$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.mft File: QcdXFCmaV43RkP0fcwlVsf2awfQ.mft (raw, json) Hash identifier: rhGbCSmlrLHWcQ+V77TwEk4g3Z12QFPpA5IoVQmL/oM= Subject key identifier: 47:45:20:B6:82:57:FC:2B:9E:EB:E2:F2:EA:03:16:D3:75:F7:22:25 Authority key identifier: 41:C7:57:14:29:9A:57:8D:D1:90:FD:1F:73:09:55:B1:FD:9A:C1:F4 Certificate issuer: /CN=A91BEA8B/serialNumber=41C75714299A578DD190FD1F730955B1FD9AC1F4 Certificate serial: 010A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QcdXFCmaV43RkP0fcwlVsf2awfQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.mft Manifest number: FC Signing time: Sat 19 Sep 2026 06:29:19 +0000 Manifest this update: Sat 19 Sep 2026 06:29:19 +0000 Manifest next update: Sat 26 Sep 2026 06:29:19 +0000 Files and hashes: 1: QcdXFCmaV43RkP0fcwlVsf2awfQ.crl (hash: 1SSYpIRHfc5qmuzJTBI9+PJnHPTTQgQJBUWLiC0JEY8=) 2: B87594FC08B311F1954B37591C3D8C67.roa (hash: H6vYE+gxhuAKlVgXnsRMmqmTt0CZdQJgg6x87GzOftE=) 3: C425CEE64B8211F0A94CFD82C4F9AE02.roa (hash: XTg2evwkR4VvSVQWu251hii2ssGz9ZlroApKBF0azrE=) 4: D999F880AF4411F0A866CC48C4F9AE02.roa (hash: 2rQsXi5kIwQ2IE+rYx9M2psZsNK3ECigUyxfaVNd7kI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.crl rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QcdXFCmaV43RkP0fcwlVsf2awfQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 266 (0x10a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEA8B, serialNumber=41C75714299A578DD190FD1F730955B1FD9AC1F4 Validity Not Before: Sep 19 06:29:19 2026 GMT Not After : Sep 26 06:29:19 2026 GMT Subject: CN=6aae2bbf-72fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:72:e8:82:29:d7:b6:af:53:2a:db:e8:56:49: e2:03:1e:e3:4c:5e:3e:39:8b:cf:37:12:f5:b2:ea: 71:b6:6d:d2:75:60:79:4b:f0:83:52:a6:44:8a:9a: e8:c1:eb:26:01:e8:98:8f:d4:1a:d2:ac:60:e0:37: 0d:e6:8f:86:b1:64:c5:ba:02:6f:0f:f9:0d:87:cc: d8:ab:ef:08:cb:9d:86:48:e0:90:6e:68:fd:2f:2f: 34:ad:f3:3f:f9:10:63:ce:1d:f3:be:ed:75:d8:87: 2c:ab:e3:f8:fc:e5:5b:08:fd:6a:e9:a9:60:d1:28: d4:0e:66:83:f3:45:ab:ac:3f:11:e0:01:1e:63:58: 4f:d6:2d:f6:c1:4c:22:a9:08:3f:ab:62:22:33:64: 02:2f:3f:8a:a7:91:fc:96:61:d0:c1:18:c1:11:c4: a3:44:1a:53:6f:3e:3a:d4:be:b7:bc:b4:bf:78:65: 7f:06:7b:f8:70:54:54:36:50:d9:9e:0b:45:fc:60: bd:1e:f2:7c:19:7a:67:85:96:31:85:bd:86:12:34: ca:3c:82:b1:12:b9:9e:83:5a:e2:b3:8c:18:f9:3b: bb:b3:be:0b:f5:84:8e:32:0a:5e:0c:7d:00:73:7b: b5:00:9f:6d:66:1f:43:bf:0d:5e:3d:c0:6a:a0:d9: c5:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:45:20:B6:82:57:FC:2B:9E:EB:E2:F2:EA:03:16:D3:75:F7:22:25 X509v3 Authority Key Identifier: