$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft File: q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft (raw, json) Hash identifier: zBLvc9YxTNPL89v10z36SpmzIQvpJMPCy8eCwQkFtGI= Subject key identifier: 37:4A:1E:E2:9D:01:07:82:D1:D5:81:9D:A6:C9:7E:EF:2F:38:2B:18 Authority key identifier: AB:67:E8:2F:C8:6A:AC:A8:2A:CF:F8:DC:36:45:CD:71:61:01:3F:76 Certificate issuer: /CN=A91D1E4C/serialNumber=AB67E82FC86AACA82ACFF8DC3645CD7161013F76 Certificate serial: 03EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft Manifest number: 0CD1 Signing time: Wed 26 Aug 2026 20:11:46 +0000 Manifest this update: Wed 26 Aug 2026 20:11:46 +0000 Manifest next update: Wed 02 Sep 2026 20:11:46 +0000 Files and hashes: 1: q2foL8hqrKgqz_jcNkXNcWEBP3Y.crl (hash: Pa9to0vTQLsurFclTOtSK/e9VPTWaKfbMXh8uUGj70o=) 2: FC358296CFA011EDA4AC5B18C4F9AE02.roa (hash: 0M6xdPEZ2aujF9/YY8xW4204AgcRunVSuM8Vw+Ja05Q=) 3: 2AD1C746940111F0B07D7068C4F9AE02.roa (hash: RT811XLV5/H+z9rXyjPOcwNWUnb5MPdvTXm8sb3lfDk=) 4: 3DD8C628940111F09204AF71C4F9AE02.roa (hash: qyRCCyei3MShGysWy2y27h9mS62xktJLIpfB6ltBCO4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.crl rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Sep 2026 20:11:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1006 (0x3ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1E4C, serialNumber=AB67E82FC86AACA82ACFF8DC3645CD7161013F76 Validity Not Before: Aug 26 20:11:46 2026 GMT Not After : Sep 2 20:11:46 2026 GMT Subject: CN=6a8f4882-6e31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:91:df:a9:11:86:64:9f:56:8c:47:0b:99:5c: 88:bc:7e:c4:22:53:9d:53:60:d9:64:79:5d:53:3c: bf:8c:d9:23:26:b3:3b:d7:95:58:e6:8b:c2:9d:cc: b7:ac:11:52:e3:9a:8d:e5:83:a1:cc:95:64:ed:07: d2:5a:f9:c7:e7:5c:f3:f6:22:e7:9e:57:e0:4a:60: 29:a0:bc:cd:78:b6:d1:78:c7:9c:2a:cd:5c:4a:3a: 47:58:dd:b1:7d:31:b5:9a:cd:f5:50:ac:34:20:00: 46:2e:57:6d:11:cc:37:ad:cf:47:40:38:9f:0e:60: c7:57:3b:28:b4:1a:a6:a0:4d:66:61:89:75:93:26: d5:c5:36:2e:9d:a3:5a:40:44:97:a7:e1:61:ac:00: 1d:f4:e7:ea:74:62:5b:c3:11:e0:16:7e:36:65:41: 2a:07:d9:c9:6c:ea:ba:cc:64:46:7e:fb:09:ea:69: f1:9d:f8:53:46:23:5b:d7:7e:04:ea:ee:68:cc:a3: 85:b6:6a:ba:78:d5:ea:79:b7:c7:69:10:8a:6f:1c: 54:20:ba:06:92:0c:26:8f:dd:41:63:c5:c4:4c:2a: 5c:a7:82:d4:e2:ed:ec:9d:44:3e:c0:8e:3f:45:ed: ac:9c:8f:7d:95:5d:ba:0a:8e:57:a3:32:af:f4:14: 2b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:4A:1E:E2:9D:01:07:82:D1:D5:81:9D:A6:C9:7E:EF:2F:38:2B:18 X509v3 Authority Key Identifier: