$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.mft File: qX6qTW8VW40nxAro4yfZulLDS0I.mft (raw, json) Hash identifier: BzbhLkFWRbMphK0YVajYElE21ZlpMFmHDnqMQ5ERJ/I= Subject key identifier: D6:A3:B4:EE:76:CC:D2:E0:F4:7A:BC:C3:15:25:70:35:ED:58:B8:E2 Authority key identifier: A9:7E:AA:4D:6F:15:5B:8D:27:C4:0A:E8:E3:27:D9:BA:52:C3:4B:42 Certificate issuer: /CN=A91EB4AF/serialNumber=A97EAA4D6F155B8D27C40AE8E327D9BA52C34B42 Certificate serial: 0438 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qX6qTW8VW40nxAro4yfZulLDS0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.mft Manifest number: 0411 Signing time: Wed 23 Sep 2026 00:05:00 +0000 Manifest this update: Wed 23 Sep 2026 00:04:59 +0000 Manifest next update: Wed 30 Sep 2026 00:04:59 +0000 Files and hashes: 1: qX6qTW8VW40nxAro4yfZulLDS0I.crl (hash: /WtEUJfE5mWtY+PcPuDIq64RidARzylDE9NmIlL7FsM=) 2: CDADA70EAC5C11F1B3EC6F014811F970.roa (hash: iknc7UxTk4DrYKW2ODVXcafzsP0DlYNW9/USeZUE4ng=) 3: 595774341B6211F0B9733473C4F9AE02.roa (hash: TViW6+JPazKkRXhQ7ni+cLWTzOT4kOhtajYLtf39390=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.crl rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qX6qTW8VW40nxAro4yfZulLDS0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 00:04:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1080 (0x438) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB4AF, serialNumber=A97EAA4D6F155B8D27C40AE8E327D9BA52C34B42 Validity Not Before: Sep 23 00:04:59 2026 GMT Not After : Sep 30 00:04:59 2026 GMT Subject: CN=6ab317ac-9d1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c2:fa:c8:e8:f8:1b:60:f7:93:e1:25:95:96: cb:6c:21:d7:5f:6d:f7:68:c4:fa:79:c3:ae:52:4e: 13:ec:5d:6d:08:ca:00:29:45:1c:6d:c1:16:07:f9: e3:e9:ca:cb:7c:25:ab:05:24:7d:fe:8e:5d:8e:11: 0d:0b:d8:d9:17:7e:99:c9:d3:eb:be:00:ba:65:73: 57:a0:e5:84:a5:f3:13:6a:61:f9:a3:44:06:60:8c: 46:1f:fe:74:31:cd:ed:d3:fd:7f:20:8e:2b:98:fe: 2a:ad:d0:62:d6:c9:51:9e:8b:f7:f3:07:b0:a8:89: ab:42:f2:7c:81:48:d3:db:d0:1c:17:1a:b8:cf:24: 4a:52:37:d9:3f:10:f5:c8:a1:88:0d:c0:47:93:de: 2b:ed:a0:a6:f1:c0:25:2a:e9:89:d1:51:9a:cd:c8: c2:26:55:f2:ad:04:9d:58:10:1d:1d:ee:2f:a7:91: aa:09:30:85:0f:34:83:47:d5:91:93:92:45:fd:cf: f8:4d:b6:9b:46:f9:eb:a3:b5:18:68:89:a9:ea:33: 23:b8:a2:38:25:90:d1:8a:33:14:54:81:5e:2d:e9: e0:13:6e:32:12:81:bd:47:64:b4:d3:52:04:5e:ee: ca:1a:f3:df:64:09:4f:10:85:ce:be:ea:2f:3f:0b: e6:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:A3:B4:EE:76:CC:D2:E0:F4:7A:BC:C3:15:25:70:35:ED:58:B8:E2 X509v3 Authority Key Identifier: