$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.mft File: cq-668ns3aLu0tSbE-YEjqPkHmA.mft (raw, json) Hash identifier: hQw4d4ivifJhlrXQP9vMQvolAEptsvjxEA6C8oUn7hU= Subject key identifier: 82:76:3A:27:22:0D:83:E5:A8:DE:6F:0F:AB:3F:C5:B6:10:1B:3B:C3 Authority key identifier: 72:AF:BA:EB:C9:EC:DD:A2:EE:D2:D4:9B:13:E6:04:8E:A3:E4:1E:60 Certificate issuer: /CN=A91FDD4D/serialNumber=72AFBAEBC9ECDDA2EED2D49B13E6048EA3E41E60 Certificate serial: 22C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cq-668ns3aLu0tSbE-YEjqPkHmA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.mft Manifest number: 2270 Signing time: Sat 26 Sep 2026 15:54:25 +0000 Manifest this update: Sat 26 Sep 2026 15:54:25 +0000 Manifest next update: Sat 03 Oct 2026 15:54:25 +0000 Files and hashes: 1: cq-668ns3aLu0tSbE-YEjqPkHmA.crl (hash: KeSzK632r24IEro3SeCNyTQ6qfCUN0OHu3tHaiSVRf4=) 2: E9DE96C44C3611EEA9D59630C4F9AE02.roa (hash: v4lm1t03b9gy+zkyAg0MsXuQLEziIg1Uau5peZt74RY=) 3: 0FB07E54D28311EDB1655152C4F9AE02.roa (hash: 3IlwneiT3OIjV7tuhT2g5I0grdOyE91JkHSLmUB2BEY=) 4: AB9E7432714911EEBF95153CC4F9AE02.roa (hash: Bbmi/J5Lpn7aHAntaVp/ckgJSOlUGXUjQqXrthSWKgU=) 5: 1C628A90671411EEA0040661C4F9AE02.roa (hash: M0M27e7jpHMqjXXvltEuadHWRQl0UpCUB3Q3dSoBa+I=) 6: EEFB07CCB8A311ED8F694046C4F9AE02.roa (hash: V2GgiDiVdp7icGNp8uei2QdYQy4qfASwmRrufFn1mxg=) 7: 0F0824DED28311EDB1655152C4F9AE02.roa (hash: YxBTBicabikn08Aqg/dvf+PsgRQVrImZt4AAt8rvHnc=) 8: E50E6E14B63411EDB4416786C4F9AE02.roa (hash: KYaSzwf1L2QkO+jOOMTkJ2kvbpBzCO+jKOwM50VbrBw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.crl rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cq-668ns3aLu0tSbE-YEjqPkHmA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 15:54:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8903 (0x22c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDD4D, serialNumber=72AFBAEBC9ECDDA2EED2D49B13E6048EA3E41E60 Validity Not Before: Sep 26 15:54:25 2026 GMT Not After : Oct 3 15:54:25 2026 GMT Subject: CN=6ab7eab1-bdfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a8:56:0d:50:63:bd:43:a2:90:f5:0e:63:e5: 8f:d4:cb:99:e8:16:0d:0f:d9:fd:72:33:d8:fb:ad: e1:d8:41:e0:30:72:fa:08:db:d5:f8:44:6e:a8:26: c3:da:4c:a4:06:49:64:f8:7a:38:a2:7e:43:0b:b7: c9:94:54:41:e7:3d:0a:95:c6:ce:5f:ea:53:99:cd: d2:b7:93:1c:60:ab:99:2e:26:0a:99:d5:9c:d5:9d: 8c:cb:80:9d:ad:27:99:ca:04:95:ba:10:e8:83:3a: c5:b0:d3:b6:de:01:3e:b9:c5:db:7f:77:bb:3f:af: 1f:77:d3:5a:cc:d8:bb:36:c8:a2:17:20:43:0f:0a: 06:da:96:f7:36:00:50:31:d7:2b:17:d5:00:c0:e8: cd:72:4a:6f:cc:e2:30:50:a0:7d:7e:fb:3d:23:fb: 56:a8:50:28:67:0d:61:f4:b7:7d:76:75:2f:4d:62: e9:e0:7b:29:80:e1:61:b6:ef:6a:5d:3d:e5:6e:0d: 99:0c:1b:e4:04:ba:ed:5c:c2:10:f4:5a:82:53:5f: 9e:2a:84:a8:5d:10:7d:5e:ca:84:e8:6a:16:f3:62: 7b:61:ad:72:d2:16:ce:e6:e2:4b:17:0e:6d:21:dd: 