$ rpki-client -vvf rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.mft File: qsOf2WPeFzHQ2j1BQeSh5GnphSM.mft (raw, json) Hash identifier: 6ND1OHWpZBQsrcxBfrcwSRMk5JafVaGrWJwRUVQofMk= Subject key identifier: CF:5F:31:E2:3C:59:BC:8E:47:77:8C:F0:78:39:B1:00:B5:4D:29:51 Authority key identifier: AA:C3:9F:D9:63:DE:17:31:D0:DA:3D:41:41:E4:A1:E4:69:E9:85:23 Certificate issuer: /CN=A91430D6/serialNumber=AAC39FD963DE1731D0DA3D4141E4A1E469E98523 Certificate serial: B0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qsOf2WPeFzHQ2j1BQeSh5GnphSM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.mft Manifest number: AB Signing time: Mon 01 Jun 2026 08:00:44 +0000 Manifest this update: Mon 01 Jun 2026 08:00:43 +0000 Manifest next update: Mon 08 Jun 2026 08:00:43 +0000 Files and hashes: 1: qsOf2WPeFzHQ2j1BQeSh5GnphSM.crl (hash: 0VeK8Agj9elK5oXbLC0l509T4ONcfXU9GdlbzsBN83M=) 2: 85B52606F44311F089BA68A95F6F56BC.roa (hash: Ex29dRzH8LkzDGimmK0Vm7ywjUej+dvGo6cnaEEBQnY=) 3: 4DB1CEBCF44311F08E818BA85F6F56BC.roa (hash: 28TOJyzIUoQ+gHS12Ia30yDze1P2PrrZaNrtbhDyvQI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.crl rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qsOf2WPeFzHQ2j1BQeSh5GnphSM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 08:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 176 (0xb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91430D6, serialNumber=AAC39FD963DE1731D0DA3D4141E4A1E469E98523 Validity Not Before: Jun 1 08:00:43 2026 GMT Not After : Jun 8 08:00:43 2026 GMT Subject: CN=6a1d3c2c-83e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:be:d6:13:2d:f0:ef:57:bd:7d:76:24:3c:a4: 8e:8c:58:f5:92:d8:1c:65:80:c4:3b:88:6f:2c:51: b2:a6:85:39:b1:fc:33:0d:c4:c4:8d:62:5b:d5:a5: f2:df:9a:25:f3:28:62:78:10:0f:47:40:c2:80:c2: b1:a4:24:73:5c:78:cf:6b:c5:02:e2:72:da:a9:d8: b3:61:ad:61:d6:0d:74:62:b5:0e:e7:19:79:ae:95: dd:b2:0c:1e:83:39:74:3b:f4:a1:e0:66:fc:2d:1f: b8:8d:7b:d8:85:29:1e:86:7d:66:90:69:a7:8b:16: b8:83:01:86:22:e1:49:7a:aa:a6:77:b7:0e:46:40: aa:81:37:d4:ff:2a:36:d9:52:7e:60:c9:d1:87:2c: 16:ce:96:d8:09:90:2a:ad:4a:a6:97:0f:99:71:0e: aa:5a:6f:60:78:92:86:95:0a:84:57:8a:0e:e7:24: 28:27:ff:a8:e8:28:dc:15:05:0f:7c:af:fc:5f:e7: e9:e6:4a:fd:fe:bb:1d:6b:26:64:d8:55:47:2f:d3: 01:87:c9:d7:c3:50:ff:62:b4:2c:ba:95:d3:ad:9f: dc:8a:ba:c4:07:0d:98:3f:08:2d:ce:c5:3f:f0:bc: 74:54:7b:37:e2:f1:6d:81:33:56:6b:9e:ff:7f:f3: dd:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:5F:31:E2:3C:59:BC:8E:47:77:8C:F0:78:39:B1:00:B5:4D:29:51 X509v3 Authority Key Identifier: keyid:AA:C3:9F:D9:63:DE:17:31:D0:DA:3D:41:41:E4:A1:E4:69:E9:85:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qsOf2WPeFzHQ2j1BQeSh5GnphSM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:59:93:df:77:1c:aa:2f:03:2a:f0:dd:12:53:0c:c7:46:91: 50:70:4b:b5:ca:08:ec:b4:95:75:5f:ea:63:12:d8:d6:0e:c6: cc:d0:26:c4:c0:84:1e:bf:23:0b:86:d9:89:bd:99:1c:a5:9e: d5:8a:45:7d:c9:20:f4:ad:cc:6c:c9:02:e9:29:13:e1:ae:d5: 48:d6:c4:e1:28:90:63:08:19:53:6d:5a:75:79:50:fe:85:e9: a7:4b:4b:50:80:74:9a:3f:ef:1a:56:82:2b:48:0e:1f:f7:a0: 3b:84:65:b3:62:b2:a9:ad:a3:a8:58:0c:47:2a:2b:7a:5f:9a: 94:ec:c1:8c:f9:de:3a:62:c0:ca:4a:13:66:46:51:64:82:82: ba:8a:b0:5c:a9:a0:2e:3a:a8:77:6c:13:b0:40:ee:27:9f:79: b4:06:a2:bb:79:e6:2b:cb:95:57:1b:17:5d:ff:51:d6:dd:ea: 2e:40:68:e1:56:e6:2d:e3:a5:3f:9f:3a:7a:4b:c6:fd:bd:f0: 5d:f5:50:ad:9d:0d:7d:41:98:49:d6:da:53:f0:13:97:02:87: 13:7d:34:90:ce:8d:70:a7:8f:e6:54:55:88:9e:ba:43:2d:d8: e1:c4:08:7f:10:e2:66:5a:69:73:27:4e:93:fc:1e:dd:35:ab: 12:97:e2:df -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICALAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDMwRDYxMTAvBgNVBAUTKEFBQzM5RkQ5NjNERTE3MzFEMERBM0Q0MTQxRTRBMUU0 NjlFOTg1MjMwHhcNMjYwNjAxMDgwMDQzWhcNMjYwNjA4MDgwMDQzWjAYMRYwFAYD VQQDEw02YTFkM2MyYy04M2UxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsb7WEy3w71e9fXYkPKSOjFj1ktgcZYDEO4hvLFGypoU5sfwzDcTEjWJb1aXy 35ol8yhieBAPR0DCgMKxpCRzXHjPa8UC4nLaqdizYa1h1g10YrUO5xl5rpXdsgwe gzl0O/Sh4Gb8LR+4jXvYhSkehn1mkGmnixa4gwGGIuFJeqqmd7cORkCqgTfU/yo2 2VJ+YMnRhywWzpbYCZAqrUqmlw+ZcQ6qWm9geJKGlQqEV4oO5yQoJ/+o6CjcFQUP fK/8X+fp5kr9/rsdayZk2FVHL9MBh8nXw1D/YrQsupXTrZ/cirrEBw2YPwgtzsU/ 8Lx0VHs34vFtgTNWa57/f/PdSwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM9fMeI8 WbyOR3eM8Hg5sQC1TSlRMB8GA1UdIwQYMBaAFKrDn9lj3hcx0No9QUHkoeRp6YUj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzBENi8xN0YwNkEyNDVG RTAxMUYwQjJGRDhGNTdDNEY5QUUwMi9xc09mMldQZUZ6SFEyajFCUWVTaDVHbnBo U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3FzT2YyV1BlRnpIUTJqMUJRZVNoNUducGhTTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzBENi8xN0YwNkEyNDVGRTAxMUYwQjJGRDhGNTdDNEY5QUUwMi9xc09mMldQZUZ6 SFEyajFCUWVTaDVHbnBoU00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAi1mT33ccqi8DKvDdElMMx0aRUHBLtcoI7LSVdV/qYxLY1g7GzNAmxMCEHr8j C4bZib2ZHKWe1YpFfckg9K3MbMkC6SkT4a7VSNbE4SiQYwgZU21adXlQ/oXpp0tL UIB0mj/vGlaCK0gOH/egO4Rls2Kyqa2jqFgMRyorel+alOzBjPneOmLAykoTZkZR ZIKCuoqwXKmgLjqod2wTsEDuJ595tAaiu3nmK8uVVxsXXf9R1t3qLkBo4VbmLeOl P586ekvG/b3wXfVQrZ0NfUGYSdbaU/ATlwKHE300kM6NcKeP5lRViJ66Qy3Y4cQI fxDiZlppcydOk/we3TWrEpfi3w== -----END CERTIFICATE-----Generated at Tue Jun 2 21:19:37 2026 by rpki-client