$ rpki-client -vvvf rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.mft File: PQqIwMyj7oZ3zRffPuht5x38ESk.mft (raw, json) Hash identifier: oqvMOs0M6qvvq16u/6CUDpvx6LSti2Z6SF+Sdl0DOA8= Subject key identifier: 81:37:37:C5:2D:A9:A1:23:83:22:48:6E:50:35:5D:48:46:27:0B:3D Authority key identifier: 3D:0A:88:C0:CC:A3:EE:86:77:CD:17:DF:3E:E8:6D:E7:1D:FC:11:29 Certificate issuer: /CN=A91607DE/serialNumber=3D0A88C0CCA3EE8677CD17DF3EE86DE71DFC1129 Certificate serial: 0458 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQqIwMyj7oZ3zRffPuht5x38ESk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.mft Manifest number: 0450 Signing time: Wed 21 Oct 2026 00:17:58 +0000 Manifest this update: Wed 21 Oct 2026 00:17:58 +0000 Manifest next update: Wed 28 Oct 2026 00:17:58 +0000 Files and hashes: 1: PQqIwMyj7oZ3zRffPuht5x38ESk.crl (hash: vLtpH8gizPWdpOCnbBpMI/vfpYnxfZqrQxJdMzvzolE=) 2: FD398FA0BB5D11ECA62F8674C4F9AE02.roa (hash: r41pMCZv9jheY8jsmE9yFyXz5HkrHw+pkeiIej7dhvU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.crl rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQqIwMyj7oZ3zRffPuht5x38ESk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 00:17:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1112 (0x458) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91607DE, serialNumber=3D0A88C0CCA3EE8677CD17DF3EE86DE71DFC1129 Validity Not Before: Oct 21 00:17:58 2026 GMT Not After : Oct 28 00:17:58 2026 GMT Subject: CN=6ad804b6-af96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:87:ba:ee:00:e1:b8:05:ef:e8:2c:35:56:d7: aa:b0:05:69:c9:8b:30:51:db:dc:f6:fc:62:96:92: 99:73:24:1c:ec:8d:1c:36:d9:9d:27:e5:48:01:e7: 1a:ff:5c:de:bb:02:2f:06:37:79:48:3d:31:69:09: 4d:8d:be:2d:cc:a7:e4:d6:88:c1:1a:f9:fb:ee:0b: 6a:7c:77:7f:4c:53:58:74:ff:e4:59:ad:1e:e6:23: d3:e4:7f:2e:34:3f:08:01:83:be:3e:e4:f7:88:5f: 49:9a:c0:6d:92:17:c2:f7:6f:c0:c9:b6:bd:23:ab: fa:5f:d0:a8:4f:3c:0d:2f:e4:62:da:8e:4a:19:32: eb:f9:db:61:5b:63:44:dc:4f:77:19:ee:d5:9e:21: 2c:36:96:32:36:ae:e7:ac:91:80:a3:f5:e5:5e:4d: 50:96:ae:39:6f:35:4b:b8:dd:a3:2a:a9:c6:7e:7a: f7:2f:99:4f:46:76:90:84:f1:66:bb:14:ee:90:5d: d1:24:1d:b5:3e:80:bf:d7:96:d9:02:d5:5c:37:70: 20:7a:a0:c5:c2:6a:7b:ff:48:51:a7:5c:95:b6:1c: 75:86:b8:4c:33:8e:77:53:ef:38:67:fe:2f:10:bf: f4:b0:2b:a7:a5:8d:42:a1:ef:32:ef:80:7d:6b:18: f8:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:37:37:C5:2D:A9:A1:23:83:22:48:6E:50:35:5D:48:46:27:0B:3D X509v3 Authority Key Identifier: keyid:3D:0A:88:C0:CC:A3:EE:86:77:CD:17:DF:3E:E8:6D:E7:1D:FC:11:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQqIwMyj7oZ3zRffPuht5x38ESk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:5f:b0:73:d2:65:b1:bf:d4:d3:08:4a:10:28:b0:5f:cb:20: fe:28:ac:f8:33:55:86:a3:df:66:bb:02:a9:f4:d0:a9:b5:bd: 52:66:0d:1b:ac:4c:35:46:4b:7c:e1:c2:a0:8b:68:eb:c8:e9: a3:3b:36:ab:a9:0c:db:a7:8a:98:8c:19:01:5f:5a:6f:f7:e2: 31:6d:e8:a4:ee:3f:ed:cd:eb:e8:6a:fe:a9:d1:d6:5c:9d:9c: e8:45:17:71:61:0d:70:78:f3:f9:d0:9f:63:4f:41:71:a8:21: a1:6d:f4:53:be:85:a9:fc:d3:4f:17:7b:ee:5a:be:45:37:50: e0:39:26:1b:03:35:47:86:9c:60:51:47:ca:f1:af:a3:71:9e: f6:dc:d7:48:87:67:97:cb:22:82:8d:b4:30:22:6e:29:9d:36: 3a:60:09:04:fa:26:7a:9d:60:28:e8:94:72:dd:c0:59:69:da: 3c:ea:10:f4:8d:47:9b:99:60:d2:a3:e5:0e:9c:ce:1d:08:83: fd:f4:79:4e:cd:d3:1f:28:89:cd:14:48:e5:5b:23:21:12:ee: bc:93:51:ef:c1:7c:49:2c:b8:b9:5b:4f:39:d6:8b:a2:a5:52: 34:5c:02:98:37:99:1e:97:41:0b:86:21:5e:5f:e2:e0:35:33: ac:c2:cc:59 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBFgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA3REUxMTAvBgNVBAUTKDNEMEE4OEMwQ0NBM0VFODY3N0NEMTdERjNFRTg2REU3 MURGQzExMjkwHhcNMjYxMDIxMDAxNzU4WhcNMjYxMDI4MDAxNzU4WjAYMRYwFAYD VQQDEw02YWQ4MDRiNi1hZjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuYe67gDhuAXv6Cw1VteqsAVpyYswUdvc9vxilpKZcyQc7I0cNtmdJ+VIAeca /1zeuwIvBjd5SD0xaQlNjb4tzKfk1ojBGvn77gtqfHd/TFNYdP/kWa0e5iPT5H8u ND8IAYO+PuT3iF9JmsBtkhfC92/Ayba9I6v6X9CoTzwNL+Ri2o5KGTLr+dthW2NE 3E93Ge7VniEsNpYyNq7nrJGAo/XlXk1Qlq45bzVLuN2jKqnGfnr3L5lPRnaQhPFm uxTukF3RJB21PoC/15bZAtVcN3AgeqDFwmp7/0hRp1yVthx1hrhMM453U+84Z/4v EL/0sCunpY1Coe8y74B9axj4kwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIE3N8Ut qaEjgyJIblA1XUhGJws9MB8GA1UdIwQYMBaAFD0KiMDMo+6Gd80X3z7obecd/BEp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDdERS9DNzY4MTRDNkJC NUExMUVDOTA4QUM5NkVDNEY5QUUwMi9QUXFJd015ajdvWjN6UmZmUHVodDV4MzhF U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BRcUl3TXlqN29aM3pSZmZQdWh0NXgzOEVTay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDdERS9DNzY4MTRDNkJCNUExMUVDOTA4QUM5NkVDNEY5QUUwMi9QUXFJd015ajdv WjN6UmZmUHVodDV4MzhFU2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAzl+wc9Jlsb/U0whKECiwX8sg/iis+DNVhqPfZrsCqfTQqbW9UmYNG6xMNUZL fOHCoIto68jpozs2q6kM26eKmIwZAV9ab/fiMW3opO4/7c3r6Gr+qdHWXJ2c6EUX cWENcHjz+dCfY09BcaghoW30U76FqfzTTxd77lq+RTdQ4DkmGwM1R4acYFFHyvGv o3Ge9tzXSIdnl8sigo20MCJuKZ02OmAJBPomep1gKOiUct3AWWnaPOoQ9I1Hm5lg 0qPlDpzOHQiD/fR5Ts3THyiJzRRI5VsjIRLuvJNR78F8SSy4uVtPOdaLoqVSNFwC mDeZHpdBC4YhXl/i4DUzrMLMWQ== -----END CERTIFICATE-----Generated at Wed Oct 21 14:59:12 2026 by rpki-client