$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E60BE/9A009132AB3A11F18367D5166D11F970/CQyLgW7CLSTWcV6m09s0cv3SkY0.mft File: CQyLgW7CLSTWcV6m09s0cv3SkY0.mft (raw, json) Hash identifier: yPdOarhIOltXF+jDmSVb9QdbC4BEUMiYrTdhEmQVBs8= Subject key identifier: 2B:55:C6:90:58:F1:2E:70:87:0A:70:DC:B4:14:83:38:BA:8E:14:99 Authority key identifier: 09:0C:8B:81:6E:C2:2D:24:D6:71:5E:A6:D3:DB:34:72:FD:D2:91:8D Certificate issuer: /CN=A91E60BE/serialNumber=090C8B816EC22D24D6715EA6D3DB3472FDD2918D Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CQyLgW7CLSTWcV6m09s0cv3SkY0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E60BE/9A009132AB3A11F18367D5166D11F970/CQyLgW7CLSTWcV6m09s0cv3SkY0.mft Manifest number: 21 Signing time: Tue 03 Nov 2026 10:00:50 +0000 Manifest this update: Tue 03 Nov 2026 10:00:50 +0000 Manifest next update: Tue 10 Nov 2026 10:00:50 +0000 Files and hashes: 1: CQyLgW7CLSTWcV6m09s0cv3SkY0.crl (hash: 0zOFcfDe9No/zgXMlkJFOwc5H5RIPy9OZP/OhQ0q64w=) 2: mU--buUUTmUNCuDGU6LmNbyW7jY.asa (hash: R1QnryZE+6vurfUuE0WUq4spgNvCBH4X3l8NtzsEP1g=) 3: 4-oiypFfIpguVhrn4YIqmnwHJho.asa (hash: nNsZolbMm357b3YPMufDx88k9OIE5utNMxj3ie7geC4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E60BE/9A009132AB3A11F18367D5166D11F970/CQyLgW7CLSTWcV6m09s0cv3SkY0.crl rsync://rpki.apnic.net/member_repository/A91E60BE/9A009132AB3A11F18367D5166D11F970/CQyLgW7CLSTWcV6m09s0cv3SkY0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CQyLgW7CLSTWcV6m09s0cv3SkY0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 10:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E60BE, serialNumber=090C8B816EC22D24D6715EA6D3DB3472FDD2918D Validity Not Before: Nov 3 10:00:50 2026 GMT Not After : Nov 10 10:00:50 2026 GMT Subject: CN=6ae9b0d2-7894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e2:1c:ec:79:ad:a7:e1:e2:d7:31:29:43:b6: 7a:cd:1f:1a:dd:b1:0c:51:cf:f5:06:2e:9e:de:83: 0f:31:da:79:58:49:a5:c2:86:9e:8b:e6:fb:5d:92: e7:5e:9b:b7:fc:75:24:7d:db:4f:9f:e2:8d:89:60: 3d:c1:b2:32:a6:d6:62:be:6e:75:81:d8:b7:54:81: b6:69:01:21:df:0f:42:f9:77:c6:29:f8:18:f3:24: 60:04:d3:e8:dc:42:eb:39:c8:af:74:af:37:fe:82: 33:4d:d6:36:1a:8b:d3:8c:fe:36:9f:a6:d0:fb:84: 4c:c9:17:a4:0f:4c:21:94:e2:f9:65:ba:8d:3a:57: bd:31:32:c6:81:6f:60:f2:bf:ef:88:0e:2d:49:ef: 7a:9f:e6:9d:4c:7b:b5:d8:dd:f5:2b:9a:e3:06:10: 8d:d4:ee:39:07:d3:4d:d4:ff:03:7d:22:73:e8:4e: 03:7a:4d:54:d3:f2:bc:6b:9d:7f:b7:f3:9e:a6:59: b5:9c:6c:c8:16:26:3a:f0:84:96:19:15:e3:51:ff: a5:41:e5:22:8f:b5:93:07:f7:e5:0d:38:52:30:93: af:c8:83:c1:4d:a2:0e:4e:9c:5c:7a:e1:29:e8:cd: 2c:6b:e6:e2:b5:52:37:87:da:45:8e:98:74:b7:94: f1:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:55:C6:90:58:F1:2E:70:87:0A:70:DC:B4:14:83:38:BA:8E:14:99 X509v3 Authority Key Identifier: keyid:09:0C:8B:81:6E:C2:2D:24:D6:71:5E:A6:D3:DB:34:72:FD:D2:91:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E60BE/9A009132AB3A11F18367D5166D11F970/CQyLgW7CLSTWcV6m09s0cv3SkY0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CQyLgW7CLSTWcV6m09s0cv3SkY0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E60BE/9A009132AB3A11F18367D5166D11F970/CQyLgW7CLSTWcV6m09s0cv3SkY0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:6b:c9:b0:da:12:ea:31:eb:1f:76:60:6e:a9:b8:f9:67:fe: 36:54:4b:5f:0f:48:2e:25:aa:b2:eb:ea:83:8a:17:64:18:50: dd:27:c7:15:43:34:55:73:42:58:4f:16:46:70:c3:37:e4:90: af:84:6a:5f:21:a3:d4:5d:98:5a:9e:d4:46:9f:12:1a:aa:44: e1:05:83:cc:46:39:96:bb:2a:44:e4:a1:07:3e:56:0a:1a:67: 20:04:c7:a2:cb:f8:66:6e:b6:70:a9:35:3b:24:a6:3e:8d:84: d3:46:b5:42:fc:60:9f:db:7a:0a:4d:e4:80:56:00:ef:8c:97: 2f:12:67:a5:51:73:1a:67:95:de:aa:a1:39:5e:c0:cb:89:a4: ef:df:cd:b8:d2:6c:d2:32:99:dc:78:57:a2:63:2f:9b:98:83: ef:f2:9b:48:bf:38:88:f5:56:00:10:45:86:ea:f8:53:05:a5: 35:2f:dd:7b:8c:84:17:7e:f6:ef:83:b8:2c:5d:70:a1:60:c9: 43:16:9e:45:15:8a:ce:a5:17:32:a1:a9:7f:8d:e9:04:80:46: d9:eb:15:7b:4e:cb:33:d0:8d:04:50:7a:17:96:fb:fc:a3:04: 4e:6f:21:ae:5e:4c:59:56:a3:e3:bc:27:5c:3a:16:b2:5e:06: 44:e3:74:7e -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NjBCRTExMC8GA1UEBRMoMDkwQzhCODE2RUMyMkQyNEQ2NzE1RUE2RDNEQjM0NzJG REQyOTE4RDAeFw0yNjExMDMxMDAwNTBaFw0yNjExMTAxMDAwNTBaMBgxFjAUBgNV BAMTDTZhZTliMGQyLTc4OTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC94hzsea2n4eLXMSlDtnrNHxrdsQxRz/UGLp7egw8x2nlYSaXChp6L5vtdkude m7f8dSR920+f4o2JYD3BsjKm1mK+bnWB2LdUgbZpASHfD0L5d8Yp+BjzJGAE0+jc Qus5yK90rzf+gjNN1jYai9OM/jafptD7hEzJF6QPTCGU4vlluo06V70xMsaBb2Dy v++IDi1J73qf5p1Me7XY3fUrmuMGEI3U7jkH003U/wN9InPoTgN6TVTT8rxrnX+3 856mWbWcbMgWJjrwhJYZFeNR/6VB5SKPtZMH9+UNOFIwk6/Ig8FNog5OnFx64Sno zSxr5uK1UjeH2kWOmHS3lPFRAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUK1XGkFjx LnCHCnDctBSDOLqOFJkwHwYDVR0jBBgwFoAUCQyLgW7CLSTWcV6m09s0cv3SkY0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU2MEJFLzlBMDA5MTMyQUIz QTExRjE4MzY3RDUxNjZEMTFGOTcwL0NReUxnVzdDTFNUV2NWNm0wOXMwY3YzU2tZ MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ1F5TGdXN0NMU1RXY1Y2bTA5czBjdjNTa1kwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU2 MEJFLzlBMDA5MTMyQUIzQTExRjE4MzY3RDUxNjZEMTFGOTcwL0NReUxnVzdDTFNU V2NWNm0wOXMwY3YzU2tZMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBMa8mw2hLqMesfdmBuqbj5Z/42VEtfD0guJaqy6+qDihdkGFDdJ8cVQzRVc0JY TxZGcMM35JCvhGpfIaPUXZhantRGnxIaqkThBYPMRjmWuypE5KEHPlYKGmcgBMei y/hmbrZwqTU7JKY+jYTTRrVC/GCf23oKTeSAVgDvjJcvEmelUXMaZ5XeqqE5XsDL iaTv38240mzSMpnceFeiYy+bmIPv8ptIvziI9VYAEEWG6vhTBaU1L917jIQXfvbv g7gsXXChYMlDFp5FFYrOpRcyoal/jekEgEbZ6xV7Tssz0I0EUHoXlvv8owRObyGu XkxZVqPjvCdcOhayXgZE43R+ -----END CERTIFICATE-----Generated at Thu Nov 5 05:32:16 2026 by rpki-client