$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft File: qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft (raw, json) Hash identifier: 2W6ydr60bnlaFRNQOYwqDnl6AQUIE5SQyITceUXWZ04= Subject key identifier: ED:56:77:D0:83:3B:FD:3F:95:52:0F:CF:5D:B4:A5:51:70:D5:16:25 Authority key identifier: A8:41:BD:C5:AF:A9:E9:A0:A9:5B:88:54:61:13:CA:74:5E:E9:63:B5 Certificate issuer: /CN=A91F5216/serialNumber=A841BDC5AFA9E9A0A95B88546113CA745EE963B5 Certificate serial: 02D7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qEG9xa-p6aCpW4hUYRPKdF7pY7U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft Manifest number: 02CF Signing time: Sat 19 Sep 2026 01:18:27 +0000 Manifest this update: Sat 19 Sep 2026 01:18:26 +0000 Manifest next update: Sat 26 Sep 2026 01:18:26 +0000 Files and hashes: 1: qEG9xa-p6aCpW4hUYRPKdF7pY7U.crl (hash: CkK8PlNjjgv0tSNOfilqGNTcQDvGyveJTLwn+6FJgEY=) 2: CDA9BB546E0C11ED8BF41547C4F9AE02.roa (hash: CcNczHQOW8yB5Q317lvbnzk6vw5R1G1tvlVbiwaOecw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.crl rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qEG9xa-p6aCpW4hUYRPKdF7pY7U.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 727 (0x2d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5216, serialNumber=A841BDC5AFA9E9A0A95B88546113CA745EE963B5 Validity Not Before: Sep 19 01:18:26 2026 GMT Not After : Sep 26 01:18:26 2026 GMT Subject: CN=6aade2e3-02a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d1:7a:b3:f4:32:8e:33:3d:3c:8f:10:be:84: fa:41:a5:6f:e8:8f:19:27:6c:3f:a0:5b:cf:4e:7e: 43:c8:bf:4f:a7:ab:b8:cc:c1:f4:91:87:a4:2e:3d: dc:f5:75:5d:5d:49:4d:5f:1c:97:24:3c:72:63:2d: 11:87:6f:dd:70:4d:ff:c8:27:a8:47:66:78:64:94: 15:77:e6:79:32:ce:4b:11:68:ca:8c:a1:9e:97:ff: 27:00:c2:28:a3:96:b9:20:9b:76:be:02:01:37:b4: e0:a8:43:a0:b3:53:ce:a8:ec:d9:63:25:10:84:14: 5e:80:0e:2c:32:7e:15:52:78:80:1b:ce:2d:ea:c3: 02:b8:e3:c2:96:de:76:56:30:93:74:85:7a:78:78: f0:55:fe:2d:e1:5e:a8:54:4f:43:13:2d:33:80:8e: 26:63:21:6b:68:d6:b4:ef:dc:28:19:3b:3e:b8:bf: ce:97:4f:19:b0:36:ee:5e:83:20:14:90:cd:67:6d: ba:b1:20:37:db:d3:15:f7:e1:f1:7a:c9:a3:47:ba: ba:ab:73:0c:f1:a5:5d:32:84:cc:af:27:49:2f:0a: 36:86:eb:c0:e9:cf:f1:55:d8:6f:13:9a:c2:c1:a2: 70:60:2b:06:39:bf:1e:02:8a:22:a2:c1:80:87:cf: 21:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:56:77:D0:83:3B:FD:3F:95:52:0F:CF:5D:B4:A5:51:70:D5:16:25 X509v3 Authority Key Identifier: keyid:A8:41:BD:C5:AF:A9:E9:A0:A9:5B:88:54:61:13:CA:74:5E:E9:63:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qEG9xa-p6aCpW4hUYRPKdF7pY7U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:41:eb:06:84:4c:dc:f1:bb:64:54:a8:91:68:5c:c4:ef:8c: b0:44:76:8a:d7:5c:b6:42:c9:12:4f:7d:b2:dc:c7:37:db:41: 44:fe:80:cd:99:b4:f2:1c:12:70:d7:b7:4d:e8:48:60:8b:b0: 4a:b2:56:6a:7c:17:59:2a:97:26:c4:16:2e:8b:91:f0:59:14: 66:56:4c:5e:13:be:55:9a:3a:5e:56:76:d7:75:1e:71:65:e9: ed:e2:4e:f0:4f:2b:05:a6:cb:e4:5d:74:fb:96:88:aa:8c:31: 66:89:3a:9a:0b:18:70:27:8e:90:73:8f:89:df:c8:47:81:5a: f6:eb:ee:7a:8f:f9:43:16:b4:2b:41:b2:9d:46:72:c5:99:43: 77:42:e1:71:69:e9:1c:ff:41:a0:8d:62:17:02:23:7a:15:05: 84:1e:6b:b1:f1:76:35:1b:ee:0c:b0:f4:7c:96:c7:76:8f:14: 47:80:7c:ea:15:ac:30:bf:ed:cc:bb:44:2d:84:ef:a8:d8:58: b1:2f:b3:65:3c:2f:3e:7e:a5:a4:35:1c:34:3a:8b:c5:39:f3: 9e:8c:14:c6:96:8e:eb:fa:e1:ed:68:4e:0d:1b:2f:c8:ba:87: ba:02:59:ac:8d:5d:e4:ac:a8:11:a6:ba:4b:12:c5:dc:87:da: 12:b5:f1:51 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAtcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUyMTYxMTAvBgNVBAUTKEE4NDFCREM1QUZBOUU5QTBBOTVCODg1NDYxMTNDQTc0 NUVFOTYzQjUwHhcNMjYwOTE5MDExODI2WhcNMjYwOTI2MDExODI2WjAYMRYwFAYD VQQDEw02YWFkZTJlMy0wMmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0tF6s/QyjjM9PI8QvoT6QaVv6I8ZJ2w/oFvPTn5DyL9Pp6u4zMH0kYekLj3c 9XVdXUlNXxyXJDxyYy0Rh2/dcE3/yCeoR2Z4ZJQVd+Z5Ms5LEWjKjKGel/8nAMIo o5a5IJt2vgIBN7TgqEOgs1POqOzZYyUQhBRegA4sMn4VUniAG84t6sMCuOPClt52 VjCTdIV6eHjwVf4t4V6oVE9DEy0zgI4mYyFraNa079woGTs+uL/Ol08ZsDbuXoMg FJDNZ226sSA329MV9+HxesmjR7q6q3MM8aVdMoTMrydJLwo2huvA6c/xVdhvE5rC waJwYCsGOb8eAooiosGAh88hdQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO1Wd9CD O/0/lVIPz120pVFw1RYlMB8GA1UdIwQYMBaAFKhBvcWvqemgqVuIVGETynRe6WO1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTIxNi81Q0Q1RTczMDZF MDgxMUVEQkVFRDYyODRDNEY5QUUwMi9xRUc5eGEtcDZhQ3BXNGhVWVJQS2RGN3BZ N1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3FFRzl4YS1wNmFDcFc0aFVZUlBLZEY3cFk3VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTIxNi81Q0Q1RTczMDZFMDgxMUVEQkVFRDYyODRDNEY5QUUwMi9xRUc5eGEtcDZh Q3BXNGhVWVJQS2RGN3BZN1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmUHrBoRM3PG7ZFSokWhcxO+MsER2itdctkLJEk99stzHN9tBRP6AzZm08hwS cNe3TehIYIuwSrJWanwXWSqXJsQWLouR8FkUZlZMXhO+VZo6XlZ213UecWXp7eJO 8E8rBabL5F10+5aIqowxZok6mgsYcCeOkHOPid/IR4Fa9uvueo/5Qxa0K0GynUZy xZlDd0LhcWnpHP9BoI1iFwIjehUFhB5rsfF2NRvuDLD0fJbHdo8UR4B86hWsML/t zLtELYTvqNhYsS+zZTwvPn6lpDUcNDqLxTnznowUxpaO6/rh7WhODRsvyLqHugJZ rI1d5KyoEaa6SxLF3IfaErXxUQ== -----END CERTIFICATE-----Generated at Sun Sep 20 19:47:12 2026 by rpki-client