$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft File: QLjSLvI7N7C55T88ThDWrj64qZ8.mft (raw, json) Hash identifier: poHoDASRaZGpc++ARU5Do7ZWL/hZvbMt3Y0vovtfxEU= Subject key identifier: 0D:B9:E6:2B:78:41:68:BA:DA:F7:A1:E7:6B:B6:67:CB:17:45:F6:E5 Authority key identifier: 40:B8:D2:2E:F2:3B:37:B0:B9:E5:3F:3C:4E:10:D6:AE:3E:B8:A9:9F Certificate issuer: /CN=A91E689D/serialNumber=40B8D22EF23B37B0B9E53F3C4E10D6AE3EB8A99F Certificate serial: 3590 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLjSLvI7N7C55T88ThDWrj64qZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft Manifest number: 3587 Signing time: Mon 28 Sep 2026 15:01:21 +0000 Manifest this update: Mon 28 Sep 2026 15:01:21 +0000 Manifest next update: Mon 05 Oct 2026 15:01:21 +0000 Files and hashes: 1: QLjSLvI7N7C55T88ThDWrj64qZ8.crl (hash: g6eBD4ScjA/hwZlraa7HK6ClDzI70iTsEWX5UeCmYQM=) 2: v1xtMR54ekuDn4r5wtgrvOTr2YE.asa (hash: kV7twXJrtxJmXDA+tl8S41Q4+TVoeE0RO87ddCo+mxk=) 3: 3773AC0C8B6111EFA3A49037C4F9AE02.roa (hash: uzaZKpbjTrWsFfOiIa8WfR03ueqsK9oa9a46XDa7tCk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.crl rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLjSLvI7N7C55T88ThDWrj64qZ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 15:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13712 (0x3590) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E689D, serialNumber=40B8D22EF23B37B0B9E53F3C4E10D6AE3EB8A99F Validity Not Before: Sep 28 15:01:21 2026 GMT Not After : Oct 5 15:01:21 2026 GMT Subject: CN=6aba8141-d2a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2b:b2:a8:15:4c:05:f4:4c:83:95:72:1b:0a: 99:33:34:72:ed:b5:b5:a1:83:42:92:4d:8a:9c:db: 0d:34:55:7b:0f:f6:ed:91:87:e2:08:65:8b:02:9d: 9d:96:00:92:92:67:f5:93:32:5f:b0:a8:f0:29:02: 5e:62:2e:c0:27:4a:40:2b:a9:ec:f9:51:31:ba:5b: ee:b4:fc:a4:0f:a3:e6:bf:c5:0a:3d:12:d7:b4:63: ad:01:d2:57:48:a4:62:71:76:46:95:dd:d1:34:9b: e5:7d:8c:fe:14:d2:c9:44:fd:b4:8b:b1:e0:54:19: b2:8f:e5:e3:d2:6f:48:74:c9:b6:20:87:5a:2a:b9: 12:d6:d5:d7:1a:d8:47:1b:ac:ae:8a:14:44:44:cc: bf:9a:e7:9c:52:10:60:fa:2c:6f:50:43:37:65:9f: da:7f:ae:63:6d:6e:7c:ec:17:0a:18:c9:1e:45:9a: 4c:43:19:58:a6:eb:0b:c0:19:38:5d:14:f6:57:27: a0:5c:e6:98:02:3f:12:ab:99:94:50:3b:6c:ee:80: 43:43:23:8a:ad:67:71:a1:95:87:4d:c9:a5:f5:e3: aa:6d:70:1e:95:d8:c8:51:18:43:aa:04:e0:f1:a0: 34:1b:54:93:57:b4:5e:b8:51:fc:9c:48:e6:d2:e4: 77:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:B9:E6:2B:78:41:68:BA:DA:F7:A1:E7:6B:B6:67:CB:17:45:F6:E5 X509v3 Authority Key Identifier: keyid:40:B8:D2:2E:F2:3B:37:B0:B9:E5:3F:3C:4E:10:D6:AE:3E:B8:A9:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLjSLvI7N7C55T88ThDWrj64qZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:33:7f:33:9e:a3:a4:91:a7:0d:92:4d:fa:77:e2:21:fb:2a: ab:7d:40:71:f7:54:f9:f4:e1:c2:00:61:7c:6b:b3:c7:3d:25: 21:b7:41:66:59:73:5e:ec:f3:fe:77:82:84:ac:dd:eb:89:dd: ae:eb:f2:e8:40:35:2b:b0:23:27:ac:ee:b2:90:80:1d:f8:3e: cb:22:43:a2:36:d6:9f:4a:c6:1e:50:9c:f7:62:56:5e:bb:b2: ed:86:99:c6:38:ec:5d:f5:b0:90:3c:c7:52:e5:fd:85:86:b2: 35:de:b7:89:69:20:af:93:5c:36:ef:90:c9:33:44:4f:28:e8: a9:7d:98:16:77:63:1d:e6:53:fd:d8:a7:9a:12:f6:d5:7e:60: f1:c6:ed:0e:62:4d:b6:9b:0d:8e:b5:0b:69:ed:36:55:d9:e3: 63:f2:c1:9b:73:24:6a:50:2c:18:a1:49:b0:08:c7:b7:93:79: 4a:77:bb:14:ce:62:1a:73:0f:53:72:e6:d2:2c:3b:b4:a9:8c: 24:15:57:65:1e:09:71:72:d4:52:57:80:2a:79:19:35:06:42: 07:66:bc:e6:bf:98:8d:0f:49:cb:85:0e:87:3d:f7:d9:83:b7: 80:83:83:a9:24:e1:87:ba:7b:72:d2:9b:f5:15:96:50:02:fd: 1e:c5:ee:20 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTY4OUQxMTAvBgNVBAUTKDQwQjhEMjJFRjIzQjM3QjBCOUU1M0YzQzRFMTBENkFF M0VCOEE5OUYwHhcNMjYwOTI4MTUwMTIxWhcNMjYxMDA1MTUwMTIxWjAYMRYwFAYD VQQDEw02YWJhODE0MS1kMmEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwiuyqBVMBfRMg5VyGwqZMzRy7bW1oYNCkk2KnNsNNFV7D/btkYfiCGWLAp2d lgCSkmf1kzJfsKjwKQJeYi7AJ0pAK6ns+VExulvutPykD6Pmv8UKPRLXtGOtAdJX SKRicXZGld3RNJvlfYz+FNLJRP20i7HgVBmyj+Xj0m9IdMm2IIdaKrkS1tXXGthH G6yuihRERMy/muecUhBg+ixvUEM3ZZ/af65jbW587BcKGMkeRZpMQxlYpusLwBk4 XRT2VyegXOaYAj8Sq5mUUDts7oBDQyOKrWdxoZWHTcml9eOqbXAeldjIURhDqgTg 8aA0G1STV7ReuFH8nEjm0uR3UwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA255it4 QWi62veh52u2Z8sXRfblMB8GA1UdIwQYMBaAFEC40i7yOzewueU/PE4Q1q4+uKmf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjg5RC9DN0M2M0RBODFE OUUxMUUyODNDRUZBOEUwOEIwMkNEMi9RTGpTTHZJN043QzU1VDg4VGhEV3JqNjRx WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FMalNMdkk3TjdDNTVUODhUaERXcmo2NHFaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Njg5RC9DN0M2M0RBODFEOUUxMUUyODNDRUZBOEUwOEIwMkNEMi9RTGpTTHZJN043 QzU1VDg4VGhEV3JqNjRxWjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAujN/M56jpJGnDZJN+nfiIfsqq31AcfdU+fThwgBhfGuzxz0lIbdBZllzXuzz /neChKzd64ndruvy6EA1K7AjJ6zuspCAHfg+yyJDojbWn0rGHlCc92JWXruy7YaZ xjjsXfWwkDzHUuX9hYayNd63iWkgr5NcNu+QyTNETyjoqX2YFndjHeZT/dinmhL2 1X5g8cbtDmJNtpsNjrULae02VdnjY/LBm3MkalAsGKFJsAjHt5N5Sne7FM5iGnMP U3Lm0iw7tKmMJBVXZR4JcXLUUleAKnkZNQZCB2a85r+YjQ9Jy4UOhz332YO3gIOD qSThh7p7ctKb9RWWUAL9HsXuIA== -----END CERTIFICATE-----Generated at Mon Sep 28 19:32:29 2026 by rpki-client