$ rpki-client -vvvf rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.mft File: QSE7L18kKfwyjsP06V1YhkAv62k.mft (raw, json) Hash identifier: TLCuqjDJ/1hsK2hETr+h6RZgsuM9Ov7p3pvlkNN7QgE= Subject key identifier: 9C:D2:FF:3D:81:B7:6B:39:9E:01:8B:97:FD:67:AA:B6:35:8E:06:39 Authority key identifier: 41:21:3B:2F:5F:24:29:FC:32:8E:C3:F4:E9:5D:58:86:40:2F:EB:69 Certificate issuer: /CN=A91757CB/serialNumber=41213B2F5F2429FC328EC3F4E95D5886402FEB69 Certificate serial: 020D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSE7L18kKfwyjsP06V1YhkAv62k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.mft Manifest number: 01EE Signing time: Sun 25 Oct 2026 03:56:06 +0000 Manifest this update: Sun 25 Oct 2026 03:56:06 +0000 Manifest next update: Sun 01 Nov 2026 03:56:06 +0000 Files and hashes: 1: QSE7L18kKfwyjsP06V1YhkAv62k.crl (hash: IOkrlgYL1T2+JR8hoImLg50NsQHUgechGySnyp5rGbM=) 2: 47142068221311EFB680F113C4F9AE02.roa (hash: R9+W9Vd8vNJv6BZYi/psQ14Bv23TuvOa9qtjBXGBpmg=) 3: EE01A248F2FB11EE9AA9E24CC4F9AE02.roa (hash: rKGQBFsWBoXRwkkEHmzJU4DziCIyRjQTWeYrnr/z7fc=) 4: 810265C29F8011F1A87DFCCB3B11F970.roa (hash: zEY+APVLW4gBdXNT2IbS0X3FvTuHb5f84oamsnoooSc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.crl rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSE7L18kKfwyjsP06V1YhkAv62k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 525 (0x20d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91757CB, serialNumber=41213B2F5F2429FC328EC3F4E95D5886402FEB69 Validity Not Before: Oct 25 03:56:06 2026 GMT Not After : Nov 1 03:56:06 2026 GMT Subject: CN=6add7dd6-b142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:09:dd:18:88:5b:55:12:59:73:80:c3:83:b4: f1:49:9d:19:b8:cf:25:c3:34:57:57:a7:59:d8:9e: 31:c1:e5:71:e4:bc:11:8f:27:b5:2b:a9:46:a2:a7: 3c:67:1c:34:91:73:9a:7a:19:ad:93:8a:3e:90:6a: e0:eb:0d:f7:18:a8:41:fb:f8:1b:fa:05:85:ad:d6: 3d:a7:16:35:ca:82:c9:af:54:41:d2:51:f3:0e:8d: ff:74:1c:d9:39:66:50:9d:6b:9c:94:b6:4a:31:0f: 89:f1:79:5e:33:89:5f:2a:ca:4f:28:65:80:ec:7a: 49:95:03:9a:5c:fd:e8:aa:06:83:22:f2:1f:d1:7b: 01:ba:ae:10:fc:8a:9b:67:63:78:10:14:b9:2e:d4: 54:92:a4:f4:69:ae:d2:2d:d6:0b:54:c9:69:19:06: 12:a9:17:c3:14:60:1d:a0:f7:24:8e:1c:fc:78:ba: 47:50:a7:15:40:e5:b0:2b:24:ed:20:38:0a:64:60: a3:85:89:17:0a:f7:f3:97:5f:71:62:08:6b:ca:27: 06:71:4e:65:fd:56:45:04:93:72:ca:ff:b8:dd:ae: 33:92:1b:e8:10:0b:d4:5b:7f:31:b0:7b:42:4d:9a: d0:cd:2a:a6:58:eb:af:11:24:52:37:29:42:f8:10: b0:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:D2:FF:3D:81:B7:6B:39:9E:01:8B:97:FD:67:AA:B6:35:8E:06:39 X509v3 Authority Key