$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft File: q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft (raw, json) Hash identifier: JWdn+i5CdVTCdYZj2+Ocm7DUbg7zEGjMZrThtBme1M0= Subject key identifier: 00:B2:0D:C3:D4:40:29:3B:04:97:6D:05:A6:E8:21:F1:FD:7D:49:46 Authority key identifier: AB:67:E8:2F:C8:6A:AC:A8:2A:CF:F8:DC:36:45:CD:71:61:01:3F:76 Certificate issuer: /CN=A91D1E4C/serialNumber=AB67E82FC86AACA82ACFF8DC3645CD7161013F76 Certificate serial: 040C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft Manifest number: 0D0D Signing time: Sat 24 Oct 2026 20:12:27 +0000 Manifest this update: Sat 24 Oct 2026 20:12:26 +0000 Manifest next update: Sat 31 Oct 2026 20:12:26 +0000 Files and hashes: 1: q2foL8hqrKgqz_jcNkXNcWEBP3Y.crl (hash: VHCrnQLwH5UcaaOCmIG/b2W6UR9a1pZ95LmFLcnDpVk=) 2: 3DD8C628940111F09204AF71C4F9AE02.roa (hash: qyRCCyei3MShGysWy2y27h9mS62xktJLIpfB6ltBCO4=) 3: FC358296CFA011EDA4AC5B18C4F9AE02.roa (hash: 0M6xdPEZ2aujF9/YY8xW4204AgcRunVSuM8Vw+Ja05Q=) 4: 2AD1C746940111F0B07D7068C4F9AE02.roa (hash: RT811XLV5/H+z9rXyjPOcwNWUnb5MPdvTXm8sb3lfDk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.crl rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 20:12:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1036 (0x40c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1E4C, serialNumber=AB67E82FC86AACA82ACFF8DC3645CD7161013F76 Validity Not Before: Oct 24 20:12:26 2026 GMT Not After : Oct 31 20:12:26 2026 GMT Subject: CN=6add112b-0604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:67:d2:e0:74:f8:00:69:64:24:ee:8a:df:b1: a3:cf:25:dd:dd:46:b8:21:ee:fc:5a:f4:8a:f1:09: 27:02:8e:c5:e0:96:05:c3:be:37:2d:e2:53:b6:c8: f3:6d:f6:bf:6c:cc:0a:a4:ea:c8:05:8e:c5:ec:c7: 40:3d:fd:56:e2:bc:1f:0e:08:9d:e3:ec:b7:15:28: 50:5c:1a:0c:73:a0:a5:13:59:e1:b5:5c:b4:ba:36: 1b:5d:83:b4:a0:13:f2:0b:1b:73:a3:ec:06:0a:ba: c2:13:c9:b2:94:6c:53:31:22:f3:23:71:9f:a3:4d: 8f:7a:d0:3f:21:86:4e:d7:87:fe:db:c3:7c:51:73: 09:aa:ef:8d:0e:96:54:aa:d1:47:08:6e:00:49:eb: 61:12:91:73:6b:f2:f7:5f:ec:9d:cb:3d:e3:c7:02: d3:5c:f3:10:13:ce:3b:9a:d9:b9:02:2b:cf:d0:57: 80:05:56:6b:b8:3d:59:a8:62:1f:84:26:da:49:96: 17:94:21:02:2f:35:ed:de:df:3f:35:84:9d:cb:d7: 0f:9a:ef:b6:d9:3d:61:0d:98:bf:68:ef:55:7e:38: 5c:ce:fe:23:c1:c6:3d:35:b6:40:b8:23:c0:6b:fb: 3f:5f:76:44:da:0d:27:78:43:84:77:64:38:80:66: 93:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:B2:0D:C3:D4:40:29:3B:04:97:6D:05:A6:E8:21:F1:FD:7D:49:46 X509v3 Authority Key Identifier: keyid:AB:67:E8:2F:C8:6A:AC:A8:2A:CF:F8:DC:36:45:CD:71:61:01:3F:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:a6:02:dd:f5:82:fa:a0:92:c8:98:13:c1:5c:9d:4e:67:98: 38:ad:ba:7c:5e:3a:d7:bf:b6:3e:4d:55:bf:c7:85:77:a0:d5: 4b:2a:d7:48:2c:e8:6c:c9:ae:88:b7:63:2b:db:46:91:25:b8: 6b:1c:8a:6b:a5:71:f9:b8:d6:cb:69:2c:1a:af:40:d7:c4:47: 76:09:71:69:7a:78:bf:64:d6:7e:e7:ee:ef:a3:8e:c0:3b:5b: ea:e5:76:1a:e4:55:f2:1e:2f:9e:a4:a0:93:c1:39:eb:7b:15: d9:de:4b:35:9f:d9:78:45:0d:90:1b:78:b8:56:f2:eb:44:5f: 14:61:87:83:b8:b7:5a:2b:3c:ae:d8:3b:f7:fe:70:ab:46:b1: f3:6c:2c:94:b1:c2:e6:74:8f:52:e3:bb:f5:28:ba:75:72:51: 00:c2:16:7b:57:8e:fa:16:d2:37:d4:b8:eb:57:3e:fa:0f:9f: ce:e6:5d:47:27:97:41:38:b8:c8:4e:9f:e7:9c:00:a7:e7:37: 6c:87:85:43:e3:d6:c7:26:8b:fb:a2:d8:97:0c:46:5a:b3:3c: f3:21:77:e1:d0:dd:d6:3b:0d:4e:b2:52:1f:3d:f4:9f:87:18: 53:9c:59:40:5f:50:3a:b3:68:6e:10:32:c6:86:50:6c:ca:ef: e5:90:69:b3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBAwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFFNEMxMTAvBgNVBAUTKEFCNjdFODJGQzg2QUFDQTgyQUNGRjhEQzM2NDVDRDcx NjEwMTNGNzYwHhcNMjYxMDI0MjAxMjI2WhcNMjYxMDMxMjAxMjI2WjAYMRYwFAYD VQQDEw02YWRkMTEyYi0wNjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp2fS4HT4AGlkJO6K37GjzyXd3Ua4Ie78WvSK8QknAo7F4JYFw743LeJTtsjz bfa/bMwKpOrIBY7F7MdAPf1W4rwfDgid4+y3FShQXBoMc6ClE1nhtVy0ujYbXYO0 oBPyCxtzo+wGCrrCE8mylGxTMSLzI3Gfo02PetA/IYZO14f+28N8UXMJqu+NDpZU qtFHCG4ASethEpFza/L3X+ydyz3jxwLTXPMQE847mtm5AivP0FeABVZruD1ZqGIf hCbaSZYXlCECLzXt3t8/NYSdy9cPmu+22T1hDZi/aO9Vfjhczv4jwcY9NbZAuCPA a/s/X3ZE2g0neEOEd2Q4gGaTqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFACyDcPU QCk7BJdtBaboIfH9fUlGMB8GA1UdIwQYMBaAFKtn6C/IaqyoKs/43DZFzXFhAT92 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUU0Qy83REFEQTU2Q0Q5 NEQxMUVBQTYwNEFDNTNDNEY5QUUwMi9xMmZvTDhocXJLZ3F6X2pjTmtYTmNXRUJQ M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3EyZm9MOGhxcktncXpfamNOa1hOY1dFQlAzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUU0Qy83REFEQTU2Q0Q5NEQxMUVBQTYwNEFDNTNDNEY5QUUwMi9xMmZvTDhocXJL Z3F6X2pjTmtYTmNXRUJQM1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnaYC3fWC+qCSyJgTwVydTmeYOK26fF4617+2Pk1Vv8eFd6DVSyrXSCzobMmu iLdjK9tGkSW4axyKa6Vx+bjWy2ksGq9A18RHdglxaXp4v2TWfufu76OOwDtb6uV2 GuRV8h4vnqSgk8E563sV2d5LNZ/ZeEUNkBt4uFby60RfFGGHg7i3Wis8rtg79/5w q0ax82wslLHC5nSPUuO79Si6dXJRAMIWe1eO+hbSN9S461c++g+fzuZdRyeXQTi4 yE6f55wAp+c3bIeFQ+PWxyaL+6LYlwxGWrM88yF34dDd1jsNTrJSHz30n4cYU5xZ QF9QOrNobhAyxoZQbMrv5ZBpsw== -----END CERTIFICATE-----Generated at Sun Oct 25 01:33:37 2026 by rpki-client