$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft File: QOWCY5crniQUK6qbWvoFNIGjcZ4.mft (raw, json) Hash identifier: vZrr+XKY/ZWUXDY27VkxGmxU90tMqERHL+XEkMCjh1o= Subject key identifier: 0F:12:10:52:FE:CD:D1:6F:1A:44:E0:BC:F9:D6:03:DA:50:E5:63:EA Authority key identifier: 40:E5:82:63:97:2B:9E:24:14:2B:AA:9B:5A:FA:05:34:81:A3:71:9E Certificate issuer: /CN=A91C31A2/serialNumber=40E58263972B9E24142BAA9B5AFA053481A3719E Certificate serial: 0348 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft Manifest number: 032C Signing time: Sat 19 Sep 2026 00:59:31 +0000 Manifest this update: Sat 19 Sep 2026 00:59:31 +0000 Manifest next update: Sat 26 Sep 2026 00:59:31 +0000 Files and hashes: 1: QOWCY5crniQUK6qbWvoFNIGjcZ4.crl (hash: QwIr/QUzggomGaD/lJt5KCJzelEt3vAq6J2y9LMFo9I=) 2: 94855EA0357711EDB81B8A34C4F9AE02.roa (hash: WEQNjKUUarvWFek2QKEOk5VWDSS6XlisXMiNSu5mDsg=) 3: 4F9ACB7461F511F0A6467D40C4F9AE02.roa (hash: Kp6nhlIWiSEv3o8kjtdJQRQ6WBFrZkqBEq1j7bnbEso=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.crl rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 840 (0x348) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C31A2, serialNumber=40E58263972B9E24142BAA9B5AFA053481A3719E Validity Not Before: Sep 19 00:59:31 2026 GMT Not After : Sep 26 00:59:31 2026 GMT Subject: CN=6aadde73-00b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:6d:2e:8e:a6:3c:9c:5d:a3:3f:04:0a:52:c3: d9:14:79:48:a8:86:98:77:c8:28:58:b6:b8:84:e3: 86:2d:71:9b:77:d7:68:9c:b1:56:46:b0:1d:aa:9d: a9:e8:ea:c4:f6:fe:eb:6c:d8:1a:5a:38:81:b2:25: d9:1d:9b:83:93:3a:14:19:66:71:15:8b:09:f6:5e: 03:b1:09:c9:1d:0c:8e:a3:0f:61:3d:a9:5f:c8:a2: 96:ba:b5:46:98:70:eb:c8:13:7b:23:44:ce:4a:f6: 4a:96:e4:39:1d:ca:e4:3e:97:8b:1b:09:54:82:24: 6d:bb:26:c8:46:37:df:10:7f:20:c7:24:14:04:a9: f1:cc:ab:26:99:ec:70:33:a2:9a:8d:df:5f:6a:18: 7b:c3:42:7f:20:18:1a:5e:2b:b6:6d:4f:1f:67:12: 28:28:5f:f4:d4:17:7d:6c:62:68:a4:2e:38:dd:03: 8a:20:bd:91:4c:ea:c5:d5:84:55:ab:b1:8e:6d:45: 46:77:db:94:55:6c:34:c0:f5:e3:24:e6:96:d4:ab: a6:b5:74:02:e0:55:40:e6:82:77:a0:99:8b:03:75: 9a:ae:03:b8:68:35:60:18:34:0f:8c:ae:03:35:ad: 9f:b6:57:48:ac:db:3d:ac:f4:f8:e8:43:bf:7b:e3: 63:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:12:10:52:FE:CD:D1:6F:1A:44:E0:BC:F9:D6:03:DA:50:E5:63:EA X509v3 Authority Key Identifier: keyid:40:E5:82:63:97:2B:9E:24:14:2B:AA:9B:5A:FA:05:34:81:A3:71:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:91:d8:50:74:61:bb:a3:e2:f4:28:2b:8c:0f:a2:d9:c7:10: aa:39:80:23:fa:8b:a9:90:81:bb:de:15:dc:b7:b4:7b:74:b6: af:a0:88:6c:ad:46:c7:48:db:ec:bb:f9:34:60:af:b1:34:bf: 2a:7f:99:ac:4e:4a:f2:af:94:2a:b6:89:d0:cb:45:25:62:3d: 10:bc:4c:40:53:ef:f1:e4:b2:fe:f2:17:14:32:a6:5e:31:d3: ef:68:d3:81:8a:26:90:70:64:14:b3:b0:01:70:97:47:88:92: 34:d1:79:27:a7:3c:63:ae:9f:a7:d2:25:02:e1:43:1e:ea:30: 2c:4a:f3:0f:c9:bc:c0:f9:bf:7d:d8:aa:c1:64:82:88:ac:ab: 73:67:c2:84:6e:4f:16:b7:03:b0:c3:6d:b8:d3:d6:b5:30:d1: 45:6a:6c:d6:58:8d:b0:9e:16:06:c2:2e:84:2a:62:b4:b9:72: f3:9b:88:44:b7:00:0f:e0:30:74:2f:49:99:3a:ff:1b:7c:e8: 7f:a3:ea:b7:f4:4d:49:a0:68:78:39:cb:8a:87:30:c0:14:93: fb:74:cb:8c:78:2c:71:79:b8:9d:83:c8:e4:03:c8:03:c8:b1: ba:1f:0d:23:d2:e5:8a:e4:41:66:19:91:60:04:b6:57:fc:f7: d4:dd:3c:f1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA0gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzMxQTIxMTAvBgNVBAUTKDQwRTU4MjYzOTcyQjlFMjQxNDJCQUE5QjVBRkEwNTM0 ODFBMzcxOUUwHhcNMjYwOTE5MDA1OTMxWhcNMjYwOTI2MDA1OTMxWjAYMRYwFAYD VQQDEw02YWFkZGU3My0wMGI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzm0ujqY8nF2jPwQKUsPZFHlIqIaYd8goWLa4hOOGLXGbd9donLFWRrAdqp2p 6OrE9v7rbNgaWjiBsiXZHZuDkzoUGWZxFYsJ9l4DsQnJHQyOow9hPalfyKKWurVG mHDryBN7I0TOSvZKluQ5HcrkPpeLGwlUgiRtuybIRjffEH8gxyQUBKnxzKsmmexw M6Kajd9fahh7w0J/IBgaXiu2bU8fZxIoKF/01Bd9bGJopC443QOKIL2RTOrF1YRV q7GObUVGd9uUVWw0wPXjJOaW1KumtXQC4FVA5oJ3oJmLA3WargO4aDVgGDQPjK4D Na2ftldIrNs9rPT46EO/e+NjlwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA8SEFL+ zdFvGkTgvPnWA9pQ5WPqMB8GA1UdIwQYMBaAFEDlgmOXK54kFCuqm1r6BTSBo3Ge MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzFBMi9ENDc2RUQ3NjM1 NzIxMUVEQUU5Nzc4MzlDNEY5QUUwMi9RT1dDWTVjcm5pUVVLNnFiV3ZvRk5JR2pj WjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FPV0NZNWNybmlRVUs2cWJXdm9GTklHamNaNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzFBMi9ENDc2RUQ3NjM1NzIxMUVEQUU5Nzc4MzlDNEY5QUUwMi9RT1dDWTVjcm5p UVVLNnFiV3ZvRk5JR2pjWjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEZHYUHRhu6Pi9CgrjA+i2ccQqjmAI/qLqZCBu94V3Le0e3S2r6CIbK1Gx0jb 7Lv5NGCvsTS/Kn+ZrE5K8q+UKraJ0MtFJWI9ELxMQFPv8eSy/vIXFDKmXjHT72jT gYomkHBkFLOwAXCXR4iSNNF5J6c8Y66fp9IlAuFDHuowLErzD8m8wPm/fdiqwWSC iKyrc2fChG5PFrcDsMNtuNPWtTDRRWps1liNsJ4WBsIuhCpitLly85uIRLcAD+Aw dC9JmTr/G3zof6Pqt/RNSaBoeDnLiocwwBST+3TLjHgscXm4nYPI5APIA8ixuh8N I9LliuRBZhmRYAS2V/z31N088Q== -----END CERTIFICATE-----Generated at Sun Sep 20 23:16:27 2026 by rpki-client