$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AF0E8/45796AD21DA311E29FFB8C9808B02CD2/-qIKGvsgkct_URR4g_NkpFMJQTE.mft File: -qIKGvsgkct_URR4g_NkpFMJQTE.mft (raw, json) Hash identifier: kv84S9xGL0/b1F7M0orUtB8K2ReADWCZHNVDmsCJL+w= Subject key identifier: 97:62:46:F2:88:37:6C:B9:00:C7:60:BB:73:89:9B:99:63:9D:1F:F5 Authority key identifier: FA:A2:0A:1A:FB:20:91:CB:7F:51:14:78:83:F3:64:A4:53:09:41:31 Certificate issuer: /CN=A91AF0E8/serialNumber=FAA20A1AFB2091CB7F51147883F364A453094131 Certificate serial: 3596 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-qIKGvsgkct_URR4g_NkpFMJQTE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF0E8/45796AD21DA311E29FFB8C9808B02CD2/-qIKGvsgkct_URR4g_NkpFMJQTE.mft Manifest number: 3588 Signing time: Sun 20 Sep 2026 15:04:53 +0000 Manifest this update: Sun 20 Sep 2026 15:04:53 +0000 Manifest next update: Sun 27 Sep 2026 15:04:53 +0000 Files and hashes: 1: -qIKGvsgkct_URR4g_NkpFMJQTE.crl (hash: qMnu6kSco1qAg79MtCdtX/Wx8XSzTo2FU41EPvSF7zw=) 2: 0A956A80B48711EC83327546C4F9AE02.roa (hash: DWDLfS9VFoRUspo4gPt0SLH/400cssY5io0TF9oRBK0=) 3: RrKb9OA4qZhDi45FR8cCEU4H8YI.asa (hash: Qgr7dmGPHjgJ8QOrzeOvLzb+XS21ZRwZ3oyYq/vSi8I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF0E8/45796AD21DA311E29FFB8C9808B02CD2/-qIKGvsgkct_URR4g_NkpFMJQTE.crl rsync://rpki.apnic.net/member_repository/A91AF0E8/45796AD21DA311E29FFB8C9808B02CD2/-qIKGvsgkct_URR4g_NkpFMJQTE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-qIKGvsgkct_URR4g_NkpFMJQTE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 15:04:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13718 (0x3596) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF0E8, serialNumber=FAA20A1AFB2091CB7F51147883F364A453094131 Validity Not Before: Sep 20 15:04:53 2026 GMT Not After : Sep 27 15:04:53 2026 GMT Subject: CN=6aaff615-d0d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d3:3a:30:9b:39:52:ec:71:39:6d:3d:78:64: 2d:5a:83:5f:4b:a9:ba:8b:fc:bb:bd:0a:73:b2:f0: 2f:62:94:d7:79:12:97:f1:44:02:0d:25:8d:df:94: ba:1b:92:e1:69:d4:87:1d:b0:8e:97:92:9e:f5:d1: 0b:80:99:db:e5:57:a0:fc:be:c1:fa:ee:b5:d2:33: 59:06:b5:8a:89:eb:b8:af:1f:11:5e:b5:75:8d:3d: c2:64:ea:ce:fa:d8:02:56:cc:02:df:cc:f7:ae:5e: ec:4f:9a:45:3c:af:15:12:a5:60:25:cb:ae:c3:16: 22:b7:04:0d:eb:6f:b9:b3:a1:6b:5b:3c:51:32:5b: 55:5e:52:1b:7c:b4:35:93:34:cd:95:a6:41:78:43: 3a:e0:b3:33:24:69:f2:4a:a3:35:01:9b:43:58:92: 33:2d:ae:05:75:2b:f5:b0:3b:8b:0e:a2:65:b9:cf: a9:ae:d8:a9:49:bb:a0:de:29:4b:2b:eb:5d:59:b4: c0:dd:e5:27:65:60:4c:68:05:f7:69:06:27:55:94: c8:4e:41:f3:16:cb:26:eb:25:a1:7a:25:c7:c1:ec: 82:bf:02:0d:88:46:0e:52:96:f6:f9:dd:ee:27:8e: 50:e5:52:a1:98:57:61:79:d2:89:d7:2a:28:c2:45: d8:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:62:46:F2:88:37:6C:B9:00:C7:60:BB:73:89:9B:99:63:9D:1F:F5 X509v3 Authority