$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D41AC/A302AB46C68C11F0AD214637C4F9AE02/7qkBt_sz-1DPBMWYH4vvbE3sNeI.mft File: 7qkBt_sz-1DPBMWYH4vvbE3sNeI.mft (raw, json) Hash identifier: ZQgR44hyuC+9u4LPqjYV5Fn2MsOabFIB38BCSibRZRU= Subject key identifier: E1:04:53:DD:9F:74:A1:1B:5D:B2:C5:EE:29:EA:ED:19:93:F5:F5:AE Authority key identifier: EE:A9:01:B7:FB:33:FB:50:CF:04:C5:98:1F:8B:EF:6C:4D:EC:35:E2 Certificate issuer: /CN=A91D41AC/serialNumber=EEA901B7FB33FB50CF04C5981F8BEF6C4DEC35E2 Certificate serial: A5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7qkBt_sz-1DPBMWYH4vvbE3sNeI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D41AC/A302AB46C68C11F0AD214637C4F9AE02/7qkBt_sz-1DPBMWYH4vvbE3sNeI.mft Manifest number: A2 Signing time: Mon 21 Sep 2026 05:39:06 +0000 Manifest this update: Mon 21 Sep 2026 05:39:06 +0000 Manifest next update: Mon 28 Sep 2026 05:39:06 +0000 Files and hashes: 1: 7qkBt_sz-1DPBMWYH4vvbE3sNeI.crl (hash: jZj8vGxaiqVkXmiJd8w2Osq8fOiWYwA5+AHAP7N6IiI=) 2: D6DCF6420D3B11F19BC83FAA0F3D8C67.roa (hash: m4Jr3uuRCqNgf8md7I8vYpb7gOreEr0nf9WW3w8MQog=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D41AC/A302AB46C68C11F0AD214637C4F9AE02/7qkBt_sz-1DPBMWYH4vvbE3sNeI.crl rsync://rpki.apnic.net/member_repository/A91D41AC/A302AB46C68C11F0AD214637C4F9AE02/7qkBt_sz-1DPBMWYH4vvbE3sNeI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7qkBt_sz-1DPBMWYH4vvbE3sNeI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 05:39:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165 (0xa5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D41AC, serialNumber=EEA901B7FB33FB50CF04C5981F8BEF6C4DEC35E2 Validity Not Before: Sep 21 05:39:06 2026 GMT Not After : Sep 28 05:39:06 2026 GMT Subject: CN=6ab0c2fa-c7b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:fa:bf:d2:39:ce:f6:8e:ed:93:40:ed:fe:8e: 1a:0c:fb:71:e3:5f:ad:fb:86:fb:7c:48:e3:69:e3: d6:76:7c:62:7e:d6:54:a0:08:d5:c5:b6:ba:44:a8: 45:02:3a:7b:c4:b8:be:2b:51:d5:fc:4a:58:91:d5: 59:b3:87:48:5d:90:16:96:05:c3:fd:b4:d0:e6:0b: 88:74:9c:73:2e:05:0a:4f:44:be:07:a3:c8:dd:00: dc:7c:91:c8:fa:80:a8:dd:29:39:ee:b2:55:c0:5c: 36:f3:1e:31:c7:60:26:91:6a:fb:f2:42:42:d7:c3: d7:cc:d6:24:91:48:5e:96:00:b8:bd:29:80:0c:be: 43:e7:ca:b2:25:67:0b:00:5c:de:45:ca:ea:6c:26: 36:89:93:da:2c:78:43:5f:fe:bf:27:d2:57:51:ca: f0:71:93:d3:c9:2a:18:7c:1c:07:b4:e3:c1:c3:ca: 3c:83:11:f0:06:1f:ad:90:2a:b7:27:11:4f:48:65: c5:56:1e:2b:4e:85:ce:ce:17:21:d3:bf:0d:d0:0b: 86:65:a3:d7:da:f2:1d:93:85:04:4b:27:b8:c7:e0: f9:6c:44:09:e7:31:28:de:5f:77:d7:3f:49:6d:a9: 9b:fb:9d:0e:78:c9:50:40:bb:18:0f:92:4f:87:16: 95:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:04:53:DD:9F:74:A1:1B:5D:B2:C5:EE:29:EA:ED:19:93:F5:F5:AE X509v3 Authority Key Identifier: keyid:EE:A9:01:B7:FB:33:FB:50:CF:04:C5:98:1F:8B:EF:6C:4D:EC:35:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D41AC/A302AB46C68C11F0AD214637C4F9AE02/7qkBt_sz-1DPBMWYH4vvbE3sNeI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7qkBt_sz-1DPBMWYH4vvbE3sNeI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D41AC/A302AB46C68C11F0AD214637C4F9AE02/7qkBt_sz-1DPBMWYH4vvbE3sNeI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:13:fb:9c:fe:ff:dd:c5:51:70:a4:c9:3c:84:d4:6a:80:ee: 4b:a6:4e:15:a0:5e:d0:87:db:ff:17:29:ef:e0:2f:4b:44:87: 9a:c2:b1:14:e7:ad:86:46:32:31:c3:97:e0:7b:06:60:36:a3: 27:e0:5b:5a:45:bc:42:48:48:65:6c:63:23:de:54:84:57:fd: e8:2d:b5:1f:5f:a9:fc:6e:f6:34:2f:d1:40:93:49:87:6b:c1: ea:a0:aa:8c:22:81:af:57:a5:50:2c:81:4f:f7:66:c6:37:24: b1:36:27:cb:4d:5e:8e:f4:1f:27:ae:fa:a9:f1:f3:ef:74:31: d8:c9:ac:f0:ec:7a:bf:58:64:a0:1c:5d:19:93:04:05:3a:3e: 58:b6:f0:df:18:92:2f:31:85:46:25:56:32:e9:2e:28:24:39: 12:d8:5d:1e:38:0f:22:7a:e3:20:ab:f2:df:9b:a7:d9:93:5d: eb:62:9c:2b:00:ca:fd:82:77:73:74:64:71:73:bd:fe:a5:4f: 92:5a:62:bd:a9:87:92:05:0d:c0:a7:01:4b:62:1f:31:9d:88: 7a:ec:1d:11:a7:56:71:62:f9:86:fd:02:e8:02:d8:b8:b1:8d: 2e:c6:90:b6:e9:1c:3a:34:66:57:0b:7b:29:dd:a6:ce:c2:98: da:78:64:ca -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQxQUMxMTAvBgNVBAUTKEVFQTkwMUI3RkIzM0ZCNTBDRjA0QzU5ODFGOEJFRjZD NERFQzM1RTIwHhcNMjYwOTIxMDUzOTA2WhcNMjYwOTI4MDUzOTA2WjAYMRYwFAYD VQQDEw02YWIwYzJmYS1jN2IyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv/q/0jnO9o7tk0Dt/o4aDPtx41+t+4b7fEjjaePWdnxiftZUoAjVxba6RKhF Ajp7xLi+K1HV/EpYkdVZs4dIXZAWlgXD/bTQ5guIdJxzLgUKT0S+B6PI3QDcfJHI +oCo3Sk57rJVwFw28x4xx2AmkWr78kJC18PXzNYkkUhelgC4vSmADL5D58qyJWcL AFzeRcrqbCY2iZPaLHhDX/6/J9JXUcrwcZPTySoYfBwHtOPBw8o8gxHwBh+tkCq3 JxFPSGXFVh4rToXOzhch078N0AuGZaPX2vIdk4UESye4x+D5bEQJ5zEo3l931z9J bamb+50OeMlQQLsYD5JPhxaVYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOEEU92f dKEbXbLF7inq7RmT9fWuMB8GA1UdIwQYMBaAFO6pAbf7M/tQzwTFmB+L72xN7DXi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDFBQy9BMzAyQUI0NkM2 OEMxMUYwQUQyMTQ2MzdDNEY5QUUwMi83cWtCdF9zei0xRFBCTVdZSDR2dmJFM3NO ZUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzdxa0J0X3N6LTFEUEJNV1lINHZ2YkUzc05lSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDFBQy9BMzAyQUI0NkM2OEMxMUYwQUQyMTQ2MzdDNEY5QUUwMi83cWtCdF9zei0x RFBCTVdZSDR2dmJFM3NOZUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYhP7nP7/3cVRcKTJPITUaoDuS6ZOFaBe0Ifb/xcp7+AvS0SHmsKxFOethkYy McOX4HsGYDajJ+BbWkW8QkhIZWxjI95UhFf96C21H1+p/G72NC/RQJNJh2vB6qCq jCKBr1elUCyBT/dmxjcksTYny01ejvQfJ676qfHz73Qx2Mms8Ox6v1hkoBxdGZME BTo+WLbw3xiSLzGFRiVWMukuKCQ5EthdHjgPInrjIKvy35un2ZNd62KcKwDK/YJ3 c3RkcXO9/qVPklpivamHkgUNwKcBS2IfMZ2IeuwdEadWcWL5hv0C6ALYuLGNLsaQ tukcOjRmVwt7Kd2mzsKY2nhkyg== -----END CERTIFICATE-----Generated at Tue Sep 22 06:52:43 2026 by rpki-client