Identifier: keyid:41:21:3B:2F:5F:24:29:FC:32:8E:C3:F4:E9:5D:58:86:40:2F:EB:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSE7L18kKfwyjsP06V1YhkAv62k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:8b:be:17:d9:43:d5:37:3c:c7:0f:82:8f:9e:44:c2:d6:27: 0c:5d:f5:53:a6:f2:3c:06:28:4e:b1:32:77:30:01:a4:c5:05: 3a:52:f9:ac:76:58:54:38:4d:28:04:77:72:9e:92:35:cf:50: 22:7e:2b:8c:46:d3:df:68:b0:e9:ad:45:e4:7e:d8:40:0f:2c: 1b:63:1b:29:58:55:f1:50:19:89:83:84:8c:58:0e:ff:e5:b0: 7d:35:01:f7:d4:13:a0:9e:c1:62:9d:84:da:fe:be:fe:4f:8b: 0a:92:9f:1e:8e:05:53:09:87:b4:32:e4:28:85:7b:a8:14:75: 22:a4:d2:c8:e0:9f:d3:e9:59:39:c3:e9:86:09:45:c4:df:3f: e6:63:d7:54:2c:a8:3a:75:ca:16:39:b6:e7:ad:79:e5:cc:3c: 32:28:9a:3f:f2:75:f5:4e:a4:45:04:e7:5a:06:8c:41:83:09: 92:d3:50:9e:a9:6b:b3:32:e0:61:0f:59:80:5c:84:bc:dc:a6: 34:9a:b9:98:7e:41:d8:ae:ce:c1:ce:c6:ed:ca:0d:21:ea:e7: 1c:95:f2:f4:6a:48:80:59:bf:56:19:e1:68:5f:1c:0f:37:f3: 6b:c5:58:b1:5a:6a:b7:6f:86:c4:7b:50:d9:70:0d:a9:ad:5f: 82:2b:09:36 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU3Q0IxMTAvBgNVBAUTKDQxMjEzQjJGNUYyNDI5RkMzMjhFQzNGNEU5NUQ1ODg2 NDAyRkVCNjkwHhcNMjYxMDI1MDM1NjA2WhcNMjYxMTAxMDM1NjA2WjAYMRYwFAYD VQQDEw02YWRkN2RkNi1iMTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjQndGIhbVRJZc4DDg7TxSZ0ZuM8lwzRXV6dZ2J4xweVx5LwRjye1K6lGoqc8 Zxw0kXOaehmtk4o+kGrg6w33GKhB+/gb+gWFrdY9pxY1yoLJr1RB0lHzDo3/dBzZ OWZQnWuclLZKMQ+J8XleM4lfKspPKGWA7HpJlQOaXP3oqgaDIvIf0XsBuq4Q/Iqb Z2N4EBS5LtRUkqT0aa7SLdYLVMlpGQYSqRfDFGAdoPckjhz8eLpHUKcVQOWwKyTt IDgKZGCjhYkXCvfzl19xYghryicGcU5l/VZFBJNyyv+43a4zkhvoEAvUW38xsHtC TZrQzSqmWOuvESRSNylC+BCw7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJzS/z2B t2s5ngGLl/1nqrY1jgY5MB8GA1UdIwQYMBaAFEEhOy9fJCn8Mo7D9OldWIZAL+tp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTdDQi80NTlCMEM2NEYy RjgxMUVFQTM1MDY3MzhDNEY5QUUwMi9RU0U3TDE4a0tmd3lqc1AwNlYxWWhrQXY2 MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FTRTdMMThrS2Z3eWpzUDA2VjFZaGtBdjYyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTdDQi80NTlCMEM2NEYyRjgxMUVFQTM1MDY3MzhDNEY5QUUwMi9RU0U3TDE4a0tm d3lqc1AwNlYxWWhrQXY2MmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYIu+F9lD1Tc8xw+Cj55EwtYnDF31U6byPAYoTrEydzABpMUFOlL5rHZYVDhN KAR3cp6SNc9QIn4rjEbT32iw6a1F5H7YQA8sG2MbKVhV8VAZiYOEjFgO/+WwfTUB 99QToJ7BYp2E2v6+/k+LCpKfHo4FUwmHtDLkKIV7qBR1IqTSyOCf0+lZOcPphglF xN8/5mPXVCyoOnXKFjm256155cw8MiiaP/J19U6kRQTnWgaMQYMJktNQnqlrszLg YQ9ZgFyEvNymNJq5mH5B2K7Owc7G7coNIernHJXy9GpIgFm/VhnhaF8cDzfza8VY sVpqt2+GxHtQ2XANqa1fgisJNg== -----END CERTIFICATE-----Generated at Sun Oct 25 08:09:03 2026 by rpki-client