$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft File: qriBuCFHwwNrgPxnWTTcLkbOD38.mft (raw, json) Hash identifier: 9eIKrZrAmCEIkGfRT3nmeiAyMGu77ILET8qujrJxq7M= Subject key identifier: D3:38:7C:02:16:E9:44:33:17:72:79:6A:B2:D3:36:24:35:74:2F:04 Authority key identifier: AA:B8:81:B8:21:47:C3:03:6B:80:FC:67:59:34:DC:2E:46:CE:0F:7F Certificate issuer: /CN=A91F4EDE/serialNumber=AAB881B82147C3036B80FC675934DC2E46CE0F7F Certificate serial: 0703 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft Manifest number: 06CD Signing time: Thu 24 Sep 2026 22:14:17 +0000 Manifest this update: Thu 24 Sep 2026 22:14:16 +0000 Manifest next update: Thu 01 Oct 2026 22:14:16 +0000 Files and hashes: 1: qriBuCFHwwNrgPxnWTTcLkbOD38.crl (hash: nZkeUqTAsoZs27x+ckv2uO32kvdLArPqSbXdDN/+OsA=) 2: 5A9BFC3ABE7C11EB8BC25C1CC4F9AE02.roa (hash: NTWzneRsI6xBoZcMBa/cRNUEBFQFqDaPLGuJ4Y8AzAY=) 3: 7E859EFEE60411EF89467057C4F9AE02.roa (hash: DBTQzmV3HyHHyoJ4NWJ949FIY35oLUF9Ca78F0C+fRE=) 4: 8C4BB9AED9DB11EF9AE05220C4F9AE02.roa (hash: CN1S5iBG91fG5Dyt4QhTqMPNL4CwNQilfba/5yYIoFo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.crl rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 22:14:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1795 (0x703) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4EDE, serialNumber=AAB881B82147C3036B80FC675934DC2E46CE0F7F Validity Not Before: Sep 24 22:14:16 2026 GMT Not After : Oct 1 22:14:16 2026 GMT Subject: CN=6ab5a0b8-8a2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:55:cd:09:7d:b5:f1:b4:16:58:9c:0f:f7:ce: 77:a0:ce:5f:c8:ce:62:41:af:4c:23:79:f8:96:1e: 1b:ee:8d:0c:a2:a6:19:6e:ac:47:0d:b8:c8:51:65: 3c:1c:40:e2:9b:2e:01:8f:76:47:f2:c8:13:59:b0: b1:23:30:ae:f9:4f:50:1c:e2:47:32:9c:ed:98:f5: 44:a9:81:bc:42:92:16:ba:78:1f:86:6d:74:8e:39: 14:66:cb:1c:59:ba:3d:f0:54:b1:85:dd:5b:b6:ce: cd:b7:01:8b:9e:c2:90:ac:d5:86:0b:cf:9b:ca:fd: 68:c4:ff:c2:b2:f7:73:b6:72:d0:84:51:15:70:4c: 79:14:04:17:e3:ab:c6:34:55:26:3e:02:83:e1:c2: c4:c4:3b:d6:9f:cd:db:5f:be:a2:b8:29:df:f9:6a: 06:03:ac:df:f5:22:01:86:6f:cf:8c:62:c3:64:9b: e9:72:0f:02:b5:39:fb:48:6e:c9:76:26:fe:e3:35: 44:c2:86:83:66:e2:18:09:8f:47:48:94:4c:8d:e1: a0:56:e2:0b:0e:09:fe:c0:58:6d:19:ea:a3:0e:3c: 59:18:f4:cd:69:96:30:d3:56:db:79:ee:19:d2:3c: 19:66:29:45:8b:8d:45:67:93:9c:3a:84:5f:1f:b0: e8:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:38:7C:02:16:E9:44:33:17:72:79:6A:B2:D3:36:24:35:74:2F:04 X509v3 Authority Key Identifier: keyid:AA:B8:81:B8:21:47:C3:03:6B:80:FC:67:59:34:DC:2E:46:CE:0F:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:ed:ff:f8:de:da:f3:b8:d0:6f:cd:7e:e0:6e:aa:12:d9:b0: f0:2b:81:2a:6a:79:72:3a:f6:38:da:b8:d1:c3:ed:ce:88:d8: 6f:b8:cf:64:72:5b:fe:dd:7a:cf:36:5b:4f:58:43:19:dc:66: 75:aa:58:7f:7e:a5:f0:d7:e2:e3:6e:09:ef:ea:e9:92:67:72: e4:68:2d:e9:93:64:f5:38:24:8f:8c:c4:78:83:4e:73:26:3e: 99:d3:fa:81:4b:bd:54:3e:7a:d3:59:df:da:9f:cc:f7:d2:2a: f2:e5:f9:a6:77:a3:fb:87:2d:b3:5e:be:4b:12:81:5f:e5:da: 9d:f2:1f:03:15:05:e0:a2:fe:4d:2f:3a:11:59:a7:6e:a0:af: af:c0:90:9b:6a:43:a3:b9:37:51:48:27:38:f3:6b:24:35:24: 6c:4b:43:df:5f:d8:16:55:fa:ee:7d:43:f1:46:05:ab:4e:09: 00:87:c4:bd:c6:e6:18:27:a5:fd:73:69:9c:74:d0:db:80:6d: 63:dd:e2:a4:7b:62:62:85:41:d1:76:ce:d0:41:7d:ba:f2:3a: ec:ab:29:d2:a0:ba:37:9a:e9:11:41:96:ec:cb:6a:3d:4e:67: 2d:82:26:a3:33:ee:3c:4f:ec:1f:16:5a:43:84:51:de:22:bd: 71:a0:45:66 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBwMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRFREUxMTAvBgNVBAUTKEFBQjg4MUI4MjE0N0MzMDM2QjgwRkM2NzU5MzREQzJF NDZDRTBGN0YwHhcNMjYwOTI0MjIxNDE2WhcNMjYxMDAxMjIxNDE2WjAYMRYwFAYD VQQDEw02YWI1YTBiOC04YTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtFXNCX218bQWWJwP9853oM5fyM5iQa9MI3n4lh4b7o0MoqYZbqxHDbjIUWU8 HEDimy4Bj3ZH8sgTWbCxIzCu+U9QHOJHMpztmPVEqYG8QpIWungfhm10jjkUZssc Wbo98FSxhd1bts7NtwGLnsKQrNWGC8+byv1oxP/CsvdztnLQhFEVcEx5FAQX46vG NFUmPgKD4cLExDvWn83bX76iuCnf+WoGA6zf9SIBhm/PjGLDZJvpcg8CtTn7SG7J dib+4zVEwoaDZuIYCY9HSJRMjeGgVuILDgn+wFhtGeqjDjxZGPTNaZYw01bbee4Z 0jwZZilFi41FZ5OcOoRfH7DogwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNM4fAIW 6UQzF3J5arLTNiQ1dC8EMB8GA1UdIwQYMBaAFKq4gbghR8MDa4D8Z1k03C5Gzg9/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEVERS8yQ0IwMzI1OEJF NzkxMUVCOTUxMThCMTlDNEY5QUUwMi9xcmlCdUNGSHd3TnJnUHhuV1RUY0xrYk9E MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FyaUJ1Q0ZId3dOcmdQeG5XVFRjTGtiT0QzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEVERS8yQ0IwMzI1OEJFNzkxMUVCOTUxMThCMTlDNEY5QUUwMi9xcmlCdUNGSHd3 TnJnUHhuV1RUY0xrYk9EMzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAae3/+N7a87jQb81+4G6qEtmw8CuBKmp5cjr2ONq40cPtzojYb7jPZHJb/t16 zzZbT1hDGdxmdapYf36l8Nfi424J7+rpkmdy5Ggt6ZNk9Tgkj4zEeINOcyY+mdP6 gUu9VD5601nf2p/M99Iq8uX5pnej+4cts16+SxKBX+XanfIfAxUF4KL+TS86EVmn bqCvr8CQm2pDo7k3UUgnOPNrJDUkbEtD31/YFlX67n1D8UYFq04JAIfEvcbmGCel /XNpnHTQ24BtY93ipHtiYoVB0XbO0EF9uvI67Ksp0qC6N5rpEUGW7MtqPU5nLYIm ozPuPE/sHxZaQ4RR3iK9caBFZg== -----END CERTIFICATE-----Generated at Sat Sep 26 10:47:21 2026 by rpki-client