$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.mft File: q1PZkoECuRnbfFRlyN1f8mZ0Q7M.mft (raw, json) Hash identifier: T2ji+mXS1SNjY35LhfEAZWLEUYk0tDK8eVp58zSOxAs= Subject key identifier: D3:2F:2C:E7:69:98:A1:65:8B:9E:E7:D2:5B:CA:8A:29:FE:6E:81:73 Authority key identifier: AB:53:D9:92:81:02:B9:19:DB:7C:54:65:C8:DD:5F:F2:66:74:43:B3 Certificate issuer: /CN=A91C7E5B/serialNumber=AB53D9928102B919DB7C5465C8DD5FF2667443B3 Certificate serial: 011C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.mft Manifest number: 010F Signing time: Sun 11 Oct 2026 06:46:31 +0000 Manifest this update: Sun 11 Oct 2026 06:46:30 +0000 Manifest next update: Sun 18 Oct 2026 06:46:30 +0000 Files and hashes: 1: q1PZkoECuRnbfFRlyN1f8mZ0Q7M.crl (hash: ctTmlsnUqZgLx/tiNU68/mmSBNf2vw9tc38uDoYQw5o=) 2: C3DCFE54EB2911F0BD7173483B6F56BC.roa (hash: hZQbMZ8wBZ3CYwiXTphoVD9Fsf34oefbQ7yrGVzjULw=) 3: 9BE1C9D08C4511F1BC8E54F45411F970.roa (hash: Sbq/BmihJlFQZ8/ZS3AcJsWDmVD1eWHySOf7VOwUdak=) 4: 1FC17CE2EB2D11F0971959663D6F56BC.roa (hash: aI9DlzDvvLFMVVyO/coQSpjqyPYkqJnDOZuQHUXRHk8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.crl rsync://rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 06:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 284 (0x11c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7E5B, serialNumber=AB53D9928102B919DB7C5465C8DD5FF2667443B3 Validity Not Before: Oct 11 06:46:30 2026 GMT Not After : Oct 18 06:46:30 2026 GMT Subject: CN=6acb30c6-7926 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:36:46:f1:4a:0a:e4:8e:f8:92:dd:28:68:a3: bd:da:d8:22:98:32:ff:85:ec:38:95:39:b0:70:c7: b0:f6:70:2e:97:cd:55:f5:94:0f:2e:bc:a1:69:68: 9d:20:1d:0c:ca:58:82:ab:7e:7b:e0:e4:10:9e:50: fc:13:98:1a:97:4f:3f:48:7d:ff:a8:70:14:2c:b7: cf:9e:1a:d9:23:8d:45:2e:7f:d2:19:3a:63:ca:b0: 79:60:7b:c3:31:ad:de:f1:8c:be:1f:02:e6:28:0a: ed:d5:ac:d6:21:a2:aa:41:23:02:b0:d5:de:06:7f: 6b:71:a1:98:e2:ff:c7:6d:44:a9:57:7b:8a:c1:dc: 52:aa:8c:d4:c8:f9:a3:08:e9:28:d3:d5:9d:b4:2d: 6b:13:e9:76:6d:d2:32:8e:ed:a5:85:ea:cc:09:96: fb:f9:78:e1:58:44:f1:72:85:bd:23:71:08:8f:27: f2:fc:dd:4a:92:36:00:b0:a9:6e:14:ff:cf:2f:4f: 40:75:19:90:1b:45:4f:c2:89:fa:99:ef:46:04:ff: 03:b3:6e:ad:8f:af:b4:f1:c6:c1:4c:10:ff:39:d1: 40:43:a7:ae:06:ba:2b:73:fe:28:18:64:f2:98:77: 05:9d:11:63:31:38:c5:6f:ce:6f:eb:a3:9b:fb:16: c9:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:2F:2C:E7:69:98:A1:65:8B:9E:E7:D2:5B:CA:8A:29:FE:6E:81:73 X509v3 Authority Key Identifier: keyid:AB:53:D9:92:81:02:B9:19:DB:7C:54:65:C8:DD:5F:F2:66:74:43:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:03:66:0c:49:4a:96:71:80:b2:8e:30:06:3b:18:44:03:ad: 65:58:66:d7:34:2d:e5:bd:b8:99:3e:ac:19:60:6d:5c:db:03: 75:f6:fc:b3:0e:1a:6a:7a:9d:d9:b4:86:36:b9:3c:d2:f3:8a: 4a:75:9b:be:95:dd:52:cd:e2:4a:ae:4c:13:bf:2b:3c:29:46: 6b:eb:d2:0f:f1:1f:fb:b5:b8:85:4c:02:e6:7e:bd:a6:e1:ab: 7d:e0:1e:90:73:2f:f7:4b:60:1e:cc:9c:89:56:21:8e:1d:8a: ef:b8:9d:ec:58:6f:5e:11:b6:c8:d6:91:58:6c:88:7f:0b:6b: 3c:7e:ae:c2:6f:d2:1f:f4:cc:d3:3a:9e:5b:a8:87:df:8f:c5: d8:9a:66:cb:9a:81:e1:72:27:7a:86:c7:45:fc:2a:3a:82:b7: 52:eb:dc:ea:cb:71:ed:1d:5f:eb:7e:01:a9:93:8e:54:67:6a: 69:e4:b1:fe:5e:8c:53:69:72:f9:78:47:62:56:89:18:33:a0: a5:e9:d8:02:e0:1c:b0:8b:1f:ad:01:2f:70:cb:93:d0:2a:7b: 79:11:b9:35:26:6c:68:d0:a6:97:de:5e:19:be:e8:33:fc:d0: 47:90:86:2e:0f:c9:28:c5:2b:44:36:1a:46:fe:28:d7:fd:34: 32:f8:9e:a4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICARwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdFNUIxMTAvBgNVBAUTKEFCNTNEOTkyODEwMkI5MTlEQjdDNTQ2NUM4REQ1RkYy NjY3NDQzQjMwHhcNMjYxMDExMDY0NjMwWhcNMjYxMDE4MDY0NjMwWjAYMRYwFAYD VQQDEw02YWNiMzBjNi03OTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwjZG8UoK5I74kt0oaKO92tgimDL/hew4lTmwcMew9nAul81V9ZQPLryhaWid IB0MyliCq3574OQQnlD8E5gal08/SH3/qHAULLfPnhrZI41FLn/SGTpjyrB5YHvD Ma3e8Yy+HwLmKArt1azWIaKqQSMCsNXeBn9rcaGY4v/HbUSpV3uKwdxSqozUyPmj COko09WdtC1rE+l2bdIyju2lherMCZb7+XjhWETxcoW9I3EIjyfy/N1KkjYAsKlu FP/PL09AdRmQG0VPwon6me9GBP8Ds26tj6+08cbBTBD/OdFAQ6euBrorc/4oGGTy mHcFnRFjMTjFb85v66Ob+xbJnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNMvLOdp mKFli57n0lvKiin+boFzMB8GA1UdIwQYMBaAFKtT2ZKBArkZ23xUZcjdX/JmdEOz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0U1Qi9EODRFN0JGMjND NkUxMUYwOUQ3NkEyNERDNEY5QUUwMi9xMVBaa29FQ3VSbmJmRlJseU4xZjhtWjBR N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ExUFprb0VDdVJuYmZGUmx5TjFmOG1aMFE3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0U1Qi9EODRFN0JGMjNDNkUxMUYwOUQ3NkEyNERDNEY5QUUwMi9xMVBaa29FQ3VS bmJmRlJseU4xZjhtWjBRN00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnANmDElKlnGAso4wBjsYRAOtZVhm1zQt5b24mT6sGWBtXNsDdfb8sw4aanqd 2bSGNrk80vOKSnWbvpXdUs3iSq5ME78rPClGa+vSD/Ef+7W4hUwC5n69puGrfeAe kHMv90tgHsyciVYhjh2K77id7FhvXhG2yNaRWGyIfwtrPH6uwm/SH/TM0zqeW6iH 34/F2Jpmy5qB4XIneobHRfwqOoK3Uuvc6stx7R1f634BqZOOVGdqaeSx/l6MU2ly +XhHYlaJGDOgpenYAuAcsIsfrQEvcMuT0Cp7eRG5NSZsaNCml95eGb7oM/zQR5CG Lg/JKMUrRDYaRv4o1/00MviepA== -----END CERTIFICATE-----Generated at Sun Oct 11 22:20:10 2026 by rpki-client