$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.mft File: QxsKSDX89paz7NM1klqOE2EM0Tc.mft (raw, json) Hash identifier: P0FAS2DjiSW1os5CJ3nz+6CvKMZ/qnG2xoYubhO22Wc= Subject key identifier: 44:7D:07:12:A0:F6:C6:30:D7:0D:51:54:AC:F3:04:46:AA:27:EB:47 Authority key identifier: 43:1B:0A:48:35:FC:F6:96:B3:EC:D3:35:92:5A:8E:13:61:0C:D1:37 Certificate issuer: /CN=A91BE89F/serialNumber=431B0A4835FCF696B3ECD335925A8E13610CD137 Certificate serial: 0175 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QxsKSDX89paz7NM1klqOE2EM0Tc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.mft Manifest number: 0170 Signing time: Wed 19 Aug 2026 05:27:22 +0000 Manifest this update: Wed 19 Aug 2026 05:27:22 +0000 Manifest next update: Wed 26 Aug 2026 05:27:22 +0000 Files and hashes: 1: QxsKSDX89paz7NM1klqOE2EM0Tc.crl (hash: jkkNqoC7y9H0En3cGDejEV4SdL/WObIqZPy4LPR1Wpw=) 2: 49ADB44C6DCC11EF8BE2A566C4F9AE02.roa (hash: /4+lF6tlUt2UR6b5tRfzTFnRtlIHVlDaWV39Y4Dm8cI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.crl rsync://rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QxsKSDX89paz7NM1klqOE2EM0Tc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 05:27:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 373 (0x175) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE89F, serialNumber=431B0A4835FCF696B3ECD335925A8E13610CD137 Validity Not Before: Aug 19 05:27:22 2026 GMT Not After : Aug 26 05:27:22 2026 GMT Subject: CN=6a853eba-8827 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fa:fd:aa:a1:e2:27:60:e0:c8:84:5a:66:8e: 41:d2:a6:1e:1c:14:5e:27:63:dd:f3:c0:28:3e:98: 69:9e:4d:da:4f:d1:c8:2b:d9:38:9e:4d:58:85:e9: 37:a3:47:0b:22:5c:55:89:5b:4e:ec:4d:f2:cb:9e: 5b:85:de:7b:fe:71:2b:d3:fd:c1:dd:1c:01:19:90: 16:09:b6:bb:68:b9:0e:02:73:9c:db:93:8a:91:8a: 77:93:36:34:51:03:40:a0:e3:5d:bd:8a:74:73:09: a9:10:02:2e:9b:50:9c:0c:ff:c9:8d:3b:1a:3e:dd: af:b2:c3:51:0d:de:fe:0d:e8:65:51:4b:21:71:25: 32:a3:5a:c8:37:5a:3b:14:0d:af:1b:12:ee:c6:34: 89:57:57:84:b7:31:8d:87:5c:9a:5e:1b:ce:66:f2: ef:7c:f6:16:a5:14:40:ca:e4:85:10:5d:22:c9:2a: 19:62:1b:d6:e5:b2:4a:29:99:a2:56:b9:a9:ab:e2: 36:39:60:07:29:18:57:26:a2:ed:98:1d:2b:b1:71: b5:57:28:05:27:c9:9a:ff:92:1a:b8:d8:95:5f:0a: 09:d9:8d:a5:dc:45:7f:f3:b9:3f:cf:d9:48:34:aa: 16:a4:c0:37:f4:ea:15:9e:01:ff:40:88:b0:01:5a: b0:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:7D:07:12:A0:F6:C6:30:D7:0D:51:54:AC:F3:04:46:AA:27:EB:47 X509v3 Authority Key Identifier: