$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.mft File: q2JivH0C7BrUi3HamLc9IqNi2vA.mft (raw, json) Hash identifier: 4t+psOgaMLRaD2lt/HoyWZKujMEOVu/4F6vGvPjusQ0= Subject key identifier: 9F:50:AB:06:54:29:81:1C:B9:D2:90:F0:1C:DC:56:3A:F7:13:3B:8F Authority key identifier: AB:62:62:BC:7D:02:EC:1A:D4:8B:71:DA:98:B7:3D:22:A3:62:DA:F0 Certificate issuer: /CN=A91E2454/serialNumber=AB6262BC7D02EC1AD48B71DA98B73D22A362DAF0 Certificate serial: 371D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.mft Manifest number: 362D Signing time: Sat 26 Sep 2026 14:29:33 +0000 Manifest this update: Sat 26 Sep 2026 14:29:32 +0000 Manifest next update: Sat 03 Oct 2026 14:29:32 +0000 Files and hashes: 1: q2JivH0C7BrUi3HamLc9IqNi2vA.crl (hash: 4xVSAnBWyvCfLMPt9M1mtapEa0XaiPHs4Q18nl1mrq0=) 2: 4BF67550A4C911E782854F50C4F9AE02.roa (hash: f3qU6tlwehhcmw+j9t9F4SExzXSKSjEABu7b7Oi3kuk=) 3: 8207CCA0906C11EC86E8B711C4F9AE02.roa (hash: HGBUZghw2mrH37viSTYGdL7UxbtP3kpsrCzGnWhLnVU=) 4: 78123422B0CD11E58B55FC73C4F9AE02.roa (hash: w/xkPDWtvjzhfQW3Zf8fDbO/CqBdGqSzN3GtrP1PUo8=) 5: 7D920C1AB0CD11E58B55FC73C4F9AE02.roa (hash: knSiwSZTuJB5L8civuaUh8rAh8cmbNdU18vutdd1ebk=) 6: 7B938024B0CD11E58B55FC73C4F9AE02.roa (hash: /QQiHNO+P4zS7clMch+1xG2dmlltL/7vNQJGue0Q24E=) 7: F1F087928C6B11F0B1A50E82C4F9AE02.roa (hash: kuzwCvIHtKelM7oshMzAb2U462l4e0HmxA10PXja6PA=) 8: 4C9925F2A4C911E782854F50C4F9AE02.roa (hash: NUP0co51SrQ7MBIOUbm3rcePgeq0Qam5xEhiKSlEwl4=) 9: 9C193BAC08C511EDBC862E48C4F9AE02.roa (hash: SJVE7ZBsoRSsliTmJf9TKg9PsayamV5jFN7WqlX3xvc=) 10: 7F4D30ACB0CD11E58B55FC73C4F9AE02.roa (hash: N79DDK5pn6TCAon8GJdsX02x5/pCsRg1kmXulJOa3DU=) 11: 4D5247EEA4C911E782854F50C4F9AE02.roa (hash: rEfB0wTEVedizbjd1aa4stNP7Lpi5g6RaGy1a4umZiM=) 12: D4B25B928C6B11F09545B981C4F9AE02.roa (hash: rpLxYdKFNSJ5rCBHHzTbeOHhuwX5lGKEDVa6Y6/p+/g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.crl rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 14:29:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14109 (0x371d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2454, serialNumber=AB6262BC7D02EC1AD48B71DA98B73D22A362DAF0 Validity Not Before: Sep 26 14:29:32 2026 GMT Not After : Oct 3 14:29:32 2026 GMT Subject: CN=6ab7d6cd-dbef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:47:11:bd:38:58:2f:94:04:1c:e5:25:7e:6f: 34:fb:c6:0c:b9:bc:f6:bb:fb:e1:f8:f0:af:c0:81: 97:30:86:8c:eb:56:9a:68:fa:21:8a:04:52:4c:6a: 27:c1:45:48:e9:59:53:bb:7d:c0:ce:f5:54:01:2b: aa:46:6e:fc:92:6b:a2:7c:c7:69:d3:f0:a0:d3:1b: 31:90:7d:9b:17:f7:f2:c0:69:06:14:d6:d0:9d:ca: 5f:88:18:69:40:ee:35:9b:0d:bc:ef:a3:c1:ae:1b: 64:16:19:6e:8f:62:64:00:3c:89:4f:9c:ba:68:d8: 20:9e:75:75:ef:4e:c8:53:30:78:f8:b1:a7:e5:2a: 30:0c:82:42:b9:1f:f2:e1:84:41:d2:2a:cc:1d:e6: 2f:bb:a8:aa:ed:b4:80:d6:7b:02:19:6a:fa:50:88: f8:ff:33:10:af:9f:2a:db:38:3e:f6:d7:b4:76:ce: 89:f6:b5:52:c7:67:41:9d:e6:ae:4c:e4:91:46:95: 