$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft File: QLjSLvI7N7C55T88ThDWrj64qZ8.mft (raw, json) Hash identifier: 78bpQd5wayxxuS6oUeKGERATYswJ73Y3epVKK74MRRI= Subject key identifier: 0C:D6:60:45:DA:72:BC:9D:88:91:14:72:D0:9E:62:1A:C0:FF:F7:F1 Authority key identifier: 40:B8:D2:2E:F2:3B:37:B0:B9:E5:3F:3C:4E:10:D6:AE:3E:B8:A9:9F Certificate issuer: /CN=A91E689D/serialNumber=40B8D22EF23B37B0B9E53F3C4E10D6AE3EB8A99F Certificate serial: 358C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLjSLvI7N7C55T88ThDWrj64qZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft Manifest number: 3583 Signing time: Sun 20 Sep 2026 14:59:09 +0000 Manifest this update: Sun 20 Sep 2026 14:59:09 +0000 Manifest next update: Sun 27 Sep 2026 14:59:09 +0000 Files and hashes: 1: QLjSLvI7N7C55T88ThDWrj64qZ8.crl (hash: eYQif9hj9GLF3caa/DgHs0BlAv/hnLhYoJKPYdKkFWY=) 2: v1xtMR54ekuDn4r5wtgrvOTr2YE.asa (hash: kV7twXJrtxJmXDA+tl8S41Q4+TVoeE0RO87ddCo+mxk=) 3: 3773AC0C8B6111EFA3A49037C4F9AE02.roa (hash: uzaZKpbjTrWsFfOiIa8WfR03ueqsK9oa9a46XDa7tCk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.crl rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLjSLvI7N7C55T88ThDWrj64qZ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 14:59:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13708 (0x358c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E689D, serialNumber=40B8D22EF23B37B0B9E53F3C4E10D6AE3EB8A99F Validity Not Before: Sep 20 14:59:09 2026 GMT Not After : Sep 27 14:59:09 2026 GMT Subject: CN=6aaff4bd-e859 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:fb:a0:38:9a:e9:8d:08:11:74:9d:ac:e0:bc: b4:40:0a:a8:32:88:54:ac:3c:3e:ec:5d:85:e2:c4: 8b:98:89:e3:1c:54:22:38:75:68:3d:28:24:b6:ef: 0e:9e:82:a9:84:89:42:9d:6f:64:46:15:9a:bc:cd: 69:34:3f:42:51:ca:d2:e5:3d:89:a5:96:0a:9f:88: a0:82:a6:70:5b:43:da:0b:ad:6c:aa:f4:01:e0:93: e1:1e:24:54:68:dd:92:cc:f5:fb:ea:88:08:54:32: dc:9c:96:01:43:b5:d2:e2:92:54:34:c4:c0:d4:3c: 04:07:b4:66:95:1b:ec:d1:56:62:d3:38:45:39:4a: e5:28:d2:4e:a2:bf:4d:2a:30:69:e0:3c:a1:27:33: 47:19:36:67:6d:93:d4:29:92:17:43:c4:bc:81:27: e6:87:2f:0b:20:f3:9a:08:1a:d2:0f:63:04:6b:57: 6c:c2:87:eb:38:ad:e5:a0:05:ed:9f:21:24:72:d3: cc:cc:43:d6:92:1d:b6:99:d2:9d:60:b7:c9:c5:02: ee:5e:55:46:40:4e:94:be:db:90:5d:22:b3:ee:50: 0e:9a:a9:ad:20:9f:cc:f9:5c:81:66:c1:49:ea:0f: be:31:64:f5:e2:a9:b9:67:25:8d:21:27:35:0e:78: cc:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:D6:60:45:DA:72:BC:9D:88:91:14:72:D0:9E:62:1A:C0:FF:F7:F1 X509v3 Authority Key Identifier: