$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E7008/147EA740947111F1B0693F265C11F970/Q1NWydRSZtWy2PTNSh7n5ijiMCM.mft File: Q1NWydRSZtWy2PTNSh7n5ijiMCM.mft (raw, json) Hash identifier: rhFf1KYBgTj1ZcHfd5+pQO6KuGbrmby0NuuQmFHoNwo= Subject key identifier: 14:AD:1A:DF:D6:E4:FC:79:BD:D9:E1:21:33:48:C0:F1:3F:55:44:08 Authority key identifier: 43:53:56:C9:D4:52:66:D5:B2:D8:F4:CD:4A:1E:E7:E6:28:E2:30:23 Certificate issuer: /CN=A91E7008/serialNumber=435356C9D45266D5B2D8F4CD4A1EE7E628E23023 Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q1NWydRSZtWy2PTNSh7n5ijiMCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7008/147EA740947111F1B0693F265C11F970/Q1NWydRSZtWy2PTNSh7n5ijiMCM.mft Manifest number: 25 Signing time: Sun 11 Oct 2026 09:31:19 +0000 Manifest this update: Sun 11 Oct 2026 09:31:19 +0000 Manifest next update: Sun 18 Oct 2026 09:31:19 +0000 Files and hashes: 1: Q1NWydRSZtWy2PTNSh7n5ijiMCM.crl (hash: UUxFmn6KU6Ww/jGuSyzD54XIie18nvWF93piSSFVQCI=) 2: FA4EC88A947211F197C7FC845D11F970.roa (hash: 4lmfoMYcuUJFqzRnvNveukMNhcL+UIseWeLYiTeF9Ik=) 3: A31A6190947D11F1B45BAF1C6111F970.roa (hash: 6yl7AmTUhpqHzdSta5eTWxGC4sRi2YI3JgFhqBK5YDE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7008/147EA740947111F1B0693F265C11F970/Q1NWydRSZtWy2PTNSh7n5ijiMCM.crl rsync://rpki.apnic.net/member_repository/A91E7008/147EA740947111F1B0693F265C11F970/Q1NWydRSZtWy2PTNSh7n5ijiMCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q1NWydRSZtWy2PTNSh7n5ijiMCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 09:31:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7008, serialNumber=435356C9D45266D5B2D8F4CD4A1EE7E628E23023 Validity Not Before: Oct 11 09:31:19 2026 GMT Not After : Oct 18 09:31:19 2026 GMT Subject: CN=6acb5767-5447 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:b8:ea:f0:57:15:72:8c:ab:3e:94:54:d6:ba: 4c:ad:7e:13:9f:d4:31:93:54:14:9a:2f:c9:89:ea: e6:56:9b:84:1f:b8:b4:eb:49:13:ee:27:7c:c2:a1: 41:de:eb:d3:85:6e:7a:6c:12:f7:bc:97:2b:a6:1c: 43:97:a6:7d:d9:be:14:7c:4b:4c:bb:3d:4f:05:72: 0c:fb:c5:2c:1f:54:a3:62:62:08:b8:be:ad:cc:12: f3:12:63:ef:4f:28:77:79:d3:de:b4:62:44:54:cd: bd:ad:b0:ce:1a:ee:d2:2c:e0:5a:d2:ee:7c:f8:69: d5:9b:14:38:5b:3d:d7:cd:52:72:8b:7f:24:2a:09: 89:58:bd:d1:dc:49:61:15:19:1c:8c:da:56:27:a4: dc:07:4a:55:2b:aa:66:19:21:80:1b:c7:a7:dd:57: 85:7a:b5:ac:a2:53:0e:9a:9a:6f:bc:19:f8:20:aa: 51:17:e0:a2:78:cf:3f:86:f4:a3:44:63:76:bc:ee: d5:65:54:9b:55:4c:f4:21:cd:a2:f6:26:d7:dc:cc: 19:31:4a:49:40:c2:99:41:5c:f9:a8:db:1e:2d:5e: 21:00:2c:57:0f:81:27:48:4f:8f:e0:4c:a6:af:d7: 95:50:51:19:d1:87:d7:94:57:bb:85:39:ad:02:88: 36:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:AD:1A:DF:D6:E4:FC:79:BD:D9:E1:21:33:48:C0:F1:3F:55:44:08 X509v3 Authority Key Identifier: keyid:43:53:56:C9:D4:52:66:D5:B2:D8:F4:CD:4A:1E:E7:E6:28:E2:30:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7008/147EA740947111F1B0693F265C11F970/Q1NWydRSZtWy2PTNSh7n5ijiMCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q1NWydRSZtWy2PTNSh7n5ijiMCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7008/147EA740947111F1B0693F265C11F970/Q1NWydRSZtWy2PTNSh7n5ijiMCM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:5d:35:01:2e:cb:b5:67:95:67:b5:d3:92:2d:03:2f:e1:ba: 21:f5:53:8c:f4:dd:ff:90:21:1b:61:b3:92:2b:77:cb:89:3b: 46:7f:b1:d5:b8:4e:e2:0d:87:b0:78:36:a3:bd:7f:e0:6f:fb: 11:01:0c:ee:15:b9:f5:bd:c5:dc:43:0a:89:4f:70:ce:a8:89: c2:a7:38:3b:2d:f9:f5:9f:44:19:bd:0c:e5:53:82:21:bc:6e: 4b:b9:ef:0f:65:48:66:2c:ab:e5:b4:b3:49:70:26:af:6a:dd: 71:05:72:52:e2:4d:ce:2d:10:f5:27:49:b0:30:8d:c9:87:7d: 9c:0f:a5:e1:cc:ff:49:a3:b1:13:55:70:1f:2d:af:d1:11:db: ac:7a:2e:a7:b2:ec:14:85:bc:9d:17:60:6f:5d:37:31:d3:d0: df:32:1a:8c:37:67:40:81:70:64:02:e4:27:bd:7b:be:d6:23: fd:57:5b:18:8d:a5:71:5f:a8:d8:ee:2f:9c:f8:cf:66:a8:a2: f8:da:75:66:b7:f8:54:f0:90:75:c1:75:1d:54:90:6c:ce:05: 17:af:54:8b:51:d4:90:b2:4f:d6:2a:cd:f7:f0:11:9a:2f:e0: 4f:2b:13:83:d2:d1:b2:66:ee:21:79:ff:dd:f6:60:00:e1:9c: 5f:51:fe:91 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NzAwODExMC8GA1UEBRMoNDM1MzU2QzlENDUyNjZENUIyRDhGNENENEExRUU3RTYy OEUyMzAyMzAeFw0yNjEwMTEwOTMxMTlaFw0yNjEwMTgwOTMxMTlaMBgxFjAUBgNV BAMTDTZhY2I1NzY3LTU0NDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDmuOrwVxVyjKs+lFTWukytfhOf1DGTVBSaL8mJ6uZWm4QfuLTrSRPuJ3zCoUHe 69OFbnpsEve8lyumHEOXpn3ZvhR8S0y7PU8Fcgz7xSwfVKNiYgi4vq3MEvMSY+9P KHd50960YkRUzb2tsM4a7tIs4FrS7nz4adWbFDhbPdfNUnKLfyQqCYlYvdHcSWEV GRyM2lYnpNwHSlUrqmYZIYAbx6fdV4V6tayiUw6amm+8GfggqlEX4KJ4zz+G9KNE Y3a87tVlVJtVTPQhzaL2JtfczBkxSklAwplBXPmo2x4tXiEALFcPgSdIT4/gTKav 15VQURnRh9eUV7uFOa0CiDZpAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUFK0a39bk /Hm92eEhM0jA8T9VRAgwHwYDVR0jBBgwFoAUQ1NWydRSZtWy2PTNSh7n5ijiMCMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU3MDA4LzE0N0VBNzQwOTQ3 MTExRjFCMDY5M0YyNjVDMTFGOTcwL1ExTld5ZFJTWnRXeTJQVE5TaDduNWlqaU1D TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUTFOV3lkUlNadFd5MlBUTlNoN241aWppTUNNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU3 MDA4LzE0N0VBNzQwOTQ3MTExRjFCMDY5M0YyNjVDMTFGOTcwL1ExTld5ZFJTWnRX eTJQVE5TaDduNWlqaU1DTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBbXTUBLsu1Z5VntdOSLQMv4boh9VOM9N3/kCEbYbOSK3fLiTtGf7HVuE7iDYew eDajvX/gb/sRAQzuFbn1vcXcQwqJT3DOqInCpzg7Lfn1n0QZvQzlU4IhvG5Lue8P ZUhmLKvltLNJcCavat1xBXJS4k3OLRD1J0mwMI3Jh32cD6XhzP9Jo7ETVXAfLa/R Edusei6nsuwUhbydF2BvXTcx09DfMhqMN2dAgXBkAuQnvXu+1iP9V1sYjaVxX6jY 7i+c+M9mqKL42nVmt/hU8JB1wXUdVJBszgUXr1SLUdSQsk/WKs338BGaL+BPKxOD 0tGyZu4hef/d9mAA4ZxfUf6R -----END CERTIFICATE-----Generated at Mon Oct 12 23:05:12 2026 by rpki-client