$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.mft File: QW1s1gOQ-3yW7XnXjOdvVK_PRFg.mft (raw, json) Hash identifier: L/Gane8qdF6fHozecf8+1r7+y4PwSDQOSkeS3gRVco4= Subject key identifier: 7E:A1:EF:9A:10:AF:11:AE:2D:3F:25:EB:7C:B2:46:63:D4:81:8B:94 Authority key identifier: 41:6D:6C:D6:03:90:FB:7C:96:ED:79:D7:8C:E7:6F:54:AF:CF:44:58 Certificate issuer: /CN=A91E5D61/serialNumber=416D6CD60390FB7C96ED79D78CE76F54AFCF4458 Certificate serial: 1396 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.mft Manifest number: 493E Signing time: Tue 22 Sep 2026 14:21:24 +0000 Manifest this update: Tue 22 Sep 2026 14:21:24 +0000 Manifest next update: Tue 29 Sep 2026 14:21:24 +0000 Files and hashes: 1: QW1s1gOQ-3yW7XnXjOdvVK_PRFg.crl (hash: /RtRAxD1BaokW6XfJHa5ZSKGQRwuJS1M77fnPbCMdi4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.crl rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 14:21:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5014 (0x1396) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D61, serialNumber=416D6CD60390FB7C96ED79D78CE76F54AFCF4458 Validity Not Before: Sep 22 14:21:24 2026 GMT Not After : Sep 29 14:21:24 2026 GMT Subject: CN=6ab28ee4-402e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:96:94:98:43:bb:4a:58:96:ee:23:d5:87:22: 9c:7a:26:b6:a7:41:fd:0b:b0:c3:ef:b6:1c:bf:03: 17:0a:61:fc:43:9f:27:f2:ab:ff:4f:be:0a:b0:bf: d2:55:00:80:90:47:ea:58:af:05:8f:fc:4e:06:e0: 8d:f4:93:d0:b7:80:68:0e:d5:bf:16:c7:84:92:dc: da:c5:6f:a5:b3:59:69:cc:d5:4c:24:f1:27:63:7c: e5:ce:80:cd:0b:8a:e3:20:7f:e4:6b:1d:c6:06:65: 55:69:c0:7f:5a:3e:5e:5a:e0:40:f3:96:e9:f7:71: c9:fc:20:bd:a4:a6:9a:41:43:2c:c0:3a:31:6a:1f: 96:e6:2f:95:71:6c:90:c7:15:09:5b:08:fb:25:dc: 30:7f:66:e1:2d:36:b9:d0:7b:59:d4:dd:e4:95:90: 16:90:9f:94:da:bd:ae:53:0a:f8:36:18:81:43:da: b6:55:f1:6a:7f:b6:06:b3:93:77:1c:15:b7:b7:c5: 17:73:52:ac:38:d1:ac:74:ab:56:ee:80:31:c3:87: d2:a7:1c:14:a9:fc:6b:33:84:98:60:33:80:47:9d: f3:33:c0:a2:a3:bc:dd:ec:0b:73:9d:f4:b8:00:70: 42:b4:7e:6d:93:88:43:88:1f:76:23:e4:db:5b:4c: e7:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:A1:EF:9A:10:AF:11:AE:2D:3F:25:EB:7C:B2:46:63:D4:81:8B:94 X509v3 Authority Key Identifier: keyid:41:6D:6C:D6:03:90:FB:7C:96:ED:79:D7:8C:E7:6F:54:AF:CF:44:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:dc:25:5c:86:df:d0:f7:8e:d4:1d:1d:bb:71:8d:ad:85:70: 