$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft File: qriBuCFHwwNrgPxnWTTcLkbOD38.mft (raw, json) Hash identifier: sffmkhcao4vToZP1vYVgbO4TY+BO57aCE1cROtP1NPc= Subject key identifier: 53:36:01:D4:E7:65:17:9A:3A:E0:C6:1E:EC:22:30:D0:85:A7:B2:27 Authority key identifier: AA:B8:81:B8:21:47:C3:03:6B:80:FC:67:59:34:DC:2E:46:CE:0F:7F Certificate issuer: /CN=A91F4EDE/serialNumber=AAB881B82147C3036B80FC675934DC2E46CE0F7F Certificate serial: 070C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft Manifest number: 06D6 Signing time: Mon 12 Oct 2026 22:28:45 +0000 Manifest this update: Mon 12 Oct 2026 22:28:44 +0000 Manifest next update: Mon 19 Oct 2026 22:28:44 +0000 Files and hashes: 1: qriBuCFHwwNrgPxnWTTcLkbOD38.crl (hash: JddBljzrZRJYfZk0Zm2Vc9xT3doUWQTPTqfJM4GwXgI=) 2: 8C4BB9AED9DB11EF9AE05220C4F9AE02.roa (hash: CN1S5iBG91fG5Dyt4QhTqMPNL4CwNQilfba/5yYIoFo=) 3: 7E859EFEE60411EF89467057C4F9AE02.roa (hash: DBTQzmV3HyHHyoJ4NWJ949FIY35oLUF9Ca78F0C+fRE=) 4: 5A9BFC3ABE7C11EB8BC25C1CC4F9AE02.roa (hash: NTWzneRsI6xBoZcMBa/cRNUEBFQFqDaPLGuJ4Y8AzAY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.crl rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 22:28:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1804 (0x70c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4EDE, serialNumber=AAB881B82147C3036B80FC675934DC2E46CE0F7F Validity Not Before: Oct 12 22:28:44 2026 GMT Not After : Oct 19 22:28:44 2026 GMT Subject: CN=6acd5f1d-dc24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:cf:bc:56:bc:12:ef:1c:6a:e9:8e:a7:c1:ff: 6c:f0:10:39:78:dd:22:57:8f:2a:44:c3:89:2b:f7: 13:6f:af:3d:59:f8:3c:4c:67:81:67:f7:70:e2:98: 8a:d9:52:a8:68:a0:7a:f2:69:ce:a9:5f:10:9c:d9: 96:4d:eb:1c:f2:75:42:71:0b:a5:d6:e7:2e:21:65: a9:73:40:e2:09:25:88:71:c3:48:cc:7c:8d:52:fa: 54:39:88:86:d7:4f:02:84:e8:ee:74:ad:ed:5a:96: 89:3e:69:08:86:ad:cd:bc:0f:60:12:95:6d:bf:8b: 99:be:7c:ad:73:51:ac:94:e4:61:e0:8a:c8:bd:29: 62:3d:8a:be:a4:07:71:ae:b6:10:f1:67:34:6b:87: bb:bb:ce:57:f3:6c:c6:17:26:3b:65:e1:52:0b:9b: 8a:08:41:59:e1:33:0a:f4:9c:35:09:62:50:c0:49: af:0b:e4:79:53:f5:1c:48:ec:cb:18:f5:fd:c7:42: 10:05:29:e1:66:05:35:20:c8:43:d0:5e:b5:d2:50: 71:57:ad:31:ac:9d:2c:b0:af:d5:e1:97:8f:ac:30: 0b:24:5d:e5:72:8b:38:5a:75:52:0b:aa:06:d1:12: ca:26:98:a0:6e:0e:29:d7:35:b4:80:94:e9:01:4f: 9b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:36:01:D4:E7:65:17:9A:3A:E0:C6:1E:EC:22:30:D0:85:A7:B2:27 X509v3 Authority Key Identifier: keyid:AA:B8:81:B8:21:47:C3:03:6B:80:FC:67:59:34:DC:2E:46:CE:0F:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:a7:81:82:b5:7d:bd:d3:80:bf:93:ca:c7:d0:63:b1:71:b9: 79:07:87:c9:21:a8:38:35:0f:88:f9:13:5d:c6:57:78:75:3d: e5:89:77:91:c3:72:57:5f:a5:f4:76:a2:52:84:7c:2c:0f:6c: 10:0f:db:46:d5:a5:83:86:8b:3c:10:c3:e7:38:a9:40:3c:bf: 15:9e:c8:ac:8b:77:0e:fd:5b:7c:32:93:e5:bc:f8:0b:3f:c9: 1b:bf:95:58:13:94:00:fb:d0:a5:40:07:67:ee:fe:bb:89:16: 5e:7d:77:20:fe:e0:2b:67:59:b1:79:c4:39:b8:59:b0:f6:ea: c6:56:07:a3:7e:e0:76:de:b7:c3:2c:17:aa:71:54:d5:f8:ad: ae:d8:9a:c6:ca:76:4d:6c:71:c4:ef:64:61:25:b2:1e:ac:99: c5:b0:61:7a:55:64:26:47:86:eb:ea:af:6a:9d:05:4a:0a:18: cd:e6:11:0e:6e:a4:1b:c1:c4:ad:28:37:84:b2:3a:b3:dc:40: e7:dc:9d:b5:a3:c9:be:b9:ac:c9:76:61:79:8a:d4:dc:b7:3e: a2:70:8e:e5:8f:3e:c4:fd:3d:50:dc:e7:88:e0:8f:05:82:16: fe:fd:77:29:5e:3f:94:2d:6b:39:88:79:7a:3f:79:10:8f:05: 6f:92:03:25 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBwwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRFREUxMTAvBgNVBAUTKEFBQjg4MUI4MjE0N0MzMDM2QjgwRkM2NzU5MzREQzJF NDZDRTBGN0YwHhcNMjYxMDEyMjIyODQ0WhcNMjYxMDE5MjIyODQ0WjAYMRYwFAYD VQQDEw02YWNkNWYxZC1kYzI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAss+8VrwS7xxq6Y6nwf9s8BA5eN0iV48qRMOJK/cTb689Wfg8TGeBZ/dw4piK 2VKoaKB68mnOqV8QnNmWTesc8nVCcQul1ucuIWWpc0DiCSWIccNIzHyNUvpUOYiG 108ChOjudK3tWpaJPmkIhq3NvA9gEpVtv4uZvnytc1GslORh4IrIvSliPYq+pAdx rrYQ8Wc0a4e7u85X82zGFyY7ZeFSC5uKCEFZ4TMK9Jw1CWJQwEmvC+R5U/UcSOzL GPX9x0IQBSnhZgU1IMhD0F610lBxV60xrJ0ssK/V4ZePrDALJF3lcos4WnVSC6oG 0RLKJpigbg4p1zW0gJTpAU+bIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFM2AdTn ZReaOuDGHuwiMNCFp7InMB8GA1UdIwQYMBaAFKq4gbghR8MDa4D8Z1k03C5Gzg9/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEVERS8yQ0IwMzI1OEJF NzkxMUVCOTUxMThCMTlDNEY5QUUwMi9xcmlCdUNGSHd3TnJnUHhuV1RUY0xrYk9E MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FyaUJ1Q0ZId3dOcmdQeG5XVFRjTGtiT0QzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEVERS8yQ0IwMzI1OEJFNzkxMUVCOTUxMThCMTlDNEY5QUUwMi9xcmlCdUNGSHd3 TnJnUHhuV1RUY0xrYk9EMzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACqeBgrV9vdOAv5PKx9BjsXG5eQeHySGoODUPiPkTXcZXeHU95Yl3kcNyV1+l 9HaiUoR8LA9sEA/bRtWlg4aLPBDD5zipQDy/FZ7IrIt3Dv1bfDKT5bz4Cz/JG7+V WBOUAPvQpUAHZ+7+u4kWXn13IP7gK2dZsXnEObhZsPbqxlYHo37gdt63wywXqnFU 1fitrtiaxsp2TWxxxO9kYSWyHqyZxbBhelVkJkeG6+qvap0FSgoYzeYRDm6kG8HE rSg3hLI6s9xA59ydtaPJvrmsyXZheYrU3Lc+onCO5Y8+xP09UNzniOCPBYIW/v13 KV4/lC1rOYh5ej95EI8Fb5IDJQ== -----END CERTIFICATE-----Generated at Tue Oct 13 10:33:53 2026 by rpki-client