$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F783D/31DF1DEEB9B111E9990C0852C4F9AE02/q47HWiojWU9vKtMnsOa7wLCrm-4.mft File: q47HWiojWU9vKtMnsOa7wLCrm-4.mft (raw, json) Hash identifier: +0N+kTr7zFhIw98c+fu/2btiutdx0mqaj4cMuEccwcw= Subject key identifier: 71:76:03:4E:34:18:74:51:9E:A8:78:6C:D1:C7:A4:41:BD:4E:73:67 Authority key identifier: AB:8E:C7:5A:2A:23:59:4F:6F:2A:D3:27:B0:E6:BB:C0:B0:AB:9B:EE Certificate issuer: /CN=A91F783D/serialNumber=AB8EC75A2A23594F6F2AD327B0E6BBC0B0AB9BEE Certificate serial: 0ED7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q47HWiojWU9vKtMnsOa7wLCrm-4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F783D/31DF1DEEB9B111E9990C0852C4F9AE02/q47HWiojWU9vKtMnsOa7wLCrm-4.mft Manifest number: 0ECA Signing time: Tue 06 Oct 2026 17:47:08 +0000 Manifest this update: Tue 06 Oct 2026 17:47:07 +0000 Manifest next update: Tue 13 Oct 2026 17:47:07 +0000 Files and hashes: 1: q47HWiojWU9vKtMnsOa7wLCrm-4.crl (hash: RHkUv1i4E1KNgjyqOI+We3IKKWBnfVl8BidqAV+0zZ4=) 2: E3ACB710B9B211E9A9A37254C4F9AE02.roa (hash: njW4G80Rv9z2lly1Ec6m17apN76EYAUVeT2oNP+2cUU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F783D/31DF1DEEB9B111E9990C0852C4F9AE02/q47HWiojWU9vKtMnsOa7wLCrm-4.crl rsync://rpki.apnic.net/member_repository/A91F783D/31DF1DEEB9B111E9990C0852C4F9AE02/q47HWiojWU9vKtMnsOa7wLCrm-4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q47HWiojWU9vKtMnsOa7wLCrm-4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 17:47:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3799 (0xed7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F783D, serialNumber=AB8EC75A2A23594F6F2AD327B0E6BBC0B0AB9BEE Validity Not Before: Oct 6 17:47:07 2026 GMT Not After : Oct 13 17:47:07 2026 GMT Subject: CN=6ac5341c-e9b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:a6:fe:52:b9:6c:dd:85:cd:f5:9a:5a:59:c5: d3:1f:fc:16:40:27:8c:60:a2:66:39:06:a9:88:70: 0f:b5:0a:7c:17:22:45:2c:8b:f5:23:1a:21:fa:02: 8c:43:a7:68:31:02:43:61:6c:58:f0:43:17:b4:02: 15:04:1a:72:3f:98:5a:50:93:4c:4e:f7:1d:00:1c: d3:db:cb:30:dc:f7:d2:d2:cf:56:99:78:ff:81:7f: 34:60:73:ac:df:25:3d:db:48:5f:8c:ec:70:53:22: 90:9c:c3:64:e1:4b:c4:01:51:15:3c:38:f9:ed:4f: d6:42:23:9f:95:41:f0:7e:49:5a:f6:d9:99:b9:6a: 84:e5:1c:0f:90:4c:a7:68:0e:76:f9:ee:29:50:e9: 53:b4:4d:55:98:0d:8d:d9:b5:02:db:41:4e:7d:f9: df:0d:eb:59:e1:2c:c3:d5:0b:83:0c:c1:bc:88:85: b8:2a:2e:6e:e8:90:45:3f:2c:28:19:a9:37:c9:11: 17:20:65:5a:2f:71:ff:df:8d:d2:10:7d:0b:6f:a7: 58:46:be:8c:e7:de:35:23:59:5e:63:63:77:eb:0d: e6:28:d5:5e:93:ec:a8:b1:a5:56:e0:d0:35:8a:d0: c8:62:d9:f7:a0:06:50:6c:d2:e7:66:7d:2f:38:37: 4b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:76:03:4E:34:18:74:51:9E:A8:78:6C:D1:C7:A4:41:BD:4E:73:67 X509v3 Authority Key Identifier: keyid:AB:8E:C7:5A:2A:23:59:4F:6F:2A:D3:27:B0:E6:BB:C0:B0:AB:9B:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F783D/31DF1DEEB9B111E9990C0852C4F9AE02/q47HWiojWU9vKtMnsOa7wLCrm-4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q47HWiojWU9vKtMnsOa7wLCrm-4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F783D/31DF1DEEB9B111E9990C0852C4F9AE02/q47HWiojWU9vKtMnsOa7wLCrm-4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ec:4a:27:50:28:9f:3d:27:5d:d8:30:5b:45:e7:d3:59:07:ca: d6:ef:b0:32:b2:b0:6e:dd:a9:50:3b:c4:bb:ea:6b:4c:d6:50: f2:67:c7:96:c5:3a:32:cd:5a:2b:fc:fb:92:a8:33:4a:50:70: 14:9e:c5:53:89:c7:96:13:d9:ec:8f:6a:de:e6:9b:57:24:2f: 00:91:ab:c7:53:ff:52:e2:e1:2e:17:38:e8:8c:ae:1e:2e:eb: 58:7f:c6:70:2c:c8:c4:cc:68:34:04:eb:ad:ab:32:b7:bc:18: e5:dd:5a:72:2b:a6:8d:64:0e:f7:60:45:a0:65:29:1f:93:46: 34:97:24:23:28:17:d4:c5:f1:14:d5:39:74:34:e2:a6:3d:c9: b8:da:b6:5f:60:25:3b:a8:4e:8c:3a:cd:3e:96:7d:98:20:59: 04:b1:1c:14:f9:04:38:fc:45:02:ac:5b:cc:da:78:2a:86:97: 2a:8e:69:c4:76:a2:b0:0d:ed:6e:47:c3:2b:c9:77:52:92:f1: e0:70:71:d6:96:50:31:a2:4f:80:35:14:53:c6:09:91:00:b6: 4a:ed:c6:46:b4:a8:96:fb:43:d8:5f:4b:67:af:42:7e:ca:77: e8:60:ec:38:1b:b8:76:df:26:0f:4a:0f:a2:1f:ed:de:b0:4f: 19:4f:83:16 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDtcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjc4M0QxMTAvBgNVBAUTKEFCOEVDNzVBMkEyMzU5NEY2RjJBRDMyN0IwRTZCQkMw QjBBQjlCRUUwHhcNMjYxMDA2MTc0NzA3WhcNMjYxMDEzMTc0NzA3WjAYMRYwFAYD VQQDEw02YWM1MzQxYy1lOWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA66b+Urls3YXN9ZpaWcXTH/wWQCeMYKJmOQapiHAPtQp8FyJFLIv1Ixoh+gKM Q6doMQJDYWxY8EMXtAIVBBpyP5haUJNMTvcdABzT28sw3PfS0s9WmXj/gX80YHOs 3yU920hfjOxwUyKQnMNk4UvEAVEVPDj57U/WQiOflUHwfkla9tmZuWqE5RwPkEyn aA52+e4pUOlTtE1VmA2N2bUC20FOffnfDetZ4SzD1QuDDMG8iIW4Ki5u6JBFPywo Gak3yREXIGVaL3H/343SEH0Lb6dYRr6M5941I1leY2N36w3mKNVek+yosaVW4NA1 itDIYtn3oAZQbNLnZn0vODdLNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHF2A040 GHRRnqh4bNHHpEG9TnNnMB8GA1UdIwQYMBaAFKuOx1oqI1lPbyrTJ7Dmu8Cwq5vu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzgzRC8zMURGMURFRUI5 QjExMUU5OTkwQzA4NTJDNEY5QUUwMi9xNDdIV2lvaldVOXZLdE1uc09hN3dMQ3Jt LTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3E0N0hXaW9qV1U5dkt0TW5zT2E3d0xDcm0tNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzgzRC8zMURGMURFRUI5QjExMUU5OTkwQzA4NTJDNEY5QUUwMi9xNDdIV2lvaldV OXZLdE1uc09hN3dMQ3JtLTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA7EonUCifPSdd2DBbRefTWQfK1u+wMrKwbt2pUDvEu+prTNZQ8mfHlsU6Ms1a K/z7kqgzSlBwFJ7FU4nHlhPZ7I9q3uabVyQvAJGrx1P/UuLhLhc46IyuHi7rWH/G cCzIxMxoNATrrasyt7wY5d1aciumjWQO92BFoGUpH5NGNJckIygX1MXxFNU5dDTi pj3JuNq2X2AlO6hOjDrNPpZ9mCBZBLEcFPkEOPxFAqxbzNp4KoaXKo5pxHaisA3t bkfDK8l3UpLx4HBx1pZQMaJPgDUUU8YJkQC2Su3GRrSolvtD2F9LZ69Cfsp36GDs OBu4dt8mD0oPoh/t3rBPGU+DFg== -----END CERTIFICATE-----Generated at Thu Oct 8 14:03:25 2026 by rpki-client