$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft File: q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft (raw, json) Hash identifier: PaQstpP2ibIic7RxAhkNSORIk6B/+mQSsHk8oE+FCmw= Subject key identifier: 3D:99:35:23:08:10:D7:D9:0B:61:74:30:F4:C3:20:F9:CD:18:C0:8C Authority key identifier: AB:67:E8:2F:C8:6A:AC:A8:2A:CF:F8:DC:36:45:CD:71:61:01:3F:76 Certificate issuer: /CN=A91D1E4C/serialNumber=AB67E82FC86AACA82ACFF8DC3645CD7161013F76 Certificate serial: 03FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft Manifest number: 0CF3 Signing time: Mon 28 Sep 2026 20:23:13 +0000 Manifest this update: Mon 28 Sep 2026 20:23:13 +0000 Manifest next update: Mon 05 Oct 2026 20:23:13 +0000 Files and hashes: 1: q2foL8hqrKgqz_jcNkXNcWEBP3Y.crl (hash: Pw0TJFAVbGHpfbg69ZutkOYB9RlqN43R0DlPHmuTK2k=) 2: FC358296CFA011EDA4AC5B18C4F9AE02.roa (hash: 0M6xdPEZ2aujF9/YY8xW4204AgcRunVSuM8Vw+Ja05Q=) 3: 3DD8C628940111F09204AF71C4F9AE02.roa (hash: qyRCCyei3MShGysWy2y27h9mS62xktJLIpfB6ltBCO4=) 4: 2AD1C746940111F0B07D7068C4F9AE02.roa (hash: RT811XLV5/H+z9rXyjPOcwNWUnb5MPdvTXm8sb3lfDk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.crl rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 20:23:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1023 (0x3ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1E4C, serialNumber=AB67E82FC86AACA82ACFF8DC3645CD7161013F76 Validity Not Before: Sep 28 20:23:13 2026 GMT Not After : Oct 5 20:23:13 2026 GMT Subject: CN=6abaccb1-be85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f2:a6:4f:a5:f7:d1:d5:0f:dd:2d:41:84:d3: 22:f4:3f:1b:e4:3e:1e:fe:aa:a9:29:a3:c3:06:53: 15:de:58:30:4a:d7:f7:33:26:fa:f2:04:8c:13:4e: 2a:de:21:75:9e:eb:42:d4:7e:db:22:78:41:5f:17: a0:45:66:ba:99:c0:b7:9c:e1:5b:8b:d8:c0:d6:8d: cf:8a:0e:f6:8d:45:9f:70:fe:d9:89:08:50:15:f1: 4e:0b:4f:60:b3:4f:67:3c:6b:9d:ba:ba:ab:cd:ff: 8b:c6:6e:94:c7:1f:00:2b:92:99:23:a6:46:0b:f8: af:00:48:e2:b6:5a:57:0a:5c:c8:52:35:ad:ac:fe: 0f:84:38:38:61:6a:1b:72:00:54:31:8b:6e:e1:be: 6d:84:ff:06:62:28:c1:f4:80:eb:b8:17:d1:93:b7: f1:b1:02:db:86:ee:5d:65:39:4e:f2:61:08:49:42: 40:fb:27:60:cb:78:ba:a4:a3:aa:fc:cd:7c:bd:84: 90:0a:19:f1:5a:86:37:72:c7:69:30:2c:be:d7:2b: 16:4d:99:d5:84:a6:c5:2a:28:8a:ea:8b:3b:42:d1: 78:1a:2f:0b:37:d7:02:e2:b0:85:60:b0:0a:b6:81: f2:73:31:83:74:cc:4d:78:8e:ef:fc:dd:f4:48:27: 25:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:99:35:23:08:10:D7:D9:0B:61:74:30:F4:C3:20:F9:CD:18:C0:8C X509v3 Authority Key Identifier: keyid:AB:67:E8:2F:C8:6A:AC:A8:2A:CF:F8:DC:36:45:CD:71:61:01:3F:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:ed:85:1e:1b:10:f8:30:4b:9a:04:cc:c5:49:5e:4d:d1:91: 66:9d:ef:1c:b0:70:dc:62:f2:63:a5:d9:00:f4:4d:de:ff:58: d3:1a:a6:cb:1a:16:22:63:74:97:67:5a:a3:bb:b3:ed:14:da: 6a:64:ad:83:f2:3f:fb:eb:4a:47:f9:b9:b9:88:5f:06:2f:dc: b3:13:7a:0d:d6:68:d3:78:cd:07:26:0a:60:00:a6:34:70:77: 4b:de:52:8a:7c:1b:49:4b:38:32:53:4e:37:6d:df:3a:6b:ff: fb:22:37:b7:5f:5a:0b:50:f4:d1:50:7c:08:5b:e4:25:48:4c: 00:45:dd:8d:7b:eb:26:e6:cb:cf:c9:e1:c9:e7:aa:e4:99:ba: b3:d8:cc:a3:2a:14:ca:fe:f5:79:72:7a:79:31:96:a2:be:ec: da:78:15:be:51:f0:ca:08:8f:90:4a:ee:ab:73:a3:e9:f6:61: eb:51:ee:d4:b8:10:5d:4b:0a:22:cc:eb:22:ba:d6:7c:9a:01: 59:21:47:17:5e:11:c4:59:2c:91:e9:3e:23:5c:95:90:ba:1a: 38:6a:6e:77:6c:ad:ec:49:ed:2b:33:9d:6e:9f:0d:8a:5a:40: c0:a0:4a:fd:0d:8a:54:cf:c2:8e:20:4c:2e:3b:4b:80:d7:ba: b3:b1:15:99 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA/8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFFNEMxMTAvBgNVBAUTKEFCNjdFODJGQzg2QUFDQTgyQUNGRjhEQzM2NDVDRDcx NjEwMTNGNzYwHhcNMjYwOTI4MjAyMzEzWhcNMjYxMDA1MjAyMzEzWjAYMRYwFAYD VQQDEw02YWJhY2NiMS1iZTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy/KmT6X30dUP3S1BhNMi9D8b5D4e/qqpKaPDBlMV3lgwStf3Myb68gSME04q 3iF1nutC1H7bInhBXxegRWa6mcC3nOFbi9jA1o3Pig72jUWfcP7ZiQhQFfFOC09g s09nPGudurqrzf+Lxm6Uxx8AK5KZI6ZGC/ivAEjitlpXClzIUjWtrP4PhDg4YWob cgBUMYtu4b5thP8GYijB9IDruBfRk7fxsQLbhu5dZTlO8mEISUJA+ydgy3i6pKOq /M18vYSQChnxWoY3csdpMCy+1ysWTZnVhKbFKiiK6os7QtF4Gi8LN9cC4rCFYLAK toHyczGDdMxNeI7v/N30SCclhwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD2ZNSMI ENfZC2F0MPTDIPnNGMCMMB8GA1UdIwQYMBaAFKtn6C/IaqyoKs/43DZFzXFhAT92 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUU0Qy83REFEQTU2Q0Q5 NEQxMUVBQTYwNEFDNTNDNEY5QUUwMi9xMmZvTDhocXJLZ3F6X2pjTmtYTmNXRUJQ M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3EyZm9MOGhxcktncXpfamNOa1hOY1dFQlAzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUU0Qy83REFEQTU2Q0Q5NEQxMUVBQTYwNEFDNTNDNEY5QUUwMi9xMmZvTDhocXJL Z3F6X2pjTmtYTmNXRUJQM1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAa+2FHhsQ+DBLmgTMxUleTdGRZp3vHLBw3GLyY6XZAPRN3v9Y0xqmyxoWImN0 l2dao7uz7RTaamStg/I/++tKR/m5uYhfBi/csxN6DdZo03jNByYKYACmNHB3S95S inwbSUs4MlNON23fOmv/+yI3t19aC1D00VB8CFvkJUhMAEXdjXvrJubLz8nhyeeq 5Jm6s9jMoyoUyv71eXJ6eTGWor7s2ngVvlHwygiPkEruq3Oj6fZh61Hu1LgQXUsK IszrIrrWfJoBWSFHF14RxFkskek+I1yVkLoaOGpud2yt7EntKzOdbp8NilpAwKBK /Q2KVM/CjiBMLjtLgNe6s7EVmQ== -----END CERTIFICATE-----Generated at Mon Sep 28 23:30:50 2026 by rpki-client