13:75:c7:0d:10:84:cc:22:f8:da:a9:39:ca:a5:08: 0b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:76:3A:27:22:0D:83:E5:A8:DE:6F:0F:AB:3F:C5:B6:10:1B:3B:C3 X509v3 Authority Key Identifier: keyid:72:AF:BA:EB:C9:EC:DD:A2:EE:D2:D4:9B:13:E6:04:8E:A3:E4:1E:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cq-668ns3aLu0tSbE-YEjqPkHmA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:e9:85:3f:02:83:e6:fe:1c:a9:eb:08:51:4a:af:7c:ae:39: b4:17:b4:ec:1a:14:bb:47:df:b6:be:2d:6c:6f:35:42:31:2b: 6f:89:1a:04:49:0d:0f:b1:5b:79:5e:cb:be:45:67:39:2c:16: 78:4d:f8:0c:5a:97:bc:93:e8:0a:55:33:57:61:34:9c:e9:41: db:3b:23:b5:c9:23:0c:40:ac:06:03:a4:4d:40:75:dd:09:55: c9:d3:94:ee:1b:dd:18:3b:d8:75:76:cd:5b:dd:4b:89:4a:a0: 6e:ed:66:ac:18:f0:93:aa:f3:79:ed:2a:46:1c:23:f5:9c:88: db:d3:8b:f4:af:f6:eb:76:78:9b:4f:5f:27:b0:15:72:7f:44: dc:d7:8d:22:65:cd:d6:8f:ce:27:6a:f8:d4:2f:f4:38:c7:db: 09:b3:a5:fd:71:d3:2b:46:00:a5:80:cc:13:ec:38:3d:93:a8: d6:89:6c:a2:fd:ea:7e:ac:54:68:1e:3c:1b:2a:e4:d9:40:fa: 44:bf:0c:1f:a5:10:61:07:cc:26:ad:dd:06:12:df:f5:bc:38: 97:6f:24:bb:32:1d:a6:53:b8:f9:2b:23:ca:93:17:02:ee:71: 93:55:e1:7c:56:9f:7f:22:aa:e5:f9:18:38:bc:b8:be:d9:c4: 02:5a:2b:bd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICIscwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRENEQxMTAvBgNVBAUTKDcyQUZCQUVCQzlFQ0REQTJFRUQyRDQ5QjEzRTYwNDhF QTNFNDFFNjAwHhcNMjYwOTI2MTU1NDI1WhcNMjYxMDAzMTU1NDI1WjAYMRYwFAYD VQQDEw02YWI3ZWFiMS1iZGZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyqhWDVBjvUOikPUOY+WP1MuZ6BYND9n9cjPY+63h2EHgMHL6CNvV+ERuqCbD 2kykBklk+Ho4on5DC7fJlFRB5z0KlcbOX+pTmc3St5McYKuZLiYKmdWc1Z2My4Cd rSeZygSVuhDogzrFsNO23gE+ucXbf3e7P68fd9NazNi7NsiiFyBDDwoG2pb3NgBQ MdcrF9UAwOjNckpvzOIwUKB9fvs9I/tWqFAoZw1h9Ld9dnUvTWLp4HspgOFhtu9q XT3lbg2ZDBvkBLrtXMIQ9FqCU1+eKoSoXRB9XsqE6GoW82J7Ya1y0hbO5uJLFw5t Id0TdccNEITMIvjaqTnKpQgLrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIJ2Oici DYPlqN5vD6s/xbYQGzvDMB8GA1UdIwQYMBaAFHKvuuvJ7N2i7tLUmxPmBI6j5B5g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREQ0RC9CQUUxMDhDNEVB NjAxMUU1ODgxNTc3MENDNEY5QUUwMi9jcS02NjhuczNhTHUwdFNiRS1ZRWpxUGtI bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NxLTY2OG5zM2FMdTB0U2JFLVlFanFQa0htQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REQ0RC9CQUUxMDhDNEVBNjAxMUU1ODgxNTc3MENDNEY5QUUwMi9jcS02NjhuczNh THUwdFNiRS1ZRWpxUGtIbUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPOmFPwKD5v4cqesIUUqvfK45tBe07BoUu0fftr4tbG81QjErb4kaBEkND7Fb eV7LvkVnOSwWeE34DFqXvJPoClUzV2E0nOlB2zsjtckjDECsBgOkTUB13QlVydOU 7hvdGDvYdXbNW91LiUqgbu1mrBjwk6rzee0qRhwj9ZyI29OL9K/263Z4m09fJ7AV cn9E3NeNImXN1o/OJ2r41C/0OMfbCbOl/XHTK0YApYDME+w4PZOo1olsov3qfqxU aB48Gyrk2UD6RL8MH6UQYQfMJq3dBhLf9bw4l28kuzIdplO4+SsjypMXAu5xk1Xh fFaffyKq5fkYOLy4vtnEAlorvQ== -----END CERTIFICATE-----Generated at Sun Sep 27 03:42:35 2026 by rpki-client