$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.mft File: cq-668ns3aLu0tSbE-YEjqPkHmA.mft (raw, json) Hash identifier: 8ROhHsz2YUtu3wU/y+brrbVIqysXY6k1NHTBSn8oZTc= Subject key identifier: 7B:F2:EF:99:08:2F:43:63:57:F5:72:F4:BD:9F:C4:C6:E7:BB:AE:07 Authority key identifier: 72:AF:BA:EB:C9:EC:DD:A2:EE:D2:D4:9B:13:E6:04:8E:A3:E4:1E:60 Certificate issuer: /CN=A91FDD4D/serialNumber=72AFBAEBC9ECDDA2EED2D49B13E6048EA3E41E60 Certificate serial: 22D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cq-668ns3aLu0tSbE-YEjqPkHmA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.mft Manifest number: 227B Signing time: Sun 18 Oct 2026 15:53:45 +0000 Manifest this update: Sun 18 Oct 2026 15:53:44 +0000 Manifest next update: Sun 25 Oct 2026 15:53:44 +0000 Files and hashes: 1: cq-668ns3aLu0tSbE-YEjqPkHmA.crl (hash: 6Kc50WMCg2as/rqiXnxeoBkoWxwvkxbmvNzMnqotZnY=) 2: AB9E7432714911EEBF95153CC4F9AE02.roa (hash: Bbmi/J5Lpn7aHAntaVp/ckgJSOlUGXUjQqXrthSWKgU=) 3: EEFB07CCB8A311ED8F694046C4F9AE02.roa (hash: V2GgiDiVdp7icGNp8uei2QdYQy4qfASwmRrufFn1mxg=) 4: 0FB07E54D28311EDB1655152C4F9AE02.roa (hash: 3IlwneiT3OIjV7tuhT2g5I0grdOyE91JkHSLmUB2BEY=) 5: E50E6E14B63411EDB4416786C4F9AE02.roa (hash: KYaSzwf1L2QkO+jOOMTkJ2kvbpBzCO+jKOwM50VbrBw=) 6: 0F0824DED28311EDB1655152C4F9AE02.roa (hash: YxBTBicabikn08Aqg/dvf+PsgRQVrImZt4AAt8rvHnc=) 7: E9DE96C44C3611EEA9D59630C4F9AE02.roa (hash: v4lm1t03b9gy+zkyAg0MsXuQLEziIg1Uau5peZt74RY=) 8: 1C628A90671411EEA0040661C4F9AE02.roa (hash: M0M27e7jpHMqjXXvltEuadHWRQl0UpCUB3Q3dSoBa+I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.crl rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cq-668ns3aLu0tSbE-YEjqPkHmA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 15:53:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8914 (0x22d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDD4D, serialNumber=72AFBAEBC9ECDDA2EED2D49B13E6048EA3E41E60 Validity Not Before: Oct 18 15:53:44 2026 GMT Not After : Oct 25 15:53:44 2026 GMT Subject: CN=6ad4eb89-4ecd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:e1:38:50:ba:1f:56:c8:99:50:da:05:fc:79: 10:ee:a4:76:a8:92:b1:4d:77:e5:3e:8f:ea:7a:40: 08:21:b6:bc:bb:4f:94:b8:c1:19:7a:65:d2:71:71: 5f:1e:cd:be:ff:3e:5e:a6:e6:bb:5a:ca:9a:ff:e3: c6:87:44:bb:76:76:45:e8:23:28:25:26:a3:0c:07: 67:51:f4:f4:5f:a4:23:7a:82:d1:1c:93:6d:01:f8: 6a:c8:b3:f7:62:ff:53:56:d0:3c:a2:17:ac:78:24: 66:42:49:08:0d:a1:cc:cc:e1:3e:dc:27:dc:ad:00: 60:e9:3c:f1:07:60:8f:c9:3c:bd:25:9e:df:fa:d2: e0:a3:e6:7a:f7:ce:71:03:b4:46:9d:08:91:2a:98: 0f:cf:02:68:1e:3d:42:46:58:27:5d:11:17:43:63: 89:5b:a7:bb:c7:52:8c:de:3d:4c:84:58:c4:44:6d: dd:10:14:33:03:61:a3:d5:ee:82:06:a9:f2:73:08: 77:da:23:f3:58:bd:0a:74:ee:47:eb:57:aa:41:f0: 11:af:f3:e9:80:8b:45:e2:85:b0:0a:9c:53:5b:7f: 96:59:23:40:e9:35:da:98:7d:5e:11:47:cd:50:b3: 