$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E3791/07F37F1AB1AD11F1B4E597013411F970/QPGWvYlA2WRWIZehtrGWWT8HgO8.mft File: QPGWvYlA2WRWIZehtrGWWT8HgO8.mft (raw, json) Hash identifier: Rw4czYtyhe2dqp36fciTb8AB6M3CnDbi9DPsOTSWn2A= Subject key identifier: 8F:4F:FF:2E:AD:24:75:0E:32:EC:53:B3:4C:4F:98:3C:39:5F:75:EF Authority key identifier: 40:F1:96:BD:89:40:D9:64:56:21:97:A1:B6:B1:96:59:3F:07:80:EF Certificate issuer: /CN=A91E3791/serialNumber=40F196BD8940D964562197A1B6B196593F0780EF Certificate serial: 07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QPGWvYlA2WRWIZehtrGWWT8HgO8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3791/07F37F1AB1AD11F1B4E597013411F970/QPGWvYlA2WRWIZehtrGWWT8HgO8.mft Manifest number: 06 Signing time: Mon 21 Sep 2026 09:15:23 +0000 Manifest this update: Mon 21 Sep 2026 09:15:23 +0000 Manifest next update: Mon 28 Sep 2026 09:15:23 +0000 Files and hashes: 1: QPGWvYlA2WRWIZehtrGWWT8HgO8.crl (hash: SzjNBNBQTEPj7njbojpCgJ2Rd9SmFBLKN1R5sf8T5PM=) 2: AEF436AEB32111F18FC19D146811F970.roa (hash: hufOxBTDlkt33wKsmT+nceMtRqoSaAfYTZBo3yTM45U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3791/07F37F1AB1AD11F1B4E597013411F970/QPGWvYlA2WRWIZehtrGWWT8HgO8.crl rsync://rpki.apnic.net/member_repository/A91E3791/07F37F1AB1AD11F1B4E597013411F970/QPGWvYlA2WRWIZehtrGWWT8HgO8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QPGWvYlA2WRWIZehtrGWWT8HgO8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 09:15:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3791, serialNumber=40F196BD8940D964562197A1B6B196593F0780EF Validity Not Before: Sep 21 09:15:23 2026 GMT Not After : Sep 28 09:15:23 2026 GMT Subject: CN=6ab0f5ab-36b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:65:2a:5c:4a:ba:fb:3f:37:65:57:7a:0f:f3: 92:9b:79:69:19:9c:fe:f0:2e:c1:17:48:25:92:57: b7:ee:ca:64:f8:b1:f3:40:30:a7:be:56:e1:05:e7: 80:b2:74:01:a6:90:d5:77:4e:d9:14:8f:21:8f:f2: c8:b3:e0:8c:7f:92:23:57:d3:08:2b:c6:49:05:2a: 20:06:58:23:e4:b8:14:e5:64:06:c7:26:81:b5:6a: 6b:39:da:01:2c:04:8d:d0:4f:9b:95:46:66:b1:5c: 8e:96:11:18:2f:8e:e1:7b:10:27:fb:9d:19:7c:ec: bc:7b:85:35:68:ff:76:fa:b7:e9:e6:55:34:e2:fe: 51:bb:c4:85:4c:5a:ce:67:eb:17:5a:c8:61:f8:25: 4e:2a:50:65:80:10:16:66:db:7e:41:86:53:a9:fd: e4:67:cd:47:91:fb:c0:2d:87:a4:75:84:e4:e6:8c: b3:b0:29:9c:28:a0:f0:fa:86:79:2d:d2:4d:bb:d4: 22:f0:aa:18:6b:ea:17:62:34:d7:b8:9e:5f:df:2d: 6f:ce:50:b9:ec:c3:27:bb:be:53:e6:52:3a:80:ff: 62:8a:1a:c2:93:34:df:58:28:ed:db:f0:35:70:5b: 48:98:0b:a9:2d:10:70:93:f2:70:95:56:07:ea:ed: 33:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:4F:FF:2E:AD:24:75:0E:32:EC:53:B3:4C:4F:98:3C:39:5F:75:EF X509v3 Authority Key Identifier: keyid:40:F1:96:BD:89:40:D9:64:56:21:97:A1:B6:B1:96:59:3F:07:80:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3791/07F37F1AB1AD11F1B4E597013411F970/QPGWvYlA2WRWIZehtrGWWT8HgO8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QPGWvYlA2WRWIZehtrGWWT8HgO8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3791/07F37F1AB1AD11F1B4E597013411F970/QPGWvYlA2WRWIZehtrGWWT8HgO8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:cf:a2:20:b9:b8:0d:59:c7:12:a0:49:bf:d6:c5:c0:63:db: 52:57:37:1b:2f:37:f3:8b:bf:56:d5:b6:71:8b:0f:3c:33:e4: bd:b8:6d:4d:a3:42:99:cb:e0:c1:bf:5f:77:1c:e2:78:62:89: 2c:1b:d8:88:1b:c7:0f:74:d9:52:08:59:94:2c:7d:95:2c:6f: e8:92:fa:27:27:31:b0:04:a1:39:04:27:01:54:35:3b:eb:f1: de:19:a1:82:2e:fb:4a:c4:c9:ee:a5:3b:20:d8:71:5a:4f:7e: 03:5e:b0:4a:82:dd:35:b1:a2:bf:8f:51:fb:dc:fd:a4:d6:c6: f2:8e:c3:2d:a3:c9:7a:4b:58:57:55:b3:c9:5d:f3:90:f4:ad: 06:82:7b:1f:14:fe:98:02:35:72:82:d2:ae:6d:5c:aa:0f:04: 20:88:48:0d:85:e3:4c:e3:b6:dd:83:a4:69:01:21:a8:24:f5: 5a:01:67:85:da:88:73:b3:45:79:a7:4f:35:96:c2:76:be:ea: bc:e2:be:63:9c:37:50:77:70:28:1e:78:b3:2a:ac:1b:2f:72: 06:41:c0:2c:94:5f:a5:b4:73:a9:74:a9:26:01:6f:86:95:24: 5e:32:5b:4d:17:1b:d9:b6:9f:9a:00:2b:ec:a4:74:30:63:6a: 7e:df:b3:7e -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF Mzc5MTExMC8GA1UEBRMoNDBGMTk2QkQ4OTQwRDk2NDU2MjE5N0ExQjZCMTk2NTkz RjA3ODBFRjAeFw0yNjA5MjEwOTE1MjNaFw0yNjA5MjgwOTE1MjNaMBgxFjAUBgNV BAMTDTZhYjBmNWFiLTM2YjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2ZSpcSrr7PzdlV3oP85KbeWkZnP7wLsEXSCWSV7fuymT4sfNAMKe+VuEF54Cy dAGmkNV3TtkUjyGP8siz4Ix/kiNX0wgrxkkFKiAGWCPkuBTlZAbHJoG1ams52gEs BI3QT5uVRmaxXI6WERgvjuF7ECf7nRl87Lx7hTVo/3b6t+nmVTTi/lG7xIVMWs5n 6xdayGH4JU4qUGWAEBZm235BhlOp/eRnzUeR+8Ath6R1hOTmjLOwKZwooPD6hnkt 0k271CLwqhhr6hdiNNe4nl/fLW/OULnswye7vlPmUjqA/2KKGsKTNN9YKO3b8DVw W0iYC6ktEHCT8nCVVgfq7TPtAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUj0//Lq0k dQ4y7FOzTE+YPDlfde8wHwYDVR0jBBgwFoAUQPGWvYlA2WRWIZehtrGWWT8HgO8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUzNzkxLzA3RjM3RjFBQjFB RDExRjFCNEU1OTcwMTM0MTFGOTcwL1FQR1d2WWxBMldSV0laZWh0ckdXV1Q4SGdP OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUVBHV3ZZbEEyV1JXSVplaHRyR1dXVDhIZ084LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUz NzkxLzA3RjM3RjFBQjFBRDExRjFCNEU1OTcwMTM0MTFGOTcwL1FQR1d2WWxBMldS V0laZWh0ckdXV1Q4SGdPOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAUz6IgubgNWccSoEm/1sXAY9tSVzcbLzfzi79W1bZxiw88M+S9uG1No0KZy+DB v193HOJ4YoksG9iIG8cPdNlSCFmULH2VLG/okvonJzGwBKE5BCcBVDU76/HeGaGC LvtKxMnupTsg2HFaT34DXrBKgt01saK/j1H73P2k1sbyjsMto8l6S1hXVbPJXfOQ 9K0GgnsfFP6YAjVygtKubVyqDwQgiEgNheNM47bdg6RpASGoJPVaAWeF2ohzs0V5 p081lsJ2vuq84r5jnDdQd3AoHnizKqwbL3IGQcAslF+ltHOpdKkmAW+GlSReMltN FxvZtp+aACvspHQwY2p+37N+ -----END CERTIFICATE-----Generated at Mon Sep 21 21:55:57 2026 by rpki-client