$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.mft File: cq-668ns3aLu0tSbE-YEjqPkHmA.mft (raw, json) Hash identifier: 0yWGibs7ERFEkG1DaO3QfRKXd97WQo6Te/340td6hQE= Subject key identifier: 22:61:FC:EB:0A:C6:EF:8E:07:9E:10:59:8D:80:FC:68:4C:58:4A:F2 Authority key identifier: 72:AF:BA:EB:C9:EC:DD:A2:EE:D2:D4:9B:13:E6:04:8E:A3:E4:1E:60 Certificate issuer: /CN=A91FDD4D/serialNumber=72AFBAEBC9ECDDA2EED2D49B13E6048EA3E41E60 Certificate serial: 22C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cq-668ns3aLu0tSbE-YEjqPkHmA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.mft Manifest number: 226F Signing time: Thu 24 Sep 2026 15:51:10 +0000 Manifest this update: Thu 24 Sep 2026 15:51:10 +0000 Manifest next update: Thu 01 Oct 2026 15:51:10 +0000 Files and hashes: 1: cq-668ns3aLu0tSbE-YEjqPkHmA.crl (hash: O/uduq7gRhmR/LapxbelUNe3B2v+maaNOp6UwRzvkCk=) 2: 1C628A90671411EEA0040661C4F9AE02.roa (hash: M0M27e7jpHMqjXXvltEuadHWRQl0UpCUB3Q3dSoBa+I=) 3: 0F0824DED28311EDB1655152C4F9AE02.roa (hash: YxBTBicabikn08Aqg/dvf+PsgRQVrImZt4AAt8rvHnc=) 4: EEFB07CCB8A311ED8F694046C4F9AE02.roa (hash: V2GgiDiVdp7icGNp8uei2QdYQy4qfASwmRrufFn1mxg=) 5: E9DE96C44C3611EEA9D59630C4F9AE02.roa (hash: v4lm1t03b9gy+zkyAg0MsXuQLEziIg1Uau5peZt74RY=) 6: E50E6E14B63411EDB4416786C4F9AE02.roa (hash: KYaSzwf1L2QkO+jOOMTkJ2kvbpBzCO+jKOwM50VbrBw=) 7: AB9E7432714911EEBF95153CC4F9AE02.roa (hash: Bbmi/J5Lpn7aHAntaVp/ckgJSOlUGXUjQqXrthSWKgU=) 8: 0FB07E54D28311EDB1655152C4F9AE02.roa (hash: 3IlwneiT3OIjV7tuhT2g5I0grdOyE91JkHSLmUB2BEY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.crl rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cq-668ns3aLu0tSbE-YEjqPkHmA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 15:51:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8902 (0x22c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDD4D, serialNumber=72AFBAEBC9ECDDA2EED2D49B13E6048EA3E41E60 Validity Not Before: Sep 24 15:51:10 2026 GMT Not After : Oct 1 15:51:10 2026 GMT Subject: CN=6ab546ee-455f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:19:a3:cc:78:53:0c:c8:78:28:0f:66:dd:59: 94:16:4e:12:42:09:3f:d9:0c:b5:c9:3f:86:74:7e: ce:00:58:ff:d8:2a:79:1d:77:3f:0b:44:34:40:c4: 20:3c:21:ea:2d:e8:41:5b:22:15:8f:f9:6f:b3:89: d5:b9:9e:d6:f2:9c:0b:69:98:75:de:49:85:d1:12: d9:6c:3b:d9:09:bb:c9:82:be:b3:52:93:b8:7c:a5: dc:db:11:1e:48:a5:56:dd:87:fe:d3:b3:f9:bf:1f: ab:a8:92:94:5c:5d:1b:88:10:bd:1d:ea:9b:d8:1d: 4f:26:03:0d:d8:0d:21:4c:00:7f:1e:29:ea:61:1f: 3a:25:94:23:91:03:87:c4:e3:69:31:67:12:ab:18: ca:1e:5d:14:39:13:f3:55:b7:8c:b8:60:26:f1:d2: 39:39:c2:3b:79:ac:ef:d3:cd:60:28:a2:cd:bb:54: b6:c6:b6:8b:1f:82:27:8b:30:e4:95:23:2d:f5:12: 7d:a5:e5:92:66:8b:e4:5c:4e:6c:fc:6a:7c:25:fc: 91:cf:35:a9:ee:af:c1:88:0a:b0:f4:b3:22:17:13: 5a:5a:b4:33:63:cc:62:c3:c8:ac:63:67:7e:84:09: 