$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.mft File: qK6pspMKYU1coxq59-hDeTYaL0M.mft (raw, json) Hash identifier: RgAnCjmroI4Umo7AJoXqopCI2cbx8pS0DbK3sV3YW44= Subject key identifier: C1:90:0A:D4:96:AD:B2:0D:43:3A:2A:79:43:DB:11:B4:AB:38:32:8C Authority key identifier: A8:AE:A9:B2:93:0A:61:4D:5C:A3:1A:B9:F7:E8:43:79:36:1A:2F:43 Certificate issuer: /CN=A91D7C1D/serialNumber=A8AEA9B2930A614D5CA31AB9F7E84379361A2F43 Certificate serial: 0AC5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qK6pspMKYU1coxq59-hDeTYaL0M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.mft Manifest number: 0AAF Signing time: Mon 26 Oct 2026 19:32:02 +0000 Manifest this update: Mon 26 Oct 2026 19:32:02 +0000 Manifest next update: Mon 02 Nov 2026 19:32:02 +0000 Files and hashes: 1: qK6pspMKYU1coxq59-hDeTYaL0M.crl (hash: C1LfynRq/voESENc9x9qgA81HvzLoZva5+va+zA5UHQ=) 2: A292E3529E9711EEB6899B1CC4F9AE02.roa (hash: BML+CpNfWIhxgmjTMLZ//EdSsz/6Hi/QXJXWPhL7TSQ=) 3: -MDpMwooKlC4cQ11sxMasnukqjE.asa (hash: aI8XaEF93rscIyRJ9IGwHhTTopcBsHgO5XCQV5/Qw40=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.crl rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qK6pspMKYU1coxq59-hDeTYaL0M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 19:32:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2757 (0xac5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7C1D, serialNumber=A8AEA9B2930A614D5CA31AB9F7E84379361A2F43 Validity Not Before: Oct 26 19:32:02 2026 GMT Not After : Nov 2 19:32:02 2026 GMT Subject: CN=6adfaab2-a9b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c5:f1:89:56:e5:6f:46:be:e5:e9:ac:22:eb: 8e:a4:73:aa:64:a6:2d:77:b8:49:79:6c:9b:d3:04: 69:4a:36:3b:a2:97:12:15:79:21:4b:e7:92:b2:99: 66:b5:f4:06:a7:c7:c6:89:7f:b5:d2:1e:68:51:8a: cf:51:7c:2e:91:ef:22:40:74:5f:36:fa:18:66:56: 6b:15:6f:12:27:f9:9c:31:49:34:6d:65:55:3a:fd: c8:e6:38:fe:a6:1a:0d:23:6c:b9:43:71:96:9d:d1: be:77:0f:15:6a:1a:8b:b0:70:4d:1d:a0:a6:56:9e: cb:09:da:55:bc:b9:ce:82:1e:10:ff:aa:2b:5b:5d: 3b:92:e0:7e:a4:a2:ef:8c:c9:fc:d2:35:e0:37:c8: ce:5d:a8:ef:21:b4:b0:f2:74:c8:7f:3f:53:12:b9: d2:de:92:da:81:3a:7e:f6:a9:33:6c:e6:fc:e3:fd: 9a:43:d6:3b:d3:4b:f2:66:21:de:19:0f:c9:c3:66: 78:47:a0:8a:66:82:b7:4a:b4:ae:34:8f:b7:f6:a1: 17:e5:6b:1c:97:4d:28:46:66:39:52:21:a1:e4:e0: a6:65:59:38:78:72:9f:bb:89:59:d4:47:15:b3:c4: ff:6e:60:bc:5e:6a:44:76:b4:11:ec:41:47:7c:9f: 8e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:90:0A:D4:96:AD:B2:0D:43:3A:2A:79:43:DB:11:B4:AB:38:32:8C X509v3 Authority Key Identifier: keyid:A8:AE:A9:B2:93:0A:61:4D:5C:A3:1A:B9:F7:E8:43:79:36:1A:2F:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qK6pspMKYU1coxq59-hDeTYaL0M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:6d:63:c5:45:bc:94:ed:0b:82:f3:89:c7:18:e9:10:c7:ef: b6:7c:d0:da:2a:ac:2d:01:33:aa:21:91:aa:29:40:cc:0f:a6: 67:4f:ec:bb:cf:18:8d:b5:f1:f8:dd:f3:5c:e7:31:55:0f:58: 21:7e:a0:04:13:bc:f7:34:c1:dd:30:3e:e0:6a:8c:dd:9e:19: c9:0f:b1:22:14:ca:31:61:b6:b5:be:41:40:87:01:88:f9:9e: 48:96:59:3d:3e:d3:b7:32:12:ee:d7:44:6a:59:b1:09:86:0e: 06:95:82:21:c1:61:89:69:22:74:2e:03:b5:c6:cc:2f:7e:ce: 25:1c:53:5b:c6:87:f6:42:ec:c3:f5:ff:c3:64:7b:4b:5d:56: 99:76:03:d9:6e:2d:50:91:fc:19:8e:df:8b:7c:51:4d:ab:f4: 34:00:b7:dc:b9:f9:c3:ec:b0:50:4e:22:54:b8:51:b3:3a:5a: 5e:80:3d:53:0f:83:5e:ad:7f:90:ce:e3:be:a1:54:3d:91:63: 0d:b7:83:3f:df:86:62:61:4c:e0:5d:51:76:c8:a2:cf:fe:9c: f5:72:54:12:01:63:e8:00:a9:90:da:8c:65:4a:16:88:74:6c: 1f:2d:b8:67:e9:0b:ad:54:74:c5:c6:f1:d2:eb:1c:ef:e8:0a: fc:45:94:15 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCsUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDdDMUQxMTAvBgNVBAUTKEE4QUVBOUIyOTMwQTYxNEQ1Q0EzMUFCOUY3RTg0Mzc5 MzYxQTJGNDMwHhcNMjYxMDI2MTkzMjAyWhcNMjYxMTAyMTkzMjAyWjAYMRYwFAYD VQQDEw02YWRmYWFiMi1hOWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAssXxiVblb0a+5emsIuuOpHOqZKYtd7hJeWyb0wRpSjY7opcSFXkhS+eSsplm tfQGp8fGiX+10h5oUYrPUXwuke8iQHRfNvoYZlZrFW8SJ/mcMUk0bWVVOv3I5jj+ phoNI2y5Q3GWndG+dw8VahqLsHBNHaCmVp7LCdpVvLnOgh4Q/6orW107kuB+pKLv jMn80jXgN8jOXajvIbSw8nTIfz9TErnS3pLagTp+9qkzbOb84/2aQ9Y700vyZiHe GQ/Jw2Z4R6CKZoK3SrSuNI+39qEX5Wscl00oRmY5UiGh5OCmZVk4eHKfu4lZ1EcV s8T/bmC8XmpEdrQR7EFHfJ+ObQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMGQCtSW rbINQzoqeUPbEbSrODKMMB8GA1UdIwQYMBaAFKiuqbKTCmFNXKMauffoQ3k2Gi9D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEN0MxRC9BODA3MEFGMjhB RjAxMUVBQTk1MjgzMDlDNEY5QUUwMi9xSzZwc3BNS1lVMWNveHE1OS1oRGVUWWFM ME0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FLNnBzcE1LWVUxY294cTU5LWhEZVRZYUwwTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE N0MxRC9BODA3MEFGMjhBRjAxMUVBQTk1MjgzMDlDNEY5QUUwMi9xSzZwc3BNS1lV MWNveHE1OS1oRGVUWWFMME0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuG1jxUW8lO0LgvOJxxjpEMfvtnzQ2iqsLQEzqiGRqilAzA+mZ0/su88YjbXx +N3zXOcxVQ9YIX6gBBO89zTB3TA+4GqM3Z4ZyQ+xIhTKMWG2tb5BQIcBiPmeSJZZ PT7TtzIS7tdEalmxCYYOBpWCIcFhiWkidC4DtcbML37OJRxTW8aH9kLsw/X/w2R7 S11WmXYD2W4tUJH8GY7fi3xRTav0NAC33Ln5w+ywUE4iVLhRszpaXoA9Uw+DXq1/ kM7jvqFUPZFjDbeDP9+GYmFM4F1Rdsiiz/6c9XJUEgFj6ACpkNqMZUoWiHRsHy24 Z+kLrVR0xcbx0usc7+gK/EWUFQ== -----END CERTIFICATE-----Generated at Wed Oct 28 00:46:49 2026 by rpki-client