$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.mft File: 1QwK07StgdVVlFzH8_HuHB-t5hc.mft (raw, json) Hash identifier: eM/BccIpNizC54AZptR8/V3f7aAwMj8TftMFdnhGIBA= Subject key identifier: 7D:09:9F:DE:AE:AC:33:74:39:0F:8D:E4:9E:67:F5:C3:D0:65:84:42 Authority key identifier: D5:0C:0A:D3:B4:AD:81:D5:55:94:5C:C7:F3:F1:EE:1C:1F:AD:E6:17 Certificate issuer: /CN=A91DB475/serialNumber=D50C0AD3B4AD81D555945CC7F3F1EE1C1FADE617 Certificate serial: 0C27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QwK07StgdVVlFzH8_HuHB-t5hc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.mft Manifest number: 0C13 Signing time: Mon 28 Sep 2026 18:58:24 +0000 Manifest this update: Mon 28 Sep 2026 18:58:23 +0000 Manifest next update: Mon 05 Oct 2026 18:58:23 +0000 Files and hashes: 1: 1QwK07StgdVVlFzH8_HuHB-t5hc.crl (hash: vkxsnQqA763ENsaHAU6sI9QI/w+Od8PWh7FQzwkCmPc=) 2: 74CA44AA049F11F087661234C4F9AE02.roa (hash: rIJLG/8SjOwLF9FVD1K6pR7ghzCI3KLic0aZugbbIUs=) 3: 1E6B12EC049F11F0AD5C7C33C4F9AE02.roa (hash: BbFVl72vJe1WyfGWNNCXlRQgo33o4IIXdFPTkYW2Jg0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.crl rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QwK07StgdVVlFzH8_HuHB-t5hc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 18:58:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3111 (0xc27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB475, serialNumber=D50C0AD3B4AD81D555945CC7F3F1EE1C1FADE617 Validity Not Before: Sep 28 18:58:23 2026 GMT Not After : Oct 5 18:58:23 2026 GMT Subject: CN=6abab8d0-c45e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:30:3b:d7:a6:e9:65:05:de:d9:8e:13:7d:e1: c4:ba:b0:9c:cb:a9:f8:e6:42:29:c0:f7:15:5a:1a: b4:09:49:cd:15:73:40:a3:8d:40:ae:60:5a:b9:9b: 43:d8:a8:ab:ed:a5:9a:a7:76:b7:a3:d5:ac:3d:74: 49:88:52:53:1a:62:6c:4d:9a:55:a5:78:35:43:cc: 7a:66:a9:6e:cc:f3:9a:bb:d2:6a:7a:fe:7f:2b:49: 59:ff:50:c5:28:c1:ba:8f:cb:5d:c3:67:7f:52:16: f6:6e:52:4d:09:29:2b:86:a4:66:7e:3a:82:5a:78: 24:e1:32:ea:6f:bb:48:17:a0:2e:e9:61:6a:01:ee: b0:fc:f4:a1:35:6f:f9:30:fa:c4:e3:c6:b1:ab:20: e2:11:47:36:9c:c1:ee:18:fc:40:01:7f:5e:5d:34: 5f:d4:ae:08:b4:e8:0c:7a:97:96:d4:fa:2f:59:9c: d5:f4:29:ab:2c:a5:6a:00:36:8b:6a:a3:2d:ed:d0: be:9a:8e:06:e1:f3:82:b8:7a:3f:f5:af:3d:fc:b5: d3:d1:3a:09:b2:c0:72:76:86:4b:28:1c:4d:52:5a: c0:76:77:2a:ad:84:3d:7a:2a:e6:0b:25:46:42:3d: 8e:63:e2:39:ca:6c:18:e9:32:9d:6f:52:b3:ae:77: 35:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:09:9F:DE:AE:AC:33:74:39:0F:8D:E4:9E:67:F5:C3:D0:65:84:42 X509v3 Authority Key Identifier: keyid:D5:0C:0A:D3:B4:AD:81:D5:55:94:5C:C7:F3:F1:EE:1C:1F:AD:E6:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QwK07StgdVVlFzH8_HuHB-t5hc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:ca:d0:14:b1:2c:2e:68:3e:4e:a3:34:dc:9e:c7:76:73:12: d4:d4:c2:58:61:9a:5b:c7:0f:41:48:f5:d1:96:fc:04:b4:e0: af:5b:e9:49:aa:67:2a:d9:0b:cd:94:f5:a3:03:d3:aa:c7:8a: 26:09:a0:9b:b5:4c:b9:84:62:f8:7c:78:56:81:68:94:61:80: c9:ee:11:5e:5e:ef:a4:be:32:44:97:97:de:69:2b:7d:13:27: 53:83:35:7d:53:20:84:e6:9e:78:33:f1:62:19:85:0d:62:e9: 6f:e3:c0:b0:2b:88:81:4f:ed:68:1a:9a:49:e3:2b:b1:0f:73: 5e:17:c3:0e:a8:e0:85:4d:14:4a:ad:e2:d7:c8:60:54:87:a9: 75:39:ac:bd:7c:5f:d2:4b:63:c8:cf:1f:4d:58:6e:a0:99:69: 21:78:a2:48:79:60:12:2e:04:29:81:2d:7c:d9:b4:6a:b9:68: f3:ab:2d:22:1e:8e:0c:3d:bd:fb:bd:53:91:d0:13:55:86:9e: dc:32:b4:3b:d8:0f:90:39:1b:b3:9e:c1:5d:d0:ad:56:97:bb: 42:0d:32:a5:ec:b6:5f:10:6d:7f:ee:ba:a2:6f:41:cb:97:41: 40:a0:83:f6:63:c8:af:a1:1b:9a:41:07:71:bb:8a:4c:9f:62: 07:8e:c3:fc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDCcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI0NzUxMTAvBgNVBAUTKEQ1MEMwQUQzQjRBRDgxRDU1NTk0NUNDN0YzRjFFRTFD MUZBREU2MTcwHhcNMjYwOTI4MTg1ODIzWhcNMjYxMDA1MTg1ODIzWjAYMRYwFAYD VQQDEw02YWJhYjhkMC1jNDVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2TA716bpZQXe2Y4TfeHEurCcy6n45kIpwPcVWhq0CUnNFXNAo41ArmBauZtD 2Kir7aWap3a3o9WsPXRJiFJTGmJsTZpVpXg1Q8x6ZqluzPOau9Jqev5/K0lZ/1DF KMG6j8tdw2d/Uhb2blJNCSkrhqRmfjqCWngk4TLqb7tIF6Au6WFqAe6w/PShNW/5 MPrE48axqyDiEUc2nMHuGPxAAX9eXTRf1K4ItOgMepeW1PovWZzV9CmrLKVqADaL aqMt7dC+mo4G4fOCuHo/9a89/LXT0ToJssBydoZLKBxNUlrAdncqrYQ9eirmCyVG Qj2OY+I5ymwY6TKdb1Kzrnc1NQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH0Jn96u rDN0OQ+N5J5n9cPQZYRCMB8GA1UdIwQYMBaAFNUMCtO0rYHVVZRcx/Px7hwfreYX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjQ3NS8yMDhGQjczMDQx NzIxMUVBOThBMzY4NkRDNEY5QUUwMi8xUXdLMDdTdGdkVlZsRnpIOF9IdUhCLXQ1 aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFRd0swN1N0Z2RWVmxGekg4X0h1SEItdDVoYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjQ3NS8yMDhGQjczMDQxNzIxMUVBOThBMzY4NkRDNEY5QUUwMi8xUXdLMDdTdGdk VlZsRnpIOF9IdUhCLXQ1aGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWsrQFLEsLmg+TqM03J7HdnMS1NTCWGGaW8cPQUj10Zb8BLTgr1vpSapnKtkL zZT1owPTqseKJgmgm7VMuYRi+Hx4VoFolGGAye4RXl7vpL4yRJeX3mkrfRMnU4M1 fVMghOaeeDPxYhmFDWLpb+PAsCuIgU/taBqaSeMrsQ9zXhfDDqjghU0USq3i18hg VIepdTmsvXxf0ktjyM8fTVhuoJlpIXiiSHlgEi4EKYEtfNm0arlo86stIh6ODD29 +71TkdATVYae3DK0O9gPkDkbs57BXdCtVpe7Qg0ypey2XxBtf+66om9By5dBQKCD 9mPIr6EbmkEHcbuKTJ9iB47D/A== -----END CERTIFICATE-----Generated at Mon Sep 28 21:55:45 2026 by rpki-client