$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/a-Q-axOWQ8tMGebfcyO1A8STEds.mft File: a-Q-axOWQ8tMGebfcyO1A8STEds.mft (raw, json) Hash identifier: EB4XxBcATm6pZL7FuDKOXD2vU1owC5PX/0urp3R4YNk= Subject key identifier: 56:4E:E8:39:A5:83:6F:61:C4:72:C6:20:CC:89:07:C0:7F:1A:BA:6D Authority key identifier: 6B:E4:3E:6B:13:96:43:CB:4C:19:E6:DF:73:23:B5:03:C4:93:11:DB Certificate issuer: /CN=A91E8D27/serialNumber=6BE43E6B139643CB4C19E6DF7323B503C49311DB Certificate serial: 3508 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-Q-axOWQ8tMGebfcyO1A8STEds.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/a-Q-axOWQ8tMGebfcyO1A8STEds.mft Manifest number: 34E3 Signing time: Thu 10 Sep 2026 15:17:18 +0000 Manifest this update: Thu 10 Sep 2026 15:17:18 +0000 Manifest next update: Thu 17 Sep 2026 15:17:18 +0000 Files and hashes: 1: a-Q-axOWQ8tMGebfcyO1A8STEds.crl (hash: GlhviVLzI2aEQtfrM4Aj8geaIaHHvwEKPWJfIy7b08A=) 2: E63D6AB086EC11F19E006003A7EE528E.roa (hash: HA6O4500TdNqLPszScg0UgHEWNLVJDVH5xC0mHNZQLw=) 3: A634576635D511F1A68BE981A0833773.roa (hash: 4ZRG+jBKDkZrZQYJ33ftXyXhm7MnH5udmfkKK13Boew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/a-Q-axOWQ8tMGebfcyO1A8STEds.crl rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/a-Q-axOWQ8tMGebfcyO1A8STEds.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-Q-axOWQ8tMGebfcyO1A8STEds.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 15:17:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13576 (0x3508) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8D27, serialNumber=6BE43E6B139643CB4C19E6DF7323B503C49311DB Validity Not Before: Sep 10 15:17:18 2026 GMT Not After : Sep 17 15:17:18 2026 GMT Subject: CN=6aa2c9fe-78b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:04:77:45:49:e7:a8:89:18:03:2f:23:16:bc: 3c:49:81:1d:cf:fd:43:4e:73:0a:b4:e3:70:8f:bf: 89:bd:8a:58:34:76:56:06:5a:c2:15:f5:53:dd:43: 8f:d4:55:d5:b5:29:ff:8a:6f:2f:73:cd:23:d1:50: 90:f8:a1:e9:dc:c2:d5:70:85:a7:52:bb:19:be:6f: a4:41:6d:97:3a:de:b4:7a:9c:f2:10:e2:85:0f:dd: 3b:28:fa:5a:ad:4d:7c:9c:1a:62:cf:df:c0:cd:d1: 2a:fb:ce:f5:38:16:1f:41:a8:d7:79:02:0e:06:16: 4b:2f:4c:c7:92:e8:24:0d:23:c6:89:0b:71:6e:e9: 7e:ea:fe:b7:0d:2c:c4:02:88:dc:dc:f2:34:64:5d: 42:71:93:9f:49:23:83:0b:c0:52:a3:b1:c3:c0:9f: b1:83:4e:91:c9:ba:1e:7a:22:81:5b:7c:28:ec:a2: c8:96:c8:f6:af:c2:a5:3c:91:14:71:0b:9a:48:f0: 76:2b:0e:7f:d2:2c:61:fd:eb:18:42:56:6d:0b:1e: 1b:d2:19:44:bd:f3:e1:08:74:14:3c:37:a7:9a:ec: 5f:48:9c:78:a2:ab:53:85:f2:88:04:2d:96:4c:01: b8:99:19:d0:06:b9:fc:28:8c:f5:42:11:72:55:8b: ff:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:4E:E8:39:A5:83:6F:61:C4:72:C6:20:CC:89:07:C0:7F:1A:BA:6D X509v3 Authority Key Identifier: keyid:6B:E4:3E:6B:13:96:43:CB:4C:19:E6:DF:73:23:B5:03:C4:93:11:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/a-Q-axOWQ8tMGebfcyO1A8STEds.