$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.mft File: cq-668ns3aLu0tSbE-YEjqPkHmA.mft (raw, json) Hash identifier: bHA8dn3qwotH05Zd6xW/CjirLpK6mtLwov93wV71mpY= Subject key identifier: 13:64:9B:A2:18:DA:6A:6D:C6:4E:59:BD:C5:6A:78:84:64:26:BC:EA Authority key identifier: 72:AF:BA:EB:C9:EC:DD:A2:EE:D2:D4:9B:13:E6:04:8E:A3:E4:1E:60 Certificate issuer: /CN=A91FDD4D/serialNumber=72AFBAEBC9ECDDA2EED2D49B13E6048EA3E41E60 Certificate serial: 22B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cq-668ns3aLu0tSbE-YEjqPkHmA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.mft Manifest number: 2262 Signing time: Sun 30 Aug 2026 15:51:51 +0000 Manifest this update: Sun 30 Aug 2026 15:51:50 +0000 Manifest next update: Sun 06 Sep 2026 15:51:50 +0000 Files and hashes: 1: cq-668ns3aLu0tSbE-YEjqPkHmA.crl (hash: lRpXMHp/s7uxD7y74oFmB3rouIbut2psPufpBNoVcYY=) 2: 1C628A90671411EEA0040661C4F9AE02.roa (hash: M0M27e7jpHMqjXXvltEuadHWRQl0UpCUB3Q3dSoBa+I=) 3: AB9E7432714911EEBF95153CC4F9AE02.roa (hash: Bbmi/J5Lpn7aHAntaVp/ckgJSOlUGXUjQqXrthSWKgU=) 4: E50E6E14B63411EDB4416786C4F9AE02.roa (hash: KYaSzwf1L2QkO+jOOMTkJ2kvbpBzCO+jKOwM50VbrBw=) 5: E9DE96C44C3611EEA9D59630C4F9AE02.roa (hash: v4lm1t03b9gy+zkyAg0MsXuQLEziIg1Uau5peZt74RY=) 6: 0F0824DED28311EDB1655152C4F9AE02.roa (hash: YxBTBicabikn08Aqg/dvf+PsgRQVrImZt4AAt8rvHnc=) 7: EEFB07CCB8A311ED8F694046C4F9AE02.roa (hash: V2GgiDiVdp7icGNp8uei2QdYQy4qfASwmRrufFn1mxg=) 8: 0FB07E54D28311EDB1655152C4F9AE02.roa (hash: 3IlwneiT3OIjV7tuhT2g5I0grdOyE91JkHSLmUB2BEY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.crl rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cq-668ns3aLu0tSbE-YEjqPkHmA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Sep 2026 15:51:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8889 (0x22b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDD4D, serialNumber=72AFBAEBC9ECDDA2EED2D49B13E6048EA3E41E60 Validity Not Before: Aug 30 15:51:50 2026 GMT Not After : Sep 6 15:51:50 2026 GMT Subject: CN=6a945197-8e5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:45:b1:4e:cc:0b:ad:90:b3:3d:b9:a2:39:a6: 5a:5b:d7:1a:95:77:f8:2f:b1:00:61:df:60:8e:e4: 6e:ba:c6:2a:f6:15:6e:ae:7b:f2:89:f4:7c:3e:32: b2:76:c4:d2:09:de:6f:6b:25:88:8a:a2:b3:1c:a0: 77:25:58:f1:ec:39:42:cf:ff:ca:86:2d:37:37:3d: f7:7c:f5:a8:92:2b:e3:21:c5:ea:76:81:98:7f:01: 0a:ad:d5:01:63:7f:00:a2:f9:2c:16:5f:a0:ee:7e: 2f:69:e0:97:7e:e4:a6:69:9e:16:06:71:71:60:e4: bf:be:35:1c:6a:bd:50:33:b6:1f:60:fd:b5:0e:57: 76:83:26:21:dd:57:a6:19:b7:6b:1f:49:b9:a8:9c: f9:a5:f8:ed:56:51:b5:f2:9e:12:71:47:2f:56:55: c0:33:fe:2c:5e:17:3f:47:2d:5b:6d:61:19:8c:4e: 31:6c:9c:74:df:aa:05:94:fa:d6:0d:11:71:ba:ac: 82:13:69:dd:4a:4c:87:24:dc:e0:69:99:71:46:49: 76:e2:14:af:3e:b9:d1:06:42:4e:a1:bc:af:d2:03: e7:e6:93:1b:94:65:4f:11:d4:80:c7:70:6c:c0:26: 