$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft File: qrDiti9jQ4lXMMBUiOf8TibFGmw.mft (raw, json) Hash identifier: NycyE0scf+k8HaapNScWX3Kgna5bg0p1r7w9finRgiw= Subject key identifier: 51:9E:12:C1:94:1B:E4:26:12:95:8E:8D:DF:5E:A7:C6:E2:73:98:A4 Authority key identifier: AA:B0:E2:B6:2F:63:43:89:57:30:C0:54:88:E7:FC:4E:26:C5:1A:6C Certificate issuer: /CN=A91DCAE8/serialNumber=AAB0E2B62F6343895730C05488E7FC4E26C51A6C Certificate serial: 3601 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft Manifest number: 35C3 Signing time: Thu 24 Sep 2026 14:45:06 +0000 Manifest this update: Thu 24 Sep 2026 14:45:05 +0000 Manifest next update: Thu 01 Oct 2026 14:45:05 +0000 Files and hashes: 1: qrDiti9jQ4lXMMBUiOf8TibFGmw.crl (hash: hxbYw2y5TWH2NiL1okJxWBLcunmCOfUv/E76/m9RVrM=) 2: 2D89110A9A5311EE9CB13140C4F9AE02.roa (hash: XwZCOD7/DYVhwc3OTh2v3F5m4u9nDdw0r2AQU6hRtCI=) 3: 006CE5442FBA11ECA05BB46EC4F9AE02.roa (hash: vffbJWDHHCOhEb+jXI97UwDYWlfDybh92AYpmVIhFFU=) 4: 56F533B4A63011EEA6054D52C4F9AE02.roa (hash: AG0uySI8j3B6fdSYGRxuEIJRJdCED4LLdcZlOw31HXc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.crl rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 14:45:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13825 (0x3601) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCAE8, serialNumber=AAB0E2B62F6343895730C05488E7FC4E26C51A6C Validity Not Before: Sep 24 14:45:05 2026 GMT Not After : Oct 1 14:45:05 2026 GMT Subject: CN=6ab53772-42a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:5e:b2:35:07:4b:f8:d5:c9:c9:bf:cf:47:76: 68:05:81:ce:00:08:ef:92:c5:69:6d:f9:d8:67:b7: e4:cc:e1:a5:60:c6:91:61:40:3a:b2:71:65:f2:0c: c5:e4:67:7b:e5:9f:b8:0b:21:c1:51:24:92:72:a8: cf:4d:4e:87:c1:56:aa:d6:01:ac:92:2c:5c:cb:12: 0e:ec:b2:27:cd:ed:6c:49:14:ee:2e:d6:de:ca:83: b2:a6:2a:2d:59:05:76:7e:4c:b4:23:ba:ff:a0:c1: e8:9c:3b:55:2e:50:f6:db:38:b4:10:60:df:88:61: 56:03:4a:c6:b1:d4:81:7d:93:33:d9:9c:cc:8b:f8: 98:a5:b1:f3:69:20:b1:8e:05:b8:90:18:5b:2a:15: d6:63:d5:f4:40:ed:41:85:5f:c3:1e:c3:09:cb:b1: 6b:a8:6e:c8:7b:05:ce:71:6a:1e:09:61:b2:4e:cc: 2e:c9:7d:ba:62:79:73:e9:9f:39:26:1f:ef:74:d4: 21:13:59:47:84:70:6e:41:13:6a:95:7e:24:a4:70: fb:23:92:02:c6:c6:61:2a:17:88:7e:06:b2:6e:18: 0d:01:c1:c8:dc:4b:5e:bf:63:c9:28:87:82:82:81: 75:47:29:69:d5:89:88:18:7c:cd:b6:2e:80:17:4d: c1:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:9E:12:C1:94:1B:E4:26:12:95:8E:8D:DF:5E:A7:C6:E2:73:98:A4 X509v3 Authority Key Identifier: keyid:AA:B0:E2:B6:2F:63:43:89:57:30:C0:54:88:E7:FC:4E:26:C5:1A:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:c7:9c:ef:e6:09:9a:2f:46:32:1f:6c:48:f3:89:60:da:35: 6c:75:86:0c:e2:b0:90:84:0a:71:ff:a6:d1:1d:66:cb:10:12: 36:b4:08:3d:47:50:13:40:e8:d2:4d:b3:d1:1a:de:44:bd:d3: 73:bb:93:7f:48:a8:5e:0d:86:33:f4:93:62:56:5f:e1:b6:53: f8:44:45:e6:f1:ad:03:3f:66:2c:92:e0:16:82:1e:1a:37:48: 62:49:91:b6:97:c9:28:9b:4b:53:f9:97:dc:66:89:fa:02:6f: e3:8e:be:67:4f:86:65:6a:f6:85:85:9f:71:54:b5:df:07:5b: 06:c2:4a:fa:e8:f1:4a:c7:90:1f:5a:4f:b8:27:98:c6:d6:0b: fe:3f:b7:70:df:30:d5:3d:c6:06:d1:05:01:56:19:02:b6:6f: e6:2e:3c:89:3e:3e:58:ae:31:58:38:0c:88:b9:08:e4:14:36: 16:8f:ba:a7:5e:2b:83:0f:01:58:6d:d9:bf:d7:64:48:1a:42: 6f:00:d4:4e:da:45:27:fa:5d:94:78:88:19:b5:0d:4e:be:b5: 84:86:d6:a9:04:41:57:10:df:4f:8f:99:79:d8:cc:62:07:b1: 88:49:3e:22:6a:d6:96:df:f4:5b:58:36:06:06:0a:9e:39:90: 84:c0:7b:98 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNgEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENBRTgxMTAvBgNVBAUTKEFBQjBFMkI2MkY2MzQzODk1NzMwQzA1NDg4RTdGQzRF MjZDNTFBNkMwHhcNMjYwOTI0MTQ0NTA1WhcNMjYxMDAxMTQ0NTA1WjAYMRYwFAYD VQQDEw02YWI1Mzc3Mi00MmExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA216yNQdL+NXJyb/PR3ZoBYHOAAjvksVpbfnYZ7fkzOGlYMaRYUA6snFl8gzF 5Gd75Z+4CyHBUSSScqjPTU6HwVaq1gGskixcyxIO7LInze1sSRTuLtbeyoOypiot WQV2fky0I7r/oMHonDtVLlD22zi0EGDfiGFWA0rGsdSBfZMz2ZzMi/iYpbHzaSCx jgW4kBhbKhXWY9X0QO1BhV/DHsMJy7FrqG7IewXOcWoeCWGyTswuyX26Ynlz6Z85 Jh/vdNQhE1lHhHBuQRNqlX4kpHD7I5ICxsZhKheIfgaybhgNAcHI3Etev2PJKIeC goF1Rylp1YmIGHzNti6AF03BrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFGeEsGU G+QmEpWOjd9ep8bic5ikMB8GA1UdIwQYMBaAFKqw4rYvY0OJVzDAVIjn/E4mxRps MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0FFOC84QjZBREUxNDFE OTMxMUUyOTJDQjIzRjcwOEIwMkNEMi9xckRpdGk5alE0bFhNTUJVaU9mOFRpYkZH bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FyRGl0aTlqUTRsWE1NQlVpT2Y4VGliRkdtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0FFOC84QjZBREUxNDFEOTMxMUUyOTJDQjIzRjcwOEIwMkNEMi9xckRpdGk5alE0 bFhNTUJVaU9mOFRpYkZHbXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvcec7+YJmi9GMh9sSPOJYNo1bHWGDOKwkIQKcf+m0R1myxASNrQIPUdQE0Do 0k2z0RreRL3Tc7uTf0ioXg2GM/STYlZf4bZT+ERF5vGtAz9mLJLgFoIeGjdIYkmR tpfJKJtLU/mX3GaJ+gJv446+Z0+GZWr2hYWfcVS13wdbBsJK+ujxSseQH1pPuCeY xtYL/j+3cN8w1T3GBtEFAVYZArZv5i48iT4+WK4xWDgMiLkI5BQ2Fo+6p14rgw8B WG3Zv9dkSBpCbwDUTtpFJ/pdlHiIGbUNTr61hIbWqQRBVxDfT4+ZedjMYgexiEk+ ImrWlt/0W1g2BgYKnjmQhMB7mA== -----END CERTIFICATE-----Generated at Fri Sep 25 18:24:15 2026 by rpki-client