$ rpki-client -vvf rpki.apnic.net/member_repository/A911C4BC/0FA0ED804B5D11F188F2666EAE833773/qdfTMxZtqSYb56g2YxgPO_DskKE.mft File: qdfTMxZtqSYb56g2YxgPO_DskKE.mft (raw, json) Hash identifier: LDk/ixCxm3DUlajRBeYtAXBdW6IxXDG9cw8qV9XkjnE= Subject key identifier: F8:C7:C8:7E:C5:2C:65:C1:57:0C:B8:9A:79:4F:CF:0D:66:40:3F:E1 Authority key identifier: A9:D7:D3:33:16:6D:A9:26:1B:E7:A8:36:63:18:0F:3B:F0:EC:90:A1 Certificate issuer: /CN=A911C4BC/serialNumber=A9D7D333166DA9261BE7A83663180F3BF0EC90A1 Certificate serial: 08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qdfTMxZtqSYb56g2YxgPO_DskKE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C4BC/0FA0ED804B5D11F188F2666EAE833773/qdfTMxZtqSYb56g2YxgPO_DskKE.mft Manifest number: 07 Signing time: Tue 19 May 2026 09:05:26 +0000 Manifest this update: Tue 19 May 2026 09:05:25 +0000 Manifest next update: Tue 26 May 2026 09:05:25 +0000 Files and hashes: 1: qdfTMxZtqSYb56g2YxgPO_DskKE.crl (hash: T/P0/czS5N3h2v/UUOXpY8RzX5gSigKAOc0l6TzypSY=) 2: 773251504B5D11F1927AF905AF833773.roa (hash: ZcLx3Mur14iOi3OHL35qFcyb/HZvqXpJ986YSagAmCg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C4BC/0FA0ED804B5D11F188F2666EAE833773/qdfTMxZtqSYb56g2YxgPO_DskKE.crl rsync://rpki.apnic.net/member_repository/A911C4BC/0FA0ED804B5D11F188F2666EAE833773/qdfTMxZtqSYb56g2YxgPO_DskKE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qdfTMxZtqSYb56g2YxgPO_DskKE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 May 2026 09:05:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C4BC, serialNumber=A9D7D333166DA9261BE7A83663180F3BF0EC90A1 Validity Not Before: May 19 09:05:25 2026 GMT Not After : May 26 09:05:25 2026 GMT Subject: CN=6a0c27d6-1732 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4e:3d:97:c0:dc:83:b8:3c:76:d1:48:99:02: 9c:4e:2b:6e:e1:db:19:e3:63:46:84:a4:6b:b9:6f: bc:9e:64:2d:d2:1f:a1:13:ab:91:20:98:3c:dc:73: 0e:61:83:81:f5:0a:96:38:bd:d3:d0:c3:fe:16:f7: 99:89:48:40:a1:e4:cc:55:5e:34:ac:e4:f2:e7:94: b2:0c:94:40:e4:0f:95:fd:08:86:19:8e:bb:d1:d8: 40:88:6c:b7:0f:53:67:92:b7:33:d5:e9:ec:62:ff: 5a:18:a9:d0:80:75:85:8d:ff:01:17:b7:3b:07:b7: a9:65:03:23:c0:5b:3f:7e:82:fc:1b:31:91:a6:50: 85:b4:88:f9:49:34:b9:1e:5b:00:e3:c8:a0:05:fd: 00:25:15:bd:12:ae:97:f6:62:b3:02:d4:13:24:12: 68:5f:09:85:e3:c6:bb:40:88:3c:9b:35:87:f4:66: f6:a7:1a:7e:c4:ef:da:68:66:08:dd:2c:a0:07:3f: 9b:6d:1c:54:43:42:2a:8c:b4:6b:f7:49:b3:af:94: d9:0b:b2:32:99:e2:81:8a:87:ad:ee:04:17:f2:f0: aa:fa:74:a6:ec:50:57:75:3c:00:78:af:83:58:00: f9:63:5c:88:9a:c0:6f:d7:da:3c:5f:93:ca:be:d6: ff:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:C7:C8:7E:C5:2C:65:C1:57:0C:B8:9A:79:4F:CF:0D:66:40:3F:E1 X509v3 Authority Key Identifier: keyid:A9:D7:D3:33:16:6D:A9:26:1B:E7:A8:36:63:18:0F:3B:F0:EC:90:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C4BC/0FA0ED804B5D11F188F2666EAE833773/qdfTMxZtqSYb56g2YxgPO_DskKE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qdfTMxZtqSYb56g2YxgPO_DskKE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C4BC/0FA0ED804B5D11F188F2666EAE833773/qdfTMxZtqSYb56g2YxgPO_DskKE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:54:33:b5:b2:2e:64:92:aa:d0:cf:cf:71:ef:50:54:91:fd: cc:42:6a:60:4d:e7:e6:4b:96:7c:95:43:05:d3:30:90:09:1b: d8:d8:d3:7f:ac:74:1a:c2:a4:40:50:da:d5:68:e6:6c:38:30: 23:f9:81:c5:da:2d:e8:01:45:58:45:50:32:f9:5c:4e:f9:ef: 26:de:aa:1d:75:81:61:46:6c:7f:5d:c6:2a:2c:a4:51:65:80: 62:c4:63:2b:c1:d1:1a:5d:46:19:a0:1b:10:e1:72:ab:78:0d: d5:74:b0:47:d6:d1:cb:4c:3f:cf:30:e7:5b:27:b9:6d:ed:10: e0:0f:b2:f7:68:ea:90:05:e7:93:e8:d9:97:19:6d:9c:00:b0: 92:0f:0d:ff:ba:c6:88:e2:56:f4:85:e3:a7:65:74:fa:8e:b0: 93:f8:de:4c:b6:77:d9:7a:48:cf:a6:d8:66:65:ff:58:ae:cc: 98:f4:14:52:71:7b:ec:8a:48:00:09:c5:30:45:c3:8f:bf:ec: a5:06:2c:b7:da:ab:c3:c7:64:a8:55:87:95:7f:5c:a4:4e:86: 9a:ba:b6:46:7f:b1:e2:f0:bd:60:c0:ed:2e:62:0a:b1:63:6c: 72:51:37:0a:e2:dd:0d:ea:e8:b5:eb:98:1e:d5:cb:87:e5:14: 7c:85:54:cd -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QzRCQzExMC8GA1UEBRMoQTlEN0QzMzMxNjZEQTkyNjFCRTdBODM2NjMxODBGM0JG MEVDOTBBMTAeFw0yNjA1MTkwOTA1MjVaFw0yNjA1MjYwOTA1MjVaMBgxFjAUBgNV BAMTDTZhMGMyN2Q2LTE3MzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/Tj2XwNyDuDx20UiZApxOK27h2xnjY0aEpGu5b7yeZC3SH6ETq5EgmDzccw5h g4H1CpY4vdPQw/4W95mJSECh5MxVXjSs5PLnlLIMlEDkD5X9CIYZjrvR2ECIbLcP U2eStzPV6exi/1oYqdCAdYWN/wEXtzsHt6llAyPAWz9+gvwbMZGmUIW0iPlJNLke WwDjyKAF/QAlFb0Srpf2YrMC1BMkEmhfCYXjxrtAiDybNYf0ZvanGn7E79poZgjd LKAHP5ttHFRDQiqMtGv3SbOvlNkLsjKZ4oGKh63uBBfy8Kr6dKbsUFd1PAB4r4NY APljXIiawG/X2jxfk8q+1v/PAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU+MfIfsUs ZcFXDLiaeU/PDWZAP+EwHwYDVR0jBBgwFoAUqdfTMxZtqSYb56g2YxgPO/DskKEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFDNEJDLzBGQTBFRDgwNEI1 RDExRjE4OEYyNjY2RUFFODMzNzczL3FkZlRNeFp0cVNZYjU2ZzJZeGdQT19Ec2tL RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcWRmVE14WnRxU1liNTZnMll4Z1BPX0Rza0tFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFD NEJDLzBGQTBFRDgwNEI1RDExRjE4OEYyNjY2RUFFODMzNzczL3FkZlRNeFp0cVNZ YjU2ZzJZeGdQT19Ec2tLRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQATVDO1si5kkqrQz89x71BUkf3MQmpgTefmS5Z8lUMF0zCQCRvY2NN/rHQawqRA UNrVaOZsODAj+YHF2i3oAUVYRVAy+VxO+e8m3qoddYFhRmx/XcYqLKRRZYBixGMr wdEaXUYZoBsQ4XKreA3VdLBH1tHLTD/PMOdbJ7lt7RDgD7L3aOqQBeeT6NmXGW2c ALCSDw3/usaI4lb0heOnZXT6jrCT+N5MtnfZekjPpthmZf9YrsyY9BRScXvsikgA CcUwRcOPv+ylBiy32qvDx2SoVYeVf1ykToaaurZGf7Hi8L1gwO0uYgqxY2xyUTcK 4t0N6ui165ge1cuH5RR8hVTN -----END CERTIFICATE-----Generated at Thu May 21 09:39:27 2026 by rpki-client