keyid:AB:67:E8:2F:C8:6A:AC:A8:2A:CF:F8:DC:36:45:CD:71:61:01:3F:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:22:ec:ab:a3:fd:f8:42:4a:6c:62:d2:e7:0d:ea:e0:30:97: 7f:2a:47:23:3a:68:a3:31:d5:33:62:a5:bb:4f:fb:4c:f3:07: 2b:8a:1f:77:fc:c0:c0:f5:df:7d:cc:1d:67:94:e1:5e:04:cd: ff:5c:4d:5f:21:c5:a6:45:c9:e2:69:60:df:0e:d5:94:b8:c0: 8b:65:b3:07:a8:86:bd:fa:7b:f5:f8:48:e5:30:61:aa:13:4a: 65:15:66:85:d8:89:cf:c7:cd:71:3e:3b:e9:4a:c4:0d:77:e1: 52:20:03:1d:39:ee:a3:ce:87:6c:1f:db:10:cd:1d:74:fb:79: 65:ad:55:a8:1f:20:5e:b5:ea:c9:9c:a7:ee:f6:3f:d6:ff:69: be:46:a8:01:4d:52:ea:f5:b5:cf:08:0f:3f:f3:69:dc:d3:03: b7:53:0c:c6:44:34:41:84:66:6a:2b:84:ae:a5:f4:a8:cb:d9: bc:00:10:3f:39:6c:1c:a1:02:ea:27:03:9f:14:ca:9c:29:2d: 7b:23:a1:91:47:da:77:be:12:e1:42:78:23:01:72:c8:52:e2: 71:b8:e3:aa:92:11:88:88:97:78:34:0c:83:8a:26:26:78:94: 63:4c:0c:74:f5:7d:19:98:69:f3:aa:b4:a3:5b:50:d0:72:6f: bb:3b:18:69 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA+4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFFNEMxMTAvBgNVBAUTKEFCNjdFODJGQzg2QUFDQTgyQUNGRjhEQzM2NDVDRDcx NjEwMTNGNzYwHhcNMjYwODI2MjAxMTQ2WhcNMjYwOTAyMjAxMTQ2WjAYMRYwFAYD VQQDEw02YThmNDg4Mi02ZTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt5HfqRGGZJ9WjEcLmVyIvH7EIlOdU2DZZHldUzy/jNkjJrM715VY5ovCncy3 rBFS45qN5YOhzJVk7QfSWvnH51zz9iLnnlfgSmApoLzNeLbReMecKs1cSjpHWN2x fTG1ms31UKw0IABGLldtEcw3rc9HQDifDmDHVzsotBqmoE1mYYl1kybVxTYunaNa QESXp+FhrAAd9OfqdGJbwxHgFn42ZUEqB9nJbOq6zGRGfvsJ6mnxnfhTRiNb134E 6u5ozKOFtmq6eNXqebfHaRCKbxxUILoGkgwmj91BY8XETCpcp4LU4u3snUQ+wI4/ Re2snI99lV26Co5XozKv9BQrDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDdKHuKd AQeC0dWBnabJfu8vOCsYMB8GA1UdIwQYMBaAFKtn6C/IaqyoKs/43DZFzXFhAT92 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUU0Qy83REFEQTU2Q0Q5 NEQxMUVBQTYwNEFDNTNDNEY5QUUwMi9xMmZvTDhocXJLZ3F6X2pjTmtYTmNXRUJQ M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3EyZm9MOGhxcktncXpfamNOa1hOY1dFQlAzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUU0Qy83REFEQTU2Q0Q5NEQxMUVBQTYwNEFDNTNDNEY5QUUwMi9xMmZvTDhocXJL Z3F6X2pjTmtYTmNXRUJQM1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALiLsq6P9+EJKbGLS5w3q4DCXfypHIzpoozHVM2Klu0/7TPMHK4ofd/zAwPXf fcwdZ5ThXgTN/1xNXyHFpkXJ4mlg3w7VlLjAi2WzB6iGvfp79fhI5TBhqhNKZRVm hdiJz8fNcT476UrEDXfhUiADHTnuo86HbB/bEM0ddPt5Za1VqB8gXrXqyZyn7vY/ 1v9pvkaoAU1S6vW1zwgPP/Np3NMDt1MMxkQ0QYRmaiuErqX0qMvZvAAQPzlsHKEC 6icDnxTKnCkteyOhkUfad74S4UJ4IwFyyFLicbjjqpIRiIiXeDQMg4omJniUY0wM dPV9GZhp86q0o1tQ0HJvuzsYaQ== -----END CERTIFICATE-----Generated at Thu Aug 27 03:04:36 2026 by rpki-client