6e:85:77:3b:50:d7:9b:cf:1d:f5:81:2a:68:48:d4: d9:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:F2:EF:99:08:2F:43:63:57:F5:72:F4:BD:9F:C4:C6:E7:BB:AE:07 X509v3 Authority Key Identifier: keyid:72:AF:BA:EB:C9:EC:DD:A2:EE:D2:D4:9B:13:E6:04:8E:A3:E4:1E:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cq-668ns3aLu0tSbE-YEjqPkHmA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:07:07:a6:bf:a4:74:7e:f8:93:ca:36:37:08:26:11:3b:93: 68:95:81:91:60:d2:92:11:75:25:1e:ec:43:a9:db:54:b0:19: 6a:d3:e7:f6:5d:6e:3e:f3:11:81:0c:cb:a2:59:8c:62:e9:18: 95:4c:0c:a5:24:6c:d1:e4:4f:01:6c:fe:bd:08:1d:2c:61:b1: d5:ac:b8:05:0f:07:8b:6b:a5:ea:db:ae:e3:95:75:2b:4f:99: 38:01:e6:0e:56:95:bb:e1:ac:d3:9a:48:33:19:8c:01:e0:19: 84:c1:92:d3:f1:1b:19:db:f4:12:9f:69:fa:25:ff:ae:ba:ae: 37:09:58:ba:ee:9c:74:96:d6:36:f0:b3:8f:38:ba:b2:21:49: 0a:e9:42:0d:0d:b6:71:ad:c4:22:34:d9:c5:fb:21:9d:75:0f: 66:e9:9d:b9:86:02:6f:ea:fd:d0:54:d6:a7:39:3a:47:ae:5e: 3f:51:ad:2d:38:e7:fe:77:a6:3f:05:f6:3f:95:1a:f4:37:dd: f8:1d:33:97:67:8f:05:d2:af:6b:ae:ec:5d:00:3c:50:a5:c5: 13:8d:d8:4c:96:50:1d:c9:1a:8b:da:f9:a3:8c:11:27:0e:27: 9c:f2:a3:43:68:6e:37:99:59:fa:ef:bf:46:4c:1d:c3:b4:0a: 2a:90:6b:8f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICItIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRENEQxMTAvBgNVBAUTKDcyQUZCQUVCQzlFQ0REQTJFRUQyRDQ5QjEzRTYwNDhF QTNFNDFFNjAwHhcNMjYxMDE4MTU1MzQ0WhcNMjYxMDI1MTU1MzQ0WjAYMRYwFAYD VQQDEw02YWQ0ZWI4OS00ZWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5uE4ULofVsiZUNoF/HkQ7qR2qJKxTXflPo/qekAIIba8u0+UuMEZemXScXFf Hs2+/z5epua7Wsqa/+PGh0S7dnZF6CMoJSajDAdnUfT0X6QjeoLRHJNtAfhqyLP3 Yv9TVtA8oheseCRmQkkIDaHMzOE+3CfcrQBg6TzxB2CPyTy9JZ7f+tLgo+Z6985x A7RGnQiRKpgPzwJoHj1CRlgnXREXQ2OJW6e7x1KM3j1MhFjERG3dEBQzA2Gj1e6C Bqnycwh32iPzWL0KdO5H61eqQfARr/PpgItF4oWwCpxTW3+WWSNA6TXamH1eEUfN ULNuhXc7UNebzx31gSpoSNTZMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHvy75kI L0NjV/Vy9L2fxMbnu64HMB8GA1UdIwQYMBaAFHKvuuvJ7N2i7tLUmxPmBI6j5B5g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREQ0RC9CQUUxMDhDNEVB NjAxMUU1ODgxNTc3MENDNEY5QUUwMi9jcS02NjhuczNhTHUwdFNiRS1ZRWpxUGtI bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NxLTY2OG5zM2FMdTB0U2JFLVlFanFQa0htQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REQ0RC9CQUUxMDhDNEVBNjAxMUU1ODgxNTc3MENDNEY5QUUwMi9jcS02NjhuczNh THUwdFNiRS1ZRWpxUGtIbUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANQcHpr+kdH74k8o2NwgmETuTaJWBkWDSkhF1JR7sQ6nbVLAZatPn9l1uPvMR gQzLolmMYukYlUwMpSRs0eRPAWz+vQgdLGGx1ay4BQ8Hi2ul6tuu45V1K0+ZOAHm DlaVu+Gs05pIMxmMAeAZhMGS0/EbGdv0Ep9p+iX/rrquNwlYuu6cdJbWNvCzjzi6 siFJCulCDQ22ca3EIjTZxfshnXUPZumduYYCb+r90FTWpzk6R65eP1GtLTjn/nem PwX2P5Ua9Dfd+B0zl2ePBdKva67sXQA8UKXFE43YTJZQHckai9r5o4wRJw4nnPKj Q2huN5lZ+u+/Rkwdw7QKKpBrjw== -----END CERTIFICATE-----Generated at Tue Oct 20 05:07:22 2026 by rpki-client