$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.mft File: QcdXFCmaV43RkP0fcwlVsf2awfQ.mft (raw, json) Hash identifier: W7ADEWdVj9NZ1eWqHD0nhMom5bTti4j/it/eX/r9BPw= Subject key identifier: 2F:C2:7C:43:3B:58:15:C1:66:4C:A1:3F:C8:AB:8E:24:43:F2:99:5A Authority key identifier: 41:C7:57:14:29:9A:57:8D:D1:90:FD:1F:73:09:55:B1:FD:9A:C1:F4 Certificate issuer: /CN=A91BEA8B/serialNumber=41C75714299A578DD190FD1F730955B1FD9AC1F4 Certificate serial: 0102 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QcdXFCmaV43RkP0fcwlVsf2awfQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.mft Manifest number: F4 Signing time: Thu 03 Sep 2026 06:40:08 +0000 Manifest this update: Thu 03 Sep 2026 06:40:07 +0000 Manifest next update: Thu 10 Sep 2026 06:40:07 +0000 Files and hashes: 1: QcdXFCmaV43RkP0fcwlVsf2awfQ.crl (hash: aZsMmvpoEUn3y/EYO9t0M67xOJzGkiWDEMq/ATC36Og=) 2: B87594FC08B311F1954B37591C3D8C67.roa (hash: H6vYE+gxhuAKlVgXnsRMmqmTt0CZdQJgg6x87GzOftE=) 3: D999F880AF4411F0A866CC48C4F9AE02.roa (hash: 2rQsXi5kIwQ2IE+rYx9M2psZsNK3ECigUyxfaVNd7kI=) 4: C425CEE64B8211F0A94CFD82C4F9AE02.roa (hash: XTg2evwkR4VvSVQWu251hii2ssGz9ZlroApKBF0azrE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.crl rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QcdXFCmaV43RkP0fcwlVsf2awfQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Sep 2026 06:40:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 258 (0x102) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEA8B, serialNumber=41C75714299A578DD190FD1F730955B1FD9AC1F4 Validity Not Before: Sep 3 06:40:07 2026 GMT Not After : Sep 10 06:40:07 2026 GMT Subject: CN=6a991648-29f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:60:b3:ed:0a:7d:00:db:5b:c2:33:db:27:08: 83:66:cb:e0:62:ad:ec:11:42:01:e3:5d:95:de:6f: e7:a9:9c:b3:fb:73:57:97:0f:bc:1d:0c:db:9f:2e: aa:d8:77:3e:05:ae:59:a9:e0:b5:cb:67:83:3e:25: 07:4e:1f:9a:b2:65:d2:ca:cb:3e:06:cc:0c:0d:15: 7e:b2:ec:9a:de:2b:31:6c:dd:c4:f4:8c:f0:0c:0e: 2a:6b:31:57:5d:73:d9:c1:bd:bd:a6:b4:fe:f8:e0: c6:0d:22:8c:02:e2:35:06:4a:fa:29:a2:54:38:35: 51:98:90:f4:99:c9:a9:8c:c4:eb:c1:84:24:16:ff: ce:d0:06:27:28:6f:dc:ca:5d:28:15:9f:ba:c0:53: 60:36:e5:e4:2c:ce:0c:02:02:ce:4c:10:14:43:e1: a0:a7:d6:eb:e4:7d:18:53:e1:92:0c:f8:99:fd:5a: 12:06:e5:48:e2:59:73:bd:cf:69:78:42:23:f1:06: 12:9b:4f:44:b7:73:40:40:6c:d7:dd:01:82:48:5e: 9c:48:cb:1e:ff:92:10:89:a8:f5:e1:86:c9:78:2a: 77:bf:14:88:5f:50:45:40:e8:02:b8:84:dc:d7:e9: dd:e1:a6:c2:de:3a:93:50:e9:b7:ca:f9:7c:0f:6b: 39:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:C2:7C:43:3B:58:15:C1:66:4C:A1:3F:C8:AB:8E:24:43:F2:99:5A