$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft File: QAHwzRnduZQstaOVZ-w2k74lxqA.mft (raw, json) Hash identifier: AiITOQTg8BWahrU+yPG0BBaIxYBwzoKO9mhNcEPyd28= Subject key identifier: B6:ED:AA:E8:D6:18:CB:5A:01:FA:71:D7:CC:C1:50:11:C4:CD:31:FD Authority key identifier: 40:01:F0:CD:19:DD:B9:94:2C:B5:A3:95:67:EC:36:93:BE:25:C6:A0 Certificate issuer: /CN=A91F96DB/serialNumber=4001F0CD19DDB9942CB5A39567EC3693BE25C6A0 Certificate serial: 04C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft Manifest number: 04B7 Signing time: Sun 20 Sep 2026 23:41:20 +0000 Manifest this update: Sun 20 Sep 2026 23:41:19 +0000 Manifest next update: Sun 27 Sep 2026 23:41:19 +0000 Files and hashes: 1: QAHwzRnduZQstaOVZ-w2k74lxqA.crl (hash: Oe8yNNDBqWMtXR6ZzaT20s8YOGlHuw9h2SFpfhyGu+4=) 2: F91B41A40C5811EFB9F63337C4F9AE02.roa (hash: Ep2GGy4x3F/l/bcsj+NUy5RBXFijDS1DT1sCoOlf0Og=) 3: 0ECA16060C5911EFA8601E42C4F9AE02.roa (hash: sbKErGrZ9wQReaxBfcKt6qzgDt44TVFgH+e5ifioSzo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.crl rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 23:41:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1221 (0x4c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F96DB, serialNumber=4001F0CD19DDB9942CB5A39567EC3693BE25C6A0 Validity Not Before: Sep 20 23:41:19 2026 GMT Not After : Sep 27 23:41:19 2026 GMT Subject: CN=6ab06f1f-8572 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:72:95:1b:a9:c0:b2:db:db:d2:b9:3b:ab:d9: 90:3b:16:40:b2:a1:3f:fb:b6:a9:d2:a0:04:bd:f0: 85:78:9b:2d:34:7c:3d:62:23:45:07:e3:10:b9:21: 4d:67:1e:5f:0f:3e:38:e7:e7:45:7b:cf:6a:8b:cc: 5d:28:3c:74:73:df:0d:59:95:68:db:e5:4e:a5:dd: 3b:38:7f:17:6b:9a:85:c0:7b:9e:19:25:f3:08:5c: 4d:9d:80:5c:d5:20:6d:88:76:71:46:13:89:00:c5: 0a:c6:3c:9e:ab:94:be:bf:89:bb:75:df:b1:3d:d1: 5f:5f:98:e9:06:15:3f:bb:61:29:bd:34:15:0d:b3: 7e:68:99:e8:f4:99:fd:8a:3c:a0:db:40:2f:96:f3: de:78:79:09:50:bb:93:cf:06:0b:81:20:ae:95:6d: 04:b1:b9:13:d7:83:83:8a:bf:22:bd:de:ff:6b:85: b3:9c:34:d7:3e:7c:01:46:34:6f:b3:70:f4:68:f6: ad:7a:e4:dd:d1:7d:d1:97:44:f7:dd:42:e6:97:cc: 1b:6f:b2:f0:03:63:56:e3:e1:f5:91:4e:62:6d:c7: e9:d7:19:f6:82:34:8e:5d:24:f7:74:ad:f6:f7:b8: d6:39:7a:a1:7a:99:87:8c:7a:d9:42:4b:cc:bb:a7: fc:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:ED:AA:E8:D6:18:CB:5A:01:FA:71:D7:CC:C1:50:11:C4:CD:31:FD X509v3 Authority Key Identifier: keyid:40:01:F0:CD:19:DD:B9:94:2C:B5:A3:95:67:EC:36:93:BE:25:C6:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:03:3d:94:e4:27:ee:97:5f:f7:1d:4f:78:11:1e:fb:3d:36: 31:b5:44:e3:6d:ef:85:08:d4:51:69:ac:76:24:d0:f2:a9:b2: c7:e6:da:f6:2c:a8:b5:9c:c8:ca:10:64:81:37:18:f3:e8:61: dc:81:8c:6a:1d:44:7b:da:49:1c:02:8e:11:4a:34:09:39:8f: 5e:b0:9d:d7:ff:96:12:27:31:5e:4b:de:1f:a4:ea:7c:0d:3e: d1:f9:e9:59:ee:b0:19:4e:0d:46:d0:dc:e4:af:66:81:52:ac: 05:67:75:9e:f3:80:a0:dc:d1:0f:c0:4d:dc:1c:1c:ac:2f:55: 49:22:d8:95:5c:de:58:8d:14:a1:a9:b3:a0:de:12:4f:33:4f: 6b:f3:ba:c5:ca:31:6b:b6:f9:f7:f0:c6:5d:3c:60:1e:4c:e5: c3:72:f2:c6:f8:41:95:e0:ea:ca:64:4c:fc:fa:f0:32:a6:bf: 65:4e:f5:73:c3:66:36:1d:d9:ec:44:57:00:54:2d:64:7c:c7: c1:e7:c7:68:50:60:44:d9:54:0b:2a:c8:23:23:39:76:85:76: 11:99:36:3d:b8:6b:2e:29:86:60:c6:c4:2e:5f:41:8b:3b:7c: b4:27:d9:69:d8:fc:6e:b9:be:76:d8:df:a9:43:f1:dd:9b:20: 1f:fd:65:c4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjk2REIxMTAvBgNVBAUTKDQwMDFGMENEMTlEREI5OTQyQ0I1QTM5NTY3RUMzNjkz QkUyNUM2QTAwHhcNMjYwOTIwMjM0MTE5WhcNMjYwOTI3MjM0MTE5WjAYMRYwFAYD VQQDEw02YWIwNmYxZi04NTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsXKVG6nAstvb0rk7q9mQOxZAsqE/+7ap0qAEvfCFeJstNHw9YiNFB+MQuSFN Zx5fDz445+dFe89qi8xdKDx0c98NWZVo2+VOpd07OH8Xa5qFwHueGSXzCFxNnYBc 1SBtiHZxRhOJAMUKxjyeq5S+v4m7dd+xPdFfX5jpBhU/u2EpvTQVDbN+aJno9Jn9 ijyg20AvlvPeeHkJULuTzwYLgSCulW0EsbkT14ODir8ivd7/a4WznDTXPnwBRjRv s3D0aPateuTd0X3Rl0T33ULml8wbb7LwA2NW4+H1kU5ibcfp1xn2gjSOXST3dK32 97jWOXqhepmHjHrZQkvMu6f8GwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLbtqujW GMtaAfpx18zBUBHEzTH9MB8GA1UdIwQYMBaAFEAB8M0Z3bmULLWjlWfsNpO+Jcag MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTZEQi9BODY0RDBFQThF M0QxMUVDQTg3QUJGMTZDNEY5QUUwMi9RQUh3elJuZHVaUXN0YU9WWi13Mms3NGx4 cUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FBSHd6Um5kdVpRc3RhT1ZaLXcyazc0bHhxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTZEQi9BODY0RDBFQThFM0QxMUVDQTg3QUJGMTZDNEY5QUUwMi9RQUh3elJuZHVa UXN0YU9WWi13Mms3NGx4cUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbAM9lOQn7pdf9x1PeBEe+z02MbVE423vhQjUUWmsdiTQ8qmyx+ba9iyotZzI yhBkgTcY8+hh3IGMah1Ee9pJHAKOEUo0CTmPXrCd1/+WEicxXkveH6TqfA0+0fnp We6wGU4NRtDc5K9mgVKsBWd1nvOAoNzRD8BN3BwcrC9VSSLYlVzeWI0UoamzoN4S TzNPa/O6xcoxa7b59/DGXTxgHkzlw3LyxvhBleDqymRM/PrwMqa/ZU71c8NmNh3Z 7ERXAFQtZHzHwefHaFBgRNlUCyrIIyM5doV2EZk2PbhrLimGYMbELl9Bizt8tCfZ adj8brm+dtjfqUPx3ZsgH/1lxA== -----END CERTIFICATE-----Generated at Tue Sep 22 22:57:34 2026 by rpki-client