$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.mft File: QRfXbD7AS2IRM0hQpc1uowVTUFw.mft (raw, json) Hash identifier: MMfRLVBH1t94FWSTiLKZGk2L4vcYuzfsognJiEuCGio= Subject key identifier: 02:51:08:09:FA:8B:43:21:AB:43:C0:C5:C2:50:BE:C1:98:02:C9:4E Authority key identifier: 41:17:D7:6C:3E:C0:4B:62:11:33:48:50:A5:CD:6E:A3:05:53:50:5C Certificate issuer: /CN=A91ED6B5/serialNumber=4117D76C3EC04B6211334850A5CD6EA30553505C Certificate serial: 053A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRfXbD7AS2IRM0hQpc1uowVTUFw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.mft Manifest number: 0533 Signing time: Fri 04 Sep 2026 23:17:11 +0000 Manifest this update: Fri 04 Sep 2026 23:17:11 +0000 Manifest next update: Fri 11 Sep 2026 23:17:11 +0000 Files and hashes: 1: QRfXbD7AS2IRM0hQpc1uowVTUFw.crl (hash: wWCEPMvx0jyhp372ZEYpZcp1J6cJ4e6AUvmxLUVCy2o=) 2: 06A899FECCF311EC86719729C4F9AE02.roa (hash: F+I43DaEg4RPjKbDgo7LbT/oq9DuBWqE4SqCTrHW1b0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.crl rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRfXbD7AS2IRM0hQpc1uowVTUFw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 23:17:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1338 (0x53a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED6B5, serialNumber=4117D76C3EC04B6211334850A5CD6EA30553505C Validity Not Before: Sep 4 23:17:11 2026 GMT Not After : Sep 11 23:17:11 2026 GMT Subject: CN=6a9b5177-d225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f2:16:c5:52:c2:04:d1:1f:f4:97:38:23:9b: 08:de:87:8c:5b:b5:cf:d7:cf:d3:01:af:65:40:f0: 7a:9c:bc:ce:d2:fe:f5:6e:db:79:b5:f5:62:c0:a4: 5d:8e:15:d0:53:bf:97:5a:a5:6f:4a:da:a9:b4:c5: c4:97:ea:12:1c:3d:dd:d7:ad:17:13:6c:77:28:96: ce:d5:68:bc:87:b3:de:ea:4b:4a:b0:d0:be:c3:44: 70:b2:e1:f3:31:c7:b6:24:c3:1a:00:e8:61:e1:bf: 5f:7a:e6:b5:1d:3f:04:b0:b1:89:6f:a2:76:57:b1: 65:67:02:df:1b:c9:af:97:f6:aa:80:30:d8:10:aa: 72:ab:e5:5a:25:70:b2:e3:8b:7a:13:13:17:5e:56: 10:57:08:29:22:c0:5e:5e:66:c9:6d:b5:c5:7c:70: 38:1e:50:ac:74:de:82:29:ad:fa:41:7b:e2:73:10: fc:03:dc:d6:9f:d1:b3:00:f5:58:41:76:9a:6a:4e: d8:61:90:33:3f:5c:f3:a7:f7:1b:d4:b3:48:a7:7a: 8c:6c:1b:d2:37:1d:08:25:fe:5c:2d:a8:33:57:88: cc:f0:ce:a2:ea:0b:b9:8e:1e:0f:85:e4:95:0a:7a: e1:be:c8:ac:8c:21:09:52:66:6a:78:c0:12:94:07: ca:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:51:08:09:FA:8B:43:21:AB:43:C0:C5:C2:50:BE:C1:98:02:C9:4E X509v3 Authority Key Identifier: keyid:41:17:D7:6C:3E:C0:4B:62:11:33:48:50:A5:CD:6E:A3:05:53:50:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRfXbD7AS2IRM0hQpc1uowVTUFw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:2f:6e:b8:52:91:cc:d7:a2:14:b3:be:8e:04:2a:35:a3:44: da:19:e5:60:fc:60:a6:ce:b5:6d:b4:c2:e9:39:6b:b9:cd:c7: 00:8f:4c:82:72:0c:4f:01:c7:83:8f:3e:48:0b:f6:4f:79:6b: 7d:18:8c:8c:6f:fe:8c:ef:8b:68:54:20:89:4c:79:ce:f6:b3: df:f1:ae:a2:5d:42:4e:85:47:36:6b:1a:e4:25:8d:93:51:00: 05:8b:e1:fe:3d:e8:f2:52:5d:9e:cf:f2:11:b0:1f:f5:70:4a: 3d:0d:c2:e3:e5:71:d4:f3:66:e2:75:e3:8c:0c:fa:79:5a:00: 5b:49:81:fc:38:4a:aa:26:24:a6:b0:1e:92:00:bb:c8:a4:0f: d1:bc:9e:b4:97:b2:4d:0f:fe:f1:0f:a6:7d:ce:eb:1e:15:f6: 72:6f:a5:57:0c:ed:90:1e:24:93:a7:be:67:dd:b3:4d:07:fd: 8b:be:01:ae:f8:dd:a0:0e:29:2c:13:ed:d1:bf:aa:e0:32:92: cd:f6:56:4a:a0:90:cc:0e:e8:eb:21:2b:53:83:8d:28:15:82: 09:cb:bf:bc:3a:72:d4:d7:01:08:69:62:0b:36:17:7f:97:76: 6f:bf:a1:ae:0a:e7:c6:b3:b5:09:f6:45:e1:4f:dd:05:3c:73: 24:3a:d3:2d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBTowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ2QjUxMTAvBgNVBAUTKDQxMTdENzZDM0VDMDRCNjIxMTMzNDg1MEE1Q0Q2RUEz MDU1MzUwNUMwHhcNMjYwOTA0MjMxNzExWhcNMjYwOTExMjMxNzExWjAYMRYwFAYD VQQDEw02YTliNTE3Ny1kMjI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwfIWxVLCBNEf9Jc4I5sI3oeMW7XP18/TAa9lQPB6nLzO0v71btt5tfViwKRd jhXQU7+XWqVvStqptMXEl+oSHD3d160XE2x3KJbO1Wi8h7Pe6ktKsNC+w0RwsuHz Mce2JMMaAOhh4b9feua1HT8EsLGJb6J2V7FlZwLfG8mvl/aqgDDYEKpyq+VaJXCy 44t6ExMXXlYQVwgpIsBeXmbJbbXFfHA4HlCsdN6CKa36QXvicxD8A9zWn9GzAPVY QXaaak7YYZAzP1zzp/cb1LNIp3qMbBvSNx0IJf5cLagzV4jM8M6i6gu5jh4PheSV CnrhvsisjCEJUmZqeMASlAfK0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAJRCAn6 i0Mhq0PAxcJQvsGYAslOMB8GA1UdIwQYMBaAFEEX12w+wEtiETNIUKXNbqMFU1Bc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDZCNS9FRjQ2OUJGQzU5 NDQxMUVDQUY1NzVBNkNDNEY5QUUwMi9RUmZYYkQ3QVMySVJNMGhRcGMxdW93VlRV RncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FSZlhiRDdBUzJJUk0waFFwYzF1b3dWVFVGdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDZCNS9FRjQ2OUJGQzU5NDQxMUVDQUY1NzVBNkNDNEY5QUUwMi9RUmZYYkQ3QVMy SVJNMGhRcGMxdW93VlRVRncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABi9uuFKRzNeiFLO+jgQqNaNE2hnlYPxgps61bbTC6Tlruc3HAI9MgnIMTwHH g48+SAv2T3lrfRiMjG/+jO+LaFQgiUx5zvaz3/Guol1CToVHNmsa5CWNk1EABYvh /j3o8lJdns/yEbAf9XBKPQ3C4+Vx1PNm4nXjjAz6eVoAW0mB/DhKqiYkprAekgC7 yKQP0byetJeyTQ/+8Q+mfc7rHhX2cm+lVwztkB4kk6e+Z92zTQf9i74BrvjdoA4p LBPt0b+q4DKSzfZWSqCQzA7o6yErU4ONKBWCCcu/vDpy1NcBCGliCzYXf5d2b7+h rgrnxrO1CfZF4U/dBTxzJDrTLQ== -----END CERTIFICATE-----Generated at Sat Sep 5 09:43:42 2026 by rpki-client