$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C3DEA/A1FFA810FC9D11F093E6B1695D6F56BC/q34sraVZrlbMJaH2mPiFCTmIifk.mft File: q34sraVZrlbMJaH2mPiFCTmIifk.mft (raw, json) Hash identifier: wz9dnydflx5VqvQ99DvfM2Ak1wmYzs8V7xpdkKja8Hg= Subject key identifier: DD:5E:EF:68:7E:59:62:8A:9B:E0:CB:33:F9:92:29:C1:F7:FC:6A:BF Authority key identifier: AB:7E:2C:AD:A5:59:AE:56:CC:25:A1:F6:98:F8:85:09:39:88:89:F9 Certificate issuer: /CN=A91C3DEA/serialNumber=AB7E2CADA559AE56CC25A1F698F88509398889F9 Certificate serial: 80 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q34sraVZrlbMJaH2mPiFCTmIifk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3DEA/A1FFA810FC9D11F093E6B1695D6F56BC/q34sraVZrlbMJaH2mPiFCTmIifk.mft Manifest number: 7D Signing time: Mon 21 Sep 2026 07:45:52 +0000 Manifest this update: Mon 21 Sep 2026 07:45:52 +0000 Manifest next update: Mon 28 Sep 2026 07:45:52 +0000 Files and hashes: 1: q34sraVZrlbMJaH2mPiFCTmIifk.crl (hash: UF/oq0Sm6Pz3eDJ73GTqvq0/Shsdzd0Q8djnezTEWQk=) 2: 18FB6A08FC9E11F09F0AC8105E6F56BC.roa (hash: +t1U6IIjEcIREP8ILzimtngggq+V6zIVth7nVFeYBis=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3DEA/A1FFA810FC9D11F093E6B1695D6F56BC/q34sraVZrlbMJaH2mPiFCTmIifk.crl rsync://rpki.apnic.net/member_repository/A91C3DEA/A1FFA810FC9D11F093E6B1695D6F56BC/q34sraVZrlbMJaH2mPiFCTmIifk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q34sraVZrlbMJaH2mPiFCTmIifk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 07:45:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 128 (0x80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3DEA, serialNumber=AB7E2CADA559AE56CC25A1F698F88509398889F9 Validity Not Before: Sep 21 07:45:52 2026 GMT Not After : Sep 28 07:45:52 2026 GMT Subject: CN=6ab0e0b0-3c64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f3:52:ad:c9:5c:04:76:17:82:12:44:d3:18: 35:44:56:b3:17:60:c8:f8:15:1e:34:3f:79:b0:c4: b4:c4:37:aa:b6:49:00:0d:2e:d6:d7:66:93:a5:01: 39:6d:7e:c2:5f:b8:63:54:d5:6f:09:c1:44:40:41: 12:14:d1:4a:c6:e2:46:fc:a1:da:f7:d0:31:99:53: 2d:df:63:87:58:01:75:e3:21:f4:1f:fe:aa:79:94: 60:0d:e1:dc:36:8f:d7:12:5f:5c:41:32:15:11:3e: 7d:43:fd:b9:1a:4f:29:32:cb:bf:b5:8c:55:29:c8: 2b:d1:c0:ab:58:fe:a2:a0:17:c5:fb:b7:a1:1e:93: c6:ab:18:72:73:28:7d:2e:8c:79:e3:31:0e:22:22: 66:94:5f:aa:20:84:98:5b:23:08:a7:99:98:45:e1: f5:01:90:65:43:82:d0:6b:cc:d5:c4:60:23:33:a6: a9:7e:db:56:6f:a9:0e:04:e4:67:4a:03:d2:6d:79: d1:1d:94:3d:f7:fc:70:73:4e:11:b9:b4:78:a6:00: 1d:0b:81:35:49:82:05:ab:9a:6c:56:59:d1:ac:4d: 8c:4a:db:c1:2d:e2:cf:aa:77:54:8c:f7:e3:d1:30: 23:92:66:70:b6:9f:2d:04:c3:28:4b:f6:0d:28:18: a2:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:5E:EF:68:7E:59:62:8A:9B:E0:CB:33:F9:92:29:C1:F7:FC:6A:BF X509v3 Authority Key Identifier: keyid:AB:7E:2C:AD:A5:59:AE:56:CC:25:A1:F6:98:F8:85:09:39:88:89:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3DEA/A1FFA810FC9D11F093E6B1695D6F56BC/q34sraVZrlbMJaH2mPiFCTmIifk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q34sraVZrlbMJaH2mPiFCTmIifk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3DEA/A1FFA810FC9D11F093E6B1695D6F56BC/q34sraVZrlbMJaH2mPiFCTmIifk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:ab:5a:09:65:9d:43:6d:85:9a:47:e1:51:88:22:58:3a:ff: c8:4a:38:a2:44:44:10:0b:6e:74:42:92:e4:c5:0c:7d:58:fd: 59:13:69:15:53:5d:35:06:30:09:0c:c7:c5:08:d2:af:df:cf: fd:41:94:16:66:5d:68:e8:4a:75:cf:14:1c:11:bd:19:00:47: 9a:15:5b:7e:5d:88:cf:73:f0:66:30:96:73:0c:06:21:f2:23: e8:3d:9a:94:5c:4d:41:3c:ee:ab:e1:84:17:85:7e:e7:25:0e: c5:67:01:87:41:1c:41:67:17:9a:00:0f:7e:e0:18:1f:dc:fb: 1d:84:34:e7:d4:b8:11:bd:07:b3:f2:1c:c9:44:eb:a3:6b:19: b3:42:c0:39:e0:29:09:f1:80:bd:68:ce:18:50:2b:af:5d:0d: e0:49:15:d3:0d:d8:84:76:94:24:42:7a:62:82:86:41:2a:0a: 81:4a:06:c2:ef:0f:96:52:ad:d1:21:6f:5a:04:bd:a0:0e:80: 25:81:79:44:d1:f8:e7:2b:2a:39:44:4d:bd:18:f5:05:0f:f4: a9:e9:90:73:8c:d0:43:06:5c:98:53:de:a6:02:b8:d1:64:b6: 9f:4f:6d:c2:c7:81:5d:d5:7f:f8:13:73:6f:e1:18:4c:de:1b: 68:ed:e9:51 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNERUExMTAvBgNVBAUTKEFCN0UyQ0FEQTU1OUFFNTZDQzI1QTFGNjk4Rjg4NTA5 Mzk4ODg5RjkwHhcNMjYwOTIxMDc0NTUyWhcNMjYwOTI4MDc0NTUyWjAYMRYwFAYD VQQDEw02YWIwZTBiMC0zYzY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp/NSrclcBHYXghJE0xg1RFazF2DI+BUeND95sMS0xDeqtkkADS7W12aTpQE5 bX7CX7hjVNVvCcFEQEESFNFKxuJG/KHa99AxmVMt32OHWAF14yH0H/6qeZRgDeHc No/XEl9cQTIVET59Q/25Gk8pMsu/tYxVKcgr0cCrWP6ioBfF+7ehHpPGqxhycyh9 Lox54zEOIiJmlF+qIISYWyMIp5mYReH1AZBlQ4LQa8zVxGAjM6apfttWb6kOBORn SgPSbXnRHZQ99/xwc04RubR4pgAdC4E1SYIFq5psVlnRrE2MStvBLeLPqndUjPfj 0TAjkmZwtp8tBMMoS/YNKBiiIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN1e72h+ WWKKm+DLM/mSKcH3/Gq/MB8GA1UdIwQYMBaAFKt+LK2lWa5WzCWh9pj4hQk5iIn5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0RFQS9BMUZGQTgxMEZD OUQxMUYwOTNFNkIxNjk1RDZGNTZCQy9xMzRzcmFWWnJsYk1KYUgybVBpRkNUbUlp ZmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3EzNHNyYVZacmxiTUphSDJtUGlGQ1RtSWlmay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0RFQS9BMUZGQTgxMEZDOUQxMUYwOTNFNkIxNjk1RDZGNTZCQy9xMzRzcmFWWnJs Yk1KYUgybVBpRkNUbUlpZmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsataCWWdQ22FmkfhUYgiWDr/yEo4okREEAtudEKS5MUMfVj9WRNpFVNdNQYw CQzHxQjSr9/P/UGUFmZdaOhKdc8UHBG9GQBHmhVbfl2Iz3PwZjCWcwwGIfIj6D2a lFxNQTzuq+GEF4V+5yUOxWcBh0EcQWcXmgAPfuAYH9z7HYQ059S4Eb0Hs/IcyUTr o2sZs0LAOeApCfGAvWjOGFArr10N4EkV0w3YhHaUJEJ6YoKGQSoKgUoGwu8PllKt 0SFvWgS9oA6AJYF5RNH45ysqOURNvRj1BQ/0qemQc4zQQwZcmFPepgK40WS2n09t wseBXdV/+BNzb+EYTN4baO3pUQ== -----END CERTIFICATE-----Generated at Tue Sep 22 14:13:28 2026 by rpki-client