$ rpki-client -vvvf rpki.apnic.net/member_repository/A91627B1/8FAF2BDE82A311EEAC69F456C4F9AE02/Qyo25tVwCwvKzOD0FXauaxPK08A.mft File: Qyo25tVwCwvKzOD0FXauaxPK08A.mft (raw, json) Hash identifier: SnEOilFyj+ZevtKnIGgd1O5mQOtj1tTl28G26sEGYgM= Subject key identifier: 2E:E4:75:FC:1F:87:87:59:91:1A:7F:B8:87:8F:30:C6:A3:88:3B:55 Authority key identifier: 43:2A:36:E6:D5:70:0B:0B:CA:CC:E0:F4:15:76:AE:6B:13:CA:D3:C0 Certificate issuer: /CN=A91627B1/serialNumber=432A36E6D5700B0BCACCE0F41576AE6B13CAD3C0 Certificate serial: 0221 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qyo25tVwCwvKzOD0FXauaxPK08A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91627B1/8FAF2BDE82A311EEAC69F456C4F9AE02/Qyo25tVwCwvKzOD0FXauaxPK08A.mft Manifest number: 021C Signing time: Sat 03 Oct 2026 03:28:44 +0000 Manifest this update: Sat 03 Oct 2026 03:28:43 +0000 Manifest next update: Sat 10 Oct 2026 03:28:43 +0000 Files and hashes: 1: Qyo25tVwCwvKzOD0FXauaxPK08A.crl (hash: T6T8viJrJ/BkkYIt1IgLCrZ4LkUFVQOG59DdmBARGAg=) 2: 3ED152FE82A411EE87690C58C4F9AE02.roa (hash: gEpkbZAOCiAGZqrCOuhhWC5OkOPHde0fYqgs1m5gseY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91627B1/8FAF2BDE82A311EEAC69F456C4F9AE02/Qyo25tVwCwvKzOD0FXauaxPK08A.crl rsync://rpki.apnic.net/member_repository/A91627B1/8FAF2BDE82A311EEAC69F456C4F9AE02/Qyo25tVwCwvKzOD0FXauaxPK08A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qyo25tVwCwvKzOD0FXauaxPK08A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 03:28:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 545 (0x221) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91627B1, serialNumber=432A36E6D5700B0BCACCE0F41576AE6B13CAD3C0 Validity Not Before: Oct 3 03:28:43 2026 GMT Not After : Oct 10 03:28:43 2026 GMT Subject: CN=6ac0766c-e5d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:2c:d9:a8:6b:34:75:ce:6b:08:29:c5:f1:57: a1:ac:c4:c3:40:97:95:91:c7:af:f8:09:bd:90:fb: 5f:e5:ab:af:24:2c:a1:a9:5b:6e:ac:af:ca:cf:6b: 2a:ca:a3:22:8b:87:e9:c0:41:17:81:90:8a:13:fd: 62:46:94:89:fb:d4:91:5f:52:dc:39:96:5e:97:23: 88:5c:55:81:c5:18:45:41:f5:17:09:23:ed:e1:81: 23:32:7a:19:5a:0e:e8:de:12:a8:1e:31:43:07:05: 66:a7:32:ac:70:e6:0a:5a:03:c2:03:40:bb:b2:83: 29:5f:4c:a5:59:b4:2d:f9:b4:65:95:98:a2:ef:31: 23:9f:d7:77:05:8f:ef:ce:e1:a9:c9:92:a4:d2:2b: 14:3e:7f:8d:8a:18:a0:a9:78:41:ff:3d:b2:8a:70: 7d:90:e2:ec:b9:b0:ed:45:a0:40:9d:41:e9:a3:d1: c7:bc:25:cc:b3:63:6c:a9:fe:f3:81:8a:dc:bc:0a: 6c:c8:00:dd:af:0d:52:35:78:73:21:fd:0e:15:e3: a2:9d:7a:63:f1:c3:92:a8:04:cd:3e:8a:be:3e:e3: 93:6f:5a:fe:e4:cc:83:57:26:47:0d:ed:8d:b5:6e: d4:f6:8c:95:a0:48:1d:b9:e4:89:2b:52:02:69:f3: c8:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:E4:75:FC:1F:87:87:59:91:1A:7F:B8:87:8F:30:C6:A3:88:3B:55 X509v3 Authority Key Identifier: keyid:43:2A:36:E6:D5:70:0B:0B:CA:CC:E0:F4:15:76:AE:6B:13:CA:D3:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91627B1/8FAF2BDE82A311EEAC69F456C4F9AE02/Qyo25tVwCwvKzOD0FXauaxPK08A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qyo25tVwCwvKzOD0FXauaxPK08A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91627B1/8FAF2BDE82A311EEAC69F456C4F9AE02/Qyo25tVwCwvKzOD0FXauaxPK08A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:1e:98:53:41:16:50:1a:e4:5d:42:46:4a:00:6f:c9:2b:37: 4c:46:97:a4:6d:90:2c:9a:5f:97:2a:48:10:ee:46:d5:49:8d: d5:2a:88:a6:46:d3:a9:f5:e8:2f:9f:3d:f6:bd:24:a4:1c:8f: bf:e3:58:2a:05:e5:e5:00:2c:ba:96:54:6e:b9:2a:a9:0d:9a: 77:a6:6c:47:8f:60:19:cf:5a:c6:be:aa:f5:41:fd:9d:17:54: ad:df:13:3c:a1:46:1b:d6:68:96:e8:4f:a9:87:21:14:15:2c: 8d:47:c5:7a:0a:e4:cc:41:f8:6c:85:57:0a:79:1f:63:0b:d9: 6a:28:07:85:55:52:c4:6c:0e:7a:0e:ed:9b:31:1d:ef:0d:94: 1f:63:d9:5f:86:48:15:04:96:3c:f1:35:e1:f6:0d:5d:22:ac: 43:d8:21:99:59:64:e9:e1:d5:02:1c:08:b6:20:5a:7b:6d:37: 32:97:af:83:fe:8e:ab:e1:ee:25:c5:73:bf:c9:82:3e:0d:0f: 1f:0e:03:c9:0a:4a:51:d0:df:e2:f2:42:dc:0d:64:dc:15:b4: 14:a5:5e:73:01:eb:47:2e:67:52:a1:5e:3d:ce:be:6e:08:25: d2:87:68:a2:64:0d:10:f3:ec:0f:2d:db:34:22:29:7b:10:ee: 29:95:b8:88 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjI3QjExMTAvBgNVBAUTKDQzMkEzNkU2RDU3MDBCMEJDQUNDRTBGNDE1NzZBRTZC MTNDQUQzQzAwHhcNMjYxMDAzMDMyODQzWhcNMjYxMDEwMDMyODQzWjAYMRYwFAYD VQQDEw02YWMwNzY2Yy1lNWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0SzZqGs0dc5rCCnF8VehrMTDQJeVkcev+Am9kPtf5auvJCyhqVturK/Kz2sq yqMii4fpwEEXgZCKE/1iRpSJ+9SRX1LcOZZelyOIXFWBxRhFQfUXCSPt4YEjMnoZ Wg7o3hKoHjFDBwVmpzKscOYKWgPCA0C7soMpX0ylWbQt+bRllZii7zEjn9d3BY/v zuGpyZKk0isUPn+NihigqXhB/z2yinB9kOLsubDtRaBAnUHpo9HHvCXMs2Nsqf7z gYrcvApsyADdrw1SNXhzIf0OFeOinXpj8cOSqATNPoq+PuOTb1r+5MyDVyZHDe2N tW7U9oyVoEgdueSJK1ICafPIIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC7kdfwf h4dZkRp/uIePMMajiDtVMB8GA1UdIwQYMBaAFEMqNubVcAsLyszg9BV2rmsTytPA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjdCMS84RkFGMkJERTgy QTMxMUVFQUM2OUY0NTZDNEY5QUUwMi9ReW8yNXRWd0N3dkt6T0QwRlhhdWF4UEsw OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1F5bzI1dFZ3Q3d2S3pPRDBGWGF1YXhQSzA4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjdCMS84RkFGMkJERTgyQTMxMUVFQUM2OUY0NTZDNEY5QUUwMi9ReW8yNXRWd0N3 dkt6T0QwRlhhdWF4UEswOEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXR6YU0EWUBrkXUJGSgBvySs3TEaXpG2QLJpflypIEO5G1UmN1SqIpkbTqfXo L5899r0kpByPv+NYKgXl5QAsupZUbrkqqQ2ad6ZsR49gGc9axr6q9UH9nRdUrd8T PKFGG9ZoluhPqYchFBUsjUfFegrkzEH4bIVXCnkfYwvZaigHhVVSxGwOeg7tmzEd 7w2UH2PZX4ZIFQSWPPE14fYNXSKsQ9ghmVlk6eHVAhwItiBae203Mpevg/6Oq+Hu JcVzv8mCPg0PHw4DyQpKUdDf4vJC3A1k3BW0FKVecwHrRy5nUqFePc6+bggl0odo omQNEPPsDy3bNCIpexDuKZW4iA== -----END CERTIFICATE-----Generated at Sun Oct 4 22:12:32 2026 by rpki-client