$ rpki-client -vvf rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft File: QX1X3RxCy0uksVLTbbBby3iBM98.mft (raw, json) Hash identifier: QY0tvMp57To1Pv7n6jOzWCTo2IvLdCY8J2UIBaYMrrc= Subject key identifier: D9:0D:F2:2F:84:18:67:A5:6B:19:1F:C6:1D:18:A0:5F:9A:C3:C9:40 Authority key identifier: 41:7D:57:DD:1C:42:CB:4B:A4:B1:52:D3:6D:B0:5B:CB:78:81:33:DF Certificate issuer: /CN=A9148848/serialNumber=417D57DD1C42CB4BA4B152D36DB05BCB788133DF Certificate serial: 0299 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QX1X3RxCy0uksVLTbbBby3iBM98.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft Manifest number: 0297 Signing time: Thu 21 May 2026 01:40:31 +0000 Manifest this update: Thu 21 May 2026 01:40:30 +0000 Manifest next update: Thu 28 May 2026 01:40:30 +0000 Files and hashes: 1: QX1X3RxCy0uksVLTbbBby3iBM98.crl (hash: cDZKrPE6qw5/RHcL9hIO5GAyMRsZDsG6qsrG0AK4W+4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.crl rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QX1X3RxCy0uksVLTbbBby3iBM98.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 01:40:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 665 (0x299) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148848, serialNumber=417D57DD1C42CB4BA4B152D36DB05BCB788133DF Validity Not Before: May 21 01:40:30 2026 GMT Not After : May 28 01:40:30 2026 GMT Subject: CN=6a0e628e-d7c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a9:5c:12:d7:15:1a:8b:17:fb:cf:e8:dc:2a: cf:bf:08:64:12:d5:fa:28:aa:30:79:21:6f:b7:70: 7f:75:16:8d:83:92:85:04:7f:da:49:51:14:f4:b6: 99:38:78:85:7f:c8:af:11:6d:9c:f3:24:37:9d:df: 6e:93:e4:99:f7:ae:1d:7f:51:d3:31:a2:2f:a9:54: 51:b2:20:aa:34:65:de:d8:38:23:dc:cd:d9:dd:f4: 96:2a:99:91:b3:37:49:97:34:82:17:eb:37:5b:17: 9e:a5:f8:c4:87:82:08:b8:86:13:ef:3e:77:dc:a6: 87:3b:26:b6:97:69:d1:d6:73:74:99:a4:fe:05:16: d5:7e:1c:d4:08:dd:c5:8c:b4:49:9f:59:e4:05:bd: 2d:89:35:17:19:e2:e1:0c:e8:8c:5a:75:e6:90:f0: 24:cc:90:b4:c0:1d:7b:2e:cf:b0:d3:92:ee:2b:62: 84:2f:50:0c:de:45:82:f2:a3:5a:88:45:9e:12:93: 23:76:fd:d3:9b:d1:b5:89:55:ea:c2:95:e6:5f:fd: d8:af:6c:c8:a9:8e:e8:89:f7:20:89:e4:77:12:a3: ef:a2:61:fd:66:2f:1f:17:06:50:54:73:f1:4d:d9: 1b:cb:28:49:23:10:4d:61:3d:93:2a:a6:d1:2d:9e: 34:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:0D:F2:2F:84:18:67:A5:6B:19:1F:C6:1D:18:A0:5F:9A:C3:C9:40 X509v3 Authority Key Identifier: keyid:41:7D:57:DD:1C:42:CB:4B:A4:B1:52:D3:6D:B0:5B:CB:78:81:33:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QX1X3RxCy0uksVLTbbBby3iBM98.