$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.mft File: QW1s1gOQ-3yW7XnXjOdvVK_PRFg.mft (raw, json) Hash identifier: Fz2EJICxXS4UVZnt/mMSzzy1ynS0NJmVjtBFzlyB/BE= Subject key identifier: 1F:3B:89:6E:A8:55:20:C3:9E:08:E9:75:06:66:30:F9:A8:14:16:43 Authority key identifier: 41:6D:6C:D6:03:90:FB:7C:96:ED:79:D7:8C:E7:6F:54:AF:CF:44:58 Certificate issuer: /CN=A91E5D61/serialNumber=416D6CD60390FB7C96ED79D78CE76F54AFCF4458 Certificate serial: 13A7 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.mft Manifest number: 4960 Signing time: Mon 26 Oct 2026 14:21:27 +0000 Manifest this update: Mon 26 Oct 2026 14:21:26 +0000 Manifest next update: Mon 02 Nov 2026 14:21:26 +0000 Files and hashes: 1: QW1s1gOQ-3yW7XnXjOdvVK_PRFg.crl (hash: cZD/D5bz2hHFkYGfitFOx3PvGj2zPyITdYxK/HIgLIk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.crl rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 14:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5031 (0x13a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D61, serialNumber=416D6CD60390FB7C96ED79D78CE76F54AFCF4458 Validity Not Before: Oct 26 14:21:26 2026 GMT Not After : Nov 2 14:21:26 2026 GMT Subject: CN=6adf61e6-91aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:13:02:53:c6:65:87:30:2a:c0:40:df:32:04: b7:f6:af:f3:41:12:c1:66:7f:3f:72:8b:05:28:70: 8c:ce:8c:64:e1:84:73:5c:ec:08:92:b4:f9:59:f9: 81:b5:94:70:b8:fc:a7:da:c9:35:63:05:ba:e7:9f: 6c:b1:db:2d:b6:41:35:2f:e2:b4:a5:c6:b4:40:2a: 38:d2:4a:f4:0a:42:7e:00:ff:d8:17:7c:40:a8:a2: f8:a3:24:c8:2f:66:8d:41:e9:6f:1d:24:89:4f:f9: e7:05:11:a4:45:be:b9:f3:19:e5:7b:1a:af:57:42: da:17:b6:27:ee:7e:b0:36:15:85:07:c7:07:ac:61: be:47:29:17:3a:0f:bf:41:45:02:1f:e9:3f:62:52: 93:7d:6c:ab:95:3e:15:71:7f:6b:c4:47:24:c3:3f: 11:ef:d9:f9:e2:50:85:9f:97:e2:2d:ef:e6:f0:31: 18:50:c1:64:c6:73:c7:af:54:6a:b3:bb:e6:a7:06: d5:81:13:cb:ed:e2:45:51:f1:56:f0:66:6c:20:f2: c9:d2:44:1e:e5:9f:41:14:fd:4f:af:ae:65:9e:fc: f1:22:fa:a4:fb:83:ac:89:d7:c6:72:44:f8:e2:c9: 62:d0:97:49:97:88:da:e1:51:de:39:d6:16:66:ce: 2b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:3B:89:6E:A8:55:20:C3:9E:08:E9:75:06:66:30:F9:A8:14:16:43 X509v3 Authority Key Identifier: keyid:41:6D:6C:D6:03:90:FB:7C:96:ED:79:D7:8C:E7:6F:54:AF:CF:44:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:04:0a:b8:cd:1f:99:d1:22:c7:c6:27:f0:7b:c7:a5:ac:37: ee:ec:1a:c4:82:92:54:c7:1b:d7:00:87:56:93:6c:9c:94:55: e5:30:66:37:83:8b:3a:53:1a:61:94:e3:96:17:e0:af:97:63: ec:54:4a:a4:b6:12:ec:73:63:82:84:27:d9:dd:1e:98:a9:03: 8b:aa:b5:66:48:b9:d2:36:b6:41:ec:b7:3a:c9:2e:44:3d:02: d1:8b:b0:16:82:aa:fe:28:9f:7d:5f:02:3b:dd:d0:98:bf:54: 8e:0e:5b:c9:5c:33:8c:09:32:c2:c2:df:c0:7c:a3:88:0d:2e: d0:b6:42:27:f4:4f:0b:3c:19:74:aa:04:b6:cc:86:4e:66:b3: 33:f3:90:4a:b3:95:f9:71:24:0a:d8:29:04:29:cf:ab:70:00: d5:4d:72:7f:68:cf:8d:fb:ce:9f:82:62:f5:3c:e9:2b:17:23: 98:bc:e5:c9:86:70:2f:5f:20:45:03:7d:3f:e7:1a:e0:f8:ad: eb:c4:f0:b9:c1:b0:d9:65:ab:fe:65:e7:39:72:36:30:43:87: b9:0f:aa:18:3e:c0:e3:2f:d6:73:ed:3a:df:75:4f:3f:c5:c9: af:a8:1e:38:fc:5d:85:25:06:a6:03:04:ab:0d:79:60:94:b1: 8f:b8:54:e2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICE6cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVENjExMTAvBgNVBAUTKDQxNkQ2Q0Q2MDM5MEZCN0M5NkVENzlENzhDRTc2RjU0 QUZDRjQ0NTgwHhcNMjYxMDI2MTQyMTI2WhcNMjYxMTAyMTQyMTI2WjAYMRYwFAYD VQQDEw02YWRmNjFlNi05MWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxRMCU8ZlhzAqwEDfMgS39q/zQRLBZn8/cosFKHCMzoxk4YRzXOwIkrT5WfmB tZRwuPyn2sk1YwW6559ssdsttkE1L+K0pca0QCo40kr0CkJ+AP/YF3xAqKL4oyTI L2aNQelvHSSJT/nnBRGkRb658xnlexqvV0LaF7Yn7n6wNhWFB8cHrGG+RykXOg+/ QUUCH+k/YlKTfWyrlT4VcX9rxEckwz8R79n54lCFn5fiLe/m8DEYUMFkxnPHr1Rq s7vmpwbVgRPL7eJFUfFW8GZsIPLJ0kQe5Z9BFP1Pr65lnvzxIvqk+4OsidfGckT4 4sli0JdJl4ja4VHeOdYWZs4rCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB87iW6o VSDDngjpdQZmMPmoFBZDMB8GA1UdIwQYMBaAFEFtbNYDkPt8lu1514znb1Svz0RY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUQ2MS8yQTdDN0Q5ODFE NzkxMUUyODc5RTM4QzUwOEIwMkNEMi9RVzFzMWdPUS0zeVc3WG5Yak9kdlZLX1BS RmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1FXMXMxZ09RLTN5VzdYblhqT2R2VktfUFJGZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUQ2MS8yQTdDN0Q5ODFENzkxMUUyODc5RTM4QzUwOEIwMkNEMi9RVzFzMWdPUS0z eVc3WG5Yak9kdlZLX1BSRmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACQQKuM0fmdEix8Yn8HvHpaw37uwaxIKSVMcb1wCHVpNsnJRV5TBmN4OLOlMa YZTjlhfgr5dj7FRKpLYS7HNjgoQn2d0emKkDi6q1Zki50ja2Qey3OskuRD0C0Yuw FoKq/iiffV8CO93QmL9Ujg5byVwzjAkywsLfwHyjiA0u0LZCJ/RPCzwZdKoEtsyG TmazM/OQSrOV+XEkCtgpBCnPq3AA1U1yf2jPjfvOn4Ji9TzpKxcjmLzlyYZwL18g RQN9P+ca4Pit68TwucGw2WWr/mXnOXI2MEOHuQ+qGD7A4y/Wc+0633VPP8XJr6ge OPxdhSUGpgMEqw15YJSxj7hU4g== -----END CERTIFICATE-----Generated at Wed Oct 28 00:14:56 2026 by rpki-client