$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.mft File: q1PZkoECuRnbfFRlyN1f8mZ0Q7M.mft (raw, json) Hash identifier: Qeu8sJD8h9fnInH3rz/qulwEBWhmaDiZcUu0BTFFdV8= Subject key identifier: 2B:79:1F:E7:E5:DD:21:9B:D7:23:85:D1:62:0F:89:BE:64:3C:A9:C8 Authority key identifier: AB:53:D9:92:81:02:B9:19:DB:7C:54:65:C8:DD:5F:F2:66:74:43:B3 Certificate issuer: /CN=A91C7E5B/serialNumber=AB53D9928102B919DB7C5465C8DD5FF2667443B3 Certificate serial: 0111 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.mft Manifest number: 0104 Signing time: Sat 19 Sep 2026 06:22:55 +0000 Manifest this update: Sat 19 Sep 2026 06:22:54 +0000 Manifest next update: Sat 26 Sep 2026 06:22:54 +0000 Files and hashes: 1: q1PZkoECuRnbfFRlyN1f8mZ0Q7M.crl (hash: VG4dxNB19h1K/pPxKyHX9JatXPjTh5IZFkHFzncnFOo=) 2: C3DCFE54EB2911F0BD7173483B6F56BC.roa (hash: hZQbMZ8wBZ3CYwiXTphoVD9Fsf34oefbQ7yrGVzjULw=) 3: 9BE1C9D08C4511F1BC8E54F45411F970.roa (hash: Sbq/BmihJlFQZ8/ZS3AcJsWDmVD1eWHySOf7VOwUdak=) 4: 1FC17CE2EB2D11F0971959663D6F56BC.roa (hash: aI9DlzDvvLFMVVyO/coQSpjqyPYkqJnDOZuQHUXRHk8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.crl rsync://rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 273 (0x111) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7E5B, serialNumber=AB53D9928102B919DB7C5465C8DD5FF2667443B3 Validity Not Before: Sep 19 06:22:54 2026 GMT Not After : Sep 26 06:22:54 2026 GMT Subject: CN=6aae2a3e-9fc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a6:c6:7c:69:36:82:6c:71:a8:b6:fb:27:bd: 58:7b:00:d6:06:0c:f4:ca:68:2e:72:f3:99:39:19: 73:b8:47:c2:ec:52:4b:3b:32:a1:2d:c9:a7:78:98: 1e:f1:1d:0a:7f:64:e1:4d:e9:9b:4e:7a:44:a6:d6: e5:b7:9c:62:f8:f5:82:66:86:8d:36:87:20:e2:07: 9e:e2:c8:c9:10:2f:8d:00:b0:07:cb:ca:03:99:0f: 03:85:6d:92:68:e1:b7:15:fa:85:68:48:52:ea:a6: 2a:51:91:b1:0e:16:14:d3:d0:7e:45:45:60:2d:7a: 88:70:db:9b:fa:5a:cb:77:3a:7a:54:3c:cc:ca:ad: df:9e:9e:09:15:d5:ff:4b:b1:4b:a9:ba:31:86:14: c5:1b:11:a6:a8:ad:9d:28:fc:cd:44:7c:fd:fa:e9: ba:9d:2b:f1:51:6a:64:5b:1f:c8:33:24:87:61:29: 0a:4c:ab:b1:fd:07:87:a7:53:12:69:c9:c0:bb:65: 78:88:69:a2:77:bc:24:6a:56:5d:3a:f4:b5:b2:4a: c8:84:14:8b:d4:7e:ab:4e:6f:ac:bf:c6:ad:b7:f6: 54:7d:99:4f:30:08:88:bf:1d:f1:96:71:7e:0d:e2: 0f:e3:5c:8a:84:6c:a7:47:22:4f:84:81:2f:0b:59: bd:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:79:1F:E7:E5:DD:21:9B:D7:23:85:D1:62:0F:89:BE:64:3C:A9:C8 X509v3 Authority Key Identifier: keyid:AB:53:D9:92:81:02:B9:19:DB:7C:54:65:C8:DD:5F:F2:66:74:43:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:23:32:3e:c7:60:e7:a6:35:af:f0:db:8c:f7:3f:7d:a5:bd: 5c:2b:0b:5f:b3:f2:e4:8e:0c:f8:e3:aa:4c:a0:30:6a:df:b9: 44:2f:bb:f6:79:ce:01:a9:3d:35:ed:dd:59:7b:53:17:90:ab: 15:32:a5:14:1f:07:63:3b:ec:c5:6e:9b:ad:7e:41:af:2e:8b: 14:39:ff:f2:b1:82:2d:4e:c4:1c:4f:66:1a:b5:86:3b:d7:68: 92:1d:1a:cc:38:5d:d4:4f:c0:99:61:7a:46:26:f9:c2:2b:e3: 2b:60:8d:c9:25:9e:6a:95:2f:a6:7c:20:0f:7c:fe:dc:ca:b9: 40:4d:ee:8b:44:81:0e:43:10:0b:5e:ca:e0:50:34:47:4c:ef: 5c:ce:53:ab:72:ec:cb:e5:1e:97:cb:75:d6:ab:c3:7a:4b:df: ea:6d:17:ba:3f:88:71:81:9d:fc:40:25:16:e0:70:e7:df:64: 4b:76:fa:35:18:10:fe:11:28:13:ba:07:8a:ab:07:2e:67:55: 63:f2:56:01:a3:75:f5:ef:9c:76:29:3e:19:99:bd:1a:06:a6: b5:af:dd:94:66:34:8f:c8:d4:f6:18:ed:4a:ca:48:6e:29:33: 39:ec:4d:07:57:30:81:f7:0b:ae:a2:4d:c7:ab:3d:e5:ec:5f: 95:3d:d6:3f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdFNUIxMTAvBgNVBAUTKEFCNTNEOTkyODEwMkI5MTlEQjdDNTQ2NUM4REQ1RkYy NjY3NDQzQjMwHhcNMjYwOTE5MDYyMjU0WhcNMjYwOTI2MDYyMjU0WjAYMRYwFAYD VQQDEw02YWFlMmEzZS05ZmM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1abGfGk2gmxxqLb7J71YewDWBgz0ymgucvOZORlzuEfC7FJLOzKhLcmneJge 8R0Kf2ThTembTnpEptblt5xi+PWCZoaNNocg4gee4sjJEC+NALAHy8oDmQ8DhW2S aOG3FfqFaEhS6qYqUZGxDhYU09B+RUVgLXqIcNub+lrLdzp6VDzMyq3fnp4JFdX/ S7FLqboxhhTFGxGmqK2dKPzNRHz9+um6nSvxUWpkWx/IMySHYSkKTKux/QeHp1MS acnAu2V4iGmid7wkalZdOvS1skrIhBSL1H6rTm+sv8att/ZUfZlPMAiIvx3xlnF+ DeIP41yKhGynRyJPhIEvC1m9yQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCt5H+fl 3SGb1yOF0WIPib5kPKnIMB8GA1UdIwQYMBaAFKtT2ZKBArkZ23xUZcjdX/JmdEOz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0U1Qi9EODRFN0JGMjND NkUxMUYwOUQ3NkEyNERDNEY5QUUwMi9xMVBaa29FQ3VSbmJmRlJseU4xZjhtWjBR N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ExUFprb0VDdVJuYmZGUmx5TjFmOG1aMFE3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0U1Qi9EODRFN0JGMjNDNkUxMUYwOUQ3NkEyNERDNEY5QUUwMi9xMVBaa29FQ3VS bmJmRlJseU4xZjhtWjBRN00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeSMyPsdg56Y1r/DbjPc/faW9XCsLX7Py5I4M+OOqTKAwat+5RC+79nnOAak9 Ne3dWXtTF5CrFTKlFB8HYzvsxW6brX5Bry6LFDn/8rGCLU7EHE9mGrWGO9dokh0a zDhd1E/AmWF6Rib5wivjK2CNySWeapUvpnwgD3z+3Mq5QE3ui0SBDkMQC17K4FA0 R0zvXM5Tq3Lsy+Uel8t11qvDekvf6m0Xuj+IcYGd/EAlFuBw599kS3b6NRgQ/hEo E7oHiqsHLmdVY/JWAaN19e+cdik+GZm9Ggamta/dlGY0j8jU9hjtSspIbikzOexN B1cwgfcLrqJNx6s95exflT3WPw== -----END CERTIFICATE-----Generated at Sun Sep 20 18:27:23 2026 by rpki-client