keyid:A9:7E:AA:4D:6F:15:5B:8D:27:C4:0A:E8:E3:27:D9:BA:52:C3:4B:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qX6qTW8VW40nxAro4yfZulLDS0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:09:66:d8:5b:bd:4d:aa:e6:2e:18:cd:56:77:dd:99:41:e4: 1f:24:e2:e4:fa:fe:5c:02:da:bb:88:1f:9d:49:41:4c:fe:77: 5a:f7:d9:d6:bd:29:99:01:5b:67:ca:31:7c:e3:51:4b:68:32: 71:4d:5d:a4:bd:e2:52:3a:be:9c:77:95:33:99:f2:1a:c0:90: 31:a5:0d:87:df:12:9f:68:22:f6:3a:6e:87:20:37:b6:57:c4: d4:40:e9:1c:d4:c4:90:55:a5:05:d4:b5:a8:13:60:66:8c:29: 83:d4:20:0c:51:8a:d1:a0:15:5d:76:21:ee:79:67:67:35:d6: b0:15:be:18:67:8f:52:97:1b:4d:84:d9:91:c1:64:b7:20:d7: a4:de:40:d0:fb:99:7c:49:c8:11:1c:56:d6:c6:db:29:1c:39: 82:e3:2e:4c:97:0f:dd:ee:7b:ee:f8:8b:43:c5:56:53:aa:2b: d1:db:af:35:65:e4:ce:f6:93:69:fa:03:d8:66:67:28:04:82: 37:d7:58:a5:e4:6f:6e:c0:b1:26:5e:a9:29:a3:4a:1a:e6:4d: 09:fd:e0:7e:6a:82:6d:b3:2d:d0:9c:41:1e:b6:e1:c9:a4:4f: e7:b8:fb:b7:9e:2c:28:18:71:6d:31:6b:44:2a:38:e6:4a:d4: 69:ac:53:0c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBDgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI0QUYxMTAvBgNVBAUTKEE5N0VBQTRENkYxNTVCOEQyN0M0MEFFOEUzMjdEOUJB NTJDMzRCNDIwHhcNMjYwOTIzMDAwNDU5WhcNMjYwOTMwMDAwNDU5WjAYMRYwFAYD VQQDEw02YWIzMTdhYy05ZDFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvcL6yOj4G2D3k+EllZbLbCHXX233aMT6ecOuUk4T7F1tCMoAKUUcbcEWB/nj 6crLfCWrBSR9/o5djhENC9jZF36ZydPrvgC6ZXNXoOWEpfMTamH5o0QGYIxGH/50 Mc3t0/1/II4rmP4qrdBi1slRnov38wewqImrQvJ8gUjT29AcFxq4zyRKUjfZPxD1 yKGIDcBHk94r7aCm8cAlKumJ0VGazcjCJlXyrQSdWBAdHe4vp5GqCTCFDzSDR9WR k5JF/c/4TbabRvnro7UYaImp6jMjuKI4JZDRijMUVIFeLengE24yEoG9R2S001IE Xu7KGvPfZAlPEIXOvuovPwvmOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNajtO52 zNLg9Hq8wxUlcDXtWLjiMB8GA1UdIwQYMBaAFKl+qk1vFVuNJ8QK6OMn2bpSw0tC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjRBRi9DQzdCMjU1QURD QTkxMUVDOTRFM0UwMjlDNEY5QUUwMi9xWDZxVFc4Vlc0MG54QXJvNHlmWnVsTERT MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FYNnFUVzhWVzQwbnhBcm80eWZadWxMRFMwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjRBRi9DQzdCMjU1QURDQTkxMUVDOTRFM0UwMjlDNEY5QUUwMi9xWDZxVFc4Vlc0 MG54QXJvNHlmWnVsTERTMEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApQlm2Fu9TarmLhjNVnfdmUHkHyTi5Pr+XALau4gfnUlBTP53WvfZ1r0pmQFb Z8oxfONRS2gycU1dpL3iUjq+nHeVM5nyGsCQMaUNh98Sn2gi9jpuhyA3tlfE1EDp HNTEkFWlBdS1qBNgZowpg9QgDFGK0aAVXXYh7nlnZzXWsBW+GGePUpcbTYTZkcFk tyDXpN5A0PuZfEnIERxW1sbbKRw5guMuTJcP3e577viLQ8VWU6or0duvNWXkzvaT afoD2GZnKASCN9dYpeRvbsCxJl6pKaNKGuZNCf3gfmqCbbMt0JxBHrbhyaRP57j7 t54sKBhxbTFrRCo45krUaaxTDA== -----END CERTIFICATE-----Generated at Thu Sep 24 20:46:13 2026 by rpki-client