$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.mft File: QNueLLrezam5cjUQIVB63NGlYn8.mft (raw, json) Hash identifier: VceTLqRdHgcAcn75zo1x4EAGnUllZf4NawcMsgHbLPE= Subject key identifier: 3A:67:B8:59:E4:80:11:1D:84:01:63:8F:B7:C2:EB:B8:0C:45:8F:5F Authority key identifier: 40:DB:9E:2C:BA:DE:CD:A9:B9:72:35:10:21:50:7A:DC:D1:A5:62:7F Certificate issuer: /CN=A91C8B4F/serialNumber=40DB9E2CBADECDA9B972351021507ADCD1A5627F Certificate serial: 0548 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNueLLrezam5cjUQIVB63NGlYn8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.mft Manifest number: 0532 Signing time: Sun 01 Nov 2026 00:05:38 +0000 Manifest this update: Sun 01 Nov 2026 00:05:38 +0000 Manifest next update: Sun 08 Nov 2026 00:05:38 +0000 Files and hashes: 1: QNueLLrezam5cjUQIVB63NGlYn8.crl (hash: eSLJ01BjR60lhse3UkvNcbgvJ6Um55CnLLwJyV3CoT4=) 2: F3B1927A1E0511F1841549681E3D8C67.roa (hash: KFJazkmvnPBoQlHt7NJ9M2Eg3tsyR0kZTa+OC7vwIGs=) 3: 65798E8A1F7D11F18F98CA06223D8C67.roa (hash: RZFsnQn6HA9v12vUgYh/78hGLqlY8AmjxFGu89yIv54=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.crl rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNueLLrezam5cjUQIVB63NGlYn8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Nov 2026 00:05:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1352 (0x548) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8B4F, serialNumber=40DB9E2CBADECDA9B972351021507ADCD1A5627F Validity Not Before: Nov 1 00:05:38 2026 GMT Not After : Nov 8 00:05:38 2026 GMT Subject: CN=6ae68252-9864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c4:dc:89:f3:62:5c:46:22:1e:7d:f5:12:71: 78:4a:b5:f8:22:6c:93:54:4b:b5:ef:26:98:f5:ca: 90:d9:3e:c2:6e:31:55:47:f5:fb:4c:73:21:ec:70: 1c:e8:d3:f0:e7:52:e2:00:8d:78:3d:e6:91:cd:86: 8a:3e:13:bc:bd:d7:9b:47:c9:b6:e4:f2:fb:1c:48: d3:35:cb:05:38:87:78:85:62:71:12:e9:f7:54:53: cb:3c:21:80:43:87:f1:fd:d6:42:f1:9c:f3:cd:cf: a8:04:63:e2:58:55:03:b0:0c:30:d5:65:3f:9f:b5: 0c:41:fd:a3:fc:47:4e:a8:34:19:69:da:6d:0f:01: ab:c7:bb:17:ee:e4:e6:dd:dc:cb:d7:1f:9b:38:e7: f5:54:e7:69:6e:d5:c5:b6:d1:b4:9b:ff:2f:26:cb: 09:ae:89:81:4e:ca:bf:a1:5c:ba:3f:16:bc:05:ea: 1f:79:b0:71:4a:f7:ce:1d:22:c5:b8:c5:9a:88:72: ed:8e:89:c9:66:9d:95:65:90:5a:5b:fd:9e:a1:05: e8:6a:0e:35:10:45:91:d7:29:e9:5a:0c:e2:9c:53: 23:cc:13:7e:25:69:54:32:a9:c7:2a:9a:5a:72:a7: dd:c8:a8:10:c6:f1:e0:c3:d6:3d:6d:09:c6:dd:f0: 07:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:67:B8:59:E4:80:11:1D:84:01:63:8F:B7:C2:EB:B8:0C:45:8F:5F X509v3 Authority Key Identifier: keyid:40:DB:9E:2C:BA:DE:CD:A9:B9:72:35:10:21:50:7A:DC:D1:A5:62:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNueLLrezam5cjUQIVB63NGlYn8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:3f:ef:76:87:cb:2f:c6:ee:bf:1e:c7:63:eb:b5:c4:b4:51: 6b:97:28:8c:8f:31:b3:ef:04:18:e2:c8:59:f1:f3:ee:f3:8e: de:9d:65:ac:07:f0:dd:69:60:9a:b0:fe:28:e8:21:ca:e1:b8: e4:3e:50:7f:ba:98:91:34:6f:94:7a:15:3a:84:4c:2d:c8:a8: 2a:0a:55:d1:36:03:8e:54:2e:69:a6:4c:da:32:77:4d:47:f1: 65:ad:f7:47:cc:13:d4:8e:49:57:88:c3:af:51:19:f8:44:4f: 71:f8:4a:4a:0c:54:4e:a8:59:02:6b:e9:b6:79:32:20:06:2f: 4e:19:49:9e:ff:8a:ae:78:78:dc:e7:04:f0:1d:ef:16:34:d0: dd:1c:82:e5:a4:b1:e4:f0:8c:6b:e5:b9:42:1e:9f:c4:28:53: 94:d8:c1:a4:64:29:b2:d1:b4:5e:c7:f1:15:11:c6:e3:c0:e3: 24:70:23:79:c7:b0:0b:66:cb:e3:e5:94:49:bc:9f:7a:10:4e: ab:b2:b8:c4:10:4c:f5:d1:73:f0:4f:b7:98:c4:2e:86:c5:11: 6e:97:53:3f:ca:d7:d3:23:4c:53:d5:de:66:5b:25:15:a1:2d: ac:56:30:b6:1b:03:e2:67:ca:ff:8b:e3:cd:ed:a0:44:00:c1: 3d:08:9d:9e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhCNEYxMTAvBgNVBAUTKDQwREI5RTJDQkFERUNEQTlCOTcyMzUxMDIxNTA3QURD RDFBNTYyN0YwHhcNMjYxMTAxMDAwNTM4WhcNMjYxMTA4MDAwNTM4WjAYMRYwFAYD VQQDEw02YWU2ODI1Mi05ODY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqMTcifNiXEYiHn31EnF4SrX4ImyTVEu17yaY9cqQ2T7CbjFVR/X7THMh7HAc 6NPw51LiAI14PeaRzYaKPhO8vdebR8m25PL7HEjTNcsFOId4hWJxEun3VFPLPCGA Q4fx/dZC8Zzzzc+oBGPiWFUDsAww1WU/n7UMQf2j/EdOqDQZadptDwGrx7sX7uTm 3dzL1x+bOOf1VOdpbtXFttG0m/8vJssJromBTsq/oVy6Pxa8BeofebBxSvfOHSLF uMWaiHLtjonJZp2VZZBaW/2eoQXoag41EEWR1ynpWgzinFMjzBN+JWlUMqnHKppa cqfdyKgQxvHgw9Y9bQnG3fAHPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDpnuFnk gBEdhAFjj7fC67gMRY9fMB8GA1UdIwQYMBaAFEDbniy63s2puXI1ECFQetzRpWJ/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEI0Ri9ERDczMjY0ODY4 QkMxMUVDODc4MDc5NDhDNEY5QUUwMi9RTnVlTExyZXphbTVjalVRSVZCNjNOR2xZ bjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FOdWVMTHJlemFtNWNqVVFJVkI2M05HbFluOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OEI0Ri9ERDczMjY0ODY4QkMxMUVDODc4MDc5NDhDNEY5QUUwMi9RTnVlTExyZXph bTVjalVRSVZCNjNOR2xZbjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdz/vdofLL8buvx7HY+u1xLRRa5cojI8xs+8EGOLIWfHz7vOO3p1lrAfw3Wlg mrD+KOghyuG45D5Qf7qYkTRvlHoVOoRMLcioKgpV0TYDjlQuaaZM2jJ3TUfxZa33 R8wT1I5JV4jDr1EZ+ERPcfhKSgxUTqhZAmvptnkyIAYvThlJnv+Krnh43OcE8B3v FjTQ3RyC5aSx5PCMa+W5Qh6fxChTlNjBpGQpstG0XsfxFRHG48DjJHAjecewC2bL 4+WUSbyfehBOq7K4xBBM9dFz8E+3mMQuhsURbpdTP8rX0yNMU9XeZlslFaEtrFYw thsD4mfK/4vjze2gRADBPQidng== -----END CERTIFICATE-----Generated at Mon Nov 2 07:27:19 2026 by rpki-client