X509v3 Authority Key Identifier: keyid:41:C7:57:14:29:9A:57:8D:D1:90:FD:1F:73:09:55:B1:FD:9A:C1:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QcdXFCmaV43RkP0fcwlVsf2awfQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:30:1b:25:0e:b3:b0:0b:ec:96:43:cd:ed:ea:6a:00:1a:6e: 81:d4:37:d7:63:39:25:98:de:01:9d:88:fd:de:50:bb:27:de: 2f:13:2b:fc:df:18:4b:52:7c:26:81:30:35:65:4b:a7:7b:3e: 55:2d:2e:01:cd:4b:8a:0c:f5:1f:36:2c:47:b6:74:17:45:ca: 3d:f3:dd:44:1f:bd:6f:41:ef:e6:34:6b:0b:3b:2c:4d:b8:c6: ae:6e:f3:60:1c:a2:41:4d:e8:d8:0a:b8:36:3f:57:08:1f:f2: 97:d2:21:86:83:c9:74:8d:40:28:5a:a5:10:86:20:11:78:6c: 41:36:00:ca:ca:f6:a4:a1:e4:36:dc:fd:1a:63:47:11:a6:45: 4c:fe:f9:42:f8:3d:05:34:0b:d9:a6:98:c2:c3:21:33:f3:62: af:b3:c0:7d:a9:f2:25:30:c3:09:6f:89:46:17:8e:9c:57:e1: 80:01:ff:1a:0d:34:94:c6:a6:3f:6a:66:bf:4d:3f:ea:75:99: 19:fb:a1:5b:2e:76:96:59:c5:4b:50:91:89:a5:d8:ed:61:00: 24:bd:41:8f:dd:ad:be:30:46:bd:0f:f9:1b:66:88:be:02:ba: 83:d9:89:53:72:d2:a4:51:2e:58:48:40:12:a0:5a:97:2e:e8: 2e:16:bb:f9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkVBOEIxMTAvBgNVBAUTKDQxQzc1NzE0Mjk5QTU3OEREMTkwRkQxRjczMDk1NUIx RkQ5QUMxRjQwHhcNMjYwOTAzMDY0MDA3WhcNMjYwOTEwMDY0MDA3WjAYMRYwFAYD VQQDEw02YTk5MTY0OC0yOWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnGCz7Qp9ANtbwjPbJwiDZsvgYq3sEUIB412V3m/nqZyz+3NXlw+8HQzbny6q 2Hc+Ba5ZqeC1y2eDPiUHTh+asmXSyss+BswMDRV+suya3isxbN3E9IzwDA4qazFX XXPZwb29prT++ODGDSKMAuI1Bkr6KaJUODVRmJD0mcmpjMTrwYQkFv/O0AYnKG/c yl0oFZ+6wFNgNuXkLM4MAgLOTBAUQ+Ggp9br5H0YU+GSDPiZ/VoSBuVI4llzvc9p eEIj8QYSm09Et3NAQGzX3QGCSF6cSMse/5IQiaj14YbJeCp3vxSIX1BFQOgCuITc 1+nd4abC3jqTUOm3yvl8D2s5xwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC/CfEM7 WBXBZkyhP8irjiRD8plaMB8GA1UdIwQYMBaAFEHHVxQpmleN0ZD9H3MJVbH9msH0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUE4Qi9CQTA4QUE0MjRC ODExMUYwOEY2NTUwN0VDNEY5QUUwMi9RY2RYRkNtYVY0M1JrUDBmY3dsVnNmMmF3 ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FjZFhGQ21hVjQzUmtQMGZjd2xWc2YyYXdmUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RUE4Qi9CQTA4QUE0MjRCODExMUYwOEY2NTUwN0VDNEY5QUUwMi9RY2RYRkNtYVY0 M1JrUDBmY3dsVnNmMmF3ZlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFDAbJQ6zsAvslkPN7epqABpugdQ312M5JZjeAZ2I/d5QuyfeLxMr/N8YS1J8 JoEwNWVLp3s+VS0uAc1Ligz1HzYsR7Z0F0XKPfPdRB+9b0Hv5jRrCzssTbjGrm7z YByiQU3o2Aq4Nj9XCB/yl9IhhoPJdI1AKFqlEIYgEXhsQTYAysr2pKHkNtz9GmNH EaZFTP75Qvg9BTQL2aaYwsMhM/Nir7PAfanyJTDDCW+JRheOnFfhgAH/Gg00lMam P2pmv00/6nWZGfuhWy52llnFS1CRiaXY7WEAJL1Bj92tvjBGvQ/5G2aIvgK6g9mJ U3LSpFEuWEhAEqBaly7oLha7+Q== -----END CERTIFICATE-----Generated at Fri Sep 4 20:29:10 2026 by rpki-client