$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft File: QAHwzRnduZQstaOVZ-w2k74lxqA.mft (raw, json) Hash identifier: JTwpdjJCfLB/9HG0/cnQGKSjTvZB3t5pMgpYMfx8n1U= Subject key identifier: AA:DE:56:96:AF:BC:33:F5:64:D3:3D:2F:05:74:90:3F:1D:BF:F1:B1 Authority key identifier: 40:01:F0:CD:19:DD:B9:94:2C:B5:A3:95:67:EC:36:93:BE:25:C6:A0 Certificate issuer: /CN=A91F96DB/serialNumber=4001F0CD19DDB9942CB5A39567EC3693BE25C6A0 Certificate serial: 04D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft Manifest number: 04C9 Signing time: Mon 26 Oct 2026 23:41:59 +0000 Manifest this update: Mon 26 Oct 2026 23:41:59 +0000 Manifest next update: Mon 02 Nov 2026 23:41:59 +0000 Files and hashes: 1: QAHwzRnduZQstaOVZ-w2k74lxqA.crl (hash: kKLEyFoEdlCNjYCh/X/24nLI25KvzJOFxJGPGyhbp98=) 2: F91B41A40C5811EFB9F63337C4F9AE02.roa (hash: Ep2GGy4x3F/l/bcsj+NUy5RBXFijDS1DT1sCoOlf0Og=) 3: 0ECA16060C5911EFA8601E42C4F9AE02.roa (hash: sbKErGrZ9wQReaxBfcKt6qzgDt44TVFgH+e5ifioSzo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.crl rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 23:41:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1239 (0x4d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F96DB, serialNumber=4001F0CD19DDB9942CB5A39567EC3693BE25C6A0 Validity Not Before: Oct 26 23:41:59 2026 GMT Not After : Nov 2 23:41:59 2026 GMT Subject: CN=6adfe547-a7ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:61:17:b1:f2:ac:59:0f:7b:d4:cf:33:04:b0: 7e:81:73:b5:c9:92:22:35:71:4b:28:9e:3d:8b:4f: f5:40:60:7f:bb:85:7d:74:1e:fb:c6:dc:51:63:88: e5:6b:af:f6:2e:14:f2:2f:2b:4e:d4:1a:bd:ea:06: 0a:1a:0b:28:54:f6:62:fd:17:dd:44:5d:36:93:9f: 62:cb:a2:a2:16:e6:ad:fd:55:69:8e:de:54:d2:3c: 61:b3:db:e4:58:d0:4c:4b:9a:65:95:6f:5a:c4:9f: aa:16:e4:f8:d2:91:22:bd:d9:f5:fc:ee:5a:94:78: ed:99:ca:a0:26:6e:bd:8a:25:d5:d7:c9:66:81:cf: c7:48:74:95:81:07:c3:ac:18:24:14:1d:ea:75:c2: 8b:3e:e6:1f:91:04:fe:10:71:bd:36:c6:e3:36:3a: d1:d6:31:4d:42:fb:09:3b:64:38:60:f3:2c:37:5b: 35:c8:e8:19:76:92:5e:8c:9f:6a:aa:2d:fb:18:82: aa:22:d1:a4:81:e3:44:d6:e3:48:35:fd:5f:96:d6: d9:69:1d:71:34:fb:6e:ef:b9:0d:b4:48:07:34:91: d4:6e:27:ab:65:12:8b:28:d1:46:8c:df:8a:02:05: 32:ae:3a:1e:d1:c1:0e:9e:01:9c:8f:93:97:c0:00: 7d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:DE:56:96:AF:BC:33:F5:64:D3:3D:2F:05:74:90:3F:1D:BF:F1:B1 X509v3 Authority Key Identifier: keyid:40:01:F0:CD:19:DD:B9:94:2C:B5:A3:95:67:EC:36:93:BE:25:C6:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:32:1a:56:7d:7e:db:f4:22:2a:64:b3:7f:2f:2b:3e:83:30: b8:32:8e:05:97:98:ad:29:bf:17:56:15:4e:f3:c7:34:d9:a2: ed:d6:b8:e2:01:e0:6e:af:32:0e:da:d4:e7:e0:60:19:94:1a: 2b:00:f4:5d:57:c1:69:f5:4a:b6:74:49:13:91:3f:e2:52:71: 1d:35:03:a6:e3:1a:3f:21:43:c0:61:fc:5b:69:8e:59:d3:58: 1d:a2:9d:1c:32:cd:18:48:72:e9:fb:25:71:98:ae:a2:ad:22: 83:21:ba:8a:bd:49:6f:c4:9d:30:3e:aa:bb:48:63:d4:4c:30: e9:1e:5c:fc:fe:8b:41:09:51:bc:a0:41:cf:73:bd:17:a4:68: ae:7c:f6:4e:d3:8e:f1:88:36:a5:ad:8e:4a:98:f6:6c:b7:b4: 6f:a0:98:15:f2:c8:3c:f8:d6:8a:ff:43:fb:97:7a:37:6d:32: d8:93:5c:b4:6d:a2:5c:b4:a5:f2:4f:a3:30:03:c9:09:95:43: 63:19:98:c2:0d:ed:a4:b3:5e:7a:4f:7a:cb:f0:79:36:1c:df: 38:f7:20:94:e7:0d:9a:57:33:12:3f:24:ed:3a:d3:12:ab:01: f9:bb:58:89:b7:14:1c:47:9d:d3:81:15:09:3a:74:62:84:92: de:78:4a:bc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBNcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjk2REIxMTAvBgNVBAUTKDQwMDFGMENEMTlEREI5OTQyQ0I1QTM5NTY3RUMzNjkz QkUyNUM2QTAwHhcNMjYxMDI2MjM0MTU5WhcNMjYxMTAyMjM0MTU5WjAYMRYwFAYD VQQDEw02YWRmZTU0Ny1hN2NlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8GEXsfKsWQ971M8zBLB+gXO1yZIiNXFLKJ49i0/1QGB/u4V9dB77xtxRY4jl a6/2LhTyLytO1Bq96gYKGgsoVPZi/RfdRF02k59iy6KiFuat/VVpjt5U0jxhs9vk WNBMS5pllW9axJ+qFuT40pEivdn1/O5alHjtmcqgJm69iiXV18lmgc/HSHSVgQfD rBgkFB3qdcKLPuYfkQT+EHG9NsbjNjrR1jFNQvsJO2Q4YPMsN1s1yOgZdpJejJ9q qi37GIKqItGkgeNE1uNINf1fltbZaR1xNPtu77kNtEgHNJHUbierZRKLKNFGjN+K AgUyrjoe0cEOngGcj5OXwAB9PwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKreVpav vDP1ZNM9LwV0kD8dv/GxMB8GA1UdIwQYMBaAFEAB8M0Z3bmULLWjlWfsNpO+Jcag MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTZEQi9BODY0RDBFQThF M0QxMUVDQTg3QUJGMTZDNEY5QUUwMi9RQUh3elJuZHVaUXN0YU9WWi13Mms3NGx4 cUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FBSHd6Um5kdVpRc3RhT1ZaLXcyazc0bHhxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTZEQi9BODY0RDBFQThFM0QxMUVDQTg3QUJGMTZDNEY5QUUwMi9RQUh3elJuZHVa UXN0YU9WWi13Mms3NGx4cUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnTIaVn1+2/QiKmSzfy8rPoMwuDKOBZeYrSm/F1YVTvPHNNmi7da44gHgbq8y DtrU5+BgGZQaKwD0XVfBafVKtnRJE5E/4lJxHTUDpuMaPyFDwGH8W2mOWdNYHaKd HDLNGEhy6fslcZiuoq0igyG6ir1Jb8SdMD6qu0hj1Eww6R5c/P6LQQlRvKBBz3O9 F6Rornz2TtOO8Yg2pa2OSpj2bLe0b6CYFfLIPPjWiv9D+5d6N20y2JNctG2iXLSl 8k+jMAPJCZVDYxmYwg3tpLNeek96y/B5NhzfOPcglOcNmlczEj8k7TrTEqsB+btY ibcUHEed04EVCTp0YoSS3nhKvA== -----END CERTIFICATE-----Generated at Wed Oct 28 07:26:26 2026 by rpki-client