$ rpki-client -vvvf rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.mft File: qeq8JGURbtEdbIza4gESN88fWd8.mft (raw, json) Hash identifier: YMYpVFfUDdcGigmyvgOXZ3eRL87pRToRCB1tffulo0w= Subject key identifier: E8:5B:77:47:12:61:D2:34:D6:71:BD:B5:14:8F:02:7A:05:BE:F9:3F Authority key identifier: A9:EA:BC:24:65:11:6E:D1:1D:6C:8C:DA:E2:01:12:37:CF:1F:59:DF Certificate issuer: /CN=A91871C2/serialNumber=A9EABC2465116ED11D6C8CDAE2011237CF1F59DF Certificate serial: 087A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qeq8JGURbtEdbIza4gESN88fWd8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.mft Manifest number: 0825 Signing time: Wed 26 Aug 2026 21:19:44 +0000 Manifest this update: Wed 26 Aug 2026 21:19:44 +0000 Manifest next update: Wed 02 Sep 2026 21:19:44 +0000 Files and hashes: 1: qeq8JGURbtEdbIza4gESN88fWd8.crl (hash: AahCJfxvxk6GsjOaVTaodx4XRsrkx6LckZUoCmPLuAQ=) 2: F30B07CE705011F0A5A44E86C4F9AE02.roa (hash: yqzH+VRJDdIn8v1i8jejnoTV03RvjOrdo0NsV1Hhxj0=) 3: B43753D005AC11ECB86F694EC4F9AE02.roa (hash: R34hnb67EtA7MxdkNi5WSU1aixEiNDr681Fh+Yd4Kag=) 4: BA4083F84CEF11F0A46DCE81C4F9AE02.roa (hash: iWVOHg6QDBIqMpA3MO5LObP6AHCPSfyjRAL55UZ4G0g=) 5: C5465290559C11F0BBD2D127C4F9AE02.roa (hash: LJbta/JJVJ23WgZ0akF5Ov55pEZeCXuRcU1xDJv2re0=) 6: C446B484559C11F0BBD2D127C4F9AE02.roa (hash: ZE3RMF3wHAnlFS7ZCENNLqhdWX3pKqPIaFPP+R0+EHA=) 7: 8BF305A2F44711F0849EF3E6616F56BC.roa (hash: 8FXTDQ3pdrB9lI0tc6cwlsOBLuq+7Ubnrq4d6bTJfQo=) 8: A5307E284CEF11F092F69C81C4F9AE02.roa (hash: QGlHH+ju7tlOXYuuHHLFlLqQaIyiEhbULfPuUxMjGXg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.crl rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qeq8JGURbtEdbIza4gESN88fWd8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Sep 2026 21:19:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2170 (0x87a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91871C2, serialNumber=A9EABC2465116ED11D6C8CDAE2011237CF1F59DF Validity Not Before: Aug 26 21:19:44 2026 GMT Not After : Sep 2 21:19:44 2026 GMT Subject: CN=6a8f5870-032b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:83:ec:9a:d8:56:26:f4:48:66:d3:22:57:2f: cb:2a:0a:4e:1b:dd:50:b1:22:0d:e0:20:82:7a:c2: 04:57:15:4e:58:ee:d6:99:f4:11:21:c9:dd:1d:76: 00:4c:44:c4:37:dc:5e:59:1f:1e:13:5b:e3:a8:c1: 57:a4:e9:9d:37:a6:eb:1a:70:00:c0:09:07:9d:e5: c2:f0:aa:c4:93:13:14:61:a2:54:b1:a9:5d:67:af: c1:f5:d4:d2:c3:bb:22:89:5a:ac:b2:51:77:ea:b2: bc:34:7a:5c:98:5c:78:e7:ab:e8:11:e2:34:ae:3d: fe:a7:30:2f:4b:37:2a:f7:92:bf:41:cc:14:a1:c3: cd:6b:9d:df:4a:d9:9e:c3:b3:8d:a4:01:cb:8f:ed: 85:b4:89:c3:fb:3d:bb:c5:db:83:c4:3b:e0:60:05: 30:4d:80:a4:46:4e:4d:f5:eb:84:d6:d0:dc:b0:36: 20:d5:dd:33:58:46:ec:b7:6b:b2:d4:58:21:5b:51: 77:4b:44:5f:a3:b3:08:62:35:f1:64:f8:be:c2:79: 87:71:14:24:a6:00:b3:b9:a1:9d:1d:33:ff:15:37: ce:59:e1:29:34:9c:85:b8:c0:df:5f:9d:b4:98:89: d6:84:bb:01:05:cd:96:13:31:3a:ae:50:f1:25:12: 36:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:5B:77:47:12:61:D2:34:D6:71:BD:B5:14:8F:02:7A:05:BE:F9:3F X509v3 Authority Key Identifier: keyid:A9:EA:BC:24:65:11:6E:D1:1D:6C:8C:DA:E2:01:12:37:CF:1F:59:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qeq8JGURbtEdbIza4gESN88fWd8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:a5:95:41:fa:0d:8d:df:35:03:ae:99:94:d7:6e:07:fd:5f: f8:29:5f:cf:b4:75:af:67:86:55:4b:a4:3b:7b:15:97:4d:c1: cb:f5:40:a1:ad:8e:94:36:cc:3b:f1:96:9e:b7:60:eb:8f:ad: f0:d3:e0:d5:eb:bb:4f:c8:34:3b:27:74:12:b2:23:9d:5f:9e: f7:ab:29:e9:10:12:c5:2d:9d:8a:7e:46:ca:a1:98:79:01:12: b4:8f:c0:9d:02:b8:3a:be:6b:0a:cc:60:a7:2d:9e:aa:ab:cc: 80:52:1e:b9:76:d9:4f:c0:de:16:52:5a:30:48:ad:62:a5:7e: 59:80:4a:15:dd:e7:f4:45:a5:05:7c:3b:2c:57:4f:0f:d3:85: da:7d:39:e0:2c:8f:c8:38:46:a0:5b:4c:8a:8e:f5:b3:0f:94: 29:f5:1c:b2:23:c8:27:6c:c6:80:96:33:a8:6b:a0:b5:66:c9: 79:a1:b0:a8:4e:79:89:42:11:b7:f4:b9:74:21:f2:60:76:d6: 75:ae:c9:3b:66:47:58:cc:2a:27:b9:ce:50:a7:40:45:9f:3a: 7a:a6:89:2b:71:37:60:4e:1c:91:7b:66:47:99:34:03:ca:76: 12:5c:23:e6:d9:96:ab:1f:4e:dc:ac:0c:b6:a0:1e:34:9d:63: 3c:39:1a:6c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCHowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODcxQzIxMTAvBgNVBAUTKEE5RUFCQzI0NjUxMTZFRDExRDZDOENEQUUyMDExMjM3 Q0YxRjU5REYwHhcNMjYwODI2MjExOTQ0WhcNMjYwOTAyMjExOTQ0WjAYMRYwFAYD VQQDEw02YThmNTg3MC0wMzJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA04PsmthWJvRIZtMiVy/LKgpOG91QsSIN4CCCesIEVxVOWO7WmfQRIcndHXYA TETEN9xeWR8eE1vjqMFXpOmdN6brGnAAwAkHneXC8KrEkxMUYaJUsaldZ6/B9dTS w7siiVqsslF36rK8NHpcmFx456voEeI0rj3+pzAvSzcq95K/QcwUocPNa53fStme w7ONpAHLj+2FtInD+z27xduDxDvgYAUwTYCkRk5N9euE1tDcsDYg1d0zWEbst2uy 1FghW1F3S0Rfo7MIYjXxZPi+wnmHcRQkpgCzuaGdHTP/FTfOWeEpNJyFuMDfX520 mInWhLsBBc2WEzE6rlDxJRI2awIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOhbd0cS YdI01nG9tRSPAnoFvvk/MB8GA1UdIwQYMBaAFKnqvCRlEW7RHWyM2uIBEjfPH1nf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzFDMi9ERTYxNjY2ODU1 QTkxMUVCOTlBRkRBNURDNEY5QUUwMi9xZXE4SkdVUmJ0RWRiSXphNGdFU044OGZX ZDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FlcThKR1VSYnRFZGJJemE0Z0VTTjg4ZldkOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzFDMi9ERTYxNjY2ODU1QTkxMUVCOTlBRkRBNURDNEY5QUUwMi9xZXE4SkdVUmJ0 RWRiSXphNGdFU044OGZXZDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAa6WVQfoNjd81A66ZlNduB/1f+Clfz7R1r2eGVUukO3sVl03By/VAoa2OlDbM O/GWnrdg64+t8NPg1eu7T8g0Oyd0ErIjnV+e96sp6RASxS2din5GyqGYeQEStI/A nQK4Or5rCsxgpy2eqqvMgFIeuXbZT8DeFlJaMEitYqV+WYBKFd3n9EWlBXw7LFdP D9OF2n054CyPyDhGoFtMio71sw+UKfUcsiPIJ2zGgJYzqGugtWbJeaGwqE55iUIR t/S5dCHyYHbWda7JO2ZHWMwqJ7nOUKdARZ86eqaJK3E3YE4ckXtmR5k0A8p2Elwj 5tmWqx9O3KwMtqAeNJ1jPDkabA== -----END CERTIFICATE-----Generated at Thu Aug 27 04:01:08 2026 by rpki-client