$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CB6E8/32E34DEEAE2B11F098EA2E85C4F9AE02/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.mft File: 1Qh-tx-4EvEAL_iEsvnVbjvdTPI.mft (raw, json) Hash identifier: bdcDwR1LP5Z8JzoVadXp84i8pKEpIWcgSV4P3bVcCG8= Subject key identifier: F6:E5:DF:3B:70:B2:E9:6E:40:33:1C:C0:90:B5:6B:41:92:3D:B0:C4 Authority key identifier: D5:08:7E:B7:1F:B8:12:F1:00:2F:F8:84:B2:F9:D5:6E:3B:DD:4C:F2 Certificate issuer: /CN=A91CB6E8/serialNumber=D5087EB71FB812F1002FF884B2F9D56E3BDD4CF2 Certificate serial: B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB6E8/32E34DEEAE2B11F098EA2E85C4F9AE02/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.mft Manifest number: B4 Signing time: Sat 03 Oct 2026 07:42:11 +0000 Manifest this update: Sat 03 Oct 2026 07:42:10 +0000 Manifest next update: Sat 10 Oct 2026 07:42:10 +0000 Files and hashes: 1: 1Qh-tx-4EvEAL_iEsvnVbjvdTPI.crl (hash: x7aAd4PG+d3qG46WV9SJSo1QOBsbg4AGONt6afXoDPE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB6E8/32E34DEEAE2B11F098EA2E85C4F9AE02/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.crl rsync://rpki.apnic.net/member_repository/A91CB6E8/32E34DEEAE2B11F098EA2E85C4F9AE02/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 07:42:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 180 (0xb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB6E8, serialNumber=D5087EB71FB812F1002FF884B2F9D56E3BDD4CF2 Validity Not Before: Oct 3 07:42:10 2026 GMT Not After : Oct 10 07:42:10 2026 GMT Subject: CN=6ac0b1d3-9ef6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:51:55:04:67:de:d6:e4:e2:4f:8f:5f:e4:18: 49:de:a3:fc:a5:d6:5a:ac:16:07:13:45:ef:f0:99: ef:c8:4a:21:2e:8f:8b:82:38:0f:ad:17:ff:54:6d: a3:a0:69:4d:42:7b:30:09:bf:2b:ac:15:fa:4f:94: 37:a5:f0:31:5a:cb:61:5d:12:3b:9d:57:0c:06:c9: 8c:77:89:ad:4c:cc:62:17:6c:56:76:b4:a7:6b:01: 9d:dc:4c:1f:98:32:2a:73:20:44:b8:60:48:eb:64: ac:2d:ff:78:cf:02:9c:38:f9:a5:bd:d3:1d:08:0c: 0a:4b:53:fb:9e:f8:48:d5:86:56:d4:a9:e0:4b:f2: 27:c5:0e:ff:b5:63:0f:ca:c1:ef:08:8d:98:6b:51: 90:8d:66:8d:e0:0c:b2:ca:7c:6f:d0:ad:76:92:78: 8a:18:1f:80:d3:a8:61:d9:79:74:19:c4:ed:f7:a5: f0:9b:4a:c6:60:c9:0c:53:2b:45:55:cf:2a:63:fc: 85:bc:f1:79:47:c8:6a:ef:15:84:71:d5:4b:83:d8: da:6b:fe:b7:85:41:f5:9d:39:6f:46:87:9f:fb:30: 86:ee:d9:a7:6e:d4:86:59:0f:12:70:a4:1c:50:39: 77:9b:75:c4:40:cb:8d:e4:18:dd:f4:18:49:df:99: 95:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:E5:DF:3B:70:B2:E9:6E:40:33:1C:C0:90:B5:6B:41:92:3D:B0:C4 X509v3 Authority Key Identifier: keyid:D5:08:7E:B7:1F:B8:12:F1:00:2F:F8:84:B2:F9:D5:6E:3B:DD:4C:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB6E8/32E34DEEAE2B11F098EA2E85C4F9AE02/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB6E8/32E34DEEAE2B11F098EA2E85C4F9AE02/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:48:5a:b2:25:3e:fc:e5:b6:9e:01:b9:4e:a9:50:60:8a:9b: de:41:18:0f:c5:ad:58:52:1f:47:a5:f1:fb:8f:5d:49:3f:d6: ec:8c:80:04:fa:e0:d0:4e:ba:d7:2c:a3:84:9e:ed:1a:02:e9: 10:39:40:57:92:ff:fa:0a:98:e6:29:9b:4e:1f:be:3d:9e:84: 51:75:1c:0e:ee:ae:f3:e3:6e:77:a8:e6:39:43:44:62:7b:d3: be:fd:17:b6:e1:f2:7b:43:19:9a:b3:96:c3:0a:45:0b:48:4a: 4d:20:85:81:13:2b:96:b3:09:55:22:f9:ff:95:c6:0b:9b:ec: e4:96:eb:5f:b7:12:d2:f3:4c:73:2e:80:fe:39:4d:cd:2a:53: de:a3:49:9a:44:66:39:8a:88:ec:a7:c5:31:fc:74:44:63:49: 32:90:b4:b1:35:ee:6f:9e:49:62:4a:66:b2:73:c8:1d:c8:63: dc:da:50:1a:ec:ea:d4:44:b6:7b:0b:41:99:ef:4e:ce:2b:a7: 45:a0:3d:4b:17:f0:30:f5:f7:cc:d5:4d:40:2c:0b:b1:63:c8: 86:82:e9:c8:92:9b:4c:e5:fd:bc:30:03:a5:a6:ec:d7:e0:65: bb:5f:45:8d:c1:c9:65:97:7c:95:8d:14:5b:30:b0:df:9c:d6: dc:15:26:8f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICALQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I2RTgxMTAvBgNVBAUTKEQ1MDg3RUI3MUZCODEyRjEwMDJGRjg4NEIyRjlENTZF M0JERDRDRjIwHhcNMjYxMDAzMDc0MjEwWhcNMjYxMDEwMDc0MjEwWjAYMRYwFAYD VQQDEw02YWMwYjFkMy05ZWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqlFVBGfe1uTiT49f5BhJ3qP8pdZarBYHE0Xv8JnvyEohLo+LgjgPrRf/VG2j oGlNQnswCb8rrBX6T5Q3pfAxWsthXRI7nVcMBsmMd4mtTMxiF2xWdrSnawGd3Ewf mDIqcyBEuGBI62SsLf94zwKcOPmlvdMdCAwKS1P7nvhI1YZW1KngS/InxQ7/tWMP ysHvCI2Ya1GQjWaN4Ayyynxv0K12kniKGB+A06hh2Xl0GcTt96Xwm0rGYMkMUytF Vc8qY/yFvPF5R8hq7xWEcdVLg9jaa/63hUH1nTlvRoef+zCG7tmnbtSGWQ8ScKQc UDl3m3XEQMuN5Bjd9BhJ35mViQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPbl3ztw suluQDMcwJC1a0GSPbDEMB8GA1UdIwQYMBaAFNUIfrcfuBLxAC/4hLL51W473Uzy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjZFOC8zMkUzNERFRUFF MkIxMUYwOThFQTJFODVDNEY5QUUwMi8xUWgtdHgtNEV2RUFMX2lFc3ZuVmJqdmRU UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFRaC10eC00RXZFQUxfaUVzdm5WYmp2ZFRQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjZFOC8zMkUzNERFRUFFMkIxMUYwOThFQTJFODVDNEY5QUUwMi8xUWgtdHgtNEV2 RUFMX2lFc3ZuVmJqdmRUUEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARUhasiU+/OW2ngG5TqlQYIqb3kEYD8WtWFIfR6Xx+49dST/W7IyABPrg0E66 1yyjhJ7tGgLpEDlAV5L/+gqY5imbTh++PZ6EUXUcDu6u8+Nud6jmOUNEYnvTvv0X tuHye0MZmrOWwwpFC0hKTSCFgRMrlrMJVSL5/5XGC5vs5JbrX7cS0vNMcy6A/jlN zSpT3qNJmkRmOYqI7KfFMfx0RGNJMpC0sTXub55JYkpmsnPIHchj3NpQGuzq1ES2 ewtBme9OziunRaA9SxfwMPX3zNVNQCwLsWPIhoLpyJKbTOX9vDADpabs1+Blu19F jcHJZZd8lY0UWzCw35zW3BUmjw== -----END CERTIFICATE-----Generated at Mon Oct 5 06:37:43 2026 by rpki-client