$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.mft File: qX6qTW8VW40nxAro4yfZulLDS0I.mft (raw, json) Hash identifier: WjodkpcPO0WxAy1S8BeLNmPhEG2G8hrVdmAdi3jJz6Y= Subject key identifier: E5:29:2F:28:C3:11:A7:17:50:7D:61:EF:BC:AA:2A:8D:D1:02:A3:D3 Authority key identifier: A9:7E:AA:4D:6F:15:5B:8D:27:C4:0A:E8:E3:27:D9:BA:52:C3:4B:42 Certificate issuer: /CN=A91EB4AF/serialNumber=A97EAA4D6F155B8D27C40AE8E327D9BA52C34B42 Certificate serial: 0437 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qX6qTW8VW40nxAro4yfZulLDS0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.mft Manifest number: 0410 Signing time: Mon 21 Sep 2026 00:17:27 +0000 Manifest this update: Mon 21 Sep 2026 00:17:27 +0000 Manifest next update: Mon 28 Sep 2026 00:17:27 +0000 Files and hashes: 1: qX6qTW8VW40nxAro4yfZulLDS0I.crl (hash: TcfnbaZdVG2BIAVkKgra6xF1z61aN3LGsR07fpgZSm8=) 2: CDADA70EAC5C11F1B3EC6F014811F970.roa (hash: iknc7UxTk4DrYKW2ODVXcafzsP0DlYNW9/USeZUE4ng=) 3: 595774341B6211F0B9733473C4F9AE02.roa (hash: TViW6+JPazKkRXhQ7ni+cLWTzOT4kOhtajYLtf39390=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.crl rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qX6qTW8VW40nxAro4yfZulLDS0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 00:17:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1079 (0x437) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB4AF, serialNumber=A97EAA4D6F155B8D27C40AE8E327D9BA52C34B42 Validity Not Before: Sep 21 00:17:27 2026 GMT Not After : Sep 28 00:17:27 2026 GMT Subject: CN=6ab07797-d6be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:41:6f:85:42:74:bf:b1:7d:48:54:02:96:07: 87:4a:be:71:b2:4c:f9:0a:1f:63:e8:55:33:9e:02: 59:77:20:40:1b:a0:9d:02:d2:56:5c:fb:19:eb:ef: 8e:5d:8f:cf:0a:68:c1:0f:90:bb:e9:05:ea:20:a5: 39:a6:1c:90:8b:96:da:5e:73:79:a8:2b:5f:02:56: 1c:ad:fb:f7:36:b8:20:14:13:6f:bd:a4:22:8e:9f: e7:ab:77:ef:44:c0:1c:66:f7:3d:a3:6a:89:46:61: 74:be:54:93:1b:12:d6:34:84:15:91:85:db:1f:79: d3:f4:b8:83:56:0d:c9:da:91:24:c6:12:30:77:6d: ca:19:b9:c5:99:db:16:c2:fe:fb:ed:9b:b5:4c:d2: 5d:7e:ff:41:d2:c8:8b:22:b3:8a:aa:76:e7:43:d3: 7f:47:bb:f8:84:79:da:99:fb:bb:97:c8:19:65:75: 75:65:36:51:ae:e7:59:81:5d:a5:37:8a:0b:8e:42: f4:12:95:64:b9:ae:1e:0b:ed:e1:f0:09:f5:d2:63: 70:fc:84:76:a3:26:9b:78:09:d7:75:56:ea:a6:29: 95:f4:23:63:84:68:9d:77:ff:1a:9f:fd:41:73:92: c6:2a:50:97:8c:42:55:02:28:40:62:46:ed:35:7d: 4e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:29:2F:28:C3:11:A7:17:50:7D:61:EF:BC:AA:2A:8D:D1:02:A3:D3 X509v3 Authority Key Identifier: keyid:A9:7E:AA:4D:6F:15:5B:8D:27:C4:0A:E8:E3:27:D9:BA:52:C3:4B:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qX6qTW8VW40nxAro4yfZulLDS0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:4e:1c:59:5b:f5:85:1d:ce:5e:5e:6b:97:d9:bc:9c:22:43: 17:e4:35:d7:89:8f:13:6c:39:f7:1a:ac:87:3f:98:8f:29:21: b7:60:d0:10:4a:e3:52:e0:fb:83:6d:d6:86:6b:6d:a8:e4:8b: 37:bf:bf:3f:dc:84:93:a2:9f:e2:a3:de:52:9e:20:fc:f0:c2: fb:01:0c:cc:6c:00:a5:15:c5:92:88:60:8c:3a:ab:50:bc:bf: 4f:89:42:20:f4:cf:a8:e0:a0:e8:a8:9a:e4:66:33:94:ae:6e: a3:72:15:20:91:54:6a:60:ac:98:fe:55:8d:86:7a:bb:af:39: f3:68:2e:0b:a8:70:ff:77:55:ab:24:fb:0a:84:ab:ec:f3:b1: b7:94:ad:d7:3a:80:e8:df:51:13:80:22:2e:8e:c8:d5:03:5c: d3:47:18:be:4c:bb:95:a0:86:c6:22:1a:45:54:f3:94:85:da: b0:e0:21:f6:24:42:f2:cd:da:25:68:8d:6d:c8:6a:af:a3:54: 79:c1:33:9f:86:13:86:ba:65:b7:5e:4e:f3:98:ed:84:d4:12: 10:c2:85:96:34:23:61:9c:ca:bd:fa:e5:f4:3f:0f:b6:18:22: 81:cf:eb:4e:0f:d0:28:e6:d0:d3:33:23:97:7f:93:44:c7:03: ca:be:17:b3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBDcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI0QUYxMTAvBgNVBAUTKEE5N0VBQTRENkYxNTVCOEQyN0M0MEFFOEUzMjdEOUJB NTJDMzRCNDIwHhcNMjYwOTIxMDAxNzI3WhcNMjYwOTI4MDAxNzI3WjAYMRYwFAYD VQQDEw02YWIwNzc5Ny1kNmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqUFvhUJ0v7F9SFQClgeHSr5xskz5Ch9j6FUzngJZdyBAG6CdAtJWXPsZ6++O XY/PCmjBD5C76QXqIKU5phyQi5baXnN5qCtfAlYcrfv3NrggFBNvvaQijp/nq3fv RMAcZvc9o2qJRmF0vlSTGxLWNIQVkYXbH3nT9LiDVg3J2pEkxhIwd23KGbnFmdsW wv777Zu1TNJdfv9B0siLIrOKqnbnQ9N/R7v4hHnamfu7l8gZZXV1ZTZRrudZgV2l N4oLjkL0EpVkua4eC+3h8An10mNw/IR2oyabeAnXdVbqpimV9CNjhGidd/8an/1B c5LGKlCXjEJVAihAYkbtNX1ORQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOUpLyjD EacXUH1h77yqKo3RAqPTMB8GA1UdIwQYMBaAFKl+qk1vFVuNJ8QK6OMn2bpSw0tC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjRBRi9DQzdCMjU1QURD QTkxMUVDOTRFM0UwMjlDNEY5QUUwMi9xWDZxVFc4Vlc0MG54QXJvNHlmWnVsTERT MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FYNnFUVzhWVzQwbnhBcm80eWZadWxMRFMwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjRBRi9DQzdCMjU1QURDQTkxMUVDOTRFM0UwMjlDNEY5QUUwMi9xWDZxVFc4Vlc0 MG54QXJvNHlmWnVsTERTMEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAa04cWVv1hR3OXl5rl9m8nCJDF+Q114mPE2w59xqshz+Yjykht2DQEErjUuD7 g23WhmttqOSLN7+/P9yEk6Kf4qPeUp4g/PDC+wEMzGwApRXFkohgjDqrULy/T4lC IPTPqOCg6Kia5GYzlK5uo3IVIJFUamCsmP5VjYZ6u68582guC6hw/3dVqyT7CoSr 7POxt5St1zqA6N9RE4AiLo7I1QNc00cYvky7laCGxiIaRVTzlIXasOAh9iRC8s3a JWiNbchqr6NUecEzn4YThrplt15O85jthNQSEMKFljQjYZzKvfrl9D8Pthgigc/r Tg/QKObQ0zMjl3+TRMcDyr4Xsw== -----END CERTIFICATE-----Generated at Tue Sep 22 11:12:36 2026 by rpki-client