4f:78:bc:e4:58:b3:af:2e:50:e0:5f:30:37:15:68: 50:40:c1:9a:f3:e8:03:5e:be:de:17:18:d2:0e:71: 96:76:b7:1c:23:3b:0f:fe:9b:57:72:30:53:73:c9: 5d:c8:2e:b6:7f:c8:df:16:10:3d:45:2a:9f:89:51: 56:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:50:AB:06:54:29:81:1C:B9:D2:90:F0:1C:DC:56:3A:F7:13:3B:8F X509v3 Authority Key Identifier: keyid:AB:62:62:BC:7D:02:EC:1A:D4:8B:71:DA:98:B7:3D:22:A3:62:DA:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:dc:83:5f:50:98:99:db:a5:1a:25:e3:e7:4e:ef:f6:f2:7c: f0:e8:18:74:ea:5b:5a:e3:86:08:96:5b:55:5a:ff:23:d2:46: 65:51:34:fa:b0:63:bb:1d:48:ee:26:53:10:e0:cc:ef:d4:65: 11:14:8b:a0:ea:a4:80:90:0f:14:a0:50:f4:52:bc:50:bc:fd: 21:3d:aa:aa:46:ae:2c:3e:15:5a:09:3a:8c:27:ba:8b:a9:e9: a7:b3:f3:5c:99:de:8c:b2:84:72:d9:06:57:da:8c:e0:4f:76: 41:95:44:07:92:7e:9b:35:8e:86:a3:a4:03:53:d2:00:52:c1: 3d:d2:41:fc:dc:05:30:ec:b7:a2:16:9b:fb:64:ee:01:b2:7f: ff:c6:cf:6d:5d:3c:03:09:ad:ad:39:89:d3:17:92:27:3f:bb: bd:39:77:ea:60:0f:15:da:54:af:fd:1a:1c:a4:e9:c9:11:5d: 84:70:18:67:4a:4d:58:ff:d2:b1:ce:39:7b:4a:bf:78:9d:af: bf:66:83:09:cb:fe:ff:2c:93:ea:96:e9:9c:48:d9:1f:ba:fa: cb:e3:1a:82:6c:9d:48:bb:f4:d6:7b:68:e7:0b:57:8b:41:cc: 67:c4:9e:ab:b6:23:81:03:9b:1a:6b:b0:a7:98:95:10:bb:4c: bb:b0:e5:73 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNx0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI0NTQxMTAvBgNVBAUTKEFCNjI2MkJDN0QwMkVDMUFENDhCNzFEQTk4QjczRDIy QTM2MkRBRjAwHhcNMjYwOTI2MTQyOTMyWhcNMjYxMDAzMTQyOTMyWjAYMRYwFAYD VQQDEw02YWI3ZDZjZC1kYmVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqkcRvThYL5QEHOUlfm80+8YMubz2u/vh+PCvwIGXMIaM61aaaPohigRSTGon wUVI6VlTu33AzvVUASuqRm78kmuifMdp0/Cg0xsxkH2bF/fywGkGFNbQncpfiBhp QO41mw2876PBrhtkFhluj2JkADyJT5y6aNggnnV1707IUzB4+LGn5SowDIJCuR/y 4YRB0irMHeYvu6iq7bSA1nsCGWr6UIj4/zMQr58q2zg+9te0ds6J9rVSx2dBneau TOSRRpVPeLzkWLOvLlDgXzA3FWhQQMGa8+gDXr7eFxjSDnGWdrccIzsP/ptXcjBT c8ldyC62f8jfFhA9RSqfiVFWZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ9QqwZU KYEcudKQ8BzcVjr3EzuPMB8GA1UdIwQYMBaAFKtiYrx9Auwa1Itx2pi3PSKjYtrw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjQ1NC9ENEMzMEI0MjFE ODcxMUUyQTE5ODIyRTAwOEIwMkNEMi9xMkppdkgwQzdCclVpM0hhbUxjOUlxTmky dkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3EySml2SDBDN0JyVWkzSGFtTGM5SXFOaTJ2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjQ1NC9ENEMzMEI0MjFEODcxMUUyQTE5ODIyRTAwOEIwMkNEMi9xMkppdkgwQzdC clVpM0hhbUxjOUlxTmkydkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFdyDX1CYmdulGiXj507v9vJ88OgYdOpbWuOGCJZbVVr/I9JGZVE0+rBjux1I 7iZTEODM79RlERSLoOqkgJAPFKBQ9FK8ULz9IT2qqkauLD4VWgk6jCe6i6npp7Pz XJnejLKEctkGV9qM4E92QZVEB5J+mzWOhqOkA1PSAFLBPdJB/NwFMOy3ohab+2Tu AbJ//8bPbV08AwmtrTmJ0xeSJz+7vTl36mAPFdpUr/0aHKTpyRFdhHAYZ0pNWP/S sc45e0q/eJ2vv2aDCcv+/yyT6pbpnEjZH7r6y+MagmydSLv01nto5wtXi0HMZ8Se q7YjgQObGmuwp5iVELtMu7Dlcw== -----END CERTIFICATE-----Generated at Sun Sep 27 00:53:01 2026 by rpki-client