$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft File: QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft (raw, json) Hash identifier: DF39dScH1VtD5/t192rFAcWD46amQan1HtvGEb1PWic= Subject key identifier: C1:C0:6A:04:0E:B9:B3:93:4B:26:6F:02:B0:F6:16:F7:33:BD:1A:04 Authority key identifier: 42:67:CF:5D:03:00:4A:8F:EF:DF:21:39:5D:0F:E8:24:54:8B:13:C1 Certificate issuer: /CN=A91FCEB1/serialNumber=4267CF5D03004A8FEFDF21395D0FE824548B13C1 Certificate serial: 2182 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmfPXQMASo_v3yE5XQ_oJFSLE8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft Manifest number: 297D Signing time: Sun 20 Sep 2026 15:52:45 +0000 Manifest this update: Sun 20 Sep 2026 15:52:44 +0000 Manifest next update: Sun 27 Sep 2026 15:52:44 +0000 Files and hashes: 1: QmfPXQMASo_v3yE5XQ_oJFSLE8E.crl (hash: K2wRwhF1ipHgjIu7fjuGyZiXNZTi5EMfI0aWsm6ztF4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.crl rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmfPXQMASo_v3yE5XQ_oJFSLE8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 15:52:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8578 (0x2182) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCEB1, serialNumber=4267CF5D03004A8FEFDF21395D0FE824548B13C1 Validity Not Before: Sep 20 15:52:44 2026 GMT Not After : Sep 27 15:52:44 2026 GMT Subject: CN=6ab0014d-0735 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3a:06:7a:4d:b2:3d:9e:4e:1b:8d:28:86:a6: 87:fe:e8:67:ca:3e:65:8d:09:a3:3f:90:e7:1f:62: fa:07:6b:7f:91:7c:6b:5c:f6:75:7d:f3:1a:e6:9d: df:e5:d6:7e:88:9d:d1:2c:b7:6b:bd:94:22:68:19: 7c:d7:86:88:2b:69:fd:a6:32:2c:5e:ff:55:98:70: 73:ef:58:1e:09:51:7c:1f:57:71:92:50:94:f5:7f: 36:9b:35:17:60:0b:08:45:3a:4b:b3:94:b7:64:de: cc:0d:ce:7c:1b:a4:49:89:32:e7:c4:35:30:92:72: db:61:b9:2a:9e:d7:bb:61:21:5e:c7:2e:07:5a:e9: 00:22:82:0e:aa:11:26:b9:68:df:06:f6:97:1a:72: 53:fe:76:0f:07:a3:f4:cf:5a:37:1c:4d:7c:14:48: d8:bd:36:30:10:91:e1:9d:b0:32:ba:45:1f:c9:bf: 28:d7:6f:f1:04:eb:08:67:4b:fc:df:a8:b7:7f:5f: 69:f5:c5:5d:e1:8e:ca:0e:a5:27:88:7d:2e:b6:ac: 77:dd:0b:38:96:2e:3a:e8:e3:35:b5:82:3c:db:50: 18:28:b9:2b:18:19:eb:62:eb:3e:e0:62:54:a2:04: ec:7c:d0:f2:f6:4b:ea:e8:71:bf:de:4a:60:86:1a: 13:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:C0:6A:04:0E:B9:B3:93:4B:26:6F:02:B0:F6:16:F7:33:BD:1A:04 X509v3 Authority Key Identifier: keyid:42:67:CF:5D:03:00:4A:8F:EF:DF:21:39:5D:0F:E8:24:54:8B:13:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmfPXQMASo_v3yE5XQ_oJFSLE8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:fb:41:d8:12:15:34:67:38:47:8d:b8:5c:23:5f:ea:cb:fe: ff:2a:75:02:37:a4:5d:1f:54:de:ac:49:c2:d4:8d:3f:20:a4: ea:a8:ea:d8:a4:85:82:10:6a:ff:38:2f:04:5c:cb:03:ab:46: b8:73:27:73:31:27:d4:67:8b:c0:c2:14:fb:d1:c7:c7:8b:9c: a4:bf:6f:62:03:7c:4f:99:58:7c:52:47:48:ef:e0:68:d1:ef: db:b8:69:31:c3:d0:d0:87:ab:a0:33:59:37:fe:5c:88:c9:76: e4:c4:73:e7:3e:f3:59:61:82:2d:1a:d1:89:74:9a:7b:dc:89: 9c:a4:5f:4a:ea:6c:11:dd:23:53:6c:1b:37:25:ae:bd:6f:a7: 10:93:87:2b:80:4a:f6:9e:fa:b4:ec:10:30:62:a4:3f:0b:89: 02:91:d1:1c:e6:f7:48:59:12:67:aa:cb:ee:b3:3a:19:5c:3e: 90:43:40:4d:d0:dc:df:7c:c0:95:0e:31:09:28:ce:eb:85:80: d8:0f:fa:7c:10:75:b6:db:36:ed:22:4c:35:af:29:95:83:ae: 7f:2b:79:9f:b7:fd:48:70:6f:74:8c:83:f6:30:17:af:1f:39: 88:17:a0:89:b6:06:17:e7:79:ff:c1:b1:32:41:88:63:59:62: 7b:45:fb:05 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICIYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNFQjExMTAvBgNVBAUTKDQyNjdDRjVEMDMwMDRBOEZFRkRGMjEzOTVEMEZFODI0 NTQ4QjEzQzEwHhcNMjYwOTIwMTU1MjQ0WhcNMjYwOTI3MTU1MjQ0WjAYMRYwFAYD VQQDEw02YWIwMDE0ZC0wNzM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyjoGek2yPZ5OG40ohqaH/uhnyj5ljQmjP5DnH2L6B2t/kXxrXPZ1ffMa5p3f 5dZ+iJ3RLLdrvZQiaBl814aIK2n9pjIsXv9VmHBz71geCVF8H1dxklCU9X82mzUX YAsIRTpLs5S3ZN7MDc58G6RJiTLnxDUwknLbYbkqnte7YSFexy4HWukAIoIOqhEm uWjfBvaXGnJT/nYPB6P0z1o3HE18FEjYvTYwEJHhnbAyukUfyb8o12/xBOsIZ0v8 36i3f19p9cVd4Y7KDqUniH0utqx33Qs4li466OM1tYI821AYKLkrGBnrYus+4GJU ogTsfNDy9kvq6HG/3kpghhoTmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMHAagQO ubOTSyZvArD2FvczvRoEMB8GA1UdIwQYMBaAFEJnz10DAEqP798hOV0P6CRUixPB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0VCMS9FRkI4NzVDODA4 QzkxMUU2OEM3Nzg4NzhDNEY5QUUwMi9RbWZQWFFNQVNvX3YzeUU1WFFfb0pGU0xF OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FtZlBYUU1BU29fdjN5RTVYUV9vSkZTTEU4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0VCMS9FRkI4NzVDODA4QzkxMUU2OEM3Nzg4NzhDNEY5QUUwMi9RbWZQWFFNQVNv X3YzeUU1WFFfb0pGU0xFOEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJ/tB2BIVNGc4R424XCNf6sv+/yp1AjekXR9U3qxJwtSNPyCk6qjq2KSFghBq /zgvBFzLA6tGuHMnczEn1GeLwMIU+9HHx4ucpL9vYgN8T5lYfFJHSO/gaNHv27hp McPQ0IeroDNZN/5ciMl25MRz5z7zWWGCLRrRiXSae9yJnKRfSupsEd0jU2wbNyWu vW+nEJOHK4BK9p76tOwQMGKkPwuJApHRHOb3SFkSZ6rL7rM6GVw+kENATdDc33zA lQ4xCSjO64WA2A/6fBB1tts27SJMNa8plYOufyt5n7f9SHBvdIyD9jAXrx85iBeg ibYGF+d5/8GxMkGIY1lie0X7BQ== -----END CERTIFICATE-----Generated at Mon Sep 21 19:46:27 2026 by rpki-client