$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DCF4D/DB90E480849D11F19203B0BB88A30FBC/qEIODiButOkMWHKN1D91Dc_DzIY.mft File: qEIODiButOkMWHKN1D91Dc_DzIY.mft (raw, json) Hash identifier: GHovvd0clwdh/0n7MvveKsT5SA1JaUFrQbRTadkfQFc= Subject key identifier: 7C:33:A0:4A:CB:C6:0E:1F:E0:F6:E2:52:51:67:22:E5:73:5C:BA:55 Authority key identifier: A8:42:0E:0E:20:6E:B4:E9:0C:58:72:8D:D4:3F:75:0D:CF:C3:CC:86 Certificate issuer: /CN=A91DCF4D/serialNumber=A8420E0E206EB4E90C58728DD43F750DCFC3CC86 Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qEIODiButOkMWHKN1D91Dc_DzIY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCF4D/DB90E480849D11F19203B0BB88A30FBC/qEIODiButOkMWHKN1D91Dc_DzIY.mft Manifest number: 20 Signing time: Tue 15 Sep 2026 08:41:58 +0000 Manifest this update: Tue 15 Sep 2026 08:41:58 +0000 Manifest next update: Tue 22 Sep 2026 08:41:58 +0000 Files and hashes: 1: qEIODiButOkMWHKN1D91Dc_DzIY.crl (hash: w0PA9CIl4Qaj3jvrE4HRbyvE8A0Q9aAHOMWXI5dxvRU=) 2: A41A30BE866011F191F4B56496A30FBC.roa (hash: AJVM8QB8v9wW9C2GIwYSkWw279MNg5CiJGgU0E7i/bE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCF4D/DB90E480849D11F19203B0BB88A30FBC/qEIODiButOkMWHKN1D91Dc_DzIY.crl rsync://rpki.apnic.net/member_repository/A91DCF4D/DB90E480849D11F19203B0BB88A30FBC/qEIODiButOkMWHKN1D91Dc_DzIY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qEIODiButOkMWHKN1D91Dc_DzIY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 08:02:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCF4D, serialNumber=A8420E0E206EB4E90C58728DD43F750DCFC3CC86 Validity Not Before: Sep 15 08:41:58 2026 GMT Not After : Sep 22 08:41:58 2026 GMT Subject: CN=6aa904d6-adc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b8:15:b6:d1:10:76:2b:9c:76:1b:54:82:eb: 5b:de:7d:b0:02:2f:6f:f6:10:21:8c:ce:17:1b:59: 4f:78:7c:53:6b:78:48:f1:13:8f:43:da:92:11:b0: 69:0d:31:57:5e:e2:e3:ee:db:0f:72:9c:2a:a6:cb: e5:bc:97:39:b4:ce:2a:2c:cd:0a:47:8c:87:30:bf: c4:b9:73:8c:fc:d9:ce:1e:02:b8:16:8b:a1:5f:46: 23:46:83:d5:ed:01:72:49:43:20:c3:97:a9:a5:49: 75:b3:cd:b6:1a:40:2a:49:d0:ee:7f:74:d5:b3:40: dc:70:97:a5:a6:ae:62:ba:e3:68:7c:ae:ff:06:88: 42:d0:12:12:c1:48:3c:dc:c8:a0:c4:38:c8:5c:c1: 18:c4:0d:34:10:5c:27:f1:25:31:e3:f9:7e:2b:01: 5f:6c:80:3b:1f:eb:d3:0b:42:c5:d7:75:e7:ff:30: 1d:db:90:76:6d:24:3f:ff:a8:f4:f6:20:9f:be:80: 25:8a:c5:4e:55:3f:51:fe:dd:85:2b:f4:dd:77:5e: 00:79:25:d3:a3:d7:02:9e:f7:c5:1a:7c:05:59:53: 1c:9b:a6:e7:51:8c:95:b0:07:4e:b5:c2:6d:c9:3b: 19:41:d4:e3:2c:1a:fe:b8:68:4f:85:90:fb:13:6e: 73:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:33:A0:4A:CB:C6:0E:1F:E0:F6:E2:52:51:67:22:E5:73:5C:BA:55 X509v3 Authority Key Identifier: keyid:A8:42:0E:0E:20:6E:B4:E9:0C:58:72:8D:D4:3F:75:0D:CF:C3:CC:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCF4D/DB90E480849D11F19203B0BB88A30FBC/qEIODiButOkMWHKN1D91Dc_DzIY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qEIODiButOkMWHKN1D91Dc_DzIY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCF4D/DB90E480849D11F19203B0BB88A30FBC/qEIODiButOkMWHKN1D91Dc_DzIY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:8f:03:32:f8:45:75:02:81:85:fb:f8:e1:e9:ea:0f:ed:f1: 9f:0f:4d:fd:55:fc:74:ca:26:b7:31:9c:c2:de:b6:dd:f3:10: 8e:25:b1:d9:fa:1f:62:be:97:aa:9f:72:d6:39:2f:e9:cc:b1: 3c:b9:9b:c3:19:a4:c5:de:92:f8:4f:b9:83:71:c9:bd:d2:87: 80:6e:14:64:26:b9:f6:40:87:2f:9d:2f:c6:5e:0a:32:0c:f8: 5b:a9:69:df:14:c0:68:40:92:45:33:f2:81:d0:4a:b5:5b:cf: 4e:3d:a6:da:58:5e:35:53:9e:f3:1f:66:c9:44:0e:d8:76:ee: 57:eb:a2:05:87:61:bb:c2:d5:e3:30:34:c3:1c:82:fb:e6:46: 6f:40:04:79:d9:5b:39:3c:fb:00:62:da:01:86:3d:21:22:34: 6d:b5:f0:54:f7:f8:bd:5d:88:e4:0d:56:30:6f:a3:52:47:5c: 65:f8:67:2e:6d:a4:5f:e6:f4:74:9e:39:18:48:d7:79:b1:c2: 0b:53:28:d6:72:97:3c:cb:d7:d4:3b:68:4a:0d:f4:87:ff:ac: 3a:ed:cd:f6:b0:85:eb:8a:12:5e:6d:2d:40:3a:7b:1d:eb:60: ae:ee:1d:29:dd:74:ba:45:35:38:b9:6e:f0:9d:3e:5c:75:29: 9c:e6:31:ce -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE Q0Y0RDExMC8GA1UEBRMoQTg0MjBFMEUyMDZFQjRFOTBDNTg3MjhERDQzRjc1MERD RkMzQ0M4NjAeFw0yNjA5MTUwODQxNThaFw0yNjA5MjIwODQxNThaMBgxFjAUBgNV BAMTDTZhYTkwNGQ2LWFkYzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/uBW20RB2K5x2G1SC61vefbACL2/2ECGMzhcbWU94fFNreEjxE49D2pIRsGkN MVde4uPu2w9ynCqmy+W8lzm0zioszQpHjIcwv8S5c4z82c4eArgWi6FfRiNGg9Xt AXJJQyDDl6mlSXWzzbYaQCpJ0O5/dNWzQNxwl6WmrmK642h8rv8GiELQEhLBSDzc yKDEOMhcwRjEDTQQXCfxJTHj+X4rAV9sgDsf69MLQsXXdef/MB3bkHZtJD//qPT2 IJ++gCWKxU5VP1H+3YUr9N13XgB5JdOj1wKe98UafAVZUxybpudRjJWwB061wm3J OxlB1OMsGv64aE+FkPsTbnOBAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUfDOgSsvG Dh/g9uJSUWci5XNculUwHwYDVR0jBBgwFoAUqEIODiButOkMWHKN1D91Dc/DzIYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURDRjREL0RCOTBFNDgwODQ5 RDExRjE5MjAzQjBCQjg4QTMwRkJDL3FFSU9EaUJ1dE9rTVdIS04xRDkxRGNfRHpJ WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcUVJT0RpQnV0T2tNV0hLTjFEOTFEY19EeklZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURD RjREL0RCOTBFNDgwODQ5RDExRjE5MjAzQjBCQjg4QTMwRkJDL3FFSU9EaUJ1dE9r TVdIS04xRDkxRGNfRHpJWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCcjwMy+EV1AoGF+/jh6eoP7fGfD039Vfx0yia3MZzC3rbd8xCOJbHZ+h9ivpeq n3LWOS/pzLE8uZvDGaTF3pL4T7mDccm90oeAbhRkJrn2QIcvnS/GXgoyDPhbqWnf FMBoQJJFM/KB0Eq1W89OPabaWF41U57zH2bJRA7Ydu5X66IFh2G7wtXjMDTDHIL7 5kZvQAR52Vs5PPsAYtoBhj0hIjRttfBU9/i9XYjkDVYwb6NSR1xl+GcubaRf5vR0 njkYSNd5scILUyjWcpc8y9fUO2hKDfSH/6w67c32sIXrihJebS1AOnsd62Cu7h0p 3XS6RTU4uW7wnT5cdSmc5jHO -----END CERTIFICATE-----Generated at Tue Sep 15 14:58:38 2026 by rpki-client