$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AF0E8/45796AD21DA311E29FFB8C9808B02CD2/-qIKGvsgkct_URR4g_NkpFMJQTE.mft File: -qIKGvsgkct_URR4g_NkpFMJQTE.mft (raw, json) Hash identifier: 9GrESmnEyy8ocri5cgGPrUkQBIhkmY/h1AzvQ68uQxs= Subject key identifier: 0E:3C:D4:92:60:D7:F5:1D:8B:21:9C:CC:7A:83:AE:F1:6F:53:7F:82 Authority key identifier: FA:A2:0A:1A:FB:20:91:CB:7F:51:14:78:83:F3:64:A4:53:09:41:31 Certificate issuer: /CN=A91AF0E8/serialNumber=FAA20A1AFB2091CB7F51147883F364A453094131 Certificate serial: 359A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-qIKGvsgkct_URR4g_NkpFMJQTE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF0E8/45796AD21DA311E29FFB8C9808B02CD2/-qIKGvsgkct_URR4g_NkpFMJQTE.mft Manifest number: 358C Signing time: Mon 28 Sep 2026 15:07:09 +0000 Manifest this update: Mon 28 Sep 2026 15:07:08 +0000 Manifest next update: Mon 05 Oct 2026 15:07:08 +0000 Files and hashes: 1: -qIKGvsgkct_URR4g_NkpFMJQTE.crl (hash: JeZr6aHcGQdSxTaisq6SZj0pzFIYfYFPwELkY4xORqk=) 2: RrKb9OA4qZhDi45FR8cCEU4H8YI.asa (hash: Qgr7dmGPHjgJ8QOrzeOvLzb+XS21ZRwZ3oyYq/vSi8I=) 3: 0A956A80B48711EC83327546C4F9AE02.roa (hash: DWDLfS9VFoRUspo4gPt0SLH/400cssY5io0TF9oRBK0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF0E8/45796AD21DA311E29FFB8C9808B02CD2/-qIKGvsgkct_URR4g_NkpFMJQTE.crl rsync://rpki.apnic.net/member_repository/A91AF0E8/45796AD21DA311E29FFB8C9808B02CD2/-qIKGvsgkct_URR4g_NkpFMJQTE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-qIKGvsgkct_URR4g_NkpFMJQTE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 15:07:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13722 (0x359a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF0E8, serialNumber=FAA20A1AFB2091CB7F51147883F364A453094131 Validity Not Before: Sep 28 15:07:08 2026 GMT Not After : Oct 5 15:07:08 2026 GMT Subject: CN=6aba829c-3418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:5f:e1:5a:4f:c4:07:81:cb:de:e5:df:75:d5: 68:d7:bc:70:71:85:2f:14:8c:78:69:21:a5:3b:95: b7:af:b9:b9:cb:b9:cb:6d:70:ef:e7:07:25:56:b5: b7:f7:12:a5:94:4b:06:cf:cd:3a:b8:e3:10:9a:f7: 1a:74:f7:ba:fa:0b:c6:d1:ac:2f:64:46:8e:14:01: ca:5d:4a:a0:d6:a3:ce:da:28:e8:96:0f:d1:03:6a: 40:9e:20:4e:ae:78:36:03:f6:a1:14:99:28:02:c3: 6e:85:1f:b8:38:8d:50:0a:5c:ce:42:b5:5c:f7:71: 9a:e6:97:c2:90:ca:62:ed:64:d8:a3:25:a9:90:45: 12:7f:bf:a8:53:13:3c:82:e6:6e:9f:35:4d:29:86: 0d:e5:82:90:0f:6a:69:82:7a:6e:37:ae:cb:f6:5d: 1c:fb:5e:46:e9:52:9a:0c:7c:61:84:84:75:99:ec: e2:e0:7c:7d:42:a3:41:f9:31:70:f7:f5:12:06:ce: 6b:21:b1:29:21:0a:cf:88:40:ab:9e:62:28:89:92: bd:19:f4:4c:b6:7d:19:b6:0d:3d:c1:1e:12:67:e8: 5b:3a:b7:5b:8d:1f:a4:f0:12:dd:84:20:f0:d1:fc: 51:20:cb:f0:81:50:ed:d6:13:47:8e:04:e8:34:ce: 1a:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:3C:D4:92:60:D7:F5:1D:8B:21:9C:CC:7A:83:AE:F1:6F:53:7F:82 X509v3 Authority Key Identifier: