$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft File: QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft (raw, json) Hash identifier: k1iMALU078BTPbDc7gE5+8bq729MXA9UH5NDtPdWJyw= Subject key identifier: AF:F6:94:CC:FE:E4:59:43:AC:F8:64:AC:E8:E5:11:CF:17:DB:E5:A3 Authority key identifier: 41:05:97:D5:B0:00:43:E2:0A:A2:40:9E:32:71:ED:4F:41:E1:31:C7 Certificate issuer: /CN=A91F95E2/serialNumber=410597D5B00043E20AA2409E3271ED4F41E131C7 Certificate serial: 053A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQWX1bAAQ-IKokCeMnHtT0HhMcc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft Manifest number: 0533 Signing time: Sun 20 Sep 2026 23:20:34 +0000 Manifest this update: Sun 20 Sep 2026 23:20:33 +0000 Manifest next update: Sun 27 Sep 2026 23:20:33 +0000 Files and hashes: 1: QQWX1bAAQ-IKokCeMnHtT0HhMcc.crl (hash: ooTL1BOasQAwe0i/7yKM7p0ItbcbVwuHOlQj9Ljl8ts=) 2: 6229E2DC5C7911EC8C7BD812C4F9AE02.roa (hash: 8WBT2mYpXItDKfO9g6OLEzS6VivEAPbuFf/SLXRWDPw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.crl rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQWX1bAAQ-IKokCeMnHtT0HhMcc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 23:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1338 (0x53a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F95E2, serialNumber=410597D5B00043E20AA2409E3271ED4F41E131C7 Validity Not Before: Sep 20 23:20:33 2026 GMT Not After : Sep 27 23:20:33 2026 GMT Subject: CN=6ab06a42-3d70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3b:9a:78:77:44:44:76:c3:15:f8:97:13:10: 21:d7:88:1a:27:0b:b3:a2:78:fd:46:04:8a:8e:df: e6:35:9c:c8:5b:e2:a6:dd:bf:10:ef:24:b7:bf:6a: 3d:8a:34:7d:59:37:22:d9:52:19:18:ad:b4:2b:14: 4c:3e:fa:c3:45:f2:3e:e5:75:93:ae:ca:ee:44:99: 4b:b5:80:d7:50:bd:2b:ed:3b:84:ba:7e:cd:e5:17: ff:69:07:55:b9:75:7e:3d:24:64:a6:75:01:33:09: 33:bd:6e:b0:9d:51:d4:c6:2f:e0:66:d7:58:22:cb: 58:29:d7:20:fa:21:19:fe:db:b6:3c:08:d1:a4:38: 06:3c:48:74:ac:9f:d0:01:5b:60:a0:a3:3c:c1:b6: ea:54:26:d5:bb:96:98:18:06:d8:2a:58:31:c4:4f: 37:43:28:eb:42:1c:34:d4:79:38:13:9d:46:c2:5e: 48:51:08:cf:e2:10:93:f3:c2:19:6e:7d:0e:4d:92: 82:ca:e8:c1:52:db:7d:86:6e:21:5b:cf:b3:f4:6c: 0a:00:43:86:94:5c:72:5d:b6:36:1a:13:37:b6:b7: a8:9e:8f:46:f9:01:b1:54:09:73:b5:fd:99:9b:24: b8:9a:8c:e7:87:2d:bb:68:b2:d3:9a:c7:ad:b7:ca: cc:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:F6:94:CC:FE:E4:59:43:AC:F8:64:AC:E8:E5:11:CF:17:DB:E5:A3 X509v3 Authority Key Identifier: keyid:41:05:97:D5:B0:00:43:E2:0A:A2:40:9E:32:71:ED:4F:41:E1:31:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQWX1bAAQ-IKokCeMnHtT0HhMcc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:ad:4e:22:63:d5:dd:8f:cc:1b:4f:a3:67:31:5c:40:71:b0: d6:65:77:ba:8a:00:5d:f9:78:03:cf:f6:cd:eb:da:15:bc:71: 02:c0:6d:36:4e:17:62:73:be:e4:02:3e:30:a4:bf:e3:50:f0: e0:a7:40:07:68:1f:c0:94:10:2f:68:8d:c5:0c:47:ef:3a:ce: ce:fc:ae:4d:44:41:6f:81:92:de:f0:c3:84:1b:4c:c3:f1:7f: e6:a1:78:97:84:4d:5a:7d:25:9f:8b:68:40:96:cf:4a:fb:af: 82:c3:a1:c3:8b:27:01:87:f3:77:94:dd:a7:9b:11:e0:3d:0a: 6a:dd:33:05:7c:9a:28:6a:d2:85:0f:8d:f4:41:09:9f:d7:6e: 69:f1:8e:e0:d1:02:80:e6:4b:43:d6:a7:c5:c6:9b:b1:3f:89: be:18:b8:bd:da:c7:58:b5:81:7c:35:1c:b6:cd:91:e3:de:97: a0:25:83:59:f7:06:1f:81:1c:da:9c:74:a7:51:8c:87:21:d1: 91:bc:04:87:f5:c9:61:b0:fd:88:66:f0:55:4b:2b:ec:1a:72: 23:91:8b:5a:7c:97:55:7c:62:97:65:d5:bc:a6:98:eb:28:85: ee:37:48:98:39:86:59:2b:06:eb:77:9d:08:db:cc:27:5d:c0: 5e:24:b2:55 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBTowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjk1RTIxMTAvBgNVBAUTKDQxMDU5N0Q1QjAwMDQzRTIwQUEyNDA5RTMyNzFFRDRG NDFFMTMxQzcwHhcNMjYwOTIwMjMyMDMzWhcNMjYwOTI3MjMyMDMzWjAYMRYwFAYD VQQDEw02YWIwNmE0Mi0zZDcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArjuaeHdERHbDFfiXExAh14gaJwuzonj9RgSKjt/mNZzIW+Km3b8Q7yS3v2o9 ijR9WTci2VIZGK20KxRMPvrDRfI+5XWTrsruRJlLtYDXUL0r7TuEun7N5Rf/aQdV uXV+PSRkpnUBMwkzvW6wnVHUxi/gZtdYIstYKdcg+iEZ/tu2PAjRpDgGPEh0rJ/Q AVtgoKM8wbbqVCbVu5aYGAbYKlgxxE83QyjrQhw01Hk4E51Gwl5IUQjP4hCT88IZ bn0OTZKCyujBUtt9hm4hW8+z9GwKAEOGlFxyXbY2GhM3treono9G+QGxVAlztf2Z myS4moznhy27aLLTmsett8rMHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK/2lMz+ 5FlDrPhkrOjlEc8X2+WjMB8GA1UdIwQYMBaAFEEFl9WwAEPiCqJAnjJx7U9B4THH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTVFMi8xMTg1NDVGQTVD NzUxMUVDODlBQkZBMEJDNEY5QUUwMi9RUVdYMWJBQVEtSUtva0NlTW5IdFQwSGhN Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FRV1gxYkFBUS1JS29rQ2VNbkh0VDBIaE1jYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTVFMi8xMTg1NDVGQTVDNzUxMUVDODlBQkZBMEJDNEY5QUUwMi9RUVdYMWJBQVEt SUtva0NlTW5IdFQwSGhNY2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANK1OImPV3Y/MG0+jZzFcQHGw1mV3uooAXfl4A8/2zevaFbxxAsBtNk4XYnO+ 5AI+MKS/41Dw4KdAB2gfwJQQL2iNxQxH7zrOzvyuTURBb4GS3vDDhBtMw/F/5qF4 l4RNWn0ln4toQJbPSvuvgsOhw4snAYfzd5Tdp5sR4D0Kat0zBXyaKGrShQ+N9EEJ n9duafGO4NECgOZLQ9anxcabsT+Jvhi4vdrHWLWBfDUcts2R496XoCWDWfcGH4Ec 2px0p1GMhyHRkbwEh/XJYbD9iGbwVUsr7BpyI5GLWnyXVXxil2XVvKaY6yiF7jdI mDmGWSsG63edCNvMJ13AXiSyVQ== -----END CERTIFICATE-----Generated at Tue Sep 22 23:48:20 2026 by rpki-client