$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E7008/147EA740947111F1B0693F265C11F970/Q1NWydRSZtWy2PTNSh7n5ijiMCM.mft File: Q1NWydRSZtWy2PTNSh7n5ijiMCM.mft (raw, json) Hash identifier: sp1rA3A/qao1N0lXv7ru3OQDSuFODm5PucUZD5RneX8= Subject key identifier: 59:3B:70:A7:79:D9:09:8B:E0:25:BE:55:42:8E:FA:C6:56:95:C1:FE Authority key identifier: 43:53:56:C9:D4:52:66:D5:B2:D8:F4:CD:4A:1E:E7:E6:28:E2:30:23 Certificate issuer: /CN=A91E7008/serialNumber=435356C9D45266D5B2D8F4CD4A1EE7E628E23023 Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q1NWydRSZtWy2PTNSh7n5ijiMCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7008/147EA740947111F1B0693F265C11F970/Q1NWydRSZtWy2PTNSh7n5ijiMCM.mft Manifest number: 1E Signing time: Sun 27 Sep 2026 09:32:19 +0000 Manifest this update: Sun 27 Sep 2026 09:32:18 +0000 Manifest next update: Sun 04 Oct 2026 09:32:18 +0000 Files and hashes: 1: Q1NWydRSZtWy2PTNSh7n5ijiMCM.crl (hash: 3Kmc8XVDJ0TLuyUSfg1iNp5TTRZjKlhqWJLIck0q/TE=) 2: FA4EC88A947211F197C7FC845D11F970.roa (hash: 4lmfoMYcuUJFqzRnvNveukMNhcL+UIseWeLYiTeF9Ik=) 3: A31A6190947D11F1B45BAF1C6111F970.roa (hash: 6yl7AmTUhpqHzdSta5eTWxGC4sRi2YI3JgFhqBK5YDE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7008/147EA740947111F1B0693F265C11F970/Q1NWydRSZtWy2PTNSh7n5ijiMCM.crl rsync://rpki.apnic.net/member_repository/A91E7008/147EA740947111F1B0693F265C11F970/Q1NWydRSZtWy2PTNSh7n5ijiMCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q1NWydRSZtWy2PTNSh7n5ijiMCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 09:32:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7008, serialNumber=435356C9D45266D5B2D8F4CD4A1EE7E628E23023 Validity Not Before: Sep 27 09:32:18 2026 GMT Not After : Oct 4 09:32:18 2026 GMT Subject: CN=6ab8e2a3-7f74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:49:5a:e7:94:8d:49:a5:3b:9b:2a:28:82:b9: 20:31:76:b7:9d:02:ab:e0:9c:83:85:78:a2:b8:e2: e5:db:2f:d3:0e:dd:ac:14:76:d0:26:bb:8a:88:26: 7b:e0:0c:4b:52:00:15:25:55:e7:e9:51:16:0a:da: eb:b5:a4:6b:8b:4b:02:5a:5d:db:26:ef:1f:6b:bb: 59:ab:91:e4:f2:20:da:ae:14:36:20:09:a1:f4:ea: 4e:61:d7:73:b4:1c:2a:4c:6f:1c:e7:91:ed:28:78: 3f:c3:d2:17:18:d2:a8:9d:f4:1e:9f:75:77:a8:ee: e6:2a:d5:14:71:09:f6:c5:59:0e:31:83:a0:5e:b8: 9d:25:c2:f0:73:46:a5:c2:71:4a:d4:a9:ed:3d:fc: a5:57:e5:0f:ea:2a:60:db:74:92:3d:9a:68:77:f4: 90:e4:2f:8b:f9:d1:49:54:8b:2a:40:74:fd:49:e0: c5:28:8f:5a:35:9e:a8:47:ad:45:17:92:98:a4:a7: a8:2a:17:ba:74:8c:5c:18:ae:4f:65:4c:29:8b:50: dd:08:f6:51:3b:9c:59:86:a5:fc:b6:25:57:21:d5: 66:68:74:80:50:b8:88:93:43:6a:b4:c3:e5:06:08: d8:55:21:40:75:b8:a1:37:14:42:58:20:4e:34:64: e3:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:3B:70:A7:79:D9:09:8B:E0:25:BE:55:42:8E:FA:C6:56:95:C1:FE X509v3 Authority Key Identifier: keyid:43:53:56:C9:D4:52:66:D5:B2:D8:F4:CD:4A:1E:E7:E6:28:E2:30:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7008/147EA740947111F1B0693F265C11F970/Q1NWydRSZtWy2PTNSh7n5ijiMCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q1NWydRSZtWy2PTNSh7n5ijiMCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7008/147EA740947111F1B0693F265C11F970/Q1NWydRSZtWy2PTNSh7n5ijiMCM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:c7:92:b8:0e:44:dc:50:f0:3e:b9:6b:07:b4:16:a9:cf:72: 2e:9c:39:2f:6c:0b:40:2f:4d:b6:7b:62:9b:b4:7a:58:59:c6: a8:94:5c:75:6e:a0:5a:f3:9b:fa:9b:35:67:9b:49:a0:67:b4: 33:f4:cb:ee:4f:30:ec:f8:2e:5e:40:e9:7e:21:23:9e:55:06: 94:64:29:40:2e:65:3d:63:43:a1:e8:5f:b4:b1:cc:4f:3d:95: 6b:27:83:d3:0a:11:b2:b9:a6:a9:92:d9:e6:e4:d8:29:c4:a6: 84:46:79:6f:1b:01:20:25:93:3f:05:0a:6f:99:03:35:33:68: fa:e8:9a:ad:0d:08:a3:2b:42:d1:76:4a:17:f1:44:41:b3:ee: 0f:6e:dd:da:65:7b:11:06:f8:6e:75:19:96:f1:20:d8:df:a8: 0f:45:01:60:93:e9:ef:96:d8:61:a6:80:1b:71:29:b4:f0:44: ba:d7:35:23:4f:1b:fe:7f:2d:29:77:a1:90:f2:eb:42:f0:d1: 39:54:29:55:d2:eb:3b:39:ba:5c:0c:94:a7:b3:6d:c4:ed:66: 9e:2a:5f:b6:47:92:e3:5b:27:9d:49:89:7e:45:28:da:bf:ff: a9:09:3c:eb:63:8c:87:96:fa:d5:6e:27:47:1b:f6:15:a0:45: 4a:05:96:74 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NzAwODExMC8GA1UEBRMoNDM1MzU2QzlENDUyNjZENUIyRDhGNENENEExRUU3RTYy OEUyMzAyMzAeFw0yNjA5MjcwOTMyMThaFw0yNjEwMDQwOTMyMThaMBgxFjAUBgNV BAMTDTZhYjhlMmEzLTdmNzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+SVrnlI1JpTubKiiCuSAxdredAqvgnIOFeKK44uXbL9MO3awUdtAmu4qIJnvg DEtSABUlVefpURYK2uu1pGuLSwJaXdsm7x9ru1mrkeTyINquFDYgCaH06k5h13O0 HCpMbxznke0oeD/D0hcY0qid9B6fdXeo7uYq1RRxCfbFWQ4xg6BeuJ0lwvBzRqXC cUrUqe09/KVX5Q/qKmDbdJI9mmh39JDkL4v50UlUiypAdP1J4MUoj1o1nqhHrUUX kpikp6gqF7p0jFwYrk9lTCmLUN0I9lE7nFmGpfy2JVch1WZodIBQuIiTQ2q0w+UG CNhVIUB1uKE3FEJYIE40ZOPnAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUWTtwp3nZ CYvgJb5VQo76xlaVwf4wHwYDVR0jBBgwFoAUQ1NWydRSZtWy2PTNSh7n5ijiMCMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU3MDA4LzE0N0VBNzQwOTQ3 MTExRjFCMDY5M0YyNjVDMTFGOTcwL1ExTld5ZFJTWnRXeTJQVE5TaDduNWlqaU1D TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUTFOV3lkUlNadFd5MlBUTlNoN241aWppTUNNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU3 MDA4LzE0N0VBNzQwOTQ3MTExRjFCMDY5M0YyNjVDMTFGOTcwL1ExTld5ZFJTWnRX eTJQVE5TaDduNWlqaU1DTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCZx5K4DkTcUPA+uWsHtBapz3IunDkvbAtAL022e2KbtHpYWcaolFx1bqBa85v6 mzVnm0mgZ7Qz9MvuTzDs+C5eQOl+ISOeVQaUZClALmU9Y0Oh6F+0scxPPZVrJ4PT ChGyuaapktnm5NgpxKaERnlvGwEgJZM/BQpvmQM1M2j66JqtDQijK0LRdkoX8URB s+4Pbt3aZXsRBvhudRmW8SDY36gPRQFgk+nvlthhpoAbcSm08ES61zUjTxv+fy0p d6GQ8utC8NE5VClV0us7ObpcDJSns23E7WaeKl+2R5LjWyedSYl+RSjav/+pCTzr Y4yHlvrVbidHG/YVoEVKBZZ0 -----END CERTIFICATE-----Generated at Mon Sep 28 06:57:19 2026 by rpki-client