$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FFA9E/8F122802D59E11F082F64F17C4F9AE02/QwTKMwBGEXJNpcM1jPO2gGHKSoo.mft File: QwTKMwBGEXJNpcM1jPO2gGHKSoo.mft (raw, json) Hash identifier: xcvd5IlZm7YswKgpTMUctn0HXXQ3+4Wr85lYV16Au7E= Subject key identifier: 7A:DB:23:F1:83:98:EF:D5:B4:B4:4E:EB:17:06:52:B8:41:49:65:03 Authority key identifier: 43:04:CA:33:00:46:11:72:4D:A5:C3:35:8C:F3:B6:80:61:CA:4A:8A Certificate issuer: /CN=A91FFA9E/serialNumber=4304CA33004611724DA5C3358CF3B68061CA4A8A Certificate serial: 95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QwTKMwBGEXJNpcM1jPO2gGHKSoo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FFA9E/8F122802D59E11F082F64F17C4F9AE02/QwTKMwBGEXJNpcM1jPO2gGHKSoo.mft Manifest number: 95 Signing time: Mon 21 Sep 2026 07:27:37 +0000 Manifest this update: Mon 21 Sep 2026 07:27:37 +0000 Manifest next update: Mon 28 Sep 2026 07:27:37 +0000 Files and hashes: 1: QwTKMwBGEXJNpcM1jPO2gGHKSoo.crl (hash: NLGHmxkufLhUld3LuT/UbLHImqaxI/bxRedgH1LXyi8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FFA9E/8F122802D59E11F082F64F17C4F9AE02/QwTKMwBGEXJNpcM1jPO2gGHKSoo.crl rsync://rpki.apnic.net/member_repository/A91FFA9E/8F122802D59E11F082F64F17C4F9AE02/QwTKMwBGEXJNpcM1jPO2gGHKSoo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QwTKMwBGEXJNpcM1jPO2gGHKSoo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 07:27:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 149 (0x95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFA9E, serialNumber=4304CA33004611724DA5C3358CF3B68061CA4A8A Validity Not Before: Sep 21 07:27:37 2026 GMT Not After : Sep 28 07:27:37 2026 GMT Subject: CN=6ab0dc69-9b9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4d:74:13:78:80:38:27:01:47:6d:3e:56:91: af:28:05:91:32:69:53:63:a6:c4:18:86:16:33:8e: 53:50:70:e2:5d:43:d4:79:c0:87:9f:c9:2b:df:89: 36:f1:15:ba:e9:09:bb:f1:9f:27:11:01:46:5a:0b: 33:a2:5b:2b:02:74:c6:33:2f:d0:3a:d8:8b:9d:c4: c2:99:1a:92:af:b2:d2:08:2a:37:6d:05:96:69:f2: 57:a0:a1:bf:a7:61:5d:a3:f7:e0:27:55:d4:72:0d: 62:5d:73:4e:b6:f1:35:5e:80:3f:5d:54:dc:7a:4b: 4a:bb:34:ff:8f:f6:00:ba:61:41:70:5a:c7:ab:57: 29:0f:7b:6e:ec:ee:d6:da:90:e5:d3:a7:eb:f1:c9: c4:90:2f:55:21:28:4a:c3:b1:33:f1:b9:85:5d:42: 41:80:b9:a0:49:9a:56:49:62:16:73:b5:2e:78:66: a1:4a:80:e8:c1:98:71:f3:ba:3f:9d:39:45:08:fb: e5:cf:72:be:58:6f:93:f6:04:e7:6c:c5:c4:4f:78: da:38:8b:cf:4d:fe:5c:4b:3d:81:48:5b:ca:0b:71: 41:85:76:fc:43:d4:df:3a:ba:32:21:87:c3:9b:d5: 5a:b1:67:c6:2f:bd:a1:5f:95:83:0d:54:64:f5:45: 05:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:DB:23:F1:83:98:EF:D5:B4:B4:4E:EB:17:06:52:B8:41:49:65:03 X509v3 Authority Key Identifier: keyid:43:04:CA:33:00:46:11:72:4D:A5:C3:35:8C:F3:B6:80:61:CA:4A:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FFA9E/8F122802D59E11F082F64F17C4F9AE02/QwTKMwBGEXJNpcM1jPO2gGHKSoo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QwTKMwBGEXJNpcM1jPO2gGHKSoo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFA9E/8F122802D59E11F082F64F17C4F9AE02/QwTKMwBGEXJNpcM1jPO2gGHKSoo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:85:61:e8:c2:8e:27:6c:33:53:a6:4c:13:98:5f:57:cb:b4: 21:d5:a6:8b:d4:8d:42:10:93:4d:ff:fc:78:75:0f:27:6c:9f: a1:69:ab:00:c9:51:f4:82:68:85:bd:6b:90:6e:bd:bc:af:73: 57:66:57:58:e1:62:e0:df:0e:6d:5c:3a:12:d2:e9:b5:8e:bd: ba:0b:d4:5d:11:10:ff:c0:6c:44:15:1c:ad:a0:2a:95:43:37: 2d:cd:06:8a:0b:f2:18:54:ae:b2:70:38:14:1b:b1:8f:79:15: ce:4d:3e:23:45:71:8f:53:e8:2b:68:2f:c7:21:05:63:16:ff: e8:7e:a7:92:89:83:1d:d5:54:7c:d5:d1:24:1f:14:d2:7f:9a: f0:a9:06:2a:cd:7d:3f:2a:e9:ea:9d:98:d1:ac:f7:ca:d6:18: 1e:d3:22:e5:84:6b:31:8b:d1:35:cf:18:1d:b0:83:a8:25:74: d4:d6:40:2a:e5:1e:12:dd:77:85:85:0a:30:3d:35:41:d4:12: da:bd:ac:f4:6f:72:25:c1:89:55:01:06:1c:03:8d:37:00:4b: 41:75:c7:8b:d6:37:43:5c:c2:18:e9:c8:2e:e6:80:ce:60:4d: cd:59:72:be:32:f7:05:bf:95:82:1c:54:0e:0d:d7:80:ec:17: 35:39:3f:d8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkZBOUUxMTAvBgNVBAUTKDQzMDRDQTMzMDA0NjExNzI0REE1QzMzNThDRjNCNjgw NjFDQTRBOEEwHhcNMjYwOTIxMDcyNzM3WhcNMjYwOTI4MDcyNzM3WjAYMRYwFAYD VQQDEw02YWIwZGM2OS05YjlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq010E3iAOCcBR20+VpGvKAWRMmlTY6bEGIYWM45TUHDiXUPUecCHn8kr34k2 8RW66Qm78Z8nEQFGWgszolsrAnTGMy/QOtiLncTCmRqSr7LSCCo3bQWWafJXoKG/ p2Fdo/fgJ1XUcg1iXXNOtvE1XoA/XVTcektKuzT/j/YAumFBcFrHq1cpD3tu7O7W 2pDl06fr8cnEkC9VIShKw7Ez8bmFXUJBgLmgSZpWSWIWc7UueGahSoDowZhx87o/ nTlFCPvlz3K+WG+T9gTnbMXET3jaOIvPTf5cSz2BSFvKC3FBhXb8Q9TfOroyIYfD m9VasWfGL72hX5WDDVRk9UUFnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHrbI/GD mO/VtLRO6xcGUrhBSWUDMB8GA1UdIwQYMBaAFEMEyjMARhFyTaXDNYzztoBhykqK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRkE5RS84RjEyMjgwMkQ1 OUUxMUYwODJGNjRGMTdDNEY5QUUwMi9Rd1RLTXdCR0VYSk5wY00xalBPMmdHSEtT b28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1F3VEtNd0JHRVhKTnBjTTFqUE8yZ0dIS1Nvby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RkE5RS84RjEyMjgwMkQ1OUUxMUYwODJGNjRGMTdDNEY5QUUwMi9Rd1RLTXdCR0VY Sk5wY00xalBPMmdHSEtTb28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXIVh6MKOJ2wzU6ZME5hfV8u0IdWmi9SNQhCTTf/8eHUPJ2yfoWmrAMlR9IJo hb1rkG69vK9zV2ZXWOFi4N8ObVw6EtLptY69ugvUXREQ/8BsRBUcraAqlUM3Lc0G igvyGFSusnA4FBuxj3kVzk0+I0Vxj1PoK2gvxyEFYxb/6H6nkomDHdVUfNXRJB8U 0n+a8KkGKs19Pyrp6p2Y0az3ytYYHtMi5YRrMYvRNc8YHbCDqCV01NZAKuUeEt13 hYUKMD01QdQS2r2s9G9yJcGJVQEGHAONNwBLQXXHi9Y3Q1zCGOnILuaAzmBNzVly vjL3Bb+VghxUDg3XgOwXNTk/2A== -----END CERTIFICATE-----Generated at Mon Sep 21 23:45:20 2026 by rpki-client