$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.mft File: qX6qTW8VW40nxAro4yfZulLDS0I.mft (raw, json) Hash identifier: Ne2bD9x1f/Zn/Qj17BiRQWk0uZ16a7Du/hAx9S875iA= Subject key identifier: 22:24:B6:45:95:6F:F6:BF:0F:CD:86:C2:DE:AD:06:83:D8:75:46:1A Authority key identifier: A9:7E:AA:4D:6F:15:5B:8D:27:C4:0A:E8:E3:27:D9:BA:52:C3:4B:42 Certificate issuer: /CN=A91EB4AF/serialNumber=A97EAA4D6F155B8D27C40AE8E327D9BA52C34B42 Certificate serial: 045E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qX6qTW8VW40nxAro4yfZulLDS0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.mft Manifest number: 0427 Signing time: Mon 05 Oct 2026 00:27:25 +0000 Manifest this update: Mon 05 Oct 2026 00:27:24 +0000 Manifest next update: Mon 12 Oct 2026 00:27:24 +0000 Files and hashes: 1: qX6qTW8VW40nxAro4yfZulLDS0I.crl (hash: pqe7g80wEnHIy5qtEXWZ/YmXt3R1cU1MecO6EIf+obo=) 2: 595774341B6211F0B9733473C4F9AE02.roa (hash: TViW6+JPazKkRXhQ7ni+cLWTzOT4kOhtajYLtf39390=) 3: 93C2E76EBB5911F1868CC32E3F11F970.roa (hash: a6tFfULXfykTcwDjwd8eNo1nHn/T6rBEopD+4OtQw9s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.crl rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qX6qTW8VW40nxAro4yfZulLDS0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 00:27:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1118 (0x45e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB4AF, serialNumber=A97EAA4D6F155B8D27C40AE8E327D9BA52C34B42 Validity Not Before: Oct 5 00:27:24 2026 GMT Not After : Oct 12 00:27:24 2026 GMT Subject: CN=6ac2eeec-9adc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ad:0b:9f:21:d0:79:79:52:f6:20:bc:d6:c1: 36:59:3f:de:c4:83:59:3d:01:34:61:fc:d5:71:67: 38:65:93:f4:31:47:74:bb:aa:28:93:b2:27:28:f3: 0c:d5:6c:43:1d:89:b5:6a:75:45:6a:35:36:2c:3e: e1:5f:a8:5f:ca:02:7f:cf:51:8d:9e:8e:be:9b:6c: 0a:23:7c:5f:0f:ed:2f:09:81:82:d0:1e:2d:d4:2f: cb:02:80:49:b6:28:99:af:d1:f6:36:55:c4:0b:63: a7:02:4d:f1:71:ab:ec:9a:ac:6c:83:00:98:26:e3: 38:c1:d9:0e:ae:21:56:f5:4d:09:dc:fe:8d:1f:07: 9f:9a:4c:f0:98:da:d7:a9:64:e9:0e:47:a3:ce:e2: 9e:40:50:ac:c3:25:ad:42:2d:5e:ad:0c:d9:92:2c: cc:f3:79:45:18:ce:98:06:1b:65:25:b4:7d:ae:ec: d7:0e:dc:d5:0e:ba:bb:9f:89:90:43:66:a6:10:19: 7a:13:b4:08:9b:a7:ae:98:04:ce:cc:57:56:a0:3a: 4c:e3:a9:a6:f1:a8:32:f7:7e:11:83:10:ab:87:d2: 3b:5c:93:5e:35:81:d9:e6:af:75:42:13:12:85:60: 4c:7a:c3:01:19:5e:bd:9b:c9:f4:67:e8:7a:ba:52: f8:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:24:B6:45:95:6F:F6:BF:0F:CD:86:C2:DE:AD:06:83:D8:75:46:1A X509v3 Authority Key Identifier: keyid:A9:7E:AA:4D:6F:15:5B:8D:27:C4:0A:E8:E3:27:D9:BA:52:C3:4B:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qX6qTW8VW40nxAro4yfZulLDS0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:ff:62:4c:62:d2:d1:85:2f:27:89:94:df:61:c9:4c:1a:5c: e4:35:8b:66:d8:11:b0:7e:0e:9b:03:1f:df:7f:14:ea:3c:1c: 14:21:a5:6f:06:7a:3b:06:14:13:04:35:a5:28:36:bc:fc:0b: 90:27:63:11:0f:5a:6e:f1:1b:5f:d4:31:0c:27:8a:5a:6d:c1: cc:5f:74:33:f1:5c:73:6f:62:1a:1a:15:a8:c4:36:88:6e:8b: b6:a0:8b:0a:e8:fb:8f:92:0d:34:46:c5:96:46:c7:5c:74:89: c9:c5:93:3b:8f:a1:61:fa:e4:90:1f:7c:18:e4:f8:4f:0d:56: 46:c0:2b:15:d5:c5:d6:55:ca:08:a5:c1:d9:af:c4:8d:23:85: 50:ad:74:5c:15:ef:70:b3:71:07:08:cf:5b:f5:8f:35:e6:d2: 5a:59:c8:ae:dd:da:18:93:99:1e:06:e9:4d:c4:54:20:a1:85: 4c:fd:11:2d:7e:19:4f:39:e2:4e:a6:08:1f:97:39:61:b2:23: 7f:61:c9:d3:95:67:25:c6:68:c5:c6:7d:72:0a:18:ec:2f:18: 5d:f8:00:ed:6b:a1:74:67:55:06:8f:e9:e3:33:ff:87:bc:32: 6d:d9:a8:2b:5e:97:bd:bb:78:a8:20:85:31:a3:72:95:d4:ac: c1:50:95:0a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBF4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI0QUYxMTAvBgNVBAUTKEE5N0VBQTRENkYxNTVCOEQyN0M0MEFFOEUzMjdEOUJB NTJDMzRCNDIwHhcNMjYxMDA1MDAyNzI0WhcNMjYxMDEyMDAyNzI0WjAYMRYwFAYD VQQDEw02YWMyZWVlYy05YWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApK0LnyHQeXlS9iC81sE2WT/exINZPQE0YfzVcWc4ZZP0MUd0u6ook7InKPMM 1WxDHYm1anVFajU2LD7hX6hfygJ/z1GNno6+m2wKI3xfD+0vCYGC0B4t1C/LAoBJ tiiZr9H2NlXEC2OnAk3xcavsmqxsgwCYJuM4wdkOriFW9U0J3P6NHwefmkzwmNrX qWTpDkejzuKeQFCswyWtQi1erQzZkizM83lFGM6YBhtlJbR9ruzXDtzVDrq7n4mQ Q2amEBl6E7QIm6eumATOzFdWoDpM46mm8agy934RgxCrh9I7XJNeNYHZ5q91QhMS hWBMesMBGV69m8n0Z+h6ulL4OwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCIktkWV b/a/D82Gwt6tBoPYdUYaMB8GA1UdIwQYMBaAFKl+qk1vFVuNJ8QK6OMn2bpSw0tC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjRBRi9DQzdCMjU1QURD QTkxMUVDOTRFM0UwMjlDNEY5QUUwMi9xWDZxVFc4Vlc0MG54QXJvNHlmWnVsTERT MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FYNnFUVzhWVzQwbnhBcm80eWZadWxMRFMwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjRBRi9DQzdCMjU1QURDQTkxMUVDOTRFM0UwMjlDNEY5QUUwMi9xWDZxVFc4Vlc0 MG54QXJvNHlmWnVsTERTMEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXP9iTGLS0YUvJ4mU32HJTBpc5DWLZtgRsH4OmwMf338U6jwcFCGlbwZ6OwYU EwQ1pSg2vPwLkCdjEQ9abvEbX9QxDCeKWm3BzF90M/Fcc29iGhoVqMQ2iG6LtqCL Cuj7j5INNEbFlkbHXHSJycWTO4+hYfrkkB98GOT4Tw1WRsArFdXF1lXKCKXB2a/E jSOFUK10XBXvcLNxBwjPW/WPNebSWlnIrt3aGJOZHgbpTcRUIKGFTP0RLX4ZTzni TqYIH5c5YbIjf2HJ05VnJcZoxcZ9cgoY7C8YXfgA7WuhdGdVBo/p4zP/h7wybdmo K16Xvbt4qCCFMaNyldSswVCVCg== -----END CERTIFICATE-----Generated at Tue Oct 6 01:27:18 2026 by rpki-client