$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft File: qjXi-Xe1XnL5FjW_fVO861NHmDs.mft (raw, json) Hash identifier: 3o8/XkRTCvE0aXdXsUfaHDrT06aqK4r4ljqrBOfNH04= Subject key identifier: D5:2F:06:E6:D6:A2:8E:6A:43:4F:DE:31:36:59:99:DF:EB:B9:92:6C Authority key identifier: AA:35:E2:F9:77:B5:5E:72:F9:16:35:BF:7D:53:BC:EB:53:47:98:3B Certificate issuer: /CN=A91D2C38/serialNumber=AA35E2F977B55E72F91635BF7D53BCEB5347983B Certificate serial: 0161 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjXi-Xe1XnL5FjW_fVO861NHmDs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft Manifest number: 0159 Signing time: Fri 25 Sep 2026 05:11:18 +0000 Manifest this update: Fri 25 Sep 2026 05:11:17 +0000 Manifest next update: Fri 02 Oct 2026 05:11:17 +0000 Files and hashes: 1: qjXi-Xe1XnL5FjW_fVO861NHmDs.crl (hash: igycudvSdVbGYsmNAwL5Nowf3nWFdpisvibXOCGnA+0=) 2: 8D6B6D86A98C11EFAAC0F364C4F9AE02.roa (hash: hAmO+Dq9vGZAILDadtbesaeJmrxEB8UrXmpWc1/KCyg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.crl rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjXi-Xe1XnL5FjW_fVO861NHmDs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 05:11:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 353 (0x161) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2C38, serialNumber=AA35E2F977B55E72F91635BF7D53BCEB5347983B Validity Not Before: Sep 25 05:11:17 2026 GMT Not After : Oct 2 05:11:17 2026 GMT Subject: CN=6ab60276-84ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e8:c2:06:30:1f:65:cf:8b:af:d1:84:dd:d4: e9:7b:e5:6f:09:d4:e4:9d:ce:da:9c:51:ba:87:77: f9:14:cb:2f:c1:86:13:4e:60:c0:ef:4d:f4:21:47: 62:ff:fb:13:ae:e6:52:2c:5e:1b:a1:11:04:0b:00: 86:aa:71:85:0b:df:54:d3:1b:7a:1d:c6:79:45:55: 30:6a:94:c5:f6:5c:0e:6a:91:7c:a1:57:91:e7:09: 3e:46:b5:cc:8e:ad:01:20:32:20:0d:a2:9a:ea:32: 30:81:bc:eb:d3:f6:10:15:7c:b1:1f:62:a3:b0:fe: 5a:bf:31:74:f5:be:9f:9b:98:4e:63:85:36:a8:95: e7:2e:11:b1:44:f0:25:cc:50:7f:22:b2:20:e9:32: 9b:c1:51:7b:47:cf:c8:bc:82:5d:2d:fd:84:e2:73: c9:36:f9:96:c9:0e:44:9d:eb:60:8c:2d:9d:d6:b5: 4e:a7:4a:4b:c0:f5:03:4e:e5:51:ca:73:e2:be:b1: b2:67:db:b5:1a:d7:70:b0:4d:d8:84:cd:98:fc:98: 9c:26:76:87:2b:2c:07:8d:3f:72:6c:b8:b7:55:10: b4:07:12:49:73:38:60:36:9b:dd:b9:25:18:a6:b3: 04:1a:81:d7:5f:47:eb:ff:96:e1:6b:b5:01:06:47: cd:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:2F:06:E6:D6:A2:8E:6A:43:4F:DE:31:36:59:99:DF:EB:B9:92:6C X509v3 Authority Key Identifier: keyid:AA:35:E2:F9:77:B5:5E:72:F9:16:35:BF:7D:53:BC:EB:53:47:98:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjXi-Xe1XnL5FjW_fVO861NHmDs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:25:72:4e:a9:1b:a5:fd:79:2c:00:ec:82:64:de:5a:77:f6: 68:39:f7:88:9a:65:f3:11:72:0c:f9:e8:a4:0a:3f:5c:da:3b: 5d:59:11:2a:25:48:cd:ca:56:48:38:4d:df:b6:d7:b8:66:5a: 51:53:90:49:5c:f8:c4:c2:de:c2:41:0d:63:b5:a5:52:21:11: 32:9c:0f:6d:ee:c6:c1:2d:be:38:73:26:4b:30:c3:37:f8:2e: 7b:1c:95:d8:4f:21:e5:47:04:85:cc:38:ba:04:15:c8:83:1f: 5b:25:b8:0d:95:2d:bf:d0:9f:86:1d:22:26:ae:5f:b8:a9:0e: 5c:d1:f9:de:b1:60:b4:73:9d:16:8c:4a:da:80:0f:c4:95:22: 83:90:fe:94:d9:c8:b7:5d:cf:8d:98:df:c6:cf:c0:32:4c:14: d0:f4:d2:27:4b:d4:48:80:09:62:79:6e:b4:27:7c:80:a0:3b: 66:e8:67:13:a2:d6:bb:4f:8f:fc:98:e3:a6:c5:96:fd:cf:d6: 49:16:d4:30:09:07:a0:ea:ff:18:77:a4:21:29:60:2b:32:6a: 85:0a:ac:f3:65:77:49:f1:ae:fe:4c:df:94:4e:26:b8:fe:db: e0:dd:a5:b8:ff:1b:91:a4:74:49:31:8d:28:5a:c5:ce:23:5b: 32:ca:98:7b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDJDMzgxMTAvBgNVBAUTKEFBMzVFMkY5NzdCNTVFNzJGOTE2MzVCRjdENTNCQ0VC NTM0Nzk4M0IwHhcNMjYwOTI1MDUxMTE3WhcNMjYxMDAyMDUxMTE3WjAYMRYwFAYD VQQDEw02YWI2MDI3Ni04NGFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu+jCBjAfZc+Lr9GE3dTpe+VvCdTknc7anFG6h3f5FMsvwYYTTmDA7030IUdi //sTruZSLF4boREECwCGqnGFC99U0xt6HcZ5RVUwapTF9lwOapF8oVeR5wk+RrXM jq0BIDIgDaKa6jIwgbzr0/YQFXyxH2KjsP5avzF09b6fm5hOY4U2qJXnLhGxRPAl zFB/IrIg6TKbwVF7R8/IvIJdLf2E4nPJNvmWyQ5EnetgjC2d1rVOp0pLwPUDTuVR ynPivrGyZ9u1GtdwsE3YhM2Y/JicJnaHKywHjT9ybLi3VRC0BxJJczhgNpvduSUY prMEGoHXX0fr/5bha7UBBkfNrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNUvBubW oo5qQ0/eMTZZmd/ruZJsMB8GA1UdIwQYMBaAFKo14vl3tV5y+RY1v31TvOtTR5g7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkMzOC8wNEJBQTYxNEE5 OEMxMUVGOTM1MEZCNjNDNEY5QUUwMi9xalhpLVhlMVhuTDVGaldfZlZPODYxTkht RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3FqWGktWGUxWG5MNUZqV19mVk84NjFOSG1Ecy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MkMzOC8wNEJBQTYxNEE5OEMxMUVGOTM1MEZCNjNDNEY5QUUwMi9xalhpLVhlMVhu TDVGaldfZlZPODYxTkhtRHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQSVyTqkbpf15LADsgmTeWnf2aDn3iJpl8xFyDPnopAo/XNo7XVkRKiVIzcpW SDhN37bXuGZaUVOQSVz4xMLewkENY7WlUiERMpwPbe7GwS2+OHMmSzDDN/guexyV 2E8h5UcEhcw4ugQVyIMfWyW4DZUtv9Cfhh0iJq5fuKkOXNH53rFgtHOdFoxK2oAP xJUig5D+lNnIt13PjZjfxs/AMkwU0PTSJ0vUSIAJYnlutCd8gKA7ZuhnE6LWu0+P /JjjpsWW/c/WSRbUMAkHoOr/GHekISlgKzJqhQqs82V3SfGu/kzflE4muP7b4N2l uP8bkaR0STGNKFrFziNbMsqYew== -----END CERTIFICATE-----Generated at Fri Sep 25 18:27:45 2026 by rpki-client