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-Q-axOWQ8tMGebfcyO1A8STEds.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/a-Q-axOWQ8tMGebfcyO1A8STEds.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:48:79:3d:f7:38:c5:d4:0b:e6:bf:ad:2d:23:2a:38:da:ab: b1:aa:3b:78:16:91:f9:5a:13:7f:c2:d8:94:f6:55:27:00:a2: e5:aa:4c:e1:8f:b9:32:77:14:62:63:c7:c6:04:0f:8d:8a:63: 3c:82:8c:6e:8f:56:fb:d8:83:cd:e9:f3:1f:a5:9f:fc:33:c1: c2:fa:35:8b:b7:0b:fc:4a:44:3c:2c:3b:3d:73:d6:cd:27:dc: 55:c7:00:4b:60:a1:c5:05:93:c1:cc:91:14:d7:55:e6:3f:25: 69:e9:57:09:70:1e:f8:55:b2:bb:69:f3:60:78:a4:db:98:62: 60:57:2e:7d:23:0f:40:c5:f2:eb:73:d7:58:56:cc:a9:b6:b3: 70:f5:8b:ba:f7:c7:df:94:17:b4:36:b5:5e:17:28:45:de:46: 9c:ff:4d:45:0f:70:af:1c:3e:a9:62:bd:a5:66:36:44:da:00: a1:96:90:b1:fe:c1:0e:45:ea:1d:78:0d:0c:9f:8a:65:ef:87: d8:ea:de:37:ad:fb:47:11:e1:3f:a8:b0:ee:a5:5e:aa:34:7a: d5:23:63:5f:8b:29:b8:40:d0:51:67:5e:ed:ab:41:ef:ed:ba: 72:d7:ba:2a:03:8e:e1:4d:0d:fc:72:48:fe:33:66:59:cb:5c: 03:7f:ea:d3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThEMjcxMTAvBgNVBAUTKDZCRTQzRTZCMTM5NjQzQ0I0QzE5RTZERjczMjNCNTAz QzQ5MzExREIwHhcNMjYwOTEwMTUxNzE4WhcNMjYwOTE3MTUxNzE4WjAYMRYwFAYD VQQDEw02YWEyYzlmZS03OGIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtAR3RUnnqIkYAy8jFrw8SYEdz/1DTnMKtONwj7+JvYpYNHZWBlrCFfVT3UOP 1FXVtSn/im8vc80j0VCQ+KHp3MLVcIWnUrsZvm+kQW2XOt60epzyEOKFD907KPpa rU18nBpiz9/AzdEq+871OBYfQajXeQIOBhZLL0zHkugkDSPGiQtxbul+6v63DSzE Aojc3PI0ZF1CcZOfSSODC8BSo7HDwJ+xg06RyboeeiKBW3wo7KLIlsj2r8KlPJEU cQuaSPB2Kw5/0ixh/esYQlZtCx4b0hlEvfPhCHQUPDenmuxfSJx4oqtThfKIBC2W TAG4mRnQBrn8KIz1QhFyVYv//QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFZO6Dml g29hxHLGIMyJB8B/GrptMB8GA1UdIwQYMBaAFGvkPmsTlkPLTBnm33MjtQPEkxHb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEQyNy9DMEM1ODA3MDQy RTkxMUUyOTc1MEEzMkUyOTc5QkIyMC9hLVEtYXhPV1E4dE1HZWJmY3lPMUE4U1RF ZHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2EtUS1heE9XUTh0TUdlYmZjeU8xQThTVEVkcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OEQyNy9DMEM1ODA3MDQyRTkxMUUyOTc1MEEzMkUyOTc5QkIyMC9hLVEtYXhPV1E4 dE1HZWJmY3lPMUE4U1RFZHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApUh5Pfc4xdQL5r+tLSMqONqrsao7eBaR+VoTf8LYlPZVJwCi5apM4Y+5MncU YmPHxgQPjYpjPIKMbo9W+9iDzenzH6Wf/DPBwvo1i7cL/EpEPCw7PXPWzSfcVccA S2ChxQWTwcyRFNdV5j8laelXCXAe+FWyu2nzYHik25hiYFcufSMPQMXy63PXWFbM qbazcPWLuvfH35QXtDa1XhcoRd5GnP9NRQ9wrxw+qWK9pWY2RNoAoZaQsf7BDkXq HXgNDJ+KZe+H2OreN637RxHhP6iw7qVeqjR61SNjX4spuEDQUWde7atB7+26cte6 KgOO4U0N/HJI/jNmWctcA3/q0w== -----END CERTIFICATE-----Generated at Thu Sep 10 20:39:00 2026 by rpki-client