$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft File: qrDiti9jQ4lXMMBUiOf8TibFGmw.mft (raw, json) Hash identifier: BDAHfi5B0NZ3rwuTfeHr812fqclcsvsgODv7DEjjce0= Subject key identifier: 21:39:65:67:49:EC:EF:34:E5:82:79:83:E5:C8:4B:A9:AB:A6:A7:10 Authority key identifier: AA:B0:E2:B6:2F:63:43:89:57:30:C0:54:88:E7:FC:4E:26:C5:1A:6C Certificate issuer: /CN=A91DCAE8/serialNumber=AAB0E2B62F6343895730C05488E7FC4E26C51A6C Certificate serial: 35EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft Manifest number: 35B1 Signing time: Mon 24 Aug 2026 14:45:14 +0000 Manifest this update: Mon 24 Aug 2026 14:45:14 +0000 Manifest next update: Mon 31 Aug 2026 14:45:14 +0000 Files and hashes: 1: qrDiti9jQ4lXMMBUiOf8TibFGmw.crl (hash: RMryhdrFnie8vxxE8CPSGklLfCWD0FmDSEkCAW/6nac=) 2: 56F533B4A63011EEA6054D52C4F9AE02.roa (hash: 0iMCnY3705MLKSQeDX6iv1qsWDcFTiwdaLS+CFP3lvY=) 3: 006CE5442FBA11ECA05BB46EC4F9AE02.roa (hash: gGlyAExoFEUqT98bADKmBZWyQcG57UwG1nHtGghueEI=) 4: 2D89110A9A5311EE9CB13140C4F9AE02.roa (hash: lYpkRD/vPCqBa7Vd4N6W0BGqOH9jxtp9EJocrqn7xs0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.crl rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 14:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13804 (0x35ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCAE8, serialNumber=AAB0E2B62F6343895730C05488E7FC4E26C51A6C Validity Not Before: Aug 24 14:45:14 2026 GMT Not After : Aug 31 14:45:14 2026 GMT Subject: CN=6a8c58fa-128b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:7b:94:88:5c:4d:64:ae:e9:b6:c0:91:cc:50: d6:b1:d6:54:c8:db:0d:b1:a3:5a:53:e3:97:06:ca: 25:d7:e3:8b:7e:8b:28:07:dc:40:03:11:4e:42:dd: 34:a8:25:97:74:42:ac:c1:bc:fd:3c:a1:51:a9:a5: 5d:28:d9:3f:d6:cf:b5:6b:ec:4a:c6:87:e2:2f:37: f2:d2:b9:13:f9:08:5f:ae:e2:64:2d:42:70:6c:33: 10:5e:71:3e:87:44:3f:cd:62:6d:af:f1:c4:17:87: 64:b3:e2:e6:98:73:5a:96:31:fa:8e:6f:13:3a:f8: 73:5d:ce:e5:ce:fd:9d:61:33:3c:bf:0f:38:c1:6e: 38:51:b2:0d:54:3f:43:b2:7a:12:f1:ea:d3:8e:bb: 5b:32:5f:98:c4:2b:6b:a3:a9:0d:f1:a9:26:9e:6d: 37:12:51:71:50:2a:73:d2:86:9c:b4:9b:cf:5b:39: 3d:23:03:11:07:8e:bd:b3:89:0d:eb:98:30:83:a9: 0d:cf:2e:34:e2:17:ba:67:fd:fb:c9:d4:82:e9:bd: fa:3d:0b:3c:69:fd:4d:6c:4f:e5:29:fb:1c:5e:d5: 49:8c:8f:99:24:2a:b2:0c:65:3d:ec:b9:43:97:eb: 84:7e:bd:03:77:4e:de:f2:63:b4:47:a2:e4:18:05: 9b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:39:65:67:49:EC:EF:34:E5:82:79:83:E5:C8:4B:A9:AB:A6:A7:10 X509v3 Authority Key Identifier: keyid:AA:B0:E2:B6:2F:63:43:89:57:30:C0:54:88:E7:FC:4E:26:C5:1A:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:0e:cf:27:4d:05:bf:79:cb:75:b8:96:bb:10:52:b8:81:df: e1:ce:ff:54:79:ff:7f:92:cf:35:ee:f8:7f:9b:08:c9:16:cf: 35:fb:69:99:cd:2e:32:84:44:3b:83:28:25:0f:39:b9:a9:84: 31:56:91:57:57:d5:37:7e:ac:b5:f2:46:ff:57:a8:33:82:7f: d4:aa:e9:67:5b:ab:7c:11:0c:bf:1c:e2:9e:19:04:53:b8:80: d8:c4:c3:a6:a5:2e:8d:36:a6:d9:10:e0:37:b7:01:88:18:09: 0b:e4:85:81:94:37:47:e9:a1:6e:28:6b:e6:1d:ae:22:3a:26: 5d:2d:c7:de:5c:c1:73:1f:3f:45:b2:77:2e:84:68:63:01:1f: c0:75:e6:e6:8d:01:5f:b6:3a:3d:82:55:22:6a:11:b1:8a:b2: 91:6c:12:d6:16:93:0d:6d:87:7d:70:81:aa:d4:75:3d:dd:4b: 53:9b:fd:e0:0e:03:13:14:48:9b:c1:42:8a:15:bb:47:c8:fb: de:0c:ce:a3:c3:34:65:dc:c7:42:f2:02:12:5b:88:0e:e3:15: b9:18:97:a2:4a:2f:dd:be:21:31:31:4a:98:5a:6d:a8:59:5e: 5c:b6:bf:c9:2a:00:23:9a:99:81:ed:21:1c:bc:75:5d:ae:01: 1b:00:42:67 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENBRTgxMTAvBgNVBAUTKEFBQjBFMkI2MkY2MzQzODk1NzMwQzA1NDg4RTdGQzRF MjZDNTFBNkMwHhcNMjYwODI0MTQ0NTE0WhcNMjYwODMxMTQ0NTE0WjAYMRYwFAYD VQQDEw02YThjNThmYS0xMjhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz3uUiFxNZK7ptsCRzFDWsdZUyNsNsaNaU+OXBsol1+OLfosoB9xAAxFOQt00 qCWXdEKswbz9PKFRqaVdKNk/1s+1a+xKxofiLzfy0rkT+QhfruJkLUJwbDMQXnE+ h0Q/zWJtr/HEF4dks+LmmHNaljH6jm8TOvhzXc7lzv2dYTM8vw84wW44UbINVD9D snoS8erTjrtbMl+YxCtro6kN8akmnm03ElFxUCpz0oactJvPWzk9IwMRB469s4kN 65gwg6kNzy404he6Z/37ydSC6b36PQs8af1NbE/lKfscXtVJjI+ZJCqyDGU97LlD l+uEfr0Dd07e8mO0R6LkGAWbgQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCE5ZWdJ 7O805YJ5g+XIS6mrpqcQMB8GA1UdIwQYMBaAFKqw4rYvY0OJVzDAVIjn/E4mxRps MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0FFOC84QjZBREUxNDFE OTMxMUUyOTJDQjIzRjcwOEIwMkNEMi9xckRpdGk5alE0bFhNTUJVaU9mOFRpYkZH bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FyRGl0aTlqUTRsWE1NQlVpT2Y4VGliRkdtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0FFOC84QjZBREUxNDFEOTMxMUUyOTJDQjIzRjcwOEIwMkNEMi9xckRpdGk5alE0 bFhNTUJVaU9mOFRpYkZHbXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbg7PJ00Fv3nLdbiWuxBSuIHf4c7/VHn/f5LPNe74f5sIyRbPNftpmc0uMoRE O4MoJQ85uamEMVaRV1fVN36stfJG/1eoM4J/1KrpZ1urfBEMvxzinhkEU7iA2MTD pqUujTam2RDgN7cBiBgJC+SFgZQ3R+mhbihr5h2uIjomXS3H3lzBcx8/RbJ3LoRo YwEfwHXm5o0BX7Y6PYJVImoRsYqykWwS1haTDW2HfXCBqtR1Pd1LU5v94A4DExRI m8FCihW7R8j73gzOo8M0ZdzHQvICEluIDuMVuRiXokov3b4hMTFKmFptqFleXLa/ ySoAI5qZge0hHLx1Xa4BGwBCZw== -----END CERTIFICATE-----Generated at Tue Aug 25 08:01:51 2026 by rpki-client