$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.mft File: QSPpAOai7I_ptdcDt5KA7yFAfIE.mft (raw, json) Hash identifier: 34QpROxh82Zw8iIov/yv/w7zJicfRHYVihYFwk4hMLE= Subject key identifier: 14:6F:4E:07:5F:3A:7B:34:01:A8:9B:A2:0A:D4:2C:06:05:15:80:58 Authority key identifier: 41:23:E9:00:E6:A2:EC:8F:E9:B5:D7:03:B7:92:80:EF:21:40:7C:81 Certificate issuer: /CN=A91F3B2E/serialNumber=4123E900E6A2EC8FE9B5D703B79280EF21407C81 Certificate serial: 02D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSPpAOai7I_ptdcDt5KA7yFAfIE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.mft Manifest number: 02B1 Signing time: Mon 05 Oct 2026 02:04:15 +0000 Manifest this update: Mon 05 Oct 2026 02:04:14 +0000 Manifest next update: Mon 12 Oct 2026 02:04:14 +0000 Files and hashes: 1: QSPpAOai7I_ptdcDt5KA7yFAfIE.crl (hash: gy1Hq8uG1q03A8nI8STUBke6E+DN2GHGz+A5K2J0ehE=) 2: 9E1DAA4A7D6B11F1802936357FA30FBC.roa (hash: Hsov6BU0z8az1Wr0ISWSrVfJM+rDAtlUR7qSGNNPaWs=) 3: A91AF6A8CE7811EF89FA3944C4F9AE02.roa (hash: fNeBh4F/Z5Lr0cdIogNFqAUQL3+lXFo8GVNnYQF5cVg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.crl rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSPpAOai7I_ptdcDt5KA7yFAfIE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 02:04:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 720 (0x2d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3B2E, serialNumber=4123E900E6A2EC8FE9B5D703B79280EF21407C81 Validity Not Before: Oct 5 02:04:14 2026 GMT Not After : Oct 12 02:04:14 2026 GMT Subject: CN=6ac3059f-4da9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:64:fc:15:1b:ab:0d:0c:5a:a9:26:61:33:66: 1e:ec:d6:4d:2a:56:f3:1f:28:4c:2c:1f:fb:56:42: 9e:57:b5:3c:9c:c9:79:1a:e8:07:47:70:3d:41:10: 6e:37:b0:6c:d7:c6:42:17:b3:7c:b5:b7:d3:e7:ea: 3b:9d:22:96:05:3f:c4:aa:cc:36:97:39:79:30:c1: 2e:44:89:c3:52:9e:26:48:5f:77:79:e6:bf:7d:3d: fb:7d:5b:18:5d:f6:d3:f4:92:79:cf:c6:3c:16:6a: d0:0a:08:37:de:c4:eb:d1:d2:05:d3:e6:29:2e:7c: a3:73:16:c6:41:e6:07:70:e4:8a:fe:51:ef:f8:63: ff:fb:73:a7:ce:26:58:f4:d9:75:da:52:c3:b9:b1: b4:f6:33:8e:25:20:0b:e8:6e:17:e8:98:c9:cb:29: 78:4b:20:e3:0a:0e:36:06:df:63:41:e5:c7:f3:60: 7e:f7:cf:a7:b6:71:35:49:5b:17:9f:38:6a:67:31: c2:39:82:cd:9b:78:02:e0:74:1f:ed:cc:36:67:d8: eb:ef:04:b3:a1:73:db:2a:8e:90:8b:1d:3b:e7:b9: c1:26:b6:c0:df:80:c2:54:58:17:f6:ee:a0:4f:95: 65:03:55:bc:fd:96:53:de:ec:86:30:97:f8:1c:1e: c2:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:6F:4E:07:5F:3A:7B:34:01:A8:9B:A2:0A:D4:2C:06:05:15:80:58 X509v3 Authority Key Identifier: keyid:41:23:E9:00:E6:A2:EC:8F:E9:B5:D7:03:B7:92:80:EF:21:40:7C:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSPpAOai7I_ptdcDt5KA7yFAfIE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:c5:2a:28:fc:90:75:78:c0:3f:32:bc:02:7e:db:26:d0:b4: 33:35:92:43:7d:0c:21:06:89:2b:f0:6c:f6:06:f1:39:69:c8: 4e:b0:72:5a:49:e1:80:4e:55:9b:3a:9d:e0:e0:60:4f:e2:a9: bc:7a:1c:da:2a:48:94:6c:ec:7b:6f:06:2d:f4:ec:d3:11:49: c8:db:ae:ea:4f:22:51:f0:ec:9e:3c:4f:95:bc:a7:3d:00:37: 33:68:b0:59:0f:6e:55:a5:36:1b:9d:d3:da:e0:8a:a9:ad:04: 08:8d:a1:4b:07:de:eb:35:d5:4b:2b:13:8f:4b:de:14:26:b9: ce:74:d6:59:b6:10:13:d6:4e:0a:9d:3b:00:07:df:c7:5d:51: d9:21:42:f9:89:ef:2d:ce:4c:00:eb:77:4a:60:ed:d0:39:ad: 16:07:40:32:32:59:e5:39:b9:ad:a8:94:eb:d3:ee:97:1e:60: a8:d4:d3:d8:de:25:f3:db:4b:1e:ed:2b:85:f1:c6:fd:ac:f9: 58:be:c7:c0:a4:9e:c2:22:93:79:bb:22:3d:7a:31:63:ee:e8: 02:b8:e7:bc:01:46:12:b7:70:48:8d:dd:21:15:86:ae:73:a7: 64:b6:bf:f7:a7:95:ca:1d:4d:9b:e7:22:c1:9d:aa:78:31:6b: 0f:5a:5d:a8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAtAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNCMkUxMTAvBgNVBAUTKDQxMjNFOTAwRTZBMkVDOEZFOUI1RDcwM0I3OTI4MEVG MjE0MDdDODEwHhcNMjYxMDA1MDIwNDE0WhcNMjYxMDEyMDIwNDE0WjAYMRYwFAYD VQQDEw02YWMzMDU5Zi00ZGE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo2T8FRurDQxaqSZhM2Ye7NZNKlbzHyhMLB/7VkKeV7U8nMl5GugHR3A9QRBu N7Bs18ZCF7N8tbfT5+o7nSKWBT/Eqsw2lzl5MMEuRInDUp4mSF93eea/fT37fVsY XfbT9JJ5z8Y8FmrQCgg33sTr0dIF0+YpLnyjcxbGQeYHcOSK/lHv+GP/+3OnziZY 9Nl12lLDubG09jOOJSAL6G4X6JjJyyl4SyDjCg42Bt9jQeXH82B+98+ntnE1SVsX nzhqZzHCOYLNm3gC4HQf7cw2Z9jr7wSzoXPbKo6Qix0757nBJrbA34DCVFgX9u6g T5VlA1W8/ZZT3uyGMJf4HB7C3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBRvTgdf Ons0AaibogrULAYFFYBYMB8GA1UdIwQYMBaAFEEj6QDmouyP6bXXA7eSgO8hQHyB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0IyRS8wRjU1QzY5NkQ2 N0QxMUVEODZEMzM3NTBDNEY5QUUwMi9RU1BwQU9haTdJX3B0ZGNEdDVLQTd5RkFm SUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FTUHBBT2FpN0lfcHRkY0R0NUtBN3lGQWZJRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG M0IyRS8wRjU1QzY5NkQ2N0QxMUVEODZEMzM3NTBDNEY5QUUwMi9RU1BwQU9haTdJ X3B0ZGNEdDVLQTd5RkFmSUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJ8UqKPyQdXjAPzK8An7bJtC0MzWSQ30MIQaJK/Bs9gbxOWnITrByWknhgE5V mzqd4OBgT+KpvHoc2ipIlGzse28GLfTs0xFJyNuu6k8iUfDsnjxPlbynPQA3M2iw WQ9uVaU2G53T2uCKqa0ECI2hSwfe6zXVSysTj0veFCa5znTWWbYQE9ZOCp07AAff x11R2SFC+YnvLc5MAOt3SmDt0DmtFgdAMjJZ5Tm5raiU69Pulx5gqNTT2N4l89tL Hu0rhfHG/az5WL7HwKSewiKTebsiPXoxY+7oArjnvAFGErdwSI3dIRWGrnOnZLa/ 96eVyh1Nm+ciwZ2qeDFrD1pdqA== -----END CERTIFICATE-----Generated at Tue Oct 6 01:28:29 2026 by rpki-client