$ rpki-client -vvvf rpki.apnic.net/member_repository/A91585F0/56356CD4640011F0B1A1D57EC4F9AE02/qfCsl7nBjDLiFpwBpJhsemwlX_4.mft File: qfCsl7nBjDLiFpwBpJhsemwlX_4.mft (raw, json) Hash identifier: OTogpLx8VTcNgXPvJKpv0zjIOAXJLjr3DMwfWkwsgj8= Subject key identifier: F8:C1:F3:56:45:15:AB:26:7C:EE:B5:8B:7F:5E:9A:92:AE:AD:15:C1 Authority key identifier: A9:F0:AC:97:B9:C1:8C:32:E2:16:9C:01:A4:98:6C:7A:6C:25:5F:FE Certificate issuer: /CN=A91585F0/serialNumber=A9F0AC97B9C18C32E2169C01A4986C7A6C255FFE Certificate serial: DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfCsl7nBjDLiFpwBpJhsemwlX_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91585F0/56356CD4640011F0B1A1D57EC4F9AE02/qfCsl7nBjDLiFpwBpJhsemwlX_4.mft Manifest number: DA Signing time: Fri 11 Sep 2026 06:42:51 +0000 Manifest this update: Fri 11 Sep 2026 06:42:50 +0000 Manifest next update: Fri 18 Sep 2026 06:42:50 +0000 Files and hashes: 1: qfCsl7nBjDLiFpwBpJhsemwlX_4.crl (hash: KPqTHdRzrmVfRJHZI5q1VkZP/CSkFmEhp8rCvkIFCwA=) 2: C9479880646611F0B371D156C4F9AE02.roa (hash: 1Bi/G10BI3XOGL7nH1WPH5pImjsfqzCrysOK+2dXgiA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91585F0/56356CD4640011F0B1A1D57EC4F9AE02/qfCsl7nBjDLiFpwBpJhsemwlX_4.crl rsync://rpki.apnic.net/member_repository/A91585F0/56356CD4640011F0B1A1D57EC4F9AE02/qfCsl7nBjDLiFpwBpJhsemwlX_4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfCsl7nBjDLiFpwBpJhsemwlX_4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 06:42:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 221 (0xdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91585F0, serialNumber=A9F0AC97B9C18C32E2169C01A4986C7A6C255FFE Validity Not Before: Sep 11 06:42:50 2026 GMT Not After : Sep 18 06:42:50 2026 GMT Subject: CN=6aa3a2eb-97a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:39:c1:d2:d0:d2:bd:a0:d5:ed:ba:87:db:25: c6:6f:a2:15:60:32:7c:fe:0d:b5:eb:ec:0a:a6:47: 35:d7:e6:a2:ac:1d:48:4d:c8:69:91:57:b4:1b:6a: 59:e5:92:fa:ef:84:a6:56:9f:ee:8e:bc:89:e7:36: fa:83:8e:61:e7:fe:f1:32:93:0d:06:dc:3e:96:23: fd:51:fe:85:78:4b:b6:d3:5a:81:2a:dc:6c:86:04: ca:22:34:d6:9d:e3:bf:c0:20:7a:b0:71:68:2a:da: 6e:e7:09:85:65:ca:65:06:79:ea:3f:63:fa:f3:ea: 17:c0:ec:64:6a:b3:74:f7:50:6f:10:59:b0:33:62: 07:9a:4c:eb:df:bd:f7:22:03:6b:29:9b:54:49:c1: 5c:92:b4:9d:6a:93:72:90:6a:74:3f:46:31:db:34: ad:ef:af:a7:64:24:12:8d:09:73:a9:ad:51:de:cf: 97:87:ba:15:10:42:ef:ca:14:6d:bb:f4:8a:cf:a7: 69:d8:b3:2b:42:11:fa:f0:05:91:31:7b:26:2a:d1: 0a:f4:58:e6:f5:1a:7e:f8:70:33:7c:80:98:fb:ad: f8:22:4f:b9:fe:dd:9a:be:03:c3:32:b2:80:f1:e2: 1c:a0:93:1d:b0:71:aa:e5:78:4c:64:55:58:5a:27: 2d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:C1:F3:56:45:15:AB:26:7C:EE:B5:8B:7F:5E:9A:92:AE:AD:15:C1 X509v3 Authority Key Identifier: keyid:A9:F0:AC:97:B9:C1:8C:32:E2:16:9C:01:A4:98:6C:7A:6C:25:5F:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91585F0/56356CD4640011F0B1A1D57EC4F9AE02/qfCsl7nBjDLiFpwBpJhsemwlX_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfCsl7nBjDLiFpwBpJhsemwlX_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91585F0/56356CD4640011F0B1A1D57EC4F9AE02/qfCsl7nBjDLiFpwBpJhsemwlX_4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:8b:33:83:b3:c0:d2:c3:25:e7:fb:2b:e6:9d:93:3c:c3:c6: 0f:7c:fb:27:b0:2a:9a:d7:03:b2:92:7c:f0:d8:70:ad:37:0d: 9e:18:b1:79:18:04:53:24:28:f2:66:b4:b1:33:91:21:f8:2f: 74:c0:d0:2a:1e:b3:b2:f4:6c:eb:93:ec:85:e6:49:eb:67:4b: 1f:56:17:c5:69:81:a6:14:0e:19:bf:c4:36:a2:ae:d9:10:3f: 7f:e0:95:bd:de:33:f5:ee:82:ba:58:ca:cf:21:2c:0a:cf:60: f0:18:f1:41:08:e6:32:49:91:89:0c:9b:34:13:57:39:19:98: f8:ba:9d:02:02:9c:06:67:bc:56:8a:4b:f2:de:04:7f:cb:68: b4:0c:95:af:42:6a:0f:2a:25:dd:b1:91:48:77:73:1f:61:79: aa:cd:e3:54:f1:d4:17:8d:7f:9d:37:31:fd:80:18:0c:a8:84: fb:41:26:1d:5f:cb:5f:ba:ac:7f:3d:01:43:1a:ee:13:d5:d5: a2:8d:f5:63:70:ed:81:b6:95:52:bb:0a:c1:09:ab:76:44:68: de:d6:1f:ec:db:26:63:70:59:da:7e:00:aa:fe:ab:cb:eb:fc: 3d:47:a9:7d:d4:1e:6c:a1:e1:3e:8a:a9:ac:5a:3c:e5:04:b1: 1c:48:52:34 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg1RjAxMTAvBgNVBAUTKEE5RjBBQzk3QjlDMThDMzJFMjE2OUMwMUE0OTg2QzdB NkMyNTVGRkUwHhcNMjYwOTExMDY0MjUwWhcNMjYwOTE4MDY0MjUwWjAYMRYwFAYD VQQDEw02YWEzYTJlYi05N2E4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvDnB0tDSvaDV7bqH2yXGb6IVYDJ8/g216+wKpkc11+airB1ITchpkVe0G2pZ 5ZL674SmVp/ujryJ5zb6g45h5/7xMpMNBtw+liP9Uf6FeEu201qBKtxshgTKIjTW neO/wCB6sHFoKtpu5wmFZcplBnnqP2P68+oXwOxkarN091BvEFmwM2IHmkzr3733 IgNrKZtUScFckrSdapNykGp0P0Yx2zSt76+nZCQSjQlzqa1R3s+Xh7oVEELvyhRt u/SKz6dp2LMrQhH68AWRMXsmKtEK9Fjm9Rp++HAzfICY+634Ik+5/t2avgPDMrKA 8eIcoJMdsHGq5XhMZFVYWictHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPjB81ZF FasmfO61i39empKurRXBMB8GA1UdIwQYMBaAFKnwrJe5wYwy4hacAaSYbHpsJV/+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODVGMC81NjM1NkNENDY0 MDAxMUYwQjFBMUQ1N0VDNEY5QUUwMi9xZkNzbDduQmpETGlGcHdCcEpoc2Vtd2xY XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FmQ3NsN25CakRMaUZwd0JwSmhzZW13bFhfNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODVGMC81NjM1NkNENDY0MDAxMUYwQjFBMUQ1N0VDNEY5QUUwMi9xZkNzbDduQmpE TGlGcHdCcEpoc2Vtd2xYXzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMYszg7PA0sMl5/sr5p2TPMPGD3z7J7AqmtcDspJ88NhwrTcNnhixeRgEUyQo 8ma0sTORIfgvdMDQKh6zsvRs65PsheZJ62dLH1YXxWmBphQOGb/ENqKu2RA/f+CV vd4z9e6CuljKzyEsCs9g8BjxQQjmMkmRiQybNBNXORmY+LqdAgKcBme8VopL8t4E f8totAyVr0JqDyol3bGRSHdzH2F5qs3jVPHUF41/nTcx/YAYDKiE+0EmHV/LX7qs fz0BQxruE9XVoo31Y3DtgbaVUrsKwQmrdkRo3tYf7NsmY3BZ2n4Aqv6ry+v8PUep fdQebKHhPoqprFo85QSxHEhSNA== -----END CERTIFICATE-----Generated at Fri Sep 11 15:35:12 2026 by rpki-client