$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft File: rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft (raw, json) Hash identifier: NWqsHx5IMKYHiNAqkPnMWuQr6czbGameKgyEcnrD8FM= Subject key identifier: 07:D5:13:3F:E0:95:C9:E2:B0:B6:D9:4B:F7:AC:15:87:E5:7F:BA:B7 Authority key identifier: AE:A6:DF:B3:64:A2:B3:B5:92:7F:00:7A:4E:82:4F:32:C4:08:E5:C8 Certificate issuer: /CN=A91A97D0/serialNumber=AEA6DFB364A2B3B5927F007A4E824F32C408E5C8 Certificate serial: 0325 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rqbfs2Sis7WSfwB6ToJPMsQI5cg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft Manifest number: 0313 Signing time: Sat 05 Sep 2026 00:48:14 +0000 Manifest this update: Sat 05 Sep 2026 00:48:14 +0000 Manifest next update: Sat 12 Sep 2026 00:48:14 +0000 Files and hashes: 1: rqbfs2Sis7WSfwB6ToJPMsQI5cg.crl (hash: 4G8JLRsEXXiIQSDcFsGbWjWfGyoAJ2zniv762oXVyZM=) 2: 28BD1EFC3B4311EDAB5E6382C4F9AE02.roa (hash: x/yz1V4NDuS6R8Q19YYrXkxZ59RztmqTLn+CKfG3QlQ=) 3: C31A6BFA717D11EE90B95137C4F9AE02.roa (hash: BJ0AXwywDrh3L6h1jOokV2ePgsQC41EcTflOVzlWuFQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.crl rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rqbfs2Sis7WSfwB6ToJPMsQI5cg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 00:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 805 (0x325) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A97D0, serialNumber=AEA6DFB364A2B3B5927F007A4E824F32C408E5C8 Validity Not Before: Sep 5 00:48:14 2026 GMT Not After : Sep 12 00:48:14 2026 GMT Subject: CN=6a9b66ce-c4d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:af:a3:7e:4c:d6:49:61:51:74:c2:de:df:c3: 86:f1:64:59:83:23:e8:5b:57:2c:7f:2f:f0:80:25: d6:e1:b6:fd:23:5a:9a:e6:7d:6e:bf:39:88:e3:10: f0:50:98:7e:01:77:e2:a0:f8:58:23:e3:db:8e:1f: 5a:a6:a6:9c:88:d8:e0:ae:ee:83:34:35:b3:0a:79: 61:99:09:00:62:b3:58:3c:72:0a:83:89:94:bc:18: 8f:2b:95:89:bc:e4:cd:80:38:c1:f7:28:4c:8c:7a: 14:36:1b:28:95:c8:fe:2e:20:c8:aa:1a:0d:e1:53: 7d:86:f8:2d:d4:4a:d7:e8:b9:62:13:c6:f7:2a:dc: 3c:7a:3a:1a:73:fd:57:e1:0d:42:e9:a8:e5:93:0e: 63:b5:6d:4a:de:41:d8:b2:66:99:9a:9a:45:55:25: 9f:8a:12:d0:28:23:1d:18:e4:6a:d8:14:25:24:c9: 30:78:8e:2c:35:3d:61:c2:30:c1:ae:4a:14:2a:51: ca:bc:ec:ce:52:de:a8:df:4d:5b:40:2c:61:ed:77: ce:41:bf:8a:d3:53:c4:02:6c:89:7f:35:24:23:7a: 5d:52:85:d6:b3:12:0d:56:ef:0e:a6:4c:e9:26:5d: c4:67:ed:e1:ec:20:0c:62:fd:51:0e:d9:b1:7f:39: b8:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:D5:13:3F:E0:95:C9:E2:B0:B6:D9:4B:F7:AC:15:87:E5:7F:BA:B7 X509v3 Authority Key Identifier: keyid:AE:A6:DF:B3:64:A2:B3:B5:92:7F:00:7A:4E:82:4F:32:C4:08:E5:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rqbfs2Sis7WSfwB6ToJPMsQI5cg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:8e:23:26:d9:98:f4:31:22:1f:b5:55:2a:06:d0:c6:ae:e5: 3f:12:ba:da:e2:2b:96:1e:6b:cd:19:6d:ad:48:e5:e1:00:cb: e6:d3:ea:57:6d:f8:5b:b2:f8:92:1b:f7:60:6a:52:1b:00:63: 68:97:5b:eb:24:2a:96:12:d9:d5:5d:4b:83:34:37:cc:41:18: 78:c4:d2:02:32:a1:1e:7a:5b:a7:08:49:fc:7c:9b:dd:28:11: 5d:88:e6:b5:2a:24:a9:e0:82:a1:9a:9e:64:83:46:27:73:ca: a8:ca:29:43:a4:0b:d7:18:f6:cf:0f:fa:57:7c:0b:f2:46:64: 97:43:3d:32:e4:01:0e:cf:b6:a9:6d:b6:43:5e:be:5a:f3:fe: 00:aa:12:47:94:3e:19:9c:fc:da:21:24:20:32:72:72:0a:4e: 7b:23:94:bb:f1:d9:4d:c5:84:2e:82:08:16:82:33:58:65:6d: de:ed:34:74:00:3d:d0:46:6d:e7:91:c1:bf:dd:f0:f9:39:83: 32:5b:70:2e:cd:02:53:06:08:da:a2:31:2d:be:77:e1:33:e3: 15:2e:e6:5e:e3:50:cc:b4:ca:e8:af:a1:74:42:34:41:82:1a: d3:66:ce:10:d7:b1:1b:0f:a3:c9:c6:62:a5:de:14:fd:6e:c5: e9:c7:b9:c6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAyUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTk3RDAxMTAvBgNVBAUTKEFFQTZERkIzNjRBMkIzQjU5MjdGMDA3QTRFODI0RjMy QzQwOEU1QzgwHhcNMjYwOTA1MDA0ODE0WhcNMjYwOTEyMDA0ODE0WjAYMRYwFAYD VQQDEw02YTliNjZjZS1jNGQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2K+jfkzWSWFRdMLe38OG8WRZgyPoW1csfy/wgCXW4bb9I1qa5n1uvzmI4xDw UJh+AXfioPhYI+Pbjh9apqaciNjgru6DNDWzCnlhmQkAYrNYPHIKg4mUvBiPK5WJ vOTNgDjB9yhMjHoUNhsolcj+LiDIqhoN4VN9hvgt1ErX6LliE8b3Ktw8ejoac/1X 4Q1C6ajlkw5jtW1K3kHYsmaZmppFVSWfihLQKCMdGORq2BQlJMkweI4sNT1hwjDB rkoUKlHKvOzOUt6o301bQCxh7XfOQb+K01PEAmyJfzUkI3pdUoXWsxINVu8Opkzp Jl3EZ+3h7CAMYv1RDtmxfzm4rQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAfVEz/g lcnisLbZS/esFYflf7q3MB8GA1UdIwQYMBaAFK6m37NkorO1kn8Aek6CTzLECOXI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTdEMC9CODlGQTNDNjMw MzIxMUVEOUJEQzBBODNDNEY5QUUwMi9ycWJmczJTaXM3V1Nmd0I2VG9KUE1zUUk1 Y2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JxYmZzMlNpczdXU2Z3QjZUb0pQTXNRSTVjZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTdEMC9CODlGQTNDNjMwMzIxMUVEOUJEQzBBODNDNEY5QUUwMi9ycWJmczJTaXM3 V1Nmd0I2VG9KUE1zUUk1Y2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAK44jJtmY9DEiH7VVKgbQxq7lPxK62uIrlh5rzRltrUjl4QDL5tPqV234W7L4 khv3YGpSGwBjaJdb6yQqlhLZ1V1LgzQ3zEEYeMTSAjKhHnpbpwhJ/Hyb3SgRXYjm tSokqeCCoZqeZINGJ3PKqMopQ6QL1xj2zw/6V3wL8kZkl0M9MuQBDs+2qW22Q16+ WvP+AKoSR5Q+GZz82iEkIDJycgpOeyOUu/HZTcWELoIIFoIzWGVt3u00dAA90EZt 55HBv93w+TmDMltwLs0CUwYI2qIxLb534TPjFS7mXuNQzLTK6K+hdEI0QYIa02bO ENexGw+jycZipd4U/W7F6ce5xg== -----END CERTIFICATE-----Generated at Sat Sep 5 06:40:07 2026 by rpki-client