$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.mft File: q1PZkoECuRnbfFRlyN1f8mZ0Q7M.mft (raw, json) Hash identifier: lsThtbQ7TRMa6SOd8sna/DK9FP2dGe0a8kthgPhKFK0= Subject key identifier: 41:C6:E1:00:1B:F3:03:A0:BA:1D:2A:F5:AE:78:F2:D2:64:8D:30:9D Authority key identifier: AB:53:D9:92:81:02:B9:19:DB:7C:54:65:C8:DD:5F:F2:66:74:43:B3 Certificate issuer: /CN=A91C7E5B/serialNumber=AB53D9928102B919DB7C5465C8DD5FF2667443B3 Certificate serial: 0112 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.mft Manifest number: 0105 Signing time: Mon 21 Sep 2026 06:16:48 +0000 Manifest this update: Mon 21 Sep 2026 06:16:47 +0000 Manifest next update: Mon 28 Sep 2026 06:16:47 +0000 Files and hashes: 1: q1PZkoECuRnbfFRlyN1f8mZ0Q7M.crl (hash: 5fTCX8AotZaSdLfP2EOzc5ZmK9LPgDNXL+xpF55gHRc=) 2: C3DCFE54EB2911F0BD7173483B6F56BC.roa (hash: hZQbMZ8wBZ3CYwiXTphoVD9Fsf34oefbQ7yrGVzjULw=) 3: 9BE1C9D08C4511F1BC8E54F45411F970.roa (hash: Sbq/BmihJlFQZ8/ZS3AcJsWDmVD1eWHySOf7VOwUdak=) 4: 1FC17CE2EB2D11F0971959663D6F56BC.roa (hash: aI9DlzDvvLFMVVyO/coQSpjqyPYkqJnDOZuQHUXRHk8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.crl rsync://rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 06:16:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 274 (0x112) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7E5B, serialNumber=AB53D9928102B919DB7C5465C8DD5FF2667443B3 Validity Not Before: Sep 21 06:16:47 2026 GMT Not After : Sep 28 06:16:47 2026 GMT Subject: CN=6ab0cbd0-abf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a2:53:9e:61:8e:5c:be:13:a7:17:b7:2f:70: 66:d0:4d:57:00:af:4c:7f:98:a7:68:90:71:de:71: a2:cd:ac:19:9e:7f:9b:fe:e8:13:e2:c7:35:7c:2b: a5:e0:4e:57:92:1b:8c:1f:0f:22:8a:dc:22:4e:20: 80:eb:92:02:be:8a:47:e1:06:ad:1b:9e:79:6f:2f: 54:4e:fb:24:df:e0:c6:55:2f:a9:64:2b:ff:68:2f: 13:15:ba:a9:29:3d:62:35:ee:5b:3f:65:11:15:27: f2:d5:22:f9:8a:28:a6:9d:83:f1:46:89:03:e1:a8: fc:87:46:53:dd:3f:38:d5:fd:23:30:b2:1d:be:d5: 1f:c5:75:06:29:70:60:95:ce:94:5c:ef:8c:07:bc: 92:12:ed:e3:12:7f:ce:6a:36:89:44:26:84:58:f3: 54:a1:c9:5e:95:54:5f:7b:d8:d4:ed:5f:fa:f3:de: 4c:b4:71:3b:23:16:d6:a9:15:fd:7c:ae:48:56:e5: 7a:c1:68:90:a3:83:10:73:e0:6e:b6:e7:a0:d2:cb: 21:57:11:a5:64:a5:e9:89:9a:03:07:73:3d:bf:1a: 35:2d:8f:19:c4:cd:28:3f:4d:54:d9:10:c7:9b:d3: b3:b3:74:69:17:63:6b:3d:43:bd:84:e8:d1:69:77: cb:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:C6:E1:00:1B:F3:03:A0:BA:1D:2A:F5:AE:78:F2:D2:64:8D:30:9D X509v3 Authority Key Identifier: keyid:AB:53:D9:92:81:02:B9:19:DB:7C:54:65:C8:DD:5F:F2:66:74:43:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:34:f5:5c:65:57:9b:16:d6:19:e1:8f:26:4d:ec:b8:57:92: ca:9f:b6:c0:77:28:8c:96:01:08:cd:50:0d:83:34:87:2e:b6: bf:3c:bc:6f:e0:29:45:2c:13:c5:71:42:25:1a:80:dd:d0:d7: cb:6f:76:57:88:77:be:ab:db:6c:af:33:1d:b4:b6:6a:d9:1b: 60:7c:70:59:77:32:89:19:24:8f:b7:51:47:31:36:7d:74:62: 17:65:de:de:dd:8f:cb:37:1a:4c:d4:09:d7:f1:d2:f5:c8:81: 92:02:02:16:8e:8d:60:4e:04:03:e6:f1:5c:a0:41:a8:c9:d7: ea:4b:0f:20:f9:55:05:73:54:f0:ad:88:bf:77:c3:0c:64:f4: 42:da:3f:1e:9e:9c:a5:4f:ac:1b:fd:24:e0:77:92:34:04:c7: c6:c9:34:b2:b2:39:24:07:42:ed:34:97:3f:67:33:4d:d2:cd: fd:c5:31:6f:5f:68:fb:83:be:55:b7:4b:48:10:99:98:54:93: 08:d9:63:fa:cb:8f:2f:8c:9e:6d:ee:c6:ca:b9:b2:d6:9f:19: fc:bf:f6:f6:92:cc:0d:cf:03:a8:cd:f7:1d:da:9b:9c:a0:6d: 8b:1c:5b:14:73:b6:ec:78:95:c7:cb:b7:c3:6d:87:48:fa:51: 7e:28:dc:b2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICARIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdFNUIxMTAvBgNVBAUTKEFCNTNEOTkyODEwMkI5MTlEQjdDNTQ2NUM4REQ1RkYy NjY3NDQzQjMwHhcNMjYwOTIxMDYxNjQ3WhcNMjYwOTI4MDYxNjQ3WjAYMRYwFAYD VQQDEw02YWIwY2JkMC1hYmY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvqJTnmGOXL4Tpxe3L3Bm0E1XAK9Mf5inaJBx3nGizawZnn+b/ugT4sc1fCul 4E5XkhuMHw8iitwiTiCA65ICvopH4QatG555by9UTvsk3+DGVS+pZCv/aC8TFbqp KT1iNe5bP2URFSfy1SL5iiimnYPxRokD4aj8h0ZT3T841f0jMLIdvtUfxXUGKXBg lc6UXO+MB7ySEu3jEn/OajaJRCaEWPNUoclelVRfe9jU7V/6895MtHE7IxbWqRX9 fK5IVuV6wWiQo4MQc+Butueg0sshVxGlZKXpiZoDB3M9vxo1LY8ZxM0oP01U2RDH m9Ozs3RpF2NrPUO9hOjRaXfLVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEHG4QAb 8wOguh0q9a548tJkjTCdMB8GA1UdIwQYMBaAFKtT2ZKBArkZ23xUZcjdX/JmdEOz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0U1Qi9EODRFN0JGMjND NkUxMUYwOUQ3NkEyNERDNEY5QUUwMi9xMVBaa29FQ3VSbmJmRlJseU4xZjhtWjBR N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ExUFprb0VDdVJuYmZGUmx5TjFmOG1aMFE3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0U1Qi9EODRFN0JGMjNDNkUxMUYwOUQ3NkEyNERDNEY5QUUwMi9xMVBaa29FQ3VS bmJmRlJseU4xZjhtWjBRN00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARDT1XGVXmxbWGeGPJk3suFeSyp+2wHcojJYBCM1QDYM0hy62vzy8b+ApRSwT xXFCJRqA3dDXy292V4h3vqvbbK8zHbS2atkbYHxwWXcyiRkkj7dRRzE2fXRiF2Xe 3t2PyzcaTNQJ1/HS9ciBkgICFo6NYE4EA+bxXKBBqMnX6ksPIPlVBXNU8K2Iv3fD DGT0Qto/Hp6cpU+sG/0k4HeSNATHxsk0srI5JAdC7TSXP2czTdLN/cUxb19o+4O+ VbdLSBCZmFSTCNlj+suPL4yebe7Gyrmy1p8Z/L/29pLMDc8DqM33HdqbnKBtixxb FHO27HiVx8u3w22HSPpRfijcsg== -----END CERTIFICATE-----Generated at Mon Sep 21 18:02:36 2026 by rpki-client