$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CDCF5/5996712CF1E311F0BDEC72B5416F56BC/QwlkOa1FN43F5xIj-HJhJ7EZZe0.mft File: QwlkOa1FN43F5xIj-HJhJ7EZZe0.mft (raw, json) Hash identifier: HM4o7e8Sp8z5r6XyF6gPRwuhfKVyolD2eK6YZlz9aWQ= Subject key identifier: C6:96:C5:5B:0B:C2:89:A3:D1:F0:8E:43:98:BB:95:39:53:44:97:61 Authority key identifier: 43:09:64:39:AD:45:37:8D:C5:E7:12:23:F8:72:61:27:B1:19:65:ED Certificate issuer: /CN=A91CDCF5/serialNumber=43096439AD45378DC5E71223F8726127B11965ED Certificate serial: 98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QwlkOa1FN43F5xIj-HJhJ7EZZe0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDCF5/5996712CF1E311F0BDEC72B5416F56BC/QwlkOa1FN43F5xIj-HJhJ7EZZe0.mft Manifest number: 95 Signing time: Sun 25 Oct 2026 07:51:27 +0000 Manifest this update: Sun 25 Oct 2026 07:51:26 +0000 Manifest next update: Sun 01 Nov 2026 07:51:26 +0000 Files and hashes: 1: QwlkOa1FN43F5xIj-HJhJ7EZZe0.crl (hash: bMrfBCO/izYUKm5PKCE5d+BYxdbvvXFLNVbknWEnCPQ=) 2: D735EAACF1EF11F0A394FA90446F56BC.roa (hash: Ys/2qaSppEBebOfLXvRLlfClHojsR1MQFiAQ4UPY7vM=) 3: 58A53708C5A511F1B972A1726711F970.roa (hash: fzaGfwKa7sCE1SIP1pCs//2ActkC+uqVRph7hHwdd8w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDCF5/5996712CF1E311F0BDEC72B5416F56BC/QwlkOa1FN43F5xIj-HJhJ7EZZe0.crl rsync://rpki.apnic.net/member_repository/A91CDCF5/5996712CF1E311F0BDEC72B5416F56BC/QwlkOa1FN43F5xIj-HJhJ7EZZe0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QwlkOa1FN43F5xIj-HJhJ7EZZe0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 07:51:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 152 (0x98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDCF5, serialNumber=43096439AD45378DC5E71223F8726127B11965ED Validity Not Before: Oct 25 07:51:26 2026 GMT Not After : Nov 1 07:51:26 2026 GMT Subject: CN=6addb4fe-cd23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:da:64:d4:ca:c1:17:59:00:26:ce:5d:4c:4c: dd:26:5a:81:ef:ca:8b:c6:cb:1d:0a:5b:22:3e:ad: 2c:42:bd:68:58:45:fe:e4:30:d2:a4:f5:50:4b:31: 59:03:e8:30:22:9a:11:71:07:86:8c:8e:6a:40:4f: 97:ef:01:40:cf:dc:60:28:28:25:cb:54:b7:59:29: c9:15:25:9e:40:e4:2e:3a:81:c7:91:00:d2:db:0c: 74:0e:ae:ac:00:97:21:11:0d:b3:e1:d7:df:2a:01: cc:55:68:3d:4e:e5:e8:c1:d3:fa:1e:25:29:b7:17: 15:7d:40:63:82:d3:89:43:67:e9:1e:83:89:64:fe: 40:bd:38:67:9c:3a:7b:60:f7:57:1b:61:65:ae:5e: 64:a3:66:be:24:95:0a:26:d4:de:6e:a5:fa:d5:37: 35:8a:c9:e5:d7:90:58:48:50:b6:b4:28:d3:67:c5: 72:54:0a:a4:c5:0f:e9:82:37:ae:d5:4a:9e:42:9a: 61:df:34:cb:70:3b:4a:e8:d0:b6:20:45:4c:33:18: 72:8a:47:c8:1b:87:0d:2b:eb:6b:dd:49:f2:88:9a: 36:a9:c0:af:43:ce:96:82:b6:16:41:da:b8:a6:c9: 9b:23:db:c2:4a:e8:bb:43:c5:2b:e2:50:d3:14:05: 6a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:96:C5:5B:0B:C2:89:A3:D1:F0:8E:43:98:BB:95:39:53:44:97:61 X509v3 Authority Key