keyid:43:1B:0A:48:35:FC:F6:96:B3:EC:D3:35:92:5A:8E:13:61:0C:D1:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QxsKSDX89paz7NM1klqOE2EM0Tc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:cf:0f:e9:9e:db:63:f8:09:00:56:33:0a:d2:ab:e7:b0:0c: c1:69:36:6b:60:d6:93:c7:39:3b:b3:be:cb:b2:1d:24:58:1b: ea:a0:fe:bd:c4:23:69:a5:23:67:5a:b4:4b:9c:db:74:28:b6: b2:0b:38:35:ce:4a:c9:19:07:36:f2:48:52:06:29:80:ea:8f: e0:77:a1:20:57:1d:c3:37:63:27:88:54:55:2c:62:87:6c:ff: 71:28:f0:e6:60:d1:62:e4:b4:22:59:0a:11:06:93:2b:c0:a0: 26:c0:45:ed:6c:16:65:fb:f8:cd:8e:c1:17:7d:9e:85:e3:32: 6f:11:25:a7:1e:e7:d4:33:7a:89:c7:eb:e2:c4:ca:5a:68:28: 27:fc:be:c7:ae:c1:76:ab:1c:19:99:39:c2:5f:ee:73:b6:da: 58:dc:03:90:c6:e8:bb:30:d8:fd:f7:05:b6:5c:bd:ce:ee:3a: 08:97:01:43:be:0f:f7:a3:21:a6:8f:67:54:06:77:62:56:75: ec:7a:aa:ad:22:a3:59:72:a6:23:4b:62:e5:43:7d:1a:ea:a4: 28:77:b4:8a:aa:66:bd:b8:ac:9d:0c:36:a7:e0:4f:25:63:24: 79:af:e3:e6:b7:da:fe:a9:31:41:1b:b2:0f:74:da:ec:4b:83: 65:55:ee:92 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAXUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkU4OUYxMTAvBgNVBAUTKDQzMUIwQTQ4MzVGQ0Y2OTZCM0VDRDMzNTkyNUE4RTEz NjEwQ0QxMzcwHhcNMjYwODE5MDUyNzIyWhcNMjYwODI2MDUyNzIyWjAYMRYwFAYD VQQDEw02YTg1M2ViYS04ODI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArvr9qqHiJ2DgyIRaZo5B0qYeHBReJ2Pd88AoPphpnk3aT9HIK9k4nk1Yhek3 o0cLIlxViVtO7E3yy55bhd57/nEr0/3B3RwBGZAWCba7aLkOAnOc25OKkYp3kzY0 UQNAoONdvYp0cwmpEAIum1CcDP/JjTsaPt2vssNRDd7+DehlUUshcSUyo1rIN1o7 FA2vGxLuxjSJV1eEtzGNh1yaXhvOZvLvfPYWpRRAyuSFEF0iySoZYhvW5bJKKZmi Vrmpq+I2OWAHKRhXJqLtmB0rsXG1VygFJ8ma/5IauNiVXwoJ2Y2l3EV/87k/z9lI NKoWpMA39OoVngH/QIiwAVqwbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFER9BxKg 9sYw1w1RVKzzBEaqJ+tHMB8GA1UdIwQYMBaAFEMbCkg1/PaWs+zTNZJajhNhDNE3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTg5Ri9BRkZEMjE3MDZE Q0IxMUVGOUIzOUI4NjVDNEY5QUUwMi9ReHNLU0RYODlwYXo3Tk0xa2xxT0UyRU0w VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1F4c0tTRFg4OXBhejdOTTFrbHFPRTJFTTBUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTg5Ri9BRkZEMjE3MDZEQ0IxMUVGOUIzOUI4NjVDNEY5QUUwMi9ReHNLU0RYODlw YXo3Tk0xa2xxT0UyRU0wVGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmM8P6Z7bY/gJAFYzCtKr57AMwWk2a2DWk8c5O7O+y7IdJFgb6qD+vcQjaaUj Z1q0S5zbdCi2sgs4Nc5KyRkHNvJIUgYpgOqP4HehIFcdwzdjJ4hUVSxih2z/cSjw 5mDRYuS0IlkKEQaTK8CgJsBF7WwWZfv4zY7BF32eheMybxElpx7n1DN6icfr4sTK WmgoJ/y+x67BdqscGZk5wl/uc7baWNwDkMbouzDY/fcFtly9zu46CJcBQ74P96Mh po9nVAZ3YlZ17HqqrSKjWXKmI0ti5UN9GuqkKHe0iqpmvbisnQw2p+BPJWMkea/j 5rfa/qkxQRuyD3Ta7EuDZVXukg== -----END CERTIFICATE-----Generated at Wed Aug 19 12:55:25 2026 by rpki-client