$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.mft File: qkHKgdI-9YhhkyqtErMWkNvPEAM.mft (raw, json) Hash identifier: DqYuG7Z2vxxcbXG4nUoi09Tkpm+LUAvbbcf0Gb3NlNc= Subject key identifier: 88:F6:9C:35:C5:8E:58:B5:6F:02:7B:2C:5E:80:1D:B6:3F:C6:58:72 Authority key identifier: AA:41:CA:81:D2:3E:F5:88:61:93:2A:AD:12:B3:16:90:DB:CF:10:03 Certificate issuer: /CN=A91A5744/serialNumber=AA41CA81D23EF58861932AAD12B31690DBCF1003 Certificate serial: 0D4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkHKgdI-9YhhkyqtErMWkNvPEAM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.mft Manifest number: 0D42 Signing time: Mon 12 Oct 2026 18:14:36 +0000 Manifest this update: Mon 12 Oct 2026 18:14:36 +0000 Manifest next update: Mon 19 Oct 2026 18:14:36 +0000 Files and hashes: 1: qkHKgdI-9YhhkyqtErMWkNvPEAM.crl (hash: zX7DYkM2kgidIrxtjzjc7K/BE6S+RIrzwnw1QCCI8DM=) 2: 220DBB66054011EA90A20C7EC4F9AE02.roa (hash: yHmDa4+sZL/pjlW06ii7KVBbPXMP7FrwSa8y+N4oSFo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.crl rsync://rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkHKgdI-9YhhkyqtErMWkNvPEAM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 18:14:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3402 (0xd4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5744, serialNumber=AA41CA81D23EF58861932AAD12B31690DBCF1003 Validity Not Before: Oct 12 18:14:36 2026 GMT Not After : Oct 19 18:14:36 2026 GMT Subject: CN=6acd238c-234b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:65:ae:77:4d:f5:f5:83:ce:62:68:c5:01:e4: b2:25:a1:d3:26:5e:c7:a7:e2:3f:12:30:b6:a3:f9: 9f:2a:df:3b:d7:83:de:1c:cc:f3:72:b8:b0:13:4f: 26:b1:6c:1f:ae:77:7a:a6:44:ec:4d:4f:db:38:b8: d8:34:04:46:46:f3:e0:60:c0:4a:7f:dc:2c:d2:dd: 80:05:1a:a8:3a:bb:bb:ff:f9:63:f1:00:b5:7d:65: 2a:31:d3:fa:0e:de:0e:18:88:2d:ab:53:07:91:e4: b4:05:ab:6b:c9:4f:cd:22:7a:93:40:5e:04:eb:a8: 1e:8a:ec:b6:21:b1:15:d7:8f:4d:66:90:2e:ad:d3: 54:fc:72:69:c4:46:17:72:99:86:d3:79:50:82:dd: 68:f9:d8:dc:79:d5:f1:84:c0:c7:d1:52:b0:4a:de: d5:43:a3:d9:09:0c:d4:3b:75:51:69:33:e6:e4:3d: 32:ce:71:f7:da:bd:33:e1:bf:8e:2b:25:52:ea:10: 1f:6e:c6:d8:c0:17:7a:82:ea:52:82:75:a1:48:b0: 7b:5c:6c:98:04:c7:0b:c0:4e:c2:2b:7a:5d:e3:d1: 8f:68:7e:4b:90:b1:84:45:a9:b8:6d:e5:6d:56:b0: 51:a6:e7:27:de:4e:d3:fe:b3:0c:40:26:c3:1e:e4: ad:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:F6:9C:35:C5:8E:58:B5:6F:02:7B:2C:5E:80:1D:B6:3F:C6:58:72 X509v3 Authority Key Identifier: keyid:AA:41:CA:81:D2:3E:F5:88:61:93:2A:AD:12:B3:16:90:DB:CF:10:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkHKgdI-9YhhkyqtErMWkNvPEAM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:e5:bb:1b:be:31:10:3d:03:94:c2:d1:3a:1a:e2:da:b6:f3: 13:20:93:a0:c8:81:9f:22:78:e1:94:82:86:79:b7:8a:b3:f9: 49:1d:a0:bf:19:d0:51:20:9c:81:7f:4a:35:ac:a5:c7:32:5e: 5d:0f:6b:c4:ab:1d:24:6a:6d:fb:d9:b1:32:16:b9:31:c0:0e: 0b:f4:59:61:52:1e:c8:4a:2b:f2:db:63:68:ad:da:65:08:39: 46:47:c7:54:a1:04:33:4f:f2:cd:44:eb:11:d8:a5:84:ef:96: ac:d9:e0:1e:f6:6c:70:ac:d1:5c:c0:24:59:9b:bd:cb:63:10: 48:92:ca:90:3d:63:22:40:8a:bf:ba:27:1e:39:98:02:8f:b7: b1:13:6a:b2:ac:7c:8c:8f:81:b2:5a:a0:63:2a:43:07:cb:dc: 0a:7c:54:b8:67:ea:da:9a:4d:7f:22:7c:a7:26:41:a8:1f:4e: ec:05:56:8d:07:40:2d:0d:d6:87:a3:97:63:ce:7d:8f:3d:2e: c0:9a:f5:28:cf:15:56:60:fc:f6:fb:15:8d:bb:2a:4d:ec:b2: 3a:a8:f7:5f:0f:71:1e:73:8d:a5:b8:72:15:f3:db:43:68:29: 2f:16:60:26:27:3b:80:ce:3a:c6:76:2c:fe:3f:db:e1:c6:28: 72:69:74:ce -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU3NDQxMTAvBgNVBAUTKEFBNDFDQTgxRDIzRUY1ODg2MTkzMkFBRDEyQjMxNjkw REJDRjEwMDMwHhcNMjYxMDEyMTgxNDM2WhcNMjYxMDE5MTgxNDM2WjAYMRYwFAYD VQQDEw02YWNkMjM4Yy0yMzRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqWWud0319YPOYmjFAeSyJaHTJl7Hp+I/EjC2o/mfKt8714PeHMzzcriwE08m sWwfrnd6pkTsTU/bOLjYNARGRvPgYMBKf9ws0t2ABRqoOru7//lj8QC1fWUqMdP6 Dt4OGIgtq1MHkeS0BatryU/NInqTQF4E66geiuy2IbEV149NZpAurdNU/HJpxEYX cpmG03lQgt1o+djcedXxhMDH0VKwSt7VQ6PZCQzUO3VRaTPm5D0yznH32r0z4b+O KyVS6hAfbsbYwBd6gupSgnWhSLB7XGyYBMcLwE7CK3pd49GPaH5LkLGERam4beVt VrBRpucn3k7T/rMMQCbDHuStxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIj2nDXF jli1bwJ7LF6AHbY/xlhyMB8GA1UdIwQYMBaAFKpByoHSPvWIYZMqrRKzFpDbzxAD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTc0NC8zOTdGNkNENDA1 MkUxMUVBOUQzMTQxNDVDNEY5QUUwMi9xa0hLZ2RJLTlZaGhreXF0RXJNV2tOdlBF QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FrSEtnZEktOVloaGt5cXRFck1Xa052UEVBTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTc0NC8zOTdGNkNENDA1MkUxMUVBOUQzMTQxNDVDNEY5QUUwMi9xa0hLZ2RJLTlZ aGhreXF0RXJNV2tOdlBFQU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKeW7G74xED0DlMLROhri2rbzEyCToMiBnyJ44ZSChnm3irP5SR2gvxnQUSCc gX9KNaylxzJeXQ9rxKsdJGpt+9mxMha5McAOC/RZYVIeyEor8ttjaK3aZQg5RkfH VKEEM0/yzUTrEdilhO+WrNngHvZscKzRXMAkWZu9y2MQSJLKkD1jIkCKv7onHjmY Ao+3sRNqsqx8jI+BslqgYypDB8vcCnxUuGfq2ppNfyJ8pyZBqB9O7AVWjQdALQ3W h6OXY859jz0uwJr1KM8VVmD89vsVjbsqTeyyOqj3Xw9xHnONpbhyFfPbQ2gpLxZg Jic7gM46xnYs/j/b4cYocml0zg== -----END CERTIFICATE-----Generated at Tue Oct 13 08:15:24 2026 by rpki-client