Key Identifier: keyid:FA:A2:0A:1A:FB:20:91:CB:7F:51:14:78:83:F3:64:A4:53:09:41:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF0E8/45796AD21DA311E29FFB8C9808B02CD2/-qIKGvsgkct_URR4g_NkpFMJQTE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-qIKGvsgkct_URR4g_NkpFMJQTE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF0E8/45796AD21DA311E29FFB8C9808B02CD2/-qIKGvsgkct_URR4g_NkpFMJQTE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:0c:7d:ad:1a:55:07:2b:f4:5e:8b:ca:90:c4:81:3b:a5:1b: ac:7b:50:d6:36:8a:6d:8c:94:28:bb:23:94:da:c2:7b:db:ac: c0:67:aa:1c:7f:97:56:40:5c:d3:79:6e:82:f9:5d:22:2f:f9: 80:f2:61:cf:27:73:14:8b:7e:c4:cd:64:0d:d0:cd:b7:d5:13: 86:af:5b:7a:36:32:44:57:2b:99:21:d9:ce:f2:08:c4:2f:74: a4:65:8e:9b:a7:28:e6:ea:25:59:1e:42:87:48:70:b0:85:6c: fe:8b:d2:98:5b:ad:d7:ab:32:e1:e9:e8:b2:d9:e5:0d:ae:e4: 91:6e:d6:64:86:f5:ad:9b:9b:cd:4b:a6:79:3f:40:ef:9f:0b: d0:e2:8a:5d:48:6c:5e:10:fa:0b:b5:02:f0:1e:11:af:0f:e6: b6:33:ca:a8:bb:7d:8a:54:0b:69:df:11:55:0f:b3:1c:b6:66: f0:c1:65:a8:4a:8c:a9:72:90:a7:5f:a2:79:64:15:ad:b2:d2: 31:cc:d1:56:45:76:00:e8:cd:e1:e7:91:07:02:ce:4c:80:ce: e3:31:95:c7:16:e0:79:fa:56:f7:02:a1:da:d7:09:27:64:a2: c1:07:61:6a:30:ae:9e:40:38:7b:bd:bf:5f:f9:08:b6:ea:3b: 4a:b3:5f:15 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYwRTgxMTAvBgNVBAUTKEZBQTIwQTFBRkIyMDkxQ0I3RjUxMTQ3ODgzRjM2NEE0 NTMwOTQxMzEwHhcNMjYwOTIwMTUwNDUzWhcNMjYwOTI3MTUwNDUzWjAYMRYwFAYD VQQDEw02YWFmZjYxNS1kMGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmdM6MJs5UuxxOW09eGQtWoNfS6m6i/y7vQpzsvAvYpTXeRKX8UQCDSWN35S6 G5LhadSHHbCOl5Ke9dELgJnb5Veg/L7B+u610jNZBrWKieu4rx8RXrV1jT3CZOrO +tgCVswC38z3rl7sT5pFPK8VEqVgJcuuwxYitwQN62+5s6FrWzxRMltVXlIbfLQ1 kzTNlaZBeEM64LMzJGnySqM1AZtDWJIzLa4FdSv1sDuLDqJluc+prtipSbug3ilL K+tdWbTA3eUnZWBMaAX3aQYnVZTITkHzFssm6yWheiXHweyCvwINiEYOUpb2+d3u J45Q5VKhmFdhedKJ1yoowkXYawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJdiRvKI N2y5AMdgu3OJm5ljnR/1MB8GA1UdIwQYMBaAFPqiChr7IJHLf1EUeIPzZKRTCUEx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjBFOC80NTc5NkFEMjFE QTMxMUUyOUZGQjhDOTgwOEIwMkNEMi8tcUlLR3ZzZ2tjdF9VUlI0Z19Oa3BGTUpR VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1xSUtHdnNna2N0X1VSUjRnX05rcEZNSlFURS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjBFOC80NTc5NkFEMjFEQTMxMUUyOUZGQjhDOTgwOEIwMkNEMi8tcUlLR3ZzZ2tj dF9VUlI0Z19Oa3BGTUpRVEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgQx9rRpVByv0XovKkMSBO6UbrHtQ1jaKbYyUKLsjlNrCe9uswGeqHH+XVkBc 03lugvldIi/5gPJhzydzFIt+xM1kDdDNt9UThq9bejYyRFcrmSHZzvIIxC90pGWO m6co5uolWR5Ch0hwsIVs/ovSmFut16sy4enostnlDa7kkW7WZIb1rZubzUumeT9A 758L0OKKXUhsXhD6C7UC8B4Rrw/mtjPKqLt9ilQLad8RVQ+zHLZm8MFlqEqMqXKQ p1+ieWQVrbLSMczRVkV2AOjN4eeRBwLOTIDO4zGVxxbgefpW9wKh2tcJJ2SiwQdh ajCunkA4e72/X/kItuo7SrNfFQ== -----END CERTIFICATE-----Generated at Tue Sep 22 15:14:54 2026 by rpki-client