$ rpki-client -vvvf rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.mft File: QeLjUgZMov-eIcSENVrALkQHJY0.mft (raw, json) Hash identifier: WKYPFAbG8w0uGdpg6yQkmRWhANRx5s7OgOqtaSj9ZwU= Subject key identifier: A0:3D:15:49:52:A2:7C:29:DA:31:9A:2C:2A:97:FC:18:B6:C0:BD:FC Authority key identifier: 41:E2:E3:52:06:4C:A2:FF:9E:21:C4:84:35:5A:C0:2E:44:07:25:8D Certificate issuer: /CN=A9131D5E/serialNumber=41E2E352064CA2FF9E21C484355AC02E4407258D Certificate serial: 0691 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeLjUgZMov-eIcSENVrALkQHJY0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.mft Manifest number: 0687 Signing time: Sun 04 Oct 2026 22:33:07 +0000 Manifest this update: Sun 04 Oct 2026 22:33:06 +0000 Manifest next update: Sun 11 Oct 2026 22:33:06 +0000 Files and hashes: 1: QeLjUgZMov-eIcSENVrALkQHJY0.crl (hash: rtOBkmlYzmwAYVzWcIL/qYaPu6ZoHI3FTEyt2gjhKtQ=) 2: 9B41336A9ABB11EC9D11861FC4F9AE02.roa (hash: APtBc0Fg5uoB90s7FYUbm7HkOE2poEQup95WnZBKZc0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.crl rsync://rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeLjUgZMov-eIcSENVrALkQHJY0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 22:33:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1681 (0x691) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131D5E, serialNumber=41E2E352064CA2FF9E21C484355AC02E4407258D Validity Not Before: Oct 4 22:33:06 2026 GMT Not After : Oct 11 22:33:06 2026 GMT Subject: CN=6ac2d423-bf9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:fe:e2:b4:8a:6a:6d:fb:e6:04:88:0b:e2:70: 1e:16:ab:78:2e:9f:4f:3e:9f:82:00:6a:71:ba:a5: aa:24:98:0a:61:83:33:0a:8f:1e:d6:d9:b6:ca:74: 17:9e:e8:a2:fe:b6:e3:11:46:18:26:bf:a6:44:67: e5:d5:87:24:82:5f:34:c8:d4:98:39:a0:84:a3:61: 22:3b:2a:1f:86:62:5a:49:dd:ca:0f:43:d7:a8:9a: b2:08:1d:22:30:9c:be:b3:22:19:4c:62:a8:a6:0f: f1:79:ed:f6:0c:ea:9e:a0:07:29:6e:58:96:ed:5b: ec:ec:a6:de:d7:94:a5:c1:7b:83:fc:8d:fd:60:bd: 03:6e:bf:5c:63:52:c8:fe:0f:f8:7c:9d:38:a6:74: 13:55:ee:20:76:9f:6a:cb:59:07:09:7c:f4:05:91: de:35:97:d4:78:93:96:7f:80:0f:f3:b0:7a:28:08: da:f8:95:ed:e0:46:72:b5:dd:83:80:b8:70:2a:56: 9e:99:64:c1:1e:7d:57:9f:41:f9:33:6b:34:e6:eb: 3f:c8:2a:ca:ed:09:aa:9e:bd:98:07:8a:ef:56:4b: ef:3a:7d:75:12:a4:b5:0c:ed:13:cf:04:46:2b:10: 2c:99:82:cc:de:58:82:81:16:7f:b9:d3:10:ed:71: 7b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:3D:15:49:52:A2:7C:29:DA:31:9A:2C:2A:97:FC:18:B6:C0:BD:FC X509v3 Authority Key Identifier: keyid:41:E2:E3:52:06:4C:A2:FF:9E:21:C4:84:35:5A:C0:2E:44:07:25:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeLjUgZMov-eIcSENVrALkQHJY0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:11:5c:e5:eb:91:9c:51:4f:15:02:3d:58:be:80:c6:b1:e9: a3:66:2c:36:a5:eb:39:4b:35:b9:aa:36:fe:e1:92:11:35:6b: 80:cf:5b:7f:97:fc:10:2e:f4:48:f3:22:fa:3c:2f:ee:db:91: 09:2c:cd:4f:0d:6e:fd:76:55:cf:38:f2:95:b4:74:41:b8:16: e1:58:3b:f8:5f:9d:c3:62:a4:38:37:f9:dd:29:d4:13:3e:73: 8e:e0:a1:28:7b:d6:56:cf:3c:b1:83:c3:19:37:0f:0d:3a:14: 78:bd:3c:c4:03:a3:79:ba:c6:1f:fd:ef:58:f1:6d:91:58:cc: 8c:86:64:a3:32:85:0b:c8:ed:bd:e6:e6:12:be:bf:d3:f7:04: 78:62:27:b8:0d:85:8e:a8:5a:7b:57:74:7f:50:fd:1c:9f:af: a4:37:51:da:6c:d5:fa:d5:8c:39:c4:bc:9e:36:91:07:09:b7: 47:0a:07:6f:c9:84:4a:fd:ff:30:d2:07:f0:cd:05:a8:62:c0: 16:61:e9:e5:aa:24:a9:88:ee:4a:6b:ea:cc:8f:20:0d:39:d6: 7c:d1:62:1e:11:dd:d7:5d:2c:5a:ac:41:00:2b:a3:12:26:7d: 7a:48:dd:a6:d5:86:ec:9b:6d:db:1d:cc:be:a2:3e:be:19:bb: d9:18:01:40 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBpEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzFENUUxMTAvBgNVBAUTKDQxRTJFMzUyMDY0Q0EyRkY5RTIxQzQ4NDM1NUFDMDJF NDQwNzI1OEQwHhcNMjYxMDA0MjIzMzA2WhcNMjYxMDExMjIzMzA2WjAYMRYwFAYD VQQDEw02YWMyZDQyMy1iZjljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyP7itIpqbfvmBIgL4nAeFqt4Lp9PPp+CAGpxuqWqJJgKYYMzCo8e1tm2ynQX nuii/rbjEUYYJr+mRGfl1Yckgl80yNSYOaCEo2EiOyofhmJaSd3KD0PXqJqyCB0i MJy+syIZTGKopg/xee32DOqeoAcpbliW7Vvs7Kbe15SlwXuD/I39YL0Dbr9cY1LI /g/4fJ04pnQTVe4gdp9qy1kHCXz0BZHeNZfUeJOWf4AP87B6KAja+JXt4EZytd2D gLhwKlaemWTBHn1Xn0H5M2s05us/yCrK7Qmqnr2YB4rvVkvvOn11EqS1DO0TzwRG KxAsmYLM3liCgRZ/udMQ7XF7+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKA9FUlS onwp2jGaLCqX/Bi2wL38MB8GA1UdIwQYMBaAFEHi41IGTKL/niHEhDVawC5EByWN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUQ1RS81NkRENDhERUQ5 NDcxMUVCOUExQTBENzFDNEY5QUUwMi9RZUxqVWdaTW92LWVJY1NFTlZyQUxrUUhK WTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FlTGpVZ1pNb3YtZUljU0VOVnJBTGtRSEpZMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MUQ1RS81NkRENDhERUQ5NDcxMUVCOUExQTBENzFDNEY5QUUwMi9RZUxqVWdaTW92 LWVJY1NFTlZyQUxrUUhKWTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAShFc5euRnFFPFQI9WL6AxrHpo2YsNqXrOUs1uao2/uGSETVrgM9bf5f8EC70 SPMi+jwv7tuRCSzNTw1u/XZVzzjylbR0QbgW4Vg7+F+dw2KkODf53SnUEz5zjuCh KHvWVs88sYPDGTcPDToUeL08xAOjebrGH/3vWPFtkVjMjIZkozKFC8jtvebmEr6/ 0/cEeGInuA2Fjqhae1d0f1D9HJ+vpDdR2mzV+tWMOcS8njaRBwm3RwoHb8mESv3/ MNIH8M0FqGLAFmHp5aokqYjuSmvqzI8gDTnWfNFiHhHd110sWqxBACujEiZ9ekjd ptWG7Jtt2x3MvqI+vhm72RgBQA== -----END CERTIFICATE-----Generated at Tue Oct 6 01:28:01 2026 by rpki-client