$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft File: QLjSLvI7N7C55T88ThDWrj64qZ8.mft (raw, json) Hash identifier: ZBRYiFN9uqfYoknVtxTSxVgezkuPA7Ms1AM3q5Ov9aw= Subject key identifier: D0:A4:0E:14:51:5B:BE:E4:40:BF:97:67:68:13:76:D2:89:2A:AD:8E Authority key identifier: 40:B8:D2:2E:F2:3B:37:B0:B9:E5:3F:3C:4E:10:D6:AE:3E:B8:A9:9F Certificate issuer: /CN=A91E689D/serialNumber=40B8D22EF23B37B0B9E53F3C4E10D6AE3EB8A99F Certificate serial: 358D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLjSLvI7N7C55T88ThDWrj64qZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft Manifest number: 3584 Signing time: Tue 22 Sep 2026 14:59:04 +0000 Manifest this update: Tue 22 Sep 2026 14:59:04 +0000 Manifest next update: Tue 29 Sep 2026 14:59:04 +0000 Files and hashes: 1: QLjSLvI7N7C55T88ThDWrj64qZ8.crl (hash: falsyfnfZiwExYZr7rti4gjaLfxSYHyjICfdQWn22/g=) 2: 3773AC0C8B6111EFA3A49037C4F9AE02.roa (hash: uzaZKpbjTrWsFfOiIa8WfR03ueqsK9oa9a46XDa7tCk=) 3: v1xtMR54ekuDn4r5wtgrvOTr2YE.asa (hash: kV7twXJrtxJmXDA+tl8S41Q4+TVoeE0RO87ddCo+mxk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.crl rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLjSLvI7N7C55T88ThDWrj64qZ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 14:59:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13709 (0x358d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E689D, serialNumber=40B8D22EF23B37B0B9E53F3C4E10D6AE3EB8A99F Validity Not Before: Sep 22 14:59:04 2026 GMT Not After : Sep 29 14:59:04 2026 GMT Subject: CN=6ab297b8-4a1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3e:b2:16:3a:57:7c:ac:e0:e2:2f:43:a3:b9: 2b:b6:52:e1:3c:35:91:6d:ad:82:a0:92:8f:e9:c2: dc:d4:c4:f0:30:0c:dd:b2:26:ef:9f:bb:bd:ce:84: a5:6a:b4:9a:03:86:ee:13:47:42:72:a5:80:88:c1: 69:21:6b:d9:12:4c:b3:0a:22:14:5f:5b:b0:27:32: 0f:ce:1c:72:c9:a1:57:a1:c0:3b:d3:7d:d8:66:5c: df:57:2a:f0:b5:fb:d2:23:04:c0:4e:aa:ef:e7:2a: 76:4e:38:41:3a:fa:48:47:5a:44:93:0e:28:2a:f7: df:ab:dc:71:bd:0e:5d:48:e7:4e:eb:0f:74:4e:b4: 62:f8:04:10:3d:99:83:f1:bd:4e:98:25:d3:a9:92: cf:89:8e:19:c2:d5:3b:93:25:ed:74:21:1e:2d:62: 12:0e:ba:12:69:02:24:ce:4c:b8:a3:d3:41:12:4e: af:0c:d0:5e:8b:d2:12:97:56:0b:d6:a7:e3:36:82: 6e:50:d8:26:5c:e7:e0:a8:5a:55:26:a5:5b:43:c8: 86:61:bf:cf:3d:0c:8a:ca:77:7e:c7:1d:4c:d7:62: 26:bf:85:14:9e:24:01:ed:1a:69:f6:1f:03:55:86: fe:bd:84:8e:ca:c3:15:f2:12:9d:02:a2:89:ad:c5: 4a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:A4:0E:14:51:5B:BE:E4:40:BF:97:67:68:13:76:D2:89:2A:AD:8E X509v3 Authority Key Identifier: keyid:40:B8:D2:2E:F2:3B:37:B0:B9:E5:3F:3C:4E:10:D6:AE:3E:B8:A9:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLjSLvI7N7C55T88ThDWrj64qZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:a0:52:ce:9b:4e:48:99:ba:92:8d:20:0d:c5:dc:00:00:ca: 24:8e:63:a6:fd:d9:21:78:ba:1c:9e:6d:70:a2:ff:23:7d:77: 18:77:20:5e:92:bf:77:f8:b2:cc:44:34:32:24:5e:53:74:90: b0:b1:d3:0c:b7:6f:88:d4:f4:c5:f9:70:80:74:e9:d6:45:8e: ac:ac:3b:01:41:e7:36:72:e4:be:bf:ea:00:d3:21:82:bc:e4: 26:a2:d9:b2:10:4a:a3:b6:59:ae:ed:18:07:b5:72:ca:96:12: 62:ed:6d:8a:c0:0f:ac:d1:94:68:53:d3:41:c0:09:a7:0a:25: b4:6d:73:d8:28:67:27:11:9c:96:b2:ca:24:69:e6:01:e4:75: a7:6d:2a:ff:aa:9a:6b:6d:ff:92:3c:a6:bc:d9:33:a2:60:93: db:97:68:1c:7c:cf:fe:db:3d:17:fd:69:6a:78:81:c8:04:53: 02:79:df:55:39:0c:a9:9b:80:39:c9:4f:1b:c8:85:96:33:72: 66:a0:3d:11:18:8d:c7:8a:7f:52:12:1c:d7:10:dd:77:56:ce: 30:4f:67:0d:c8:dd:cf:f2:d4:0d:92:22:cb:47:89:bf:51:68: 6e:bf:3e:f1:1c:33:6b:ac:12:0a:c3:44:46:d7:98:92:c5:dd: 73:b6:0e:62 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTY4OUQxMTAvBgNVBAUTKDQwQjhEMjJFRjIzQjM3QjBCOUU1M0YzQzRFMTBENkFF M0VCOEE5OUYwHhcNMjYwOTIyMTQ1OTA0WhcNMjYwOTI5MTQ1OTA0WjAYMRYwFAYD VQQDEw02YWIyOTdiOC00YTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyj6yFjpXfKzg4i9Do7krtlLhPDWRba2CoJKP6cLc1MTwMAzdsibvn7u9zoSl arSaA4buE0dCcqWAiMFpIWvZEkyzCiIUX1uwJzIPzhxyyaFXocA7033YZlzfVyrw tfvSIwTATqrv5yp2TjhBOvpIR1pEkw4oKvffq9xxvQ5dSOdO6w90TrRi+AQQPZmD 8b1OmCXTqZLPiY4ZwtU7kyXtdCEeLWISDroSaQIkzky4o9NBEk6vDNBei9ISl1YL 1qfjNoJuUNgmXOfgqFpVJqVbQ8iGYb/PPQyKynd+xx1M12Imv4UUniQB7Rpp9h8D VYb+vYSOysMV8hKdAqKJrcVKHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNCkDhRR W77kQL+XZ2gTdtKJKq2OMB8GA1UdIwQYMBaAFEC40i7yOzewueU/PE4Q1q4+uKmf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjg5RC9DN0M2M0RBODFE OUUxMUUyODNDRUZBOEUwOEIwMkNEMi9RTGpTTHZJN043QzU1VDg4VGhEV3JqNjRx WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FMalNMdkk3TjdDNTVUODhUaERXcmo2NHFaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Njg5RC9DN0M2M0RBODFEOUUxMUUyODNDRUZBOEUwOEIwMkNEMi9RTGpTTHZJN043 QzU1VDg4VGhEV3JqNjRxWjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAaBSzptOSJm6ko0gDcXcAADKJI5jpv3ZIXi6HJ5tcKL/I313GHcgXpK/d/iy zEQ0MiReU3SQsLHTDLdviNT0xflwgHTp1kWOrKw7AUHnNnLkvr/qANMhgrzkJqLZ shBKo7ZZru0YB7VyypYSYu1tisAPrNGUaFPTQcAJpwoltG1z2ChnJxGclrLKJGnm AeR1p20q/6qaa23/kjymvNkzomCT25doHHzP/ts9F/1paniByARTAnnfVTkMqZuA OclPG8iFljNyZqA9ERiNx4p/UhIc1xDdd1bOME9nDcjdz/LUDZIiy0eJv1Fobr8+ 8Rwza6wSCsNERteYksXdc7YOYg== -----END CERTIFICATE-----Generated at Wed Sep 23 21:56:56 2026 by rpki-client