$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F9BB3/8198E014E24411F0B953D896716F56BC/Qm9K1YXXpU3TYuP3s8jzr2qmPC4.mft File: Qm9K1YXXpU3TYuP3s8jzr2qmPC4.mft (raw, json) Hash identifier: UHZZp00QiFm6AqQGYvRkB6J689rxEGdcoGuZFAxC7wc= Subject key identifier: 37:D6:13:5F:FB:CD:65:94:E0:80:5C:52:C3:42:56:46:27:A8:37:83 Authority key identifier: 42:6F:4A:D5:85:D7:A5:4D:D3:62:E3:F7:B3:C8:F3:AF:6A:A6:3C:2E Certificate issuer: /CN=A91F9BB3/serialNumber=426F4AD585D7A54DD362E3F7B3C8F3AF6AA63C2E Certificate serial: 9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qm9K1YXXpU3TYuP3s8jzr2qmPC4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9BB3/8198E014E24411F0B953D896716F56BC/Qm9K1YXXpU3TYuP3s8jzr2qmPC4.mft Manifest number: 99 Signing time: Sun 11 Oct 2026 08:02:02 +0000 Manifest this update: Sun 11 Oct 2026 08:02:01 +0000 Manifest next update: Sun 18 Oct 2026 08:02:01 +0000 Files and hashes: 1: Qm9K1YXXpU3TYuP3s8jzr2qmPC4.crl (hash: 5mpWEBge1EeUlyikZrP/f/iKsEr/VvfEvn2ch9mWx7c=) 2: DB9D3A1AE24411F0BBC3E4F5716F56BC.roa (hash: FGeU1tZaj6B6d9kcXemk68XFxPuUp5ULKxFkHVuu17c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9BB3/8198E014E24411F0B953D896716F56BC/Qm9K1YXXpU3TYuP3s8jzr2qmPC4.crl rsync://rpki.apnic.net/member_repository/A91F9BB3/8198E014E24411F0B953D896716F56BC/Qm9K1YXXpU3TYuP3s8jzr2qmPC4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qm9K1YXXpU3TYuP3s8jzr2qmPC4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 08:02:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 155 (0x9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9BB3, serialNumber=426F4AD585D7A54DD362E3F7B3C8F3AF6AA63C2E Validity Not Before: Oct 11 08:02:01 2026 GMT Not After : Oct 18 08:02:01 2026 GMT Subject: CN=6acb427a-7e93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:15:e3:d6:f9:14:5b:59:ea:22:70:03:c1:88: a9:4a:de:95:c1:d4:a0:99:8a:5a:88:b4:00:4f:42: ad:e9:73:81:86:b5:6f:43:f5:7d:c2:04:dd:a7:64: fb:d2:34:e1:bc:dc:02:18:0d:85:34:f7:0d:4d:84: 25:23:69:66:c8:2c:c3:36:63:a4:30:53:13:75:a9: 20:1b:de:fa:4d:d9:5d:9e:f3:bc:30:d5:02:af:e9: c7:f7:12:e1:da:b3:84:c2:1b:10:94:b2:51:7f:d5: 12:64:97:90:8d:c7:16:9a:1e:cb:03:40:c0:fa:6d: 44:f6:43:f5:6f:34:b6:41:77:98:d7:8b:0c:40:fd: 6f:78:69:9b:f2:eb:78:68:3a:b8:c3:5c:7a:03:23: cf:bb:58:08:b6:73:54:d1:de:11:0a:d0:69:3d:3f: 6b:cf:8e:a6:2a:a8:52:ad:69:8e:f1:d9:f3:6e:dd: 0e:cd:ef:26:25:67:54:fb:71:e4:8c:8f:54:c4:f5: c6:73:8b:59:23:3b:81:a0:47:1c:60:43:42:ce:cc: 7b:79:2c:29:e2:c9:4e:c3:31:80:21:0e:9b:86:2f: 49:2a:77:42:d4:e5:a8:99:e8:6c:a7:bf:91:61:ba: 65:c9:17:16:3a:92:7f:96:1c:22:9e:90:51:5b:1a: 8d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:D6:13:5F:FB:CD:65:94:E0:80:5C:52:C3:42:56:46:27:A8:37:83 X509v3 Authority Key Identifier: keyid:42:6F:4A:D5:85:D7:A5:4D:D3:62:E3:F7:B3:C8:F3:AF:6A:A6:3C:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9BB3/8198E014E24411F0B953D896716F56BC/Qm9K1YXXpU3TYuP3s8jzr2qmPC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qm9K1YXXpU3TYuP3s8jzr2qmPC4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9BB3/8198E014E24411F0B953D896716F56BC/Qm9K1YXXpU3TYuP3s8jzr2qmPC4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:37:8d:1d:0b:0b:0f:47:0e:30:79:84:f7:19:c9:74:f6:fc: 8f:0c:4f:ae:03:c9:ed:f6:56:f2:3b:4d:6a:2b:8b:9d:2b:08: 73:62:7e:7a:ad:54:2f:6c:d0:b2:8c:a6:6d:08:2b:09:8d:81: e7:4d:8d:11:32:bc:90:ee:f7:05:a7:ea:38:93:0e:0e:76:3a: 10:af:6e:25:2d:2d:71:25:bd:72:82:55:b5:5d:fe:26:fe:ce: 93:08:b3:6f:ac:f0:4c:48:5e:6a:85:4e:a6:86:b4:57:9f:79: 82:29:f2:75:91:82:a1:69:87:43:c8:7b:ca:0e:3c:b0:78:e0: 7e:60:d9:9a:82:e7:17:29:d1:aa:7a:70:ca:e9:08:f8:a9:41: 85:1c:75:22:b1:97:16:f6:0c:06:cd:f8:88:b7:30:32:b1:37: 93:1d:96:82:e2:d7:b7:be:9f:46:04:d3:9b:2c:11:1f:07:6a: 08:e7:c7:86:97:95:1c:5c:f1:70:5e:1b:c9:14:4b:78:21:1c: 3f:fb:70:64:3f:b9:cf:3c:37:83:e7:27:1a:75:42:e1:ca:06: 27:52:7e:13:ac:7c:df:f8:6e:08:f2:e0:33:86:56:4a:48:f2: 63:17:a2:4a:68:5b:2c:87:65:bc:a3:86:0d:b2:93:e2:9f:2b: 7e:1d:be:a7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlCQjMxMTAvBgNVBAUTKDQyNkY0QUQ1ODVEN0E1NEREMzYyRTNGN0IzQzhGM0FG NkFBNjNDMkUwHhcNMjYxMDExMDgwMjAxWhcNMjYxMDE4MDgwMjAxWjAYMRYwFAYD VQQDEw02YWNiNDI3YS03ZTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7BXj1vkUW1nqInADwYipSt6VwdSgmYpaiLQAT0Kt6XOBhrVvQ/V9wgTdp2T7 0jThvNwCGA2FNPcNTYQlI2lmyCzDNmOkMFMTdakgG976TdldnvO8MNUCr+nH9xLh 2rOEwhsQlLJRf9USZJeQjccWmh7LA0DA+m1E9kP1bzS2QXeY14sMQP1veGmb8ut4 aDq4w1x6AyPPu1gItnNU0d4RCtBpPT9rz46mKqhSrWmO8dnzbt0Oze8mJWdU+3Hk jI9UxPXGc4tZIzuBoEccYENCzsx7eSwp4slOwzGAIQ6bhi9JKndC1OWomehsp7+R YbplyRcWOpJ/lhwinpBRWxqNjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDfWE1/7 zWWU4IBcUsNCVkYnqDeDMB8GA1UdIwQYMBaAFEJvStWF16VN02Lj97PI869qpjwu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUJCMy84MTk4RTAxNEUy NDQxMUYwQjk1M0Q4OTY3MTZGNTZCQy9RbTlLMVlYWHBVM1RZdVAzczhqenIycW1Q QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FtOUsxWVhYcFUzVFl1UDNzOGp6cjJxbVBDNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUJCMy84MTk4RTAxNEUyNDQxMUYwQjk1M0Q4OTY3MTZGNTZCQy9RbTlLMVlYWHBV M1RZdVAzczhqenIycW1QQzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPzeNHQsLD0cOMHmE9xnJdPb8jwxPrgPJ7fZW8jtNaiuLnSsIc2J+eq1UL2zQ soymbQgrCY2B502NETK8kO73BafqOJMODnY6EK9uJS0tcSW9coJVtV3+Jv7Okwiz b6zwTEheaoVOpoa0V595ginydZGCoWmHQ8h7yg48sHjgfmDZmoLnFynRqnpwyukI +KlBhRx1IrGXFvYMBs34iLcwMrE3kx2WguLXt76fRgTTmywRHwdqCOfHhpeVHFzx cF4byRRLeCEcP/twZD+5zzw3g+cnGnVC4coGJ1J+E6x83/huCPLgM4ZWSkjyYxei SmhbLIdlvKOGDbKT4p8rfh2+pw== -----END CERTIFICATE-----Generated at Tue Oct 13 10:36:10 2026 by rpki-client