73:3e:99:58:3e:3e:d0:7e:aa:6a:a2:6c:8f:76:ef: d8:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:64:9B:A2:18:DA:6A:6D:C6:4E:59:BD:C5:6A:78:84:64:26:BC:EA X509v3 Authority Key Identifier: keyid:72:AF:BA:EB:C9:EC:DD:A2:EE:D2:D4:9B:13:E6:04:8E:A3:E4:1E:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cq-668ns3aLu0tSbE-YEjqPkHmA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:86:7e:54:d0:fb:e9:30:1f:3c:f5:d3:bc:c7:cc:e8:40:0e: 5e:d6:43:24:95:23:61:b5:e0:59:61:9a:6f:0b:3f:98:c6:5a: bd:f2:5a:20:28:1e:74:85:50:ea:86:44:f7:90:63:0e:0b:b0: 79:52:f8:91:b9:72:c4:fb:4e:52:46:98:e7:0e:96:df:f1:7e: 9b:2d:e4:90:26:8c:71:dc:d0:3d:c1:e5:fb:ce:3c:f2:6d:f6: 41:3e:92:2c:2e:b6:a5:58:1c:35:a8:87:39:b1:80:7c:35:49: d1:ec:69:7c:93:cc:93:59:ce:a5:9f:be:5b:b1:39:0e:62:35: 33:22:dc:9e:10:94:64:4a:f7:8c:d0:2a:20:f4:41:14:12:50: 56:13:0d:9c:01:c6:6d:76:bc:2c:54:e0:e9:8d:8f:9b:50:32: b0:e7:fd:3f:6a:8b:f8:72:0e:cb:29:be:d5:b0:75:5c:fe:6f: 96:7c:0e:45:06:47:13:df:d7:c9:0a:7d:a0:4b:67:4a:9f:42: 7a:79:70:df:fc:bd:18:55:54:74:5e:ef:03:89:bf:e2:c7:0a: 43:28:a9:61:4b:50:3f:0c:0a:99:2c:02:31:64:1b:07:d0:6b: 80:b8:65:d1:97:24:86:60:36:c4:f8:8d:20:49:8e:57:94:85: d3:d5:55:19 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICIrkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRENEQxMTAvBgNVBAUTKDcyQUZCQUVCQzlFQ0REQTJFRUQyRDQ5QjEzRTYwNDhF QTNFNDFFNjAwHhcNMjYwODMwMTU1MTUwWhcNMjYwOTA2MTU1MTUwWjAYMRYwFAYD VQQDEw02YTk0NTE5Ny04ZTVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA60WxTswLrZCzPbmiOaZaW9calXf4L7EAYd9gjuRuusYq9hVurnvyifR8PjKy dsTSCd5vayWIiqKzHKB3JVjx7DlCz//Khi03Nz33fPWokivjIcXqdoGYfwEKrdUB Y38AovksFl+g7n4vaeCXfuSmaZ4WBnFxYOS/vjUcar1QM7YfYP21Dld2gyYh3Vem GbdrH0m5qJz5pfjtVlG18p4ScUcvVlXAM/4sXhc/Ry1bbWEZjE4xbJx036oFlPrW DRFxuqyCE2ndSkyHJNzgaZlxRkl24hSvPrnRBkJOobyv0gPn5pMblGVPEdSAx3Bs wCZzPplYPj7QfqpqomyPdu/Y1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBNkm6IY 2mptxk5ZvcVqeIRkJrzqMB8GA1UdIwQYMBaAFHKvuuvJ7N2i7tLUmxPmBI6j5B5g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREQ0RC9CQUUxMDhDNEVB NjAxMUU1ODgxNTc3MENDNEY5QUUwMi9jcS02NjhuczNhTHUwdFNiRS1ZRWpxUGtI bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NxLTY2OG5zM2FMdTB0U2JFLVlFanFQa0htQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REQ0RC9CQUUxMDhDNEVBNjAxMUU1ODgxNTc3MENDNEY5QUUwMi9jcS02NjhuczNh THUwdFNiRS1ZRWpxUGtIbUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkIZ+VND76TAfPPXTvMfM6EAOXtZDJJUjYbXgWWGabws/mMZavfJaICgedIVQ 6oZE95BjDguweVL4kblyxPtOUkaY5w6W3/F+my3kkCaMcdzQPcHl+8488m32QT6S LC62pVgcNaiHObGAfDVJ0expfJPMk1nOpZ++W7E5DmI1MyLcnhCUZEr3jNAqIPRB FBJQVhMNnAHGbXa8LFTg6Y2Pm1AysOf9P2qL+HIOyym+1bB1XP5vlnwORQZHE9/X yQp9oEtnSp9Cenlw3/y9GFVUdF7vA4m/4scKQyipYUtQPwwKmSwCMWQbB9BrgLhl 0ZckhmA2xPiNIEmOV5SF09VVGQ== -----END CERTIFICATE-----Generated at Mon Aug 31 12:30:24 2026 by rpki-client