keyid:41:C7:57:14:29:9A:57:8D:D1:90:FD:1F:73:09:55:B1:FD:9A:C1:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QcdXFCmaV43RkP0fcwlVsf2awfQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:9c:1d:42:45:8d:e3:f3:c7:a2:1c:cc:05:83:ec:9d:1a:66: 97:34:15:fd:4c:56:5e:3c:d9:22:27:aa:d4:c2:a7:1f:a6:80: 7b:d0:42:68:bb:fe:1a:4c:7b:b9:d3:4e:f1:d4:5d:a4:3c:d1: ba:e6:d5:e9:43:c4:b4:cf:ae:40:a2:2f:7f:32:6b:b5:a8:2c: 61:4c:75:65:95:2f:26:77:53:f6:91:60:7a:53:e8:d8:a5:13: fb:9b:9f:26:23:c0:3e:04:3b:a1:22:90:bc:7e:9f:f0:3c:b0: 8d:06:fa:8b:af:c4:0b:be:ea:d9:7a:33:b8:d6:8b:71:a9:0f: 0d:96:96:c1:30:53:d7:81:a5:9d:ec:7b:3b:7a:b7:1b:64:55: 9d:ef:02:34:70:57:8e:ed:f3:31:3a:6a:f5:a1:4f:fd:85:fc: b6:c8:62:4d:51:30:03:cf:ad:cf:4a:dd:25:58:eb:11:08:b4: 57:5d:98:76:54:b4:72:8a:28:69:68:67:28:18:d8:e7:12:ae: 20:98:15:f4:be:19:b1:43:05:c7:10:4a:92:58:ee:bc:33:91: 69:64:27:94:1b:a5:a4:6f:99:d5:ab:a5:07:0a:bc:96:ed:df: 18:f6:28:dd:42:a6:be:c9:86:c0:66:bc:7e:bc:4f:22:db:8e: 33:e0:8f:44 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkVBOEIxMTAvBgNVBAUTKDQxQzc1NzE0Mjk5QTU3OEREMTkwRkQxRjczMDk1NUIx RkQ5QUMxRjQwHhcNMjYwOTE5MDYyOTE5WhcNMjYwOTI2MDYyOTE5WjAYMRYwFAYD VQQDEw02YWFlMmJiZi03MmZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs3LoginXtq9TKtvoVkniAx7jTF4+OYvPNxL1supxtm3SdWB5S/CDUqZEipro wesmAeiYj9Qa0qxg4DcN5o+GsWTFugJvD/kNh8zYq+8Iy52GSOCQbmj9Ly80rfM/ +RBjzh3zvu112Icsq+P4/OVbCP1q6alg0SjUDmaD80WrrD8R4AEeY1hP1i32wUwi qQg/q2IiM2QCLz+Kp5H8lmHQwRjBEcSjRBpTbz461L63vLS/eGV/Bnv4cFRUNlDZ ngtF/GC9HvJ8GXpnhZYxhb2GEjTKPIKxErmeg1ris4wY+Tu7s74L9YSOMgpeDH0A c3u1AJ9tZh9Dvw1ePcBqoNnF7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEdFILaC V/wrnuvi8uoDFtN19yIlMB8GA1UdIwQYMBaAFEHHVxQpmleN0ZD9H3MJVbH9msH0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUE4Qi9CQTA4QUE0MjRC ODExMUYwOEY2NTUwN0VDNEY5QUUwMi9RY2RYRkNtYVY0M1JrUDBmY3dsVnNmMmF3 ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FjZFhGQ21hVjQzUmtQMGZjd2xWc2YyYXdmUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RUE4Qi9CQTA4QUE0MjRCODExMUYwOEY2NTUwN0VDNEY5QUUwMi9RY2RYRkNtYVY0 M1JrUDBmY3dsVnNmMmF3ZlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADJwdQkWN4/PHohzMBYPsnRpmlzQV/UxWXjzZIieq1MKnH6aAe9BCaLv+Gkx7 udNO8dRdpDzRuubV6UPEtM+uQKIvfzJrtagsYUx1ZZUvJndT9pFgelPo2KUT+5uf JiPAPgQ7oSKQvH6f8DywjQb6i6/EC77q2XozuNaLcakPDZaWwTBT14Glnex7O3q3 G2RVne8CNHBXju3zMTpq9aFP/YX8tshiTVEwA8+tz0rdJVjrEQi0V12YdlS0cooo aWhnKBjY5xKuIJgV9L4ZsUMFxxBKkljuvDORaWQnlBulpG+Z1aulBwq8lu3fGPYo 3UKmvsmGwGa8frxPItuOM+CPRA== -----END CERTIFICATE-----Generated at Mon Sep 21 05:22:02 2026 by rpki-client