73:fa:00:a9:45:35:ea:85:3b:45:57:d4:bf:d4:49:41:a8:e2: cd:76:7f:0d:f3:7e:b2:ef:d8:ea:69:ea:f0:ec:e7:01:40:9b: 2c:5b:af:aa:77:0e:a8:d4:7c:7e:e8:c8:38:16:05:45:02:86: 6e:e8:d7:43:93:9a:39:11:cf:2f:54:f2:a7:82:ab:7c:d1:03: 0e:ce:da:ee:bc:c0:4e:1a:6a:20:d5:13:37:b0:ff:f7:b7:ba: 8e:bd:19:cd:a6:77:9c:75:5d:f7:86:8c:da:43:9c:db:0e:06: be:4c:2a:e4:83:8d:88:b9:c8:68:c0:33:bd:d8:75:3e:7a:3a: f5:c7:8a:ba:9c:02:7d:46:95:cd:a0:6e:20:2f:8f:16:12:e3: 90:03:a0:b2:72:64:f1:a4:dd:57:2a:ce:38:1d:3d:28:89:78: 15:e1:ec:68:de:a4:6a:05:c3:be:9b:3f:75:9a:96:e7:94:87: 33:fd:40:6c:89:4b:f9:7e:91:99:f3:8b:cc:9c:44:4f:22:6b: f7:54:32:bc:1a:4e:4b:0e:9e:16:9d:6f:f7:10:b9:8e:07:02: d7:8e:6e:53:cc:3a:8b:b6:2c:05:e9:60:a6:8f:17:56:65:76: 77:3b:8b:ed -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICE5YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVENjExMTAvBgNVBAUTKDQxNkQ2Q0Q2MDM5MEZCN0M5NkVENzlENzhDRTc2RjU0 QUZDRjQ0NTgwHhcNMjYwOTIyMTQyMTI0WhcNMjYwOTI5MTQyMTI0WjAYMRYwFAYD VQQDEw02YWIyOGVlNC00MDJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr5aUmEO7SliW7iPVhyKceia2p0H9C7DD77YcvwMXCmH8Q58n8qv/T74KsL/S VQCAkEfqWK8Fj/xOBuCN9JPQt4BoDtW/FseEktzaxW+ls1lpzNVMJPEnY3zlzoDN C4rjIH/kax3GBmVVacB/Wj5eWuBA85bp93HJ/CC9pKaaQUMswDoxah+W5i+VcWyQ xxUJWwj7Jdwwf2bhLTa50HtZ1N3klZAWkJ+U2r2uUwr4NhiBQ9q2VfFqf7YGs5N3 HBW3t8UXc1KsONGsdKtW7oAxw4fSpxwUqfxrM4SYYDOAR53zM8Cio7zd7AtznfS4 AHBCtH5tk4hDiB92I+TbW0znQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH6h75oQ rxGuLT8l63yyRmPUgYuUMB8GA1UdIwQYMBaAFEFtbNYDkPt8lu1514znb1Svz0RY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUQ2MS8yQTdDN0Q5ODFE NzkxMUUyODc5RTM4QzUwOEIwMkNEMi9RVzFzMWdPUS0zeVc3WG5Yak9kdlZLX1BS RmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1FXMXMxZ09RLTN5VzdYblhqT2R2VktfUFJGZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUQ2MS8yQTdDN0Q5ODFENzkxMUUyODc5RTM4QzUwOEIwMkNEMi9RVzFzMWdPUS0z eVc3WG5Yak9kdlZLX1BSRmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtdwlXIbf0PeO1B0du3GNrYVwc/oAqUU16oU7RVfUv9RJQajizXZ/DfN+su/Y 6mnq8OznAUCbLFuvqncOqNR8fujIOBYFRQKGbujXQ5OaORHPL1Typ4KrfNEDDs7a 7rzAThpqINUTN7D/97e6jr0ZzaZ3nHVd94aM2kOc2w4Gvkwq5IONiLnIaMAzvdh1 Pno69ceKupwCfUaVzaBuIC+PFhLjkAOgsnJk8aTdVyrOOB09KIl4FeHsaN6kagXD vps/dZqW55SHM/1AbIlL+X6RmfOLzJxETyJr91QyvBpOSw6eFp1v9xC5jgcC145u U8w6i7YsBelgpo8XVmV2dzuL7Q== -----END CERTIFICATE-----Generated at Wed Sep 23 05:57:21 2026 by rpki-client