Identifier: keyid:43:09:64:39:AD:45:37:8D:C5:E7:12:23:F8:72:61:27:B1:19:65:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDCF5/5996712CF1E311F0BDEC72B5416F56BC/QwlkOa1FN43F5xIj-HJhJ7EZZe0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QwlkOa1FN43F5xIj-HJhJ7EZZe0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDCF5/5996712CF1E311F0BDEC72B5416F56BC/QwlkOa1FN43F5xIj-HJhJ7EZZe0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:6f:65:58:a7:a6:d1:52:77:e7:cb:fc:cb:8a:8f:d2:38:94: 5b:21:fe:cb:1a:55:1b:f9:fe:2b:d3:bd:88:d1:d7:c7:7d:8c: df:d4:06:98:4a:d7:81:6a:5b:b1:11:93:9a:1f:e7:54:0e:be: a8:6e:3e:95:8c:5e:94:db:37:fb:02:fe:71:f1:de:39:c5:79: 0e:a8:19:11:b8:7b:52:2e:4c:a1:be:f1:5e:96:b1:72:e3:5a: a9:fb:7b:a4:62:aa:94:5a:fe:d4:8d:3e:32:a3:82:63:d1:44: cd:5b:82:be:c8:a9:bc:23:3b:c4:d5:7f:95:f6:ef:f3:4b:4e: 8d:4a:49:5c:01:10:70:04:d4:ba:d9:0f:a6:e0:0b:28:a6:67: 14:d6:3f:8c:06:6b:75:3e:02:e0:db:ef:3e:ba:4c:b7:f9:89: d7:04:1c:64:da:61:93:13:d2:18:05:77:11:97:7e:18:1c:10: de:67:9f:9e:1d:1c:55:af:92:ed:d8:e1:bc:c7:d5:d3:53:7b: d2:7b:f9:43:1f:ed:3e:e3:7d:d2:e3:87:21:bb:58:1d:68:ce: 4a:4c:95:3b:de:80:10:93:a7:54:40:57:0a:8e:dd:cd:6a:ce: f4:5d:a5:3d:ac:b9:ba:34:0c:83:38:b7:b4:02:8e:4d:32:6b: fe:7d:1e:43 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RDRjUxMTAvBgNVBAUTKDQzMDk2NDM5QUQ0NTM3OERDNUU3MTIyM0Y4NzI2MTI3 QjExOTY1RUQwHhcNMjYxMDI1MDc1MTI2WhcNMjYxMTAxMDc1MTI2WjAYMRYwFAYD VQQDEw02YWRkYjRmZS1jZDIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA39pk1MrBF1kAJs5dTEzdJlqB78qLxssdClsiPq0sQr1oWEX+5DDSpPVQSzFZ A+gwIpoRcQeGjI5qQE+X7wFAz9xgKCgly1S3WSnJFSWeQOQuOoHHkQDS2wx0Dq6s AJchEQ2z4dffKgHMVWg9TuXowdP6HiUptxcVfUBjgtOJQ2fpHoOJZP5AvThnnDp7 YPdXG2Flrl5ko2a+JJUKJtTebqX61Tc1isnl15BYSFC2tCjTZ8VyVAqkxQ/pgjeu 1UqeQpph3zTLcDtK6NC2IEVMMxhyikfIG4cNK+tr3UnyiJo2qcCvQ86WgrYWQdq4 psmbI9vCSui7Q8Ur4lDTFAVq+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMaWxVsL womj0fCOQ5i7lTlTRJdhMB8GA1UdIwQYMBaAFEMJZDmtRTeNxecSI/hyYSexGWXt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRENGNS81OTk2NzEyQ0Yx RTMxMUYwQkRFQzcyQjU0MTZGNTZCQy9Rd2xrT2ExRk40M0Y1eElqLUhKaEo3RVpa ZTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1F3bGtPYTFGTjQzRjV4SWotSEpoSjdFWlplMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RENGNS81OTk2NzEyQ0YxRTMxMUYwQkRFQzcyQjU0MTZGNTZCQy9Rd2xrT2ExRk40 M0Y1eElqLUhKaEo3RVpaZTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGW9lWKem0VJ358v8y4qP0jiUWyH+yxpVG/n+K9O9iNHXx32M39QGmErXgWpb sRGTmh/nVA6+qG4+lYxelNs3+wL+cfHeOcV5DqgZEbh7Ui5Mob7xXpaxcuNaqft7 pGKqlFr+1I0+MqOCY9FEzVuCvsipvCM7xNV/lfbv80tOjUpJXAEQcATUutkPpuAL KKZnFNY/jAZrdT4C4NvvPrpMt/mJ1wQcZNphkxPSGAV3EZd+GBwQ3mefnh0cVa+S 7djhvMfV01N70nv5Qx/tPuN90uOHIbtYHWjOSkyVO96AEJOnVEBXCo7dzWrO9F2l Pay5ujQMgzi3tAKOTTJr/n0eQw== -----END CERTIFICATE-----Generated at Mon Oct 26 11:22:08 2026 by rpki-client