$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.mft File: q2JivH0C7BrUi3HamLc9IqNi2vA.mft (raw, json) Hash identifier: nfWDeCkY1F50aUdrlPIkG4GOSOP/LURkSnVmvbLXUdI= Subject key identifier: DD:38:F1:FE:1B:D8:F5:DC:06:E2:FA:D7:EE:9F:EF:BF:4C:8A:1A:A5 Authority key identifier: AB:62:62:BC:7D:02:EC:1A:D4:8B:71:DA:98:B7:3D:22:A3:62:DA:F0 Certificate issuer: /CN=A91E2454/serialNumber=AB6262BC7D02EC1AD48B71DA98B73D22A362DAF0 Certificate serial: 372B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.mft Manifest number: 363B Signing time: Sat 24 Oct 2026 14:28:55 +0000 Manifest this update: Sat 24 Oct 2026 14:28:54 +0000 Manifest next update: Sat 31 Oct 2026 14:28:54 +0000 Files and hashes: 1: q2JivH0C7BrUi3HamLc9IqNi2vA.crl (hash: 3rey6YfHOa7W/pPiomCgGibcH7VbtvQC3qtLoAarGyQ=) 2: 8207CCA0906C11EC86E8B711C4F9AE02.roa (hash: HGBUZghw2mrH37viSTYGdL7UxbtP3kpsrCzGnWhLnVU=) 3: F1F087928C6B11F0B1A50E82C4F9AE02.roa (hash: kuzwCvIHtKelM7oshMzAb2U462l4e0HmxA10PXja6PA=) 4: D4B25B928C6B11F09545B981C4F9AE02.roa (hash: rpLxYdKFNSJ5rCBHHzTbeOHhuwX5lGKEDVa6Y6/p+/g=) 5: 7F4D30ACB0CD11E58B55FC73C4F9AE02.roa (hash: N79DDK5pn6TCAon8GJdsX02x5/pCsRg1kmXulJOa3DU=) 6: 7D920C1AB0CD11E58B55FC73C4F9AE02.roa (hash: knSiwSZTuJB5L8civuaUh8rAh8cmbNdU18vutdd1ebk=) 7: 4BF67550A4C911E782854F50C4F9AE02.roa (hash: f3qU6tlwehhcmw+j9t9F4SExzXSKSjEABu7b7Oi3kuk=) 8: 4C9925F2A4C911E782854F50C4F9AE02.roa (hash: NUP0co51SrQ7MBIOUbm3rcePgeq0Qam5xEhiKSlEwl4=) 9: 4D5247EEA4C911E782854F50C4F9AE02.roa (hash: rEfB0wTEVedizbjd1aa4stNP7Lpi5g6RaGy1a4umZiM=) 10: 78123422B0CD11E58B55FC73C4F9AE02.roa (hash: w/xkPDWtvjzhfQW3Zf8fDbO/CqBdGqSzN3GtrP1PUo8=) 11: 7B938024B0CD11E58B55FC73C4F9AE02.roa (hash: /QQiHNO+P4zS7clMch+1xG2dmlltL/7vNQJGue0Q24E=) 12: 9C193BAC08C511EDBC862E48C4F9AE02.roa (hash: SJVE7ZBsoRSsliTmJf9TKg9PsayamV5jFN7WqlX3xvc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.crl rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 14:28:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14123 (0x372b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2454, serialNumber=AB6262BC7D02EC1AD48B71DA98B73D22A362DAF0 Validity Not Before: Oct 24 14:28:54 2026 GMT Not After : Oct 31 14:28:54 2026 GMT Subject: CN=6adcc0a7-a55f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:59:5e:7a:d8:da:1f:3f:8c:ae:79:62:46:24: ec:b7:2c:d3:dd:72:80:54:1b:8b:5b:4b:d3:77:82: 2f:28:55:40:82:e1:d5:eb:88:33:0c:ed:57:fb:5a: 03:7d:5f:f8:7a:ad:31:cb:a6:b8:98:ab:92:42:2d: 01:1f:3c:31:4e:d2:21:e2:6c:18:17:99:e9:f7:a1: ce:68:a8:f4:fa:ed:7e:07:ce:b8:e4:06:42:2a:4c: 63:9f:63:f1:f6:b9:29:69:63:4f:4c:7f:a2:41:25: f3:94:61:7c:a9:31:68:bf:1a:01:96:a8:f4:68:b0: 8f:4b:91:f5:df:ab:51:95:84:dc:02:d4:a4:06:40: a7:6c:05:7a:69:ff:c5:97:d3:03:aa:7d:81:29:49: a1:83:cf:3f:5a:ec:bf:d6:f9:90:45:04:df:a5:27: f1:ca:fb:4d:bc:d0:0e:4c:87:1e:93:6c:42:76:13: 9f:99:a6:f2:91:de:49:72:a2:5e:a0:6e:e3:96:45: 