keyid:40:B8:D2:2E:F2:3B:37:B0:B9:E5:3F:3C:4E:10:D6:AE:3E:B8:A9:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLjSLvI7N7C55T88ThDWrj64qZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:22:42:98:c0:21:48:ba:81:2c:e0:9b:8f:53:41:3c:6a:c5: a9:60:4a:ca:09:61:e4:94:3c:d4:3a:38:09:d2:e2:10:32:83: 6c:9e:76:76:1c:ac:52:60:9f:ad:4e:50:96:06:0a:2d:7f:7a: 86:e9:ea:ea:c9:77:ed:3c:24:69:ae:5b:87:b0:5e:82:e8:7a: 0b:b3:35:63:00:98:2a:f1:0e:5f:54:15:22:54:eb:70:42:62: 72:96:5a:33:32:52:82:0f:1e:3c:dc:c7:55:ae:34:b5:30:b7: a5:68:50:ee:f9:03:ce:5c:21:b7:40:4d:16:c1:1d:bd:9b:ce: 61:57:9e:db:95:95:95:d8:18:67:da:2f:e4:8d:ac:6a:8f:9e: f6:05:2a:c4:a2:c1:87:c7:12:55:b8:cb:63:b0:30:57:9f:d7: 93:cf:4b:77:aa:f7:35:cb:81:26:d9:cd:cb:d7:5e:2e:d4:85: 6d:dd:b4:ec:d4:ef:66:ab:0b:54:0f:8c:70:9b:b5:34:dc:57: bb:12:4d:5e:d3:ca:e7:94:a6:f2:44:07:8b:77:65:2e:6b:2f: d4:e5:3d:74:f2:a0:24:a8:8f:ba:a2:48:9c:8a:68:b5:d1:52: 46:7c:49:46:19:4f:7c:3d:85:20:93:2a:c4:74:ba:f9:13:c6: 20:bc:b5:59 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNYwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTY4OUQxMTAvBgNVBAUTKDQwQjhEMjJFRjIzQjM3QjBCOUU1M0YzQzRFMTBENkFF M0VCOEE5OUYwHhcNMjYwOTIwMTQ1OTA5WhcNMjYwOTI3MTQ1OTA5WjAYMRYwFAYD VQQDEw02YWFmZjRiZC1lODU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyvugOJrpjQgRdJ2s4Ly0QAqoMohUrDw+7F2F4sSLmInjHFQiOHVoPSgktu8O noKphIlCnW9kRhWavM1pND9CUcrS5T2JpZYKn4iggqZwW0PaC61sqvQB4JPhHiRU aN2SzPX76ogIVDLcnJYBQ7XS4pJUNMTA1DwEB7RmlRvs0VZi0zhFOUrlKNJOor9N KjBp4DyhJzNHGTZnbZPUKZIXQ8S8gSfmhy8LIPOaCBrSD2MEa1dswofrOK3loAXt nyEkctPMzEPWkh22mdKdYLfJxQLuXlVGQE6UvtuQXSKz7lAOmqmtIJ/M+VyBZsFJ 6g++MWT14qm5ZyWNISc1DnjMmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAzWYEXa crydiJEUctCeYhrA//fxMB8GA1UdIwQYMBaAFEC40i7yOzewueU/PE4Q1q4+uKmf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjg5RC9DN0M2M0RBODFE OUUxMUUyODNDRUZBOEUwOEIwMkNEMi9RTGpTTHZJN043QzU1VDg4VGhEV3JqNjRx WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FMalNMdkk3TjdDNTVUODhUaERXcmo2NHFaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Njg5RC9DN0M2M0RBODFEOUUxMUUyODNDRUZBOEUwOEIwMkNEMi9RTGpTTHZJN043 QzU1VDg4VGhEV3JqNjRxWjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYCJCmMAhSLqBLOCbj1NBPGrFqWBKyglh5JQ81Do4CdLiEDKDbJ52dhysUmCf rU5QlgYKLX96hunq6sl37Twkaa5bh7Beguh6C7M1YwCYKvEOX1QVIlTrcEJicpZa MzJSgg8ePNzHVa40tTC3pWhQ7vkDzlwht0BNFsEdvZvOYVee25WVldgYZ9ov5I2s ao+e9gUqxKLBh8cSVbjLY7AwV5/Xk89Ld6r3NcuBJtnNy9deLtSFbd207NTvZqsL VA+McJu1NNxXuxJNXtPK55Sm8kQHi3dlLmsv1OU9dPKgJKiPuqJInIpotdFSRnxJ RhlPfD2FIJMqxHS6+RPGILy1WQ== -----END CERTIFICATE-----Generated at Mon Sep 21 17:56:48 2026 by rpki-client