$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CDCF5/5996712CF1E311F0BDEC72B5416F56BC/QwlkOa1FN43F5xIj-HJhJ7EZZe0.mft File: QwlkOa1FN43F5xIj-HJhJ7EZZe0.mft (raw, json) Hash identifier: Ik+JGvcGMC6r9MNY6PC22CQwa1fkKBqNIiVYqvT0gwc= Subject key identifier: 97:6D:69:E7:A7:A4:40:C8:E6:8F:3C:AB:09:4D:BF:04:D3:3F:91:6B Authority key identifier: 43:09:64:39:AD:45:37:8D:C5:E7:12:23:F8:72:61:27:B1:19:65:ED Certificate issuer: /CN=A91CDCF5/serialNumber=43096439AD45378DC5E71223F8726127B11965ED Certificate serial: 8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QwlkOa1FN43F5xIj-HJhJ7EZZe0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDCF5/5996712CF1E311F0BDEC72B5416F56BC/QwlkOa1FN43F5xIj-HJhJ7EZZe0.mft Manifest number: 8C Signing time: Fri 09 Oct 2026 08:17:26 +0000 Manifest this update: Fri 09 Oct 2026 08:17:26 +0000 Manifest next update: Fri 16 Oct 2026 08:17:26 +0000 Files and hashes: 1: QwlkOa1FN43F5xIj-HJhJ7EZZe0.crl (hash: d+aMBNvIHenKkIfxPW0uRzdwkqalrWiATRkBdSnUukE=) 2: D735EAACF1EF11F0A394FA90446F56BC.roa (hash: Ys/2qaSppEBebOfLXvRLlfClHojsR1MQFiAQ4UPY7vM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDCF5/5996712CF1E311F0BDEC72B5416F56BC/QwlkOa1FN43F5xIj-HJhJ7EZZe0.crl rsync://rpki.apnic.net/member_repository/A91CDCF5/5996712CF1E311F0BDEC72B5416F56BC/QwlkOa1FN43F5xIj-HJhJ7EZZe0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QwlkOa1FN43F5xIj-HJhJ7EZZe0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 08:17:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 142 (0x8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDCF5, serialNumber=43096439AD45378DC5E71223F8726127B11965ED Validity Not Before: Oct 9 08:17:26 2026 GMT Not After : Oct 16 08:17:26 2026 GMT Subject: CN=6ac8a316-03ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0b:a8:b1:7c:75:06:b4:11:f5:3d:2b:df:fb: 8d:36:35:98:2d:17:21:1e:96:b0:77:0d:ce:e5:cb: ad:10:f7:44:ab:a1:cf:ad:3a:d6:1c:bb:13:87:32: 07:cf:46:e4:bc:ce:79:cf:b5:f8:96:db:0f:a5:6d: eb:1d:93:58:b1:1e:e5:cb:30:62:56:fd:df:b4:22: 0a:49:0b:39:19:6f:4f:01:77:3d:b6:81:7b:8f:33: 3f:0f:1c:d8:1c:fb:49:b7:6b:3d:f4:21:da:b6:5e: f1:6a:55:4d:e2:e8:f0:49:06:eb:4e:34:80:12:30: 60:50:1f:a3:85:8d:2b:a8:3e:e1:f4:59:82:52:35: 46:1d:0e:ca:88:11:03:7b:48:d3:14:9b:0c:cb:cd: 71:de:ef:f0:e2:52:93:73:e2:65:0f:95:17:4b:85: d6:fd:e4:f3:30:95:d9:4f:84:50:d9:fe:88:ad:de: 91:56:26:29:d6:5a:21:b9:45:19:70:05:fd:31:18: eb:60:4b:b8:a1:45:77:dc:95:9e:de:60:73:3d:99: 42:8c:5b:a2:dd:08:c3:61:4c:40:62:16:34:2f:34: ee:f3:9e:e6:f0:6f:b9:c2:70:66:22:5f:13:54:bb: 49:2a:6d:0c:bb:0b:bd:ba:c0:af:45:be:4f:31:4b: 2f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:6D:69:E7:A7:A4:40:C8:E6:8F:3C:AB:09:4D:BF:04:D3:3F:91:6B X509v3 Authority Key Identifier: keyid:43:09:64:39:AD:45:37:8D:C5:E7:12:23:F8:72:61:27:B1:19:65:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDCF5/5996712CF1E311F0BDEC72B5416F56BC/QwlkOa1FN43F5xIj-HJhJ7EZZe0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QwlkOa1FN43F5xIj-HJhJ7EZZe0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDCF5/5996712CF1E311F0BDEC72B5416F56BC/QwlkOa1FN43F5xIj-HJhJ7EZZe0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:ae:68:28:d2:95:b5:2a:10:0b:d5:7c:25:5e:6a:14:90:8e: a4:09:cd:1d:2f:a9:49:38:16:db:36:e1:6f:35:19:f8:95:f4: fc:7a:6c:6c:c0:e7:64:bc:5a:dd:ba:5b:3c:2c:d2:21:7b:61: 70:c2:71:38:99:07:ea:9f:4c:9c:94:bd:3b:2a:87:95:e6:b0: d3:18:33:30:db:c0:45:84:53:7f:2e:32:f3:68:94:47:be:82: be:fd:ea:57:49:c6:c2:4e:41:8e:f2:e2:b5:b7:d1:ff:75:a7: 0f:51:ad:cd:17:77:13:5c:87:da:14:0d:ae:63:6c:c3:f6:af: 49:2f:1d:d7:7d:bf:e4:71:2e:93:49:48:1e:02:25:85:9a:9d: 1e:3c:07:7b:60:4d:34:d6:36:e2:bd:1a:ad:29:95:ee:99:92: 2e:43:29:87:95:28:6a:be:9b:c2:f4:b2:2c:61:88:81:2e:01: 1d:70:88:bf:9d:8a:35:76:05:6a:51:a3:0a:d9:00:1d:a2:85: 4d:e1:c9:71:84:2c:19:60:60:e2:d1:74:bb:78:e9:67:fc:bf: 20:23:53:68:b7:cb:41:7c:53:47:8e:c9:43:92:39:e1:83:8e: 44:cb:55:c1:0b:f7:a6:0b:d4:f5:46:13:32:61:0b:a7:38:52: bc:cb:36:a2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RDRjUxMTAvBgNVBAUTKDQzMDk2NDM5QUQ0NTM3OERDNUU3MTIyM0Y4NzI2MTI3 QjExOTY1RUQwHhcNMjYxMDA5MDgxNzI2WhcNMjYxMDE2MDgxNzI2WjAYMRYwFAYD VQQDEw02YWM4YTMxNi0wM2FjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuQuosXx1BrQR9T0r3/uNNjWYLRchHpawdw3O5cutEPdEq6HPrTrWHLsThzIH z0bkvM55z7X4ltsPpW3rHZNYsR7lyzBiVv3ftCIKSQs5GW9PAXc9toF7jzM/DxzY HPtJt2s99CHatl7xalVN4ujwSQbrTjSAEjBgUB+jhY0rqD7h9FmCUjVGHQ7KiBED e0jTFJsMy81x3u/w4lKTc+JlD5UXS4XW/eTzMJXZT4RQ2f6Ird6RViYp1lohuUUZ cAX9MRjrYEu4oUV33JWe3mBzPZlCjFui3QjDYUxAYhY0LzTu857m8G+5wnBmIl8T VLtJKm0Muwu9usCvRb5PMUsvSwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJdtaeen pEDI5o88qwlNvwTTP5FrMB8GA1UdIwQYMBaAFEMJZDmtRTeNxecSI/hyYSexGWXt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRENGNS81OTk2NzEyQ0Yx RTMxMUYwQkRFQzcyQjU0MTZGNTZCQy9Rd2xrT2ExRk40M0Y1eElqLUhKaEo3RVpa ZTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1F3bGtPYTFGTjQzRjV4SWotSEpoSjdFWlplMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RENGNS81OTk2NzEyQ0YxRTMxMUYwQkRFQzcyQjU0MTZGNTZCQy9Rd2xrT2ExRk40 M0Y1eElqLUhKaEo3RVpaZTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAL65oKNKVtSoQC9V8JV5qFJCOpAnNHS+pSTgW2zbhbzUZ+JX0/HpsbMDnZLxa 3bpbPCzSIXthcMJxOJkH6p9MnJS9OyqHleaw0xgzMNvARYRTfy4y82iUR76Cvv3q V0nGwk5BjvLitbfR/3WnD1GtzRd3E1yH2hQNrmNsw/avSS8d132/5HEuk0lIHgIl hZqdHjwHe2BNNNY24r0arSmV7pmSLkMph5Uoar6bwvSyLGGIgS4BHXCIv52KNXYF alGjCtkAHaKFTeHJcYQsGWBg4tF0u3jpZ/y/ICNTaLfLQXxTR47JQ5I54YOORMtV wQv3pgvU9UYTMmELpzhSvMs2og== -----END CERTIFICATE-----Generated at Sat Oct 10 17:22:43 2026 by rpki-client