$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.mft File: QSPpAOai7I_ptdcDt5KA7yFAfIE.mft (raw, json) Hash identifier: y7MSQLzRZtlj8MNzaeY7P3oc1H5Lp2tLtEDsRyj6rXU= Subject key identifier: F6:D6:49:DD:F7:A5:2F:0C:E9:EB:DA:1D:13:48:4D:B0:45:D6:EF:DB Authority key identifier: 41:23:E9:00:E6:A2:EC:8F:E9:B5:D7:03:B7:92:80:EF:21:40:7C:81 Certificate issuer: /CN=A91F3B2E/serialNumber=4123E900E6A2EC8FE9B5D703B79280EF21407C81 Certificate serial: 02C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSPpAOai7I_ptdcDt5KA7yFAfIE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.mft Manifest number: 02AA Signing time: Mon 21 Sep 2026 01:51:51 +0000 Manifest this update: Mon 21 Sep 2026 01:51:51 +0000 Manifest next update: Mon 28 Sep 2026 01:51:51 +0000 Files and hashes: 1: QSPpAOai7I_ptdcDt5KA7yFAfIE.crl (hash: eOHZ5IIO1dl+X0e3WkHdlzbFPGGEmJF5P4vBYblwWJA=) 2: A91AF6A8CE7811EF89FA3944C4F9AE02.roa (hash: fNeBh4F/Z5Lr0cdIogNFqAUQL3+lXFo8GVNnYQF5cVg=) 3: 9E1DAA4A7D6B11F1802936357FA30FBC.roa (hash: Hsov6BU0z8az1Wr0ISWSrVfJM+rDAtlUR7qSGNNPaWs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.crl rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSPpAOai7I_ptdcDt5KA7yFAfIE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 01:51:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 713 (0x2c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3B2E, serialNumber=4123E900E6A2EC8FE9B5D703B79280EF21407C81 Validity Not Before: Sep 21 01:51:51 2026 GMT Not After : Sep 28 01:51:51 2026 GMT Subject: CN=6ab08db7-8357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:05:b3:c4:7a:a5:bd:c7:4d:ff:f2:7c:12:9a: 87:81:b7:7d:eb:48:29:c3:34:bf:b4:45:5f:ae:ac: f3:7a:0f:2b:26:ba:31:9f:63:e7:11:b0:fc:1c:fd: 8f:dd:41:f7:0b:6b:c1:06:8e:7d:5f:c4:ee:fd:bb: a3:8b:57:b1:0c:55:98:4e:dd:06:c4:84:b2:2c:57: 1a:e5:7e:01:5b:4d:45:c0:6d:3a:e6:1b:08:f9:8d: e2:4f:a2:f1:7c:8f:de:7d:0d:8b:c2:7d:a9:0c:ea: 4d:c2:44:4c:4d:6a:f6:b5:a3:f8:db:61:88:79:e1: 39:41:41:22:7e:e9:49:bd:da:05:f7:f9:62:e5:19: ce:a3:f0:3a:2c:6a:d0:c4:56:58:27:cc:59:73:cf: a0:01:5e:46:77:16:74:34:d6:1a:7f:6b:3c:4a:eb: 76:e1:00:1c:48:25:46:fd:2d:31:86:29:55:c9:1a: c8:33:ab:c2:45:4a:76:01:a0:3a:0b:90:76:ad:44: 1c:d2:82:31:2b:a7:32:96:ed:5f:d1:fd:63:9c:6b: 92:63:e3:db:84:19:8c:4f:d6:7a:60:87:f2:f8:9c: cd:d4:75:40:ca:25:6d:71:85:cb:7c:d3:b1:e0:ea: 49:44:43:27:19:d5:3a:4b:1f:f1:8f:7b:e3:3e:21: 91:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:D6:49:DD:F7:A5:2F:0C:E9:EB:DA:1D:13:48:4D:B0:45:D6:EF:DB X509v3 Authority Key Identifier: keyid:41:23:E9:00:E6:A2:EC:8F:E9:B5:D7:03:B7:92:80:EF:21:40:7C:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSPpAOai7I_ptdcDt5KA7yFAfIE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:a7:0b:94:4a:99:44:b9:fc:6d:3f:d0:6d:5e:b0:d6:89:9d: d5:8d:c4:85:63:6f:cc:4e:27:6f:27:db:68:40:88:ec:39:cd: 6b:46:62:24:66:ed:b7:93:44:0e:6b:7a:f4:fd:64:cc:42:80: 69:9a:1a:bf:2b:8a:62:06:25:56:14:19:12:4d:63:2f:1a:d6: 9d:d1:39:96:41:04:bd:27:7c:fa:7f:a0:d0:32:cb:5c:5a:79: 50:a5:f0:c3:ae:da:4c:13:7a:95:c1:e3:95:b0:a8:bf:b0:c9: 2e:f9:b6:6d:d1:cf:98:ba:c6:8b:53:d5:92:0b:ab:dc:1a:e7: 52:0a:5e:be:c3:e8:42:c6:54:14:b6:ad:7b:71:66:08:f4:41: cd:36:45:ad:5b:83:bb:e8:2e:72:0f:de:36:92:d7:a4:1b:18: d1:0b:d7:60:9c:a2:ea:84:c8:fd:da:eb:64:3c:56:97:70:63: 5b:0a:80:d9:f8:5d:96:07:71:a8:9f:ac:6e:5f:b3:33:5f:0b: d1:f1:05:da:70:cd:3e:9a:13:25:57:cd:f4:cb:66:8a:79:8c: f7:f3:9f:9b:86:cd:e5:f3:42:81:1e:43:a4:cd:2d:41:f7:2c: 8d:d8:2e:92:ed:d0:d3:27:11:f0:6a:40:bc:58:71:7d:e5:cd: dd:33:2e:40 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAskwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNCMkUxMTAvBgNVBAUTKDQxMjNFOTAwRTZBMkVDOEZFOUI1RDcwM0I3OTI4MEVG MjE0MDdDODEwHhcNMjYwOTIxMDE1MTUxWhcNMjYwOTI4MDE1MTUxWjAYMRYwFAYD VQQDEw02YWIwOGRiNy04MzU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+wWzxHqlvcdN//J8EpqHgbd960gpwzS/tEVfrqzzeg8rJroxn2PnEbD8HP2P 3UH3C2vBBo59X8Tu/buji1exDFWYTt0GxISyLFca5X4BW01FwG065hsI+Y3iT6Lx fI/efQ2Lwn2pDOpNwkRMTWr2taP422GIeeE5QUEifulJvdoF9/li5RnOo/A6LGrQ xFZYJ8xZc8+gAV5GdxZ0NNYaf2s8Sut24QAcSCVG/S0xhilVyRrIM6vCRUp2AaA6 C5B2rUQc0oIxK6cylu1f0f1jnGuSY+PbhBmMT9Z6YIfy+JzN1HVAyiVtcYXLfNOx 4OpJREMnGdU6Sx/xj3vjPiGRgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPbWSd33 pS8M6evaHRNITbBF1u/bMB8GA1UdIwQYMBaAFEEj6QDmouyP6bXXA7eSgO8hQHyB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0IyRS8wRjU1QzY5NkQ2 N0QxMUVEODZEMzM3NTBDNEY5QUUwMi9RU1BwQU9haTdJX3B0ZGNEdDVLQTd5RkFm SUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FTUHBBT2FpN0lfcHRkY0R0NUtBN3lGQWZJRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG M0IyRS8wRjU1QzY5NkQ2N0QxMUVEODZEMzM3NTBDNEY5QUUwMi9RU1BwQU9haTdJ X3B0ZGNEdDVLQTd5RkFmSUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqqcLlEqZRLn8bT/QbV6w1omd1Y3EhWNvzE4nbyfbaECI7DnNa0ZiJGbtt5NE Dmt69P1kzEKAaZoavyuKYgYlVhQZEk1jLxrWndE5lkEEvSd8+n+g0DLLXFp5UKXw w67aTBN6lcHjlbCov7DJLvm2bdHPmLrGi1PVkgur3BrnUgpevsPoQsZUFLate3Fm CPRBzTZFrVuDu+gucg/eNpLXpBsY0QvXYJyi6oTI/drrZDxWl3BjWwqA2fhdlgdx qJ+sbl+zM18L0fEF2nDNPpoTJVfN9MtminmM9/Ofm4bN5fNCgR5DpM0tQfcsjdgu ku3Q0ycR8GpAvFhxfeXN3TMuQA== -----END CERTIFICATE-----Generated at Tue Sep 22 14:25:45 2026 by rpki-client