$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft File: q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft (raw, json) Hash identifier: xAr6Xi4tRia5eQYjAvj9A7evM1/lrFa+B4JBb4p5rK8= Subject key identifier: 08:BF:AC:1D:43:DA:94:AD:3C:C9:BA:2A:98:CA:F1:CD:8F:A6:2E:11 Authority key identifier: AB:67:E8:2F:C8:6A:AC:A8:2A:CF:F8:DC:36:45:CD:71:61:01:3F:76 Certificate issuer: /CN=A91D1E4C/serialNumber=AB67E82FC86AACA82ACFF8DC3645CD7161013F76 Certificate serial: 0403 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft Manifest number: 0CFB Signing time: Tue 06 Oct 2026 20:21:31 +0000 Manifest this update: Tue 06 Oct 2026 20:21:30 +0000 Manifest next update: Tue 13 Oct 2026 20:21:30 +0000 Files and hashes: 1: q2foL8hqrKgqz_jcNkXNcWEBP3Y.crl (hash: a6phjjd3IGaoT8d8fEjAhqWy0ElOhF5WEh6ZmYu1TeE=) 2: FC358296CFA011EDA4AC5B18C4F9AE02.roa (hash: 0M6xdPEZ2aujF9/YY8xW4204AgcRunVSuM8Vw+Ja05Q=) 3: 2AD1C746940111F0B07D7068C4F9AE02.roa (hash: RT811XLV5/H+z9rXyjPOcwNWUnb5MPdvTXm8sb3lfDk=) 4: 3DD8C628940111F09204AF71C4F9AE02.roa (hash: qyRCCyei3MShGysWy2y27h9mS62xktJLIpfB6ltBCO4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.crl rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 20:21:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1027 (0x403) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1E4C, serialNumber=AB67E82FC86AACA82ACFF8DC3645CD7161013F76 Validity Not Before: Oct 6 20:21:30 2026 GMT Not After : Oct 13 20:21:30 2026 GMT Subject: CN=6ac5584b-f9e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4d:5b:9a:d2:b1:08:f3:56:6b:e8:cf:f2:06: ab:f6:80:ad:e0:52:06:27:6e:0d:22:39:15:76:33: 3e:53:35:47:52:bb:14:7d:59:60:c1:95:e7:7b:78: ca:06:bb:21:f4:17:52:d1:cd:6a:63:0f:c9:97:39: bc:6b:5c:8a:fe:a3:e4:fa:fc:0b:6c:34:d0:94:a3: b4:0c:31:2a:60:72:70:8a:62:e0:20:48:57:ff:2b: 5c:5a:ad:1b:f9:e8:69:30:85:16:81:87:f3:8f:36: 65:1a:61:0c:f0:5d:21:b2:3d:71:bc:b2:15:57:42: 8e:a6:36:81:d4:40:22:3a:e7:a1:77:d5:27:08:94: f7:d9:99:41:83:67:2d:dd:4c:a2:ee:31:7c:ed:3f: 6d:0e:4a:24:c2:11:26:73:1f:cc:a0:fc:3e:54:2f: 60:38:27:4c:d8:ba:8a:ee:09:45:ab:20:f8:01:21: c2:85:5d:73:14:1e:68:e3:33:7a:1b:09:5f:84:84: 48:82:ae:89:a1:fd:c1:d2:05:c0:2e:26:8f:2f:0d: 3c:af:3c:2f:75:d3:a6:ee:38:5a:ef:bb:02:3f:54: e6:8f:6e:22:37:3b:21:7a:10:7e:1f:52:e6:84:1b: e6:a1:32:97:7a:ae:71:a8:3c:81:e1:30:bd:98:26: 7e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:BF:AC:1D:43:DA:94:AD:3C:C9:BA:2A:98:CA:F1:CD:8F:A6:2E:11 X509v3 Authority Key Identifier: keyid:AB:67:E8:2F:C8:6A:AC:A8:2A:CF:F8:DC:36:45:CD:71:61:01:3F:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:97:32:a7:4a:f5:dd:7f:3c:74:57:e9:39:fe:98:9b:e1:03: be:98:8b:f3:e4:74:45:cc:30:9d:94:3c:2d:69:1d:f6:1e:3a: 2b:f6:7b:d8:5f:15:1c:67:77:0c:d5:33:0a:5e:a6:8d:90:82: 88:4d:2a:af:8c:77:bb:e7:29:58:4e:41:1e:98:9f:39:ee:c9: a7:d0:77:14:41:81:a2:d0:ca:de:c5:23:51:d6:68:ea:82:fc: aa:c0:0b:01:99:89:56:50:6a:5b:ea:c9:7a:a3:cf:d8:fa:cd: b8:2e:5a:c9:77:fa:59:26:2b:d4:72:62:0b:34:1f:a3:a2:5a: 78:ce:b8:45:11:f1:53:29:3b:c8:31:29:13:78:54:13:12:03: 78:d7:96:e4:64:0f:f3:1c:f7:7e:f1:5a:17:28:c0:67:dc:31: 89:e9:99:17:05:e3:23:35:82:7b:b9:06:62:a4:92:11:87:db: ad:10:a9:00:2b:04:4c:f6:c6:f4:3e:20:fd:ba:a3:95:e1:b9: 4e:a6:75:19:20:e5:ea:6b:00:e7:1b:a4:b4:6f:51:0d:b1:af: 33:2c:1a:19:b9:a9:1a:94:67:2d:46:e2:59:a6:c2:ed:cd:29: 72:26:8c:e3:0b:cf:3c:c0:10:62:c7:d1:10:09:14:44:03:28: 16:6e:8c:8c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBAMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFFNEMxMTAvBgNVBAUTKEFCNjdFODJGQzg2QUFDQTgyQUNGRjhEQzM2NDVDRDcx NjEwMTNGNzYwHhcNMjYxMDA2MjAyMTMwWhcNMjYxMDEzMjAyMTMwWjAYMRYwFAYD VQQDEw02YWM1NTg0Yi1mOWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArk1bmtKxCPNWa+jP8gar9oCt4FIGJ24NIjkVdjM+UzVHUrsUfVlgwZXne3jK Brsh9BdS0c1qYw/Jlzm8a1yK/qPk+vwLbDTQlKO0DDEqYHJwimLgIEhX/ytcWq0b +ehpMIUWgYfzjzZlGmEM8F0hsj1xvLIVV0KOpjaB1EAiOuehd9UnCJT32ZlBg2ct 3Uyi7jF87T9tDkokwhEmcx/MoPw+VC9gOCdM2LqK7glFqyD4ASHChV1zFB5o4zN6 GwlfhIRIgq6Jof3B0gXALiaPLw08rzwvddOm7jha77sCP1Tmj24iNzshehB+H1Lm hBvmoTKXeq5xqDyB4TC9mCZ+9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAi/rB1D 2pStPMm6KpjK8c2Ppi4RMB8GA1UdIwQYMBaAFKtn6C/IaqyoKs/43DZFzXFhAT92 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUU0Qy83REFEQTU2Q0Q5 NEQxMUVBQTYwNEFDNTNDNEY5QUUwMi9xMmZvTDhocXJLZ3F6X2pjTmtYTmNXRUJQ M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3EyZm9MOGhxcktncXpfamNOa1hOY1dFQlAzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUU0Qy83REFEQTU2Q0Q5NEQxMUVBQTYwNEFDNTNDNEY5QUUwMi9xMmZvTDhocXJL Z3F6X2pjTmtYTmNXRUJQM1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAT5cyp0r13X88dFfpOf6Ym+EDvpiL8+R0RcwwnZQ8LWkd9h46K/Z72F8VHGd3 DNUzCl6mjZCCiE0qr4x3u+cpWE5BHpifOe7Jp9B3FEGBotDK3sUjUdZo6oL8qsAL AZmJVlBqW+rJeqPP2PrNuC5ayXf6WSYr1HJiCzQfo6JaeM64RRHxUyk7yDEpE3hU ExIDeNeW5GQP8xz3fvFaFyjAZ9wxiemZFwXjIzWCe7kGYqSSEYfbrRCpACsETPbG 9D4g/bqjleG5TqZ1GSDl6msA5xuktG9RDbGvMywaGbmpGpRnLUbiWabC7c0pciaM 4wvPPMAQYsfREAkURAMoFm6MjA== -----END CERTIFICATE-----Generated at Wed Oct 7 00:52:08 2026 by rpki-client