$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft File: qrDiti9jQ4lXMMBUiOf8TibFGmw.mft (raw, json) Hash identifier: 1gchN2mWn4+wXMIkVcw6kxE1ykUN2YB20Z7GVdkb7jA= Subject key identifier: 47:4C:A2:EC:26:31:82:E2:29:84:DD:1E:55:AD:C7:D9:6E:97:C6:FF Authority key identifier: AA:B0:E2:B6:2F:63:43:89:57:30:C0:54:88:E7:FC:4E:26:C5:1A:6C Certificate issuer: /CN=A91DCAE8/serialNumber=AAB0E2B62F6343895730C05488E7FC4E26C51A6C Certificate serial: 3609 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft Manifest number: 35CB Signing time: Sat 10 Oct 2026 14:45:16 +0000 Manifest this update: Sat 10 Oct 2026 14:45:16 +0000 Manifest next update: Sat 17 Oct 2026 14:45:16 +0000 Files and hashes: 1: qrDiti9jQ4lXMMBUiOf8TibFGmw.crl (hash: 22hQPEwXfNWiKAowJsn4NV0572rBv9SbNso9rYegEwo=) 2: 006CE5442FBA11ECA05BB46EC4F9AE02.roa (hash: vffbJWDHHCOhEb+jXI97UwDYWlfDybh92AYpmVIhFFU=) 3: 2D89110A9A5311EE9CB13140C4F9AE02.roa (hash: XwZCOD7/DYVhwc3OTh2v3F5m4u9nDdw0r2AQU6hRtCI=) 4: 56F533B4A63011EEA6054D52C4F9AE02.roa (hash: AG0uySI8j3B6fdSYGRxuEIJRJdCED4LLdcZlOw31HXc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.crl rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 14:45:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13833 (0x3609) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCAE8, serialNumber=AAB0E2B62F6343895730C05488E7FC4E26C51A6C Validity Not Before: Oct 10 14:45:16 2026 GMT Not After : Oct 17 14:45:16 2026 GMT Subject: CN=6aca4f7c-9558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2f:f4:fa:c2:c4:cd:a1:4d:de:cc:0c:ab:18: 2f:c7:11:f4:bf:f1:f3:48:33:ff:d8:88:9a:d8:3a: bb:77:15:0c:35:b0:a6:ca:40:cf:1b:34:c9:a1:4b: 22:47:3f:0d:df:b3:bd:e8:07:f2:16:d0:21:e6:19: 2a:6d:23:50:15:f2:0e:96:fb:38:63:43:50:fe:d4: 80:df:c2:d7:60:30:d8:e2:24:26:b8:a3:25:44:61: b2:61:b9:03:03:69:73:92:18:19:52:23:34:b3:9c: 05:b1:21:6d:54:d8:af:46:04:6c:f7:5a:8b:47:98: 5c:c0:83:b8:74:8c:ad:09:57:b4:e9:86:60:11:c2: 07:be:3f:14:94:f1:7d:ef:d7:9a:54:03:bf:c1:c4: 07:d9:d6:a6:9b:4d:1e:13:4f:11:5f:14:ad:7e:28: 32:71:a9:9b:8f:a9:31:eb:0a:c8:b1:af:57:fb:84: 6d:7c:ce:c7:97:ce:a0:ac:ce:74:39:96:00:94:5c: b5:42:37:d9:a3:23:be:1c:8b:d0:b2:18:4e:e7:60: b5:0b:35:68:e6:08:08:0f:ab:44:c9:02:eb:16:25: 90:a2:c9:5b:2b:b7:15:94:bb:85:a0:a8:f0:36:2e: 30:d3:54:cd:d1:d2:41:28:f7:5d:a6:2a:b7:81:17: 67:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:4C:A2:EC:26:31:82:E2:29:84:DD:1E:55:AD:C7:D9:6E:97:C6:FF X509v3 Authority Key Identifier: keyid:AA:B0:E2:B6:2F:63:43:89:57:30:C0:54:88:E7:FC:4E:26:C5:1A:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:67:9d:2c:1b:85:8c:9f:ec:7f:ce:ef:9b:4b:95:02:35:75: 20:73:1c:21:3d:9d:87:aa:e7:60:7c:09:06:a3:7c:2e:28:e1: 49:16:f3:76:3d:7c:51:17:3a:93:60:48:a1:8d:0c:06:23:ac: 95:d7:31:60:d6:d8:8e:9b:11:9a:54:f6:d9:b9:0a:50:db:66: 43:55:36:6d:15:74:2e:cc:1d:87:2f:95:8e:bf:c7:4e:ea:09: 3d:49:22:66:02:7b:61:a8:64:f3:05:06:03:bc:99:7e:31:cd: 09:1a:a1:84:f5:d0:64:5d:52:4a:77:67:17:57:a5:68:9d:e2: 85:2f:74:77:9e:1c:04:b8:22:2a:91:f1:02:0f:70:b4:fb:07: 35:b7:cf:99:ba:70:a5:83:16:b5:8b:cd:e3:0c:46:dd:02:c3: 0e:0f:78:dd:77:a5:bf:6b:24:d0:32:cb:c6:36:c6:30:8d:f6: a0:34:c9:49:3a:04:2e:93:24:49:aa:d9:28:db:0d:7c:0e:c8: 83:4b:f0:fb:98:42:ba:5a:43:c8:c2:32:6c:4b:02:36:28:ce: 9f:95:26:e3:d7:ab:1d:54:4b:22:90:bf:5f:a8:8c:b8:26:29: dc:40:95:4b:ad:2a:19:d6:7c:ea:0d:2e:ab:5a:be:84:1f:2f: ab:ba:0f:8b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNgkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENBRTgxMTAvBgNVBAUTKEFBQjBFMkI2MkY2MzQzODk1NzMwQzA1NDg4RTdGQzRF MjZDNTFBNkMwHhcNMjYxMDEwMTQ0NTE2WhcNMjYxMDE3MTQ0NTE2WjAYMRYwFAYD VQQDEw02YWNhNGY3Yy05NTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAti/0+sLEzaFN3swMqxgvxxH0v/HzSDP/2Iia2Dq7dxUMNbCmykDPGzTJoUsi Rz8N37O96AfyFtAh5hkqbSNQFfIOlvs4Y0NQ/tSA38LXYDDY4iQmuKMlRGGyYbkD A2lzkhgZUiM0s5wFsSFtVNivRgRs91qLR5hcwIO4dIytCVe06YZgEcIHvj8UlPF9 79eaVAO/wcQH2damm00eE08RXxStfigycambj6kx6wrIsa9X+4RtfM7Hl86grM50 OZYAlFy1QjfZoyO+HIvQshhO52C1CzVo5ggID6tEyQLrFiWQoslbK7cVlLuFoKjw Ni4w01TN0dJBKPddpiq3gRdnOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEdMouwm MYLiKYTdHlWtx9lul8b/MB8GA1UdIwQYMBaAFKqw4rYvY0OJVzDAVIjn/E4mxRps MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0FFOC84QjZBREUxNDFE OTMxMUUyOTJDQjIzRjcwOEIwMkNEMi9xckRpdGk5alE0bFhNTUJVaU9mOFRpYkZH bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FyRGl0aTlqUTRsWE1NQlVpT2Y4VGliRkdtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0FFOC84QjZBREUxNDFEOTMxMUUyOTJDQjIzRjcwOEIwMkNEMi9xckRpdGk5alE0 bFhNTUJVaU9mOFRpYkZHbXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYWedLBuFjJ/sf87vm0uVAjV1IHMcIT2dh6rnYHwJBqN8LijhSRbzdj18URc6 k2BIoY0MBiOsldcxYNbYjpsRmlT22bkKUNtmQ1U2bRV0Lswdhy+Vjr/HTuoJPUki ZgJ7Yahk8wUGA7yZfjHNCRqhhPXQZF1SSndnF1elaJ3ihS90d54cBLgiKpHxAg9w tPsHNbfPmbpwpYMWtYvN4wxG3QLDDg943Xelv2sk0DLLxjbGMI32oDTJSToELpMk SarZKNsNfA7Ig0vw+5hCulpDyMIybEsCNijOn5Um49erHVRLIpC/X6iMuCYp3ECV S60qGdZ86g0uq1q+hB8vq7oPiw== -----END CERTIFICATE-----Generated at Sun Oct 11 17:12:01 2026 by rpki-client