83:8a:c5:dc:f9:12:a6:ce:fa:58:5c:e6:d3:34:4a: 6a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:61:FC:EB:0A:C6:EF:8E:07:9E:10:59:8D:80:FC:68:4C:58:4A:F2 X509v3 Authority Key Identifier: keyid:72:AF:BA:EB:C9:EC:DD:A2:EE:D2:D4:9B:13:E6:04:8E:A3:E4:1E:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cq-668ns3aLu0tSbE-YEjqPkHmA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:65:e5:a7:2c:13:41:30:4b:16:36:c7:3c:5b:a4:b4:b2:a3: 0e:45:ca:1e:ee:cf:30:55:a5:00:24:d0:29:bf:4c:f6:cf:ce: f4:c0:fb:5b:45:7e:64:81:1c:60:e2:3e:de:0f:94:dc:e9:a0: a1:9e:da:53:41:ab:f6:42:85:e3:e8:34:0c:00:09:49:15:5c: 40:e8:19:0e:99:9e:9a:79:51:d5:bc:b0:de:ed:d5:57:f2:db: 1c:11:4a:c5:4a:24:f7:5b:31:6a:96:13:5b:70:da:80:69:f9: 24:56:f6:61:87:20:18:0a:ca:bb:34:2c:68:07:6b:ad:a0:3b: 03:ec:a8:77:f0:d0:b5:33:68:28:0b:5d:3f:5b:90:10:85:ce: 6a:61:05:49:0a:20:e9:4b:84:1d:9d:38:08:e8:12:ea:d4:94: af:24:1d:ff:c5:99:3e:bb:36:68:0c:0b:72:80:c4:0d:37:e5: a3:d4:90:bf:42:2a:e4:70:03:63:9b:3d:b4:97:88:73:9e:f9: 6e:ef:6f:0a:c3:5d:c5:6f:ca:7d:97:06:28:a4:93:69:da:14: 1c:56:3f:ee:f9:bf:ed:24:ac:d6:d2:1e:d1:cc:2b:7d:26:1a: 08:83:d8:62:8a:50:bc:8e:b0:f0:a7:3e:5f:3a:a6:c0:b3:0d: bc:b4:76:6c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICIsYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRENEQxMTAvBgNVBAUTKDcyQUZCQUVCQzlFQ0REQTJFRUQyRDQ5QjEzRTYwNDhF QTNFNDFFNjAwHhcNMjYwOTI0MTU1MTEwWhcNMjYxMDAxMTU1MTEwWjAYMRYwFAYD VQQDEw02YWI1NDZlZS00NTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoRmjzHhTDMh4KA9m3VmUFk4SQgk/2Qy1yT+GdH7OAFj/2Cp5HXc/C0Q0QMQg PCHqLehBWyIVj/lvs4nVuZ7W8pwLaZh13kmF0RLZbDvZCbvJgr6zUpO4fKXc2xEe SKVW3Yf+07P5vx+rqJKUXF0biBC9Heqb2B1PJgMN2A0hTAB/HinqYR86JZQjkQOH xONpMWcSqxjKHl0UORPzVbeMuGAm8dI5OcI7eazv081gKKLNu1S2xraLH4InizDk lSMt9RJ9peWSZovkXE5s/Gp8JfyRzzWp7q/BiAqw9LMiFxNaWrQzY8xiw8isY2d+ hAmDisXc+RKmzvpYXObTNEpqcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCJh/OsK xu+OB54QWY2A/GhMWEryMB8GA1UdIwQYMBaAFHKvuuvJ7N2i7tLUmxPmBI6j5B5g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREQ0RC9CQUUxMDhDNEVB NjAxMUU1ODgxNTc3MENDNEY5QUUwMi9jcS02NjhuczNhTHUwdFNiRS1ZRWpxUGtI bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NxLTY2OG5zM2FMdTB0U2JFLVlFanFQa0htQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REQ0RC9CQUUxMDhDNEVBNjAxMUU1ODgxNTc3MENDNEY5QUUwMi9jcS02NjhuczNh THUwdFNiRS1ZRWpxUGtIbUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeWXlpywTQTBLFjbHPFuktLKjDkXKHu7PMFWlACTQKb9M9s/O9MD7W0V+ZIEc YOI+3g+U3OmgoZ7aU0Gr9kKF4+g0DAAJSRVcQOgZDpmemnlR1byw3u3VV/LbHBFK xUok91sxapYTW3DagGn5JFb2YYcgGArKuzQsaAdrraA7A+yod/DQtTNoKAtdP1uQ EIXOamEFSQog6UuEHZ04COgS6tSUryQd/8WZPrs2aAwLcoDEDTflo9SQv0Iq5HAD Y5s9tJeIc575bu9vCsNdxW/KfZcGKKSTadoUHFY/7vm/7SSs1tIe0cwrfSYaCIPY YopQvI6w8Kc+XzqmwLMNvLR2bA== -----END CERTIFICATE-----Generated at Sat Sep 26 08:18:15 2026 by rpki-client