$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.mft File: QcdXFCmaV43RkP0fcwlVsf2awfQ.mft (raw, json) Hash identifier: r3wqpAiyXSo64iM4E59Enx26+oVWwaYbtduxG0y5Wvc= Subject key identifier: 72:EA:A9:3D:AE:E7:1E:33:BF:F0:BB:7C:B0:82:52:6C:41:0E:D8:D3 Authority key identifier: 41:C7:57:14:29:9A:57:8D:D1:90:FD:1F:73:09:55:B1:FD:9A:C1:F4 Certificate issuer: /CN=A91BEA8B/serialNumber=41C75714299A578DD190FD1F730955B1FD9AC1F4 Certificate serial: 0119 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QcdXFCmaV43RkP0fcwlVsf2awfQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.mft Manifest number: 010B Signing time: Mon 19 Oct 2026 06:54:30 +0000 Manifest this update: Mon 19 Oct 2026 06:54:30 +0000 Manifest next update: Mon 26 Oct 2026 06:54:30 +0000 Files and hashes: 1: QcdXFCmaV43RkP0fcwlVsf2awfQ.crl (hash: IgXLe4I0B+Ys68jGQ2b9YiGq40BKNmMZjX33AiUAgoE=) 2: D999F880AF4411F0A866CC48C4F9AE02.roa (hash: 2rQsXi5kIwQ2IE+rYx9M2psZsNK3ECigUyxfaVNd7kI=) 3: C425CEE64B8211F0A94CFD82C4F9AE02.roa (hash: XTg2evwkR4VvSVQWu251hii2ssGz9ZlroApKBF0azrE=) 4: B87594FC08B311F1954B37591C3D8C67.roa (hash: H6vYE+gxhuAKlVgXnsRMmqmTt0CZdQJgg6x87GzOftE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.crl rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QcdXFCmaV43RkP0fcwlVsf2awfQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 06:54:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 281 (0x119) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEA8B, serialNumber=41C75714299A578DD190FD1F730955B1FD9AC1F4 Validity Not Before: Oct 19 06:54:30 2026 GMT Not After : Oct 26 06:54:30 2026 GMT Subject: CN=6ad5bea6-0c1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:36:ec:4d:3e:7c:01:a7:de:7e:d0:45:cd:14: 72:20:8a:33:8b:b1:ea:f3:0b:7f:bc:c0:9b:a1:b6: 6d:9f:e9:ae:44:93:31:e3:6b:62:fe:75:de:31:a6: 9f:2c:4e:ff:54:f8:08:63:05:ae:20:22:bb:ca:69: 7f:94:af:0c:73:94:52:75:c5:a0:c5:5f:84:37:63: 63:ff:5a:67:d3:f5:2c:ae:dd:48:b7:e0:c5:74:b9: ea:f2:3d:73:ed:52:83:dd:4f:c7:93:db:14:92:16: 27:79:60:6f:40:bc:5a:c2:be:dc:e1:ce:cf:36:59: 9e:c8:64:f9:f4:b9:2a:a2:aa:4a:11:2f:b6:54:3a: f1:54:b1:ed:aa:cb:5d:cb:96:09:e9:8f:2a:bd:0f: b0:9e:ca:15:80:5c:4f:ba:32:a1:f9:37:52:41:23: d1:2c:ae:b3:4d:16:19:79:db:53:23:d4:02:37:2d: 36:ed:4f:57:f1:a9:b9:81:12:8b:9f:d1:da:db:c5: 5e:31:87:5b:14:2c:2e:44:03:48:a0:9b:d8:91:cc: ee:15:cf:75:54:ea:ad:ca:03:bd:e1:28:ca:59:65: fc:3d:7f:d9:20:a9:b9:82:84:fc:a1:77:d6:3c:10: 0e:87:ff:fb:bb:6d:62:c5:1b:ed:9c:97:82:dc:f0: bd:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:EA:A9:3D:AE:E7:1E:33:BF:F0:BB:7C:B0:82:52:6C:41:0E:D8:D3 X509v3 Authority Key Identifier: keyid:41:C7:57:14:29:9A:57:8D:D1:90:FD:1F:73:09:55:B1:FD:9A:C1:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QcdXFCmaV43RkP0fcwlVsf2awfQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:68:90:21:b2:ac:2f:42:01:3b:18:f2:30:fd:91:c5:48:19: a9:dd:72:b5:fe:cf:58:b7:8f:c0:bd:ba:52:79:58:c1:56:b4: 57:0c:9d:1d:fd:c8:bf:01:24:2d:82:c7:7c:fb:65:ab:c5:b6: be:63:2a:08:6a:2d:67:14:d8:cd:46:47:89:e2:1e:2b:31:b8: 72:61:4b:20:d2:03:aa:5d:6a:a1:e5:31:f9:cf:a9:15:aa:1e: 33:15:59:7a:f3:8f:20:0c:77:1f:58:11:5e:5a:b7:23:af:23: 18:3a:ae:f6:d4:f1:ed:5a:fe:f1:b9:88:eb:bc:15:a5:27:cb: cd:5c:2a:cf:a7:25:19:a9:45:a0:42:59:f7:54:36:fe:09:6e: 9a:48:7a:6c:bc:ad:e5:20:41:86:e5:6a:17:c9:5e:53:8a:9e: 14:ef:24:92:8f:9e:7e:df:88:8d:01:a0:7d:c7:0a:1a:2a:7d: 59:22:e5:1c:7b:97:af:09:49:86:a3:cc:ce:43:2f:b5:19:23: c5:97:41:fd:8a:6e:05:10:c2:59:89:74:06:f8:1c:4a:65:29: 50:fa:47:81:db:c0:db:19:43:e4:6f:52:b0:4b:15:34:38:77: 1e:9d:38:16:c7:6b:a5:8a:52:43:6e:79:83:7a:69:ed:7f:2d: 2d:ed:27:a9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICARkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkVBOEIxMTAvBgNVBAUTKDQxQzc1NzE0Mjk5QTU3OEREMTkwRkQxRjczMDk1NUIx RkQ5QUMxRjQwHhcNMjYxMDE5MDY1NDMwWhcNMjYxMDI2MDY1NDMwWjAYMRYwFAYD VQQDEw02YWQ1YmVhNi0wYzFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAljbsTT58AafeftBFzRRyIIozi7Hq8wt/vMCbobZtn+muRJMx42ti/nXeMaaf LE7/VPgIYwWuICK7yml/lK8Mc5RSdcWgxV+EN2Nj/1pn0/Usrt1It+DFdLnq8j1z 7VKD3U/Hk9sUkhYneWBvQLxawr7c4c7PNlmeyGT59LkqoqpKES+2VDrxVLHtqstd y5YJ6Y8qvQ+wnsoVgFxPujKh+TdSQSPRLK6zTRYZedtTI9QCNy027U9X8am5gRKL n9Ha28VeMYdbFCwuRANIoJvYkczuFc91VOqtygO94SjKWWX8PX/ZIKm5goT8oXfW PBAOh//7u21ixRvtnJeC3PC9lwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHLqqT2u 5x4zv/C7fLCCUmxBDtjTMB8GA1UdIwQYMBaAFEHHVxQpmleN0ZD9H3MJVbH9msH0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUE4Qi9CQTA4QUE0MjRC ODExMUYwOEY2NTUwN0VDNEY5QUUwMi9RY2RYRkNtYVY0M1JrUDBmY3dsVnNmMmF3 ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FjZFhGQ21hVjQzUmtQMGZjd2xWc2YyYXdmUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RUE4Qi9CQTA4QUE0MjRCODExMUYwOEY2NTUwN0VDNEY5QUUwMi9RY2RYRkNtYVY0 M1JrUDBmY3dsVnNmMmF3ZlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJGiQIbKsL0IBOxjyMP2RxUgZqd1ytf7PWLePwL26UnlYwVa0VwydHf3IvwEk LYLHfPtlq8W2vmMqCGotZxTYzUZHieIeKzG4cmFLINIDql1qoeUx+c+pFaoeMxVZ evOPIAx3H1gRXlq3I68jGDqu9tTx7Vr+8bmI67wVpSfLzVwqz6clGalFoEJZ91Q2 /glumkh6bLyt5SBBhuVqF8leU4qeFO8kko+eft+IjQGgfccKGip9WSLlHHuXrwlJ hqPMzkMvtRkjxZdB/YpuBRDCWYl0BvgcSmUpUPpHgdvA2xlD5G9SsEsVNDh3Hp04 FsdrpYpSQ255g3pp7X8tLe0nqQ== -----END CERTIFICATE-----Generated at Tue Oct 20 18:54:20 2026 by rpki-client