$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E3791/07F37F1AB1AD11F1B4E597013411F970/QPGWvYlA2WRWIZehtrGWWT8HgO8.mft File: QPGWvYlA2WRWIZehtrGWWT8HgO8.mft (raw, json) Hash identifier: 5jvejFR+8iPkV8mWbcXbeu77cWTniq8WzjfDwRX4pb0= Subject key identifier: 0B:B2:46:82:C6:0F:AB:B5:BC:EB:53:C4:F9:33:B0:EB:A4:02:4D:28 Authority key identifier: 40:F1:96:BD:89:40:D9:64:56:21:97:A1:B6:B1:96:59:3F:07:80:EF Certificate issuer: /CN=A91E3791/serialNumber=40F196BD8940D964562197A1B6B196593F0780EF Certificate serial: 0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QPGWvYlA2WRWIZehtrGWWT8HgO8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3791/07F37F1AB1AD11F1B4E597013411F970/QPGWvYlA2WRWIZehtrGWWT8HgO8.mft Manifest number: 0D Signing time: Mon 05 Oct 2026 09:40:34 +0000 Manifest this update: Mon 05 Oct 2026 09:40:33 +0000 Manifest next update: Mon 12 Oct 2026 09:40:33 +0000 Files and hashes: 1: QPGWvYlA2WRWIZehtrGWWT8HgO8.crl (hash: yeJz501IOCtylq7HbNN4OV0jsF8Sej0OJ1mX9Jl4m6Q=) 2: AEF436AEB32111F18FC19D146811F970.roa (hash: hufOxBTDlkt33wKsmT+nceMtRqoSaAfYTZBo3yTM45U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3791/07F37F1AB1AD11F1B4E597013411F970/QPGWvYlA2WRWIZehtrGWWT8HgO8.crl rsync://rpki.apnic.net/member_repository/A91E3791/07F37F1AB1AD11F1B4E597013411F970/QPGWvYlA2WRWIZehtrGWWT8HgO8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QPGWvYlA2WRWIZehtrGWWT8HgO8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 09:40:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14 (0xe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3791, serialNumber=40F196BD8940D964562197A1B6B196593F0780EF Validity Not Before: Oct 5 09:40:33 2026 GMT Not After : Oct 12 09:40:33 2026 GMT Subject: CN=6ac37091-ea09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ab:ff:95:46:e8:bd:61:65:0a:71:60:6e:e8: 3d:7e:ff:22:fa:6e:e1:1f:8a:3e:01:b2:7e:6f:c8: 46:43:71:02:73:92:9f:97:df:37:dc:bf:fc:da:1b: 2d:c5:ee:ba:0c:b9:d1:ac:67:ae:25:ff:c6:2f:50: dd:fd:67:0e:12:f0:98:a9:7f:f4:ed:7d:6c:c0:3c: 4e:04:5d:9d:04:cc:48:be:0c:61:da:17:dc:09:14: 8a:6f:c2:78:cd:88:d1:b4:90:49:8c:6b:12:39:4e: 00:2a:33:85:38:6d:25:54:63:88:40:90:83:00:1c: cf:16:2d:20:35:78:97:76:2f:30:9d:2e:cc:a3:3b: 1d:9f:eb:24:54:c6:78:a4:5b:fa:9b:76:aa:12:31: 3f:51:98:51:c3:bc:df:8b:52:81:67:e6:03:16:51: 21:53:54:8b:68:55:23:52:51:69:6e:35:65:d2:1e: 32:4b:55:e0:10:c6:a1:fa:45:50:8b:fb:95:86:43: e2:1f:f7:16:f6:b8:0d:11:e7:4f:cf:20:41:51:82: 0f:15:d0:aa:60:67:dd:24:95:b0:9b:af:94:f3:4e: 9d:38:e6:f3:2d:dd:77:14:e5:ed:73:16:73:68:d9: bd:82:05:27:fe:cf:3e:9d:35:eb:35:e1:5e:b5:6e: 10:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:B2:46:82:C6:0F:AB:B5:BC:EB:53:C4:F9:33:B0:EB:A4:02:4D:28 X509v3 Authority Key Identifier: keyid:40:F1:96:BD:89:40:D9:64:56:21:97:A1:B6:B1:96:59:3F:07:80:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3791/07F37F1AB1AD11F1B4E597013411F970/QPGWvYlA2WRWIZehtrGWWT8HgO8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QPGWvYlA2WRWIZehtrGWWT8HgO8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3791/07F37F1AB1AD11F1B4E597013411F970/QPGWvYlA2WRWIZehtrGWWT8HgO8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:5e:f0:d8:09:ec:3d:e5:6a:08:f5:9a:74:3a:bc:0a:80:28: 0e:1b:d5:d0:35:23:11:79:f1:4d:0c:51:1d:00:e7:53:f8:54: be:c8:4d:ff:ae:d6:41:dd:cf:c6:8f:ad:87:c8:15:27:12:2a: c0:2c:88:e8:25:e6:90:ef:40:6f:fc:31:d5:1b:fb:15:dd:ef: 4a:95:ed:66:e9:7b:08:2c:3c:1f:b7:1f:d5:33:f3:e9:1f:78: 21:65:58:ad:5e:c6:70:3a:98:50:9c:c0:26:d6:4f:85:f0:f7: e8:14:d8:a7:43:79:24:53:c6:41:48:33:d3:5c:b5:eb:6a:22: 99:6d:7d:8a:e7:78:1d:eb:6a:1e:dc:92:6d:73:8c:75:d5:42: 42:2c:33:63:b7:5c:38:93:1b:22:47:9c:32:d5:72:bc:a0:fd: ad:e2:2a:c7:2f:7d:ea:6e:7c:32:24:ef:0f:a1:d6:08:95:b3: 47:3a:80:3d:cf:7b:d3:b1:15:ce:f5:de:a0:87:f7:8b:f1:86: 13:95:49:0a:33:a8:ba:3c:b1:09:66:7f:0b:b6:87:a1:8f:35: ec:b0:e7:f5:d6:d1:c7:10:f2:82:02:98:25:dd:d0:58:b7:b9: 05:9e:be:d6:79:04:da:d2:32:f3:8f:85:a7:68:27:bf:df:7b: db:a5:ac:df -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF Mzc5MTExMC8GA1UEBRMoNDBGMTk2QkQ4OTQwRDk2NDU2MjE5N0ExQjZCMTk2NTkz RjA3ODBFRjAeFw0yNjEwMDUwOTQwMzNaFw0yNjEwMTIwOTQwMzNaMBgxFjAUBgNV BAMTDTZhYzM3MDkxLWVhMDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXq/+VRui9YWUKcWBu6D1+/yL6buEfij4Bsn5vyEZDcQJzkp+X3zfcv/zaGy3F 7roMudGsZ64l/8YvUN39Zw4S8Jipf/TtfWzAPE4EXZ0EzEi+DGHaF9wJFIpvwnjN iNG0kEmMaxI5TgAqM4U4bSVUY4hAkIMAHM8WLSA1eJd2LzCdLsyjOx2f6yRUxnik W/qbdqoSMT9RmFHDvN+LUoFn5gMWUSFTVItoVSNSUWluNWXSHjJLVeAQxqH6RVCL +5WGQ+If9xb2uA0R50/PIEFRgg8V0KpgZ90klbCbr5TzTp045vMt3XcU5e1zFnNo 2b2CBSf+zz6dNes14V61bhD9AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUC7JGgsYP q7W861PE+TOw66QCTSgwHwYDVR0jBBgwFoAUQPGWvYlA2WRWIZehtrGWWT8HgO8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUzNzkxLzA3RjM3RjFBQjFB RDExRjFCNEU1OTcwMTM0MTFGOTcwL1FQR1d2WWxBMldSV0laZWh0ckdXV1Q4SGdP OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUVBHV3ZZbEEyV1JXSVplaHRyR1dXVDhIZ084LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUz NzkxLzA3RjM3RjFBQjFBRDExRjFCNEU1OTcwMTM0MTFGOTcwL1FQR1d2WWxBMldS V0laZWh0ckdXV1Q4SGdPOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQDBXvDYCew95WoI9Zp0OrwKgCgOG9XQNSMRefFNDFEdAOdT+FS+yE3/rtZB3c/G j62HyBUnEirALIjoJeaQ70Bv/DHVG/sV3e9Kle1m6XsILDwftx/VM/PpH3ghZVit XsZwOphQnMAm1k+F8PfoFNinQ3kkU8ZBSDPTXLXraiKZbX2K53gd62oe3JJtc4x1 1UJCLDNjt1w4kxsiR5wy1XK8oP2t4irHL33qbnwyJO8PodYIlbNHOoA9z3vTsRXO 9d6gh/eL8YYTlUkKM6i6PLEJZn8LtoehjzXssOf11tHHEPKCApgl3dBYt7kFnr7W eQTa0jLzj4WnaCe/33vbpazf -----END CERTIFICATE-----Generated at Wed Oct 7 04:16:25 2026 by rpki-client