$ rpki-client -vvvf rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.mft File: qeq8JGURbtEdbIza4gESN88fWd8.mft (raw, json) Hash identifier: P2GpSNWBWmEh5dsVCjlUlre8dC8USemKTJrs+Afm5Dk= Subject key identifier: 8B:EC:6E:01:2C:5B:70:B0:BD:DC:19:23:72:B9:E4:6A:C0:D0:61:F5 Authority key identifier: A9:EA:BC:24:65:11:6E:D1:1D:6C:8C:DA:E2:01:12:37:CF:1F:59:DF Certificate issuer: /CN=A91871C2/serialNumber=A9EABC2465116ED11D6C8CDAE2011237CF1F59DF Certificate serial: 0896 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qeq8JGURbtEdbIza4gESN88fWd8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.mft Manifest number: 0841 Signing time: Tue 20 Oct 2026 21:27:56 +0000 Manifest this update: Tue 20 Oct 2026 21:27:55 +0000 Manifest next update: Tue 27 Oct 2026 21:27:55 +0000 Files and hashes: 1: qeq8JGURbtEdbIza4gESN88fWd8.crl (hash: s+RSWot0r8f9yk2gyN3waYDHSFoXyYPecQhJIvBYNIc=) 2: F30B07CE705011F0A5A44E86C4F9AE02.roa (hash: yqzH+VRJDdIn8v1i8jejnoTV03RvjOrdo0NsV1Hhxj0=) 3: BA4083F84CEF11F0A46DCE81C4F9AE02.roa (hash: iWVOHg6QDBIqMpA3MO5LObP6AHCPSfyjRAL55UZ4G0g=) 4: C446B484559C11F0BBD2D127C4F9AE02.roa (hash: ZE3RMF3wHAnlFS7ZCENNLqhdWX3pKqPIaFPP+R0+EHA=) 5: 8BF305A2F44711F0849EF3E6616F56BC.roa (hash: 8FXTDQ3pdrB9lI0tc6cwlsOBLuq+7Ubnrq4d6bTJfQo=) 6: B43753D005AC11ECB86F694EC4F9AE02.roa (hash: R34hnb67EtA7MxdkNi5WSU1aixEiNDr681Fh+Yd4Kag=) 7: A5307E284CEF11F092F69C81C4F9AE02.roa (hash: QGlHH+ju7tlOXYuuHHLFlLqQaIyiEhbULfPuUxMjGXg=) 8: C5465290559C11F0BBD2D127C4F9AE02.roa (hash: LJbta/JJVJ23WgZ0akF5Ov55pEZeCXuRcU1xDJv2re0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.crl rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qeq8JGURbtEdbIza4gESN88fWd8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 21:27:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2198 (0x896) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91871C2, serialNumber=A9EABC2465116ED11D6C8CDAE2011237CF1F59DF Validity Not Before: Oct 20 21:27:55 2026 GMT Not After : Oct 27 21:27:55 2026 GMT Subject: CN=6ad7dcdc-bfe1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6e:65:be:b0:0d:09:a7:12:db:5f:c0:df:d9: ae:f0:1a:77:80:83:71:f0:a4:c2:e4:1c:a0:de:f7: 40:8f:6f:f8:08:14:e7:df:b7:ce:36:17:f0:c0:26: 07:17:f5:31:42:a4:b3:ef:5a:42:63:d9:56:10:93: 69:9f:d3:b3:af:23:9e:59:c5:79:0d:b7:d7:d8:21: 2b:f0:ec:f1:60:b5:54:7e:ee:f6:4f:ed:d5:a6:75: c2:a1:8f:35:a8:aa:c1:c2:39:f6:ff:13:b4:2b:40: 4d:86:70:e0:98:97:b2:84:69:06:35:70:d5:4f:9c: 5d:6d:26:42:59:79:06:a5:04:23:91:ea:70:7d:9a: c1:d9:bd:82:ef:c8:04:e4:6e:28:e9:74:b2:72:31: c1:ac:84:f3:07:c9:50:61:ab:19:81:c2:29:3e:9e: b3:ee:1a:b6:69:19:a2:9b:b2:74:71:b5:47:57:d8: 42:c4:13:0b:4a:d4:38:ee:63:d8:9a:e4:33:f4:89: 5f:d0:2b:37:49:08:66:bc:24:2c:09:4d:aa:a2:99: dc:c4:fd:b7:f2:3e:87:0f:8a:7d:78:a3:58:be:3c: ba:28:f5:53:b6:71:04:ee:1f:1b:7a:96:26:0a:2e: 87:0f:0b:53:12:3c:9a:0e:7b:13:a3:5b:9a:19:a6: 58:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:EC:6E:01:2C:5B:70:B0:BD:DC:19:23:72:B9:E4:6A:C0:D0:61:F5 X509v3 Authority Key Identifier: keyid:A9:EA:BC:24:65:11:6E:D1:1D:6C:8C:DA:E2:01:12:37:CF:1F:59:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qeq8JGURbtEdbIza4gESN88fWd8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:8f:51:38:24:fb:58:a1:b2:58:5c:e3:ce:64:b4:bd:51:72: ca:d8:a2:51:8a:97:d9:0c:61:5c:65:ea:0b:a8:96:e6:fc:ac: 00:ea:b9:47:10:aa:85:b3:34:af:ff:ab:50:bd:71:d1:ea:41: 88:d3:b0:32:fd:4c:95:57:46:7f:b3:a3:81:cc:53:2c:f4:68: fb:58:02:de:5b:e9:47:bb:39:1a:52:85:4f:c7:42:6a:e4:cb: 0b:8b:7b:5d:74:69:5c:fd:82:29:92:c0:b9:8a:b4:1d:4c:d5: e2:49:99:c7:79:a1:b8:ae:f6:50:e9:af:80:e9:11:4c:69:e4: 22:fd:fc:b7:15:7c:82:69:97:fb:0d:95:6c:53:5c:3b:ec:4b: b8:e0:98:d1:e0:21:8e:f0:a1:af:ed:9e:25:1a:5b:ed:69:bb: cf:b8:53:e3:dc:d3:03:35:28:84:3c:b7:12:0f:3d:64:9d:18: e9:b3:0a:19:5b:87:33:a6:07:45:f2:57:e3:66:2c:72:ef:d5: be:75:4e:bb:27:71:04:4a:02:74:9b:4c:7d:a0:04:ef:48:53: a1:a6:ed:f3:37:42:39:d1:3d:d5:94:1e:c1:2b:3c:91:60:b4: 26:cd:b5:d6:36:2f:6e:96:d3:7a:82:2a:89:23:b4:01:c4:dc: 44:bb:96:6e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODcxQzIxMTAvBgNVBAUTKEE5RUFCQzI0NjUxMTZFRDExRDZDOENEQUUyMDExMjM3 Q0YxRjU5REYwHhcNMjYxMDIwMjEyNzU1WhcNMjYxMDI3MjEyNzU1WjAYMRYwFAYD VQQDEw02YWQ3ZGNkYy1iZmUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxW5lvrANCacS21/A39mu8Bp3gINx8KTC5Byg3vdAj2/4CBTn37fONhfwwCYH F/UxQqSz71pCY9lWEJNpn9OzryOeWcV5DbfX2CEr8OzxYLVUfu72T+3VpnXCoY81 qKrBwjn2/xO0K0BNhnDgmJeyhGkGNXDVT5xdbSZCWXkGpQQjkepwfZrB2b2C78gE 5G4o6XSycjHBrITzB8lQYasZgcIpPp6z7hq2aRmim7J0cbVHV9hCxBMLStQ47mPY muQz9Ilf0Cs3SQhmvCQsCU2qopncxP238j6HD4p9eKNYvjy6KPVTtnEE7h8bepYm Ci6HDwtTEjyaDnsTo1uaGaZYYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIvsbgEs W3CwvdwZI3K55GrA0GH1MB8GA1UdIwQYMBaAFKnqvCRlEW7RHWyM2uIBEjfPH1nf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzFDMi9ERTYxNjY2ODU1 QTkxMUVCOTlBRkRBNURDNEY5QUUwMi9xZXE4SkdVUmJ0RWRiSXphNGdFU044OGZX ZDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FlcThKR1VSYnRFZGJJemE0Z0VTTjg4ZldkOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzFDMi9ERTYxNjY2ODU1QTkxMUVCOTlBRkRBNURDNEY5QUUwMi9xZXE4SkdVUmJ0 RWRiSXphNGdFU044OGZXZDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAx49ROCT7WKGyWFzjzmS0vVFyytiiUYqX2QxhXGXqC6iW5vysAOq5RxCqhbM0 r/+rUL1x0epBiNOwMv1MlVdGf7OjgcxTLPRo+1gC3lvpR7s5GlKFT8dCauTLC4t7 XXRpXP2CKZLAuYq0HUzV4kmZx3mhuK72UOmvgOkRTGnkIv38txV8gmmX+w2VbFNc O+xLuOCY0eAhjvChr+2eJRpb7Wm7z7hT49zTAzUohDy3Eg89ZJ0Y6bMKGVuHM6YH RfJX42Yscu/VvnVOuydxBEoCdJtMfaAE70hToabt8zdCOdE91ZQewSs8kWC0Js21 1jYvbpbTeoIqiSO0AcTcRLuWbg== -----END CERTIFICATE-----Generated at Thu Oct 22 10:36:42 2026 by rpki-client