39:fc:e6:04:50:55:e0:28:9f:53:63:c6:d8:ba:02: 9d:e2:15:1b:f6:9b:83:e8:42:23:6d:f4:66:d6:01: 67:28:de:65:be:e8:53:39:25:42:06:c7:7d:d6:9b: 67:c5:5b:dd:b4:2b:0a:d0:86:c6:23:31:49:db:b0: 0a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:38:F1:FE:1B:D8:F5:DC:06:E2:FA:D7:EE:9F:EF:BF:4C:8A:1A:A5 X509v3 Authority Key Identifier: keyid:AB:62:62:BC:7D:02:EC:1A:D4:8B:71:DA:98:B7:3D:22:A3:62:DA:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:00:f1:91:38:11:fd:a3:1f:9d:27:c5:5c:51:fa:ac:4d:93: 2c:d7:58:0f:85:95:ab:28:c1:d0:15:8e:2f:00:1a:7e:db:fa: 6c:e4:36:68:3e:15:14:2d:f6:f2:81:88:d3:af:4e:7b:fe:40: f3:ae:4d:94:65:a1:68:13:cf:ac:84:69:91:8e:82:60:1f:8c: 88:02:63:4e:24:63:09:08:52:52:89:bb:b4:52:21:4a:d8:67: a1:7f:d5:54:76:fe:d1:7d:04:5b:29:21:20:22:e8:f4:60:03: b8:8f:9e:45:21:52:1c:61:79:8d:5b:de:14:a4:b2:30:26:a5: cb:5a:4c:27:00:28:aa:13:68:67:9c:4b:0f:af:e0:65:c9:cf: 87:50:fa:3e:67:7e:00:74:3d:ef:54:25:4e:f1:7f:d8:03:54: eb:8e:15:51:eb:cd:fb:35:0d:36:16:01:ce:ba:3e:df:29:38: ef:92:25:be:a9:be:4c:6b:12:1e:ac:46:38:8d:9a:e9:fe:ec: 30:cb:41:cd:8c:f5:59:ab:83:51:4b:77:bf:95:1c:f1:65:14: 6b:ee:46:b7:c2:30:5b:f2:08:17:ce:e5:ca:87:26:21:62:4a: cf:f4:9c:40:93:d3:ec:d6:2e:bf:97:3f:7c:b9:1b:02:ba:e1: 82:cc:d4:56 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNyswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI0NTQxMTAvBgNVBAUTKEFCNjI2MkJDN0QwMkVDMUFENDhCNzFEQTk4QjczRDIy QTM2MkRBRjAwHhcNMjYxMDI0MTQyODU0WhcNMjYxMDMxMTQyODU0WjAYMRYwFAYD VQQDEw02YWRjYzBhNy1hNTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+1leetjaHz+MrnliRiTstyzT3XKAVBuLW0vTd4IvKFVAguHV64gzDO1X+1oD fV/4eq0xy6a4mKuSQi0BHzwxTtIh4mwYF5np96HOaKj0+u1+B8645AZCKkxjn2Px 9rkpaWNPTH+iQSXzlGF8qTFovxoBlqj0aLCPS5H136tRlYTcAtSkBkCnbAV6af/F l9MDqn2BKUmhg88/Wuy/1vmQRQTfpSfxyvtNvNAOTIcek2xCdhOfmabykd5JcqJe oG7jlkU5/OYEUFXgKJ9TY8bYugKd4hUb9puD6EIjbfRm1gFnKN5lvuhTOSVCBsd9 1ptnxVvdtCsK0IbGIzFJ27AKRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN048f4b 2PXcBuL61+6f779MihqlMB8GA1UdIwQYMBaAFKtiYrx9Auwa1Itx2pi3PSKjYtrw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjQ1NC9ENEMzMEI0MjFE ODcxMUUyQTE5ODIyRTAwOEIwMkNEMi9xMkppdkgwQzdCclVpM0hhbUxjOUlxTmky dkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3EySml2SDBDN0JyVWkzSGFtTGM5SXFOaTJ2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjQ1NC9ENEMzMEI0MjFEODcxMUUyQTE5ODIyRTAwOEIwMkNEMi9xMkppdkgwQzdC clVpM0hhbUxjOUlxTmkydkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeQDxkTgR/aMfnSfFXFH6rE2TLNdYD4WVqyjB0BWOLwAaftv6bOQ2aD4VFC32 8oGI069Oe/5A865NlGWhaBPPrIRpkY6CYB+MiAJjTiRjCQhSUom7tFIhSthnoX/V VHb+0X0EWykhICLo9GADuI+eRSFSHGF5jVveFKSyMCaly1pMJwAoqhNoZ5xLD6/g ZcnPh1D6Pmd+AHQ971QlTvF/2ANU644VUevN+zUNNhYBzro+3yk475Ilvqm+TGsS HqxGOI2a6f7sMMtBzYz1WauDUUt3v5Uc8WUUa+5Gt8IwW/IIF87lyocmIWJKz/Sc QJPT7NYuv5c/fLkbArrhgszUVg== -----END CERTIFICATE-----Generated at Sun Oct 25 01:03:22 2026 by rpki-client