20:55:65:cb:ba:aa:bf:64:6d:40: 37:77:bb:e0:9e:87:9c:a9:1e:d6:1f:00:32:7f:56:64:fe:5c: 45:48:a5:85:c5:2b:51:d6:ef:d9:af:49:e7:e1:0e:3e:71:95: 60:c4:1a:7d:7e:20:74:b3:f3:93:52:84:ce:12:b5:d8:1e:7c: ff:93:e0:ea:cc:a0:02:f9:dd:d7:c2:fb:34:d1:82:0f:7c:93: a1:61:ef:a2:85:34:11:ce:2f:47:ea:04:02:03:32:b0:ee:4f: 6e:6c:72:39:c5:cd:7a:e3:ee:81:2f:f7:7a:cb:2d:61:28:05: 59:7a:49:23:17:30:a0:b7:7f:34:9a:65:16:df:36:75:2d:78: eb:02:3e:b9:f4:a4:eb:fb:73:74:56:00:51:8e:7a:7e:77:df: cd:c1:a0:d1:7f:1b:51:59:fd:e3:57:e1:c3:60:7d:8a:ff:a4: 28:37:45:f3:a9:61:b9:4a:c4:e4:2a:03:8d:7b:e0:94:ba:e2: 31:8b:19:0d:79:cc:6f:50:d8:32:22:1e:1d:51:1d:9a:1b:92: 00:fb:ad:5c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA/0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFFNEMxMTAvBgNVBAUTKEFCNjdFODJGQzg2QUFDQTgyQUNGRjhEQzM2NDVDRDcx NjEwMTNGNzYwHhcNMjYwOTI0MjAxMTE3WhcNMjYxMDAxMjAxMTE3WjAYMRYwFAYD VQQDEw02YWI1ODNlNi1jYjc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqTvGWn+Yq7/XNZQEbI+K803trVm0RtiuS+wa5bXw0S19wl7REUPMIrngW2Q1 XmnuEQ0kFOVh7Nn20lCI1zKxg0DDBGP+ZrY/uxFMMah7wsS+3f/e+hY+rFfwiRM1 FFvH7UdkXBf9VfinEoaFStNgL+444MkTxonA10eDSlqi2sPeXGTfbgCOVmz6UGOw sThmWEhesocKYUu9JKu7sQnPV2S3YaJp+xjgNGDSbeZWG2Q9XJgEzxO354HRWW0S Cha2NOLOayNaufL8Fyy3QpNFYDSk3pe3Rm0KXg6qYcPQOm8sNuMTH55YUlZ7yoKt +sFNR5PMW9PaiAGPVHYJicz7MQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDnQsrFs WnNfouFujdjPjc/d3m3dMB8GA1UdIwQYMBaAFKtn6C/IaqyoKs/43DZFzXFhAT92 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUU0Qy83REFEQTU2Q0Q5 NEQxMUVBQTYwNEFDNTNDNEY5QUUwMi9xMmZvTDhocXJLZ3F6X2pjTmtYTmNXRUJQ M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3EyZm9MOGhxcktncXpfamNOa1hOY1dFQlAzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUU0Qy83REFEQTU2Q0Q5NEQxMUVBQTYwNEFDNTNDNEY5QUUwMi9xMmZvTDhocXJL Z3F6X2pjTmtYTmNXRUJQM1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZtx9EUMYZUi4Ogo+W201OgSOnw/A4txF/72zecxzSQxArMFjLPFfqBfcZWEg VWXLuqq/ZG1AN3e74J6HnKke1h8AMn9WZP5cRUilhcUrUdbv2a9J5+EOPnGVYMQa fX4gdLPzk1KEzhK12B58/5Pg6sygAvnd18L7NNGCD3yToWHvooU0Ec4vR+oEAgMy sO5PbmxyOcXNeuPugS/3esstYSgFWXpJIxcwoLd/NJplFt82dS146wI+ufSk6/tz dFYAUY56fnffzcGg0X8bUVn941fhw2B9iv+kKDdF86lhuUrE5CoDjXvglLriMYsZ DXnMb1DYMiIeHVEdmhuSAPutXA== -----END CERTIFICATE-----Generated at Sat Sep 26 07:44:15 2026 by rpki-client