$ rpki-client -vvvf rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.mft File: qsOf2WPeFzHQ2j1BQeSh5GnphSM.mft (raw, json) Hash identifier: LzdsOPVV1kHyPs6RZP4CqU2K4aLPaDNsM/DT6v2zUi8= Subject key identifier: CE:C5:E7:21:F3:56:AA:57:CA:D8:6E:F2:45:42:1E:9C:1B:C8:F5:94 Authority key identifier: AA:C3:9F:D9:63:DE:17:31:D0:DA:3D:41:41:E4:A1:E4:69:E9:85:23 Certificate issuer: /CN=A91430D6/serialNumber=AAC39FD963DE1731D0DA3D4141E4A1E469E98523 Certificate serial: F0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qsOf2WPeFzHQ2j1BQeSh5GnphSM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.mft Manifest number: E8 Signing time: Wed 23 Sep 2026 06:19:35 +0000 Manifest this update: Wed 23 Sep 2026 06:19:35 +0000 Manifest next update: Wed 30 Sep 2026 06:19:35 +0000 Files and hashes: 1: qsOf2WPeFzHQ2j1BQeSh5GnphSM.crl (hash: Vzgd5cLf2YXFyh6CY3Pdhk7aWY1VbaltjiRR448QNCI=) 2: 4DB1CEBCF44311F08E818BA85F6F56BC.roa (hash: LsgEpPl7kUjJjpymrgq6WP+mysPa0YlxTXlhvLoTIPw=) 3: 2A67A9D2A9E111F19CA38F343711F970.roa (hash: /KQ5zKgAQHWaOA/R3xZj3OBEeENaPkswQbSqrAltyps=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.crl rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qsOf2WPeFzHQ2j1BQeSh5GnphSM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 06:19:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 240 (0xf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91430D6, serialNumber=AAC39FD963DE1731D0DA3D4141E4A1E469E98523 Validity Not Before: Sep 23 06:19:35 2026 GMT Not After : Sep 30 06:19:35 2026 GMT Subject: CN=6ab36f77-295d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:82:29:c7:58:24:d6:39:fd:53:72:0a:04:d5: d8:d2:32:ab:7d:6b:a0:7d:0e:6a:f7:b0:91:22:18: d7:60:ec:e6:21:27:e1:7b:df:79:c9:cc:6b:ed:7e: 25:b7:b4:d4:25:f4:d0:14:77:7c:56:e3:56:e0:c2: f8:d3:3d:ae:10:bf:54:26:4a:67:22:0d:f1:66:0f: ee:36:f1:12:0f:73:91:d3:55:16:9a:e7:ad:a8:8f: c5:84:62:5f:16:62:22:5c:b3:ff:09:03:41:55:5d: 74:7a:ae:0d:37:0d:34:d1:ed:65:cf:1a:d3:6f:1a: ed:8b:0d:01:25:09:c7:6a:33:8c:8e:0d:08:cc:22: 12:a5:61:fe:ab:09:90:4e:e8:41:2b:7c:d7:77:8a: fb:63:e7:6e:7e:82:dc:1f:3c:a1:32:11:5f:d6:08: f1:bd:23:2a:b6:ea:ef:09:5a:61:7f:ba:f2:9a:e3: f8:98:f1:bd:9a:f6:91:d8:5e:16:9a:2b:92:9a:f5: 25:10:26:03:e5:59:1e:17:65:a2:9d:5f:e3:d6:f9: b2:c8:9a:f6:2c:42:8b:05:8d:4c:80:46:0a:fd:2b: ab:c6:b3:8e:be:76:db:6a:4e:0f:50:3e:52:ad:65: 60:9b:25:92:47:81:a8:a5:dd:d5:96:99:aa:7c:fc: 72:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:C5:E7:21:F3:56:AA:57:CA:D8:6E:F2:45:42:1E:9C:1B:C8:F5:94 X509v3 Authority Key Identifier: keyid:AA:C3:9F:D9:63:DE:17:31:D0:DA:3D:41:41:E4:A1:E4:69:E9:85:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qsOf2WPeFzHQ2j1BQeSh5GnphSM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:9b:c6:61:51:69:3c:c0:ca:3c:e0:98:6b:3c:e7:5e:ee:11: f4:97:a4:c9:b6:92:87:fd:db:ca:1f:82:e0:b0:5f:9c:39:70: cc:8e:84:b1:a4:67:d8:46:66:d1:9e:50:73:63:b3:29:ab:7f: 71:88:9f:95:91:be:cf:96:59:46:62:0f:b8:46:30:44:b5:d4: 8e:5c:dd:47:b2:7e:53:30:63:c1:dd:9a:f5:62:4f:b6:6a:76: ed:d1:6f:7e:ec:62:c4:9e:fb:73:f6:dd:f8:5d:fd:e3:f5:52: ec:c9:1f:a7:0d:fe:9e:52:91:30:03:ba:82:64:d3:83:d5:bc: 35:f6:ca:5a:0a:15:ce:c8:ec:16:3a:7e:83:02:b2:f4:57:35: de:db:70:cd:70:ab:55:43:4d:02:58:55:b8:a9:da:0d:f8:66: f8:1f:58:94:cc:5b:75:22:c4:35:c3:16:b7:d6:b3:cc:12:cb: a2:4a:53:d5:29:d7:54:30:8d:7a:c2:7c:27:e6:60:2f:82:08: 53:7c:23:3a:ec:5b:42:90:5e:73:c7:6a:4e:77:d7:f2:59:b5: 8d:86:1e:7c:9a:3b:8b:81:c1:2e:80:9c:67:a8:42:49:ca:8c: ad:dd:fe:62:28:70:fd:99:3a:57:bb:07:61:9c:30:fa:12:fd: 2b:47:e8:0d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDMwRDYxMTAvBgNVBAUTKEFBQzM5RkQ5NjNERTE3MzFEMERBM0Q0MTQxRTRBMUU0 NjlFOTg1MjMwHhcNMjYwOTIzMDYxOTM1WhcNMjYwOTMwMDYxOTM1WjAYMRYwFAYD VQQDEw02YWIzNmY3Ny0yOTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy4Ipx1gk1jn9U3IKBNXY0jKrfWugfQ5q97CRIhjXYOzmISfhe995ycxr7X4l t7TUJfTQFHd8VuNW4ML40z2uEL9UJkpnIg3xZg/uNvESD3OR01UWmuetqI/FhGJf FmIiXLP/CQNBVV10eq4NNw000e1lzxrTbxrtiw0BJQnHajOMjg0IzCISpWH+qwmQ TuhBK3zXd4r7Y+dufoLcHzyhMhFf1gjxvSMqturvCVphf7rymuP4mPG9mvaR2F4W miuSmvUlECYD5VkeF2WinV/j1vmyyJr2LEKLBY1MgEYK/SurxrOOvnbbak4PUD5S rWVgmyWSR4Gopd3VlpmqfPxyswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM7F5yHz VqpXythu8kVCHpwbyPWUMB8GA1UdIwQYMBaAFKrDn9lj3hcx0No9QUHkoeRp6YUj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzBENi8xN0YwNkEyNDVG RTAxMUYwQjJGRDhGNTdDNEY5QUUwMi9xc09mMldQZUZ6SFEyajFCUWVTaDVHbnBo U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3FzT2YyV1BlRnpIUTJqMUJRZVNoNUducGhTTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzBENi8xN0YwNkEyNDVGRTAxMUYwQjJGRDhGNTdDNEY5QUUwMi9xc09mMldQZUZ6 SFEyajFCUWVTaDVHbnBoU00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVJvGYVFpPMDKPOCYazznXu4R9JekybaSh/3byh+C4LBfnDlwzI6EsaRn2EZm 0Z5Qc2OzKat/cYiflZG+z5ZZRmIPuEYwRLXUjlzdR7J+UzBjwd2a9WJPtmp27dFv fuxixJ77c/bd+F394/VS7Mkfpw3+nlKRMAO6gmTTg9W8NfbKWgoVzsjsFjp+gwKy 9Fc13ttwzXCrVUNNAlhVuKnaDfhm+B9YlMxbdSLENcMWt9azzBLLokpT1SnXVDCN esJ8J+ZgL4IIU3wjOuxbQpBec8dqTnfX8lm1jYYefJo7i4HBLoCcZ6hCScqMrd3+ Yihw/Zk6V7sHYZww+hL9K0foDQ== -----END CERTIFICATE-----Generated at Thu Sep 24 02:04:29 2026 by rpki-client