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:33:81:3c:1f:c2:e0:f1:c9:75:99:0b:5d:7e:ac:43:9e:b3: 34:e8:af:4f:96:55:0a:1e:a1:a6:f1:1b:e8:2a:1b:ee:d1:23: 5a:1c:86:b5:f1:98:29:45:78:e2:b7:b7:de:39:f2:42:ec:31: 07:52:cf:1e:22:83:d6:c0:98:d8:b4:9c:3d:18:3b:24:00:18: 13:82:db:9b:cf:9e:44:bf:37:14:a3:34:2c:46:d3:be:04:53: 1a:b0:15:e9:e3:51:17:7d:59:f9:36:d4:00:af:c7:54:9f:f5: 6f:6a:99:44:14:67:af:3c:e7:f1:51:3b:20:28:da:78:d9:84: 27:b9:48:bb:8a:e8:b2:15:fd:4e:13:ca:b2:51:af:40:58:ad: 1a:30:d3:c0:05:95:a8:45:6a:bf:d2:f1:ef:b6:11:3d:6f:37: fc:61:71:2f:b6:c3:7f:2a:bb:88:92:29:19:ba:5a:ff:81:ef: 24:58:de:ef:76:4b:8c:4a:d2:87:0b:95:7b:e9:db:13:6d:bb: 2a:79:87:96:a0:3e:05:f7:89:69:8b:f5:bf:ef:fa:97:f7:2d: 2f:f7:4d:d0:c4:6d:82:f9:65:e6:f7:41:74:8f:8b:d0:d8:25: 0e:11:1a:91:ac:84:c0:8c:f7:d5:40:b9:c8:09:f3:6e:1d:65: eb:6e:07:b2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg4NDgxMTAvBgNVBAUTKDQxN0Q1N0REMUM0MkNCNEJBNEIxNTJEMzZEQjA1QkNC Nzg4MTMzREYwHhcNMjYwNTIxMDE0MDMwWhcNMjYwNTI4MDE0MDMwWjAYMRYwFAYD VQQDEw02YTBlNjI4ZS1kN2MwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq6lcEtcVGosX+8/o3CrPvwhkEtX6KKoweSFvt3B/dRaNg5KFBH/aSVEU9LaZ OHiFf8ivEW2c8yQ3nd9uk+SZ964df1HTMaIvqVRRsiCqNGXe2Dgj3M3Z3fSWKpmR szdJlzSCF+s3WxeepfjEh4IIuIYT7z533KaHOya2l2nR1nN0maT+BRbVfhzUCN3F jLRJn1nkBb0tiTUXGeLhDOiMWnXmkPAkzJC0wB17Ls+w05LuK2KEL1AM3kWC8qNa iEWeEpMjdv3Tm9G1iVXqwpXmX/3Yr2zIqY7oifcgieR3EqPvomH9Zi8fFwZQVHPx TdkbyyhJIxBNYT2TKqbRLZ40FQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNkN8i+E GGelaxkfxh0YoF+aw8lAMB8GA1UdIwQYMBaAFEF9V90cQstLpLFS022wW8t4gTPf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODg0OC83ODcwRTNDODVE N0QxMUVEQjEyRjhENUFDNEY5QUUwMi9RWDFYM1J4Q3kwdWtzVkxUYmJCYnkzaUJN OTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FYMVgzUnhDeTB1a3NWTFRiYkJieTNpQk05OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODg0OC83ODcwRTNDODVEN0QxMUVEQjEyRjhENUFDNEY5QUUwMi9RWDFYM1J4Q3kw dWtzVkxUYmJCYnkzaUJNOTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAETOBPB/C4PHJdZkLXX6sQ56zNOivT5ZVCh6hpvEb6Cob7tEjWhyGtfGYKUV4 4re33jnyQuwxB1LPHiKD1sCY2LScPRg7JAAYE4Lbm8+eRL83FKM0LEbTvgRTGrAV 6eNRF31Z+TbUAK/HVJ/1b2qZRBRnrzzn8VE7ICjaeNmEJ7lIu4roshX9ThPKslGv QFitGjDTwAWVqEVqv9Lx77YRPW83/GFxL7bDfyq7iJIpGbpa/4HvJFje73ZLjErS hwuVe+nbE227KnmHlqA+BfeJaYv1v+/6l/ctL/dN0MRtgvll5vdBdI+L0NglDhEa kayEwIz31UC5yAnzbh1l624Hsg== -----END CERTIFICATE-----Generated at Thu May 21 10:27:44 2026 by rpki-client