keyid:FA:A2:0A:1A:FB:20:91:CB:7F:51:14:78:83:F3:64:A4:53:09:41:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF0E8/45796AD21DA311E29FFB8C9808B02CD2/-qIKGvsgkct_URR4g_NkpFMJQTE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-qIKGvsgkct_URR4g_NkpFMJQTE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF0E8/45796AD21DA311E29FFB8C9808B02CD2/-qIKGvsgkct_URR4g_NkpFMJQTE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:4a:05:48:07:3f:53:16:45:36:f9:d1:fd:30:1b:d3:ea:0b: 83:2c:b2:ef:1e:33:cc:5f:2d:14:30:1f:06:19:51:0b:70:b5: f7:91:7f:44:b4:5b:00:04:10:29:be:0f:b5:99:3c:a3:ed:82: df:da:47:31:1f:a3:58:cd:e7:c3:16:29:9d:1c:7b:44:79:7a: 64:4a:f0:a0:02:10:94:e8:62:fd:d6:6a:a3:31:1a:83:f1:a7: 24:6b:76:66:57:a2:6b:c3:55:c4:a2:47:4d:26:c3:77:55:63: 49:3d:47:d7:93:4c:b5:56:5d:86:f5:8f:c2:09:ba:6f:44:95: a0:b8:4b:c4:63:a4:70:74:21:55:9b:3c:7e:3e:fe:d5:0f:fa: 54:3b:4a:4f:0f:b6:1a:6f:66:09:d3:88:e8:ae:4c:b7:fd:36: 84:12:d2:38:89:b8:e8:ae:3f:28:70:a8:be:3e:36:91:90:b6: 88:54:b2:da:6d:23:eb:47:2e:fb:05:f1:3a:55:62:12:7b:5c: 6f:11:6c:43:3a:cd:75:c3:dd:7e:ca:e2:f3:e2:59:31:90:9e: 28:d7:8c:b2:b4:1c:c5:32:0b:62:7c:bc:da:a8:c2:e4:bd:3c: 5d:a9:42:9e:1a:86:bc:8f:9b:16:03:dd:e0:16:72:c7:5b:d5: 50:59:20:07 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNZowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYwRTgxMTAvBgNVBAUTKEZBQTIwQTFBRkIyMDkxQ0I3RjUxMTQ3ODgzRjM2NEE0 NTMwOTQxMzEwHhcNMjYwOTI4MTUwNzA4WhcNMjYxMDA1MTUwNzA4WjAYMRYwFAYD VQQDEw02YWJhODI5Yy0zNDE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5F/hWk/EB4HL3uXfddVo17xwcYUvFIx4aSGlO5W3r7m5y7nLbXDv5wclVrW3 9xKllEsGz806uOMQmvcadPe6+gvG0awvZEaOFAHKXUqg1qPO2ijolg/RA2pAniBO rng2A/ahFJkoAsNuhR+4OI1QClzOQrVc93Ga5pfCkMpi7WTYoyWpkEUSf7+oUxM8 guZunzVNKYYN5YKQD2ppgnpuN67L9l0c+15G6VKaDHxhhIR1mezi4Hx9QqNB+TFw 9/USBs5rIbEpIQrPiECrnmIoiZK9GfRMtn0Ztg09wR4SZ+hbOrdbjR+k8BLdhCDw 0fxRIMvwgVDt1hNHjgToNM4a9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA481JJg 1/UdiyGczHqDrvFvU3+CMB8GA1UdIwQYMBaAFPqiChr7IJHLf1EUeIPzZKRTCUEx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjBFOC80NTc5NkFEMjFE QTMxMUUyOUZGQjhDOTgwOEIwMkNEMi8tcUlLR3ZzZ2tjdF9VUlI0Z19Oa3BGTUpR VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1xSUtHdnNna2N0X1VSUjRnX05rcEZNSlFURS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjBFOC80NTc5NkFEMjFEQTMxMUUyOUZGQjhDOTgwOEIwMkNEMi8tcUlLR3ZzZ2tj dF9VUlI0Z19Oa3BGTUpRVEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHkoFSAc/UxZFNvnR/TAb0+oLgyyy7x4zzF8tFDAfBhlRC3C195F/RLRbAAQQ Kb4PtZk8o+2C39pHMR+jWM3nwxYpnRx7RHl6ZErwoAIQlOhi/dZqozEag/GnJGt2 Zleia8NVxKJHTSbDd1VjST1H15NMtVZdhvWPwgm6b0SVoLhLxGOkcHQhVZs8fj7+ 1Q/6VDtKTw+2Gm9mCdOI6K5Mt/02hBLSOIm46K4/KHCovj42kZC2iFSy2m0j60cu +wXxOlViEntcbxFsQzrNdcPdfsri8+JZMZCeKNeMsrQcxTILYny82qjC5L08XalC nhqGvI+bFgPd4BZyx1vVUFkgBw== -----END CERTIFICATE-----Generated at Tue Sep 29 13:17:50 2026 by rpki-client