$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D4803/80F034BEF9E111EBA32CE21BC4F9AE02/Qql4rYPdXtKaTl3bYbVvExelpaQ.mft File: Qql4rYPdXtKaTl3bYbVvExelpaQ.mft (raw, json) Hash identifier: j3jnk1nnHRqdsQzW0MBvj2bJe3TFIj64Ldxx1uAWbYE= Subject key identifier: D9:22:64:87:63:13:95:5B:B2:7E:6D:00:B4:8D:E8:C5:4D:E8:A3:E5 Authority key identifier: 42:A9:78:AD:83:DD:5E:D2:9A:4E:5D:DB:61:B5:6F:13:17:A5:A5:A4 Certificate issuer: /CN=A91D4803/serialNumber=42A978AD83DD5ED29A4E5DDB61B56F1317A5A5A4 Certificate serial: 063E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qql4rYPdXtKaTl3bYbVvExelpaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4803/80F034BEF9E111EBA32CE21BC4F9AE02/Qql4rYPdXtKaTl3bYbVvExelpaQ.mft Manifest number: 0634 Signing time: Tue 06 Oct 2026 22:52:05 +0000 Manifest this update: Tue 06 Oct 2026 22:52:05 +0000 Manifest next update: Tue 13 Oct 2026 22:52:05 +0000 Files and hashes: 1: Qql4rYPdXtKaTl3bYbVvExelpaQ.crl (hash: 0ut0vTKgjl/lNl+s80TKomSXw/Wz5JS8opv71UKzro8=) 2: 2B1B8C92F9E511EBBB9B5D22C4F9AE02.roa (hash: XNmP7Zo2Gu2ysZZkwdUo+plqL0kQKyZ4CkwaD9acTw0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4803/80F034BEF9E111EBA32CE21BC4F9AE02/Qql4rYPdXtKaTl3bYbVvExelpaQ.crl rsync://rpki.apnic.net/member_repository/A91D4803/80F034BEF9E111EBA32CE21BC4F9AE02/Qql4rYPdXtKaTl3bYbVvExelpaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qql4rYPdXtKaTl3bYbVvExelpaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 22:52:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1598 (0x63e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4803, serialNumber=42A978AD83DD5ED29A4E5DDB61B56F1317A5A5A4 Validity Not Before: Oct 6 22:52:05 2026 GMT Not After : Oct 13 22:52:05 2026 GMT Subject: CN=6ac57b95-3d87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:f4:c4:1f:43:74:4c:24:6d:92:68:61:50:a8: 73:15:b5:d5:ab:f8:18:d5:db:c6:25:2f:32:80:51: 6c:5d:44:77:3a:47:09:8f:01:68:4d:a2:4e:3a:24: 62:d9:da:62:df:8c:02:30:7f:76:c7:de:5d:b3:20: 7e:e1:1a:86:8b:ce:b2:18:ef:77:34:96:73:8b:17: 1e:7c:bd:58:ed:1a:a9:62:4c:0b:d8:5a:e7:cc:76: c7:7c:d6:73:e2:60:92:a6:d8:b4:fc:b2:ea:5f:66: da:4d:e1:1d:2b:ca:b6:d5:2f:38:e0:09:33:5b:a2: 67:f3:dd:99:45:99:95:62:e6:74:c1:50:00:a7:4d: 90:8a:fb:fc:bc:9d:0a:0f:c5:56:8c:28:fa:65:0a: 7f:08:75:7f:65:39:ec:95:e1:19:dd:de:1c:af:50: 8c:e8:c3:e0:99:f8:5c:00:c7:d6:30:27:74:6b:e1: 61:9c:84:9c:60:ca:cc:d5:25:de:19:34:f1:d5:c5: 81:23:05:a1:a0:8e:6a:92:26:08:da:02:36:8e:61: b3:c0:30:ff:67:61:5b:97:7a:74:7d:2e:ab:43:61: ee:83:79:3b:cd:4e:bb:ca:1d:e5:21:b9:08:d6:dc: 93:ba:a7:ab:8e:86:79:83:65:9c:d9:5c:f6:0e:a4: 14:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:22:64:87:63:13:95:5B:B2:7E:6D:00:B4:8D:E8:C5:4D:E8:A3:E5 X509v3 Authority Key Identifier: keyid:42:A9:78:AD:83:DD:5E:D2:9A:4E:5D:DB:61:B5:6F:13:17:A5:A5:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4803/80F034BEF9E111EBA32CE21BC4F9AE02/Qql4rYPdXtKaTl3bYbVvExelpaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qql4rYPdXtKaTl3bYbVvExelpaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4803/80F034BEF9E111EBA32CE21BC4F9AE02/Qql4rYPdXtKaTl3bYbVvExelpaQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:19:56:54:f7:d6:ad:1d:06:89:d1:5f:67:75:7b:af:79:1a: 7c:53:ac:3a:00:03:d3:ac:1f:97:6b:e9:0a:9a:31:aa:53:2e: 0b:4d:a6:51:c3:41:57:19:42:c4:12:ca:42:a9:4a:f0:33:95: 94:ed:d3:36:f8:4a:1c:b4:11:f0:d8:3a:f4:a6:5c:62:df:cb: 35:b9:db:9e:1c:e8:da:fc:c2:d8:2f:13:b0:d8:87:23:de:41: b5:c5:10:69:17:9e:58:7a:11:26:fb:b3:b4:43:17:74:89:6a: 85:8f:bd:23:a2:8e:0d:c6:10:76:ca:59:46:3b:e6:77:cd:30: a0:c7:f5:29:ed:90:f1:a2:7f:47:f7:74:4b:27:f8:a4:95:5a: 56:f8:24:86:b5:7e:bc:59:e3:c6:25:3b:0a:a8:d8:87:7e:b7: 98:11:4f:04:c6:65:76:24:5a:7e:67:fb:eb:6f:9b:53:79:34: 30:59:ad:83:23:35:85:f3:07:fc:ca:eb:02:a8:cd:30:99:38: 9d:76:51:54:9b:6a:6f:27:be:fe:8b:2f:13:16:38:6c:bd:f2: c8:3a:34:20:12:2b:94:54:69:38:92:81:f6:31:97:fe:23:39: 52:e3:1a:60:60:a6:49:7d:f4:b7:03:a5:31:1c:e9:32:dc:50: 46:83:c6:b7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBj4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ4MDMxMTAvBgNVBAUTKDQyQTk3OEFEODNERDVFRDI5QTRFNUREQjYxQjU2RjEz MTdBNUE1QTQwHhcNMjYxMDA2MjI1MjA1WhcNMjYxMDEzMjI1MjA1WjAYMRYwFAYD VQQDEw02YWM1N2I5NS0zZDg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjfTEH0N0TCRtkmhhUKhzFbXVq/gY1dvGJS8ygFFsXUR3OkcJjwFoTaJOOiRi 2dpi34wCMH92x95dsyB+4RqGi86yGO93NJZzixcefL1Y7RqpYkwL2FrnzHbHfNZz 4mCSpti0/LLqX2baTeEdK8q21S844AkzW6Jn892ZRZmVYuZ0wVAAp02Qivv8vJ0K D8VWjCj6ZQp/CHV/ZTnsleEZ3d4cr1CM6MPgmfhcAMfWMCd0a+FhnIScYMrM1SXe GTTx1cWBIwWhoI5qkiYI2gI2jmGzwDD/Z2Fbl3p0fS6rQ2Hug3k7zU67yh3lIbkI 1tyTuqerjoZ5g2Wc2Vz2DqQUPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNkiZIdj E5Vbsn5tALSN6MVN6KPlMB8GA1UdIwQYMBaAFEKpeK2D3V7Smk5d22G1bxMXpaWk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDgwMy84MEYwMzRCRUY5 RTExMUVCQTMyQ0UyMUJDNEY5QUUwMi9RcWw0cllQZFh0S2FUbDNiWWJWdkV4ZWxw YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FxbDRyWVBkWHRLYVRsM2JZYlZ2RXhlbHBhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDgwMy84MEYwMzRCRUY5RTExMUVCQTMyQ0UyMUJDNEY5QUUwMi9RcWw0cllQZFh0 S2FUbDNiWWJWdkV4ZWxwYVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARRlWVPfWrR0GidFfZ3V7r3kafFOsOgAD06wfl2vpCpoxqlMuC02mUcNBVxlC xBLKQqlK8DOVlO3TNvhKHLQR8Ng69KZcYt/LNbnbnhzo2vzC2C8TsNiHI95BtcUQ aReeWHoRJvuztEMXdIlqhY+9I6KODcYQdspZRjvmd80woMf1Ke2Q8aJ/R/d0Syf4 pJVaVvgkhrV+vFnjxiU7CqjYh363mBFPBMZldiRafmf762+bU3k0MFmtgyM1hfMH /MrrAqjNMJk4nXZRVJtqbye+/osvExY4bL3yyDo0IBIrlFRpOJKB9jGX/iM5UuMa YGCmSX30twOlMRzpMtxQRoPGtw== -----END CERTIFICATE-----Generated at Wed Oct 7 11:18:34 2026 by rpki-client