$ rpki-client -vvf rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft File: sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft (raw, json) Hash identifier: +sYEHRqa0CNeAPObmIcflaqejuedk+D81GuAc7JvKjQ= Subject key identifier: F8:E5:B6:93:2A:ED:50:69:72:1D:FB:D8:70:71:E0:23:DF:FC:7F:3E Authority key identifier: B2:A7:84:EE:85:F5:53:83:67:29:7B:51:C0:86:8F:8F:1C:02:F9:11 Certificate issuer: /CN=A9158F08/serialNumber=B2A784EE85F5538367297B51C0868F8F1C02F911 Certificate serial: 09FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqeE7oX1U4NnKXtRwIaPjxwC-RE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft Manifest number: 16C9 Signing time: Wed 20 May 2026 18:19:10 +0000 Manifest this update: Wed 20 May 2026 18:19:09 +0000 Manifest next update: Wed 27 May 2026 18:19:09 +0000 Files and hashes: 1: sqeE7oX1U4NnKXtRwIaPjxwC-RE.crl (hash: 1NaNAGUs2XvqlSZ+msAsEkBZYL1pLOSKPxCuMX6o3Fw=) 2: DD70B00CA17B11EAB16F4954C4F9AE02.roa (hash: r3oax/+V4q+jPioRQnTYAoCLL+EoLljtLzFVV7hSq0M=) 3: DCDFB82CA17B11EAB16F4954C4F9AE02.roa (hash: kTqCbZKUtBsFFXpPj9uO/YMS3jJEQ+u1QwW8st6ZqAs=) 4: DC4BD210A17B11EAB16F4954C4F9AE02.roa (hash: eIAHLPD+G1WHeALpmNDjCvEhWTMycfos5yNXip7qHSk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.crl rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqeE7oX1U4NnKXtRwIaPjxwC-RE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 18:19:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2555 (0x9fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158F08, serialNumber=B2A784EE85F5538367297B51C0868F8F1C02F911 Validity Not Before: May 20 18:19:09 2026 GMT Not After : May 27 18:19:09 2026 GMT Subject: CN=6a0dfb1e-2e42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:19:5f:44:56:8c:b2:20:f6:64:11:0f:5b:b7: f0:2e:f2:0a:ea:b8:4c:17:52:9b:81:45:0c:0c:03: ca:8b:75:4f:7a:5e:63:76:74:d2:1e:a6:a6:5e:49: 8b:23:7c:96:5a:79:af:16:d3:92:f4:a3:98:21:65: 90:73:d0:e7:ca:a3:06:67:5d:f8:7b:b1:68:de:9e: e5:97:f1:b6:52:a1:89:3c:b9:ed:12:f2:4c:86:f1: ca:7f:29:34:5d:30:4f:04:b6:3c:54:5b:35:81:d5: 9d:95:99:c1:b8:f6:ed:91:6d:eb:1a:07:e8:0f:a3: 47:e7:e7:54:d7:5b:2b:6c:93:55:ac:f6:5d:9e:a0: b3:69:52:04:f0:ee:28:bb:50:21:42:4c:c5:fe:0a: 57:0b:81:a1:c9:46:58:a1:64:bb:71:c1:15:f6:08: cc:8b:e6:7f:f5:b5:b3:e8:bc:d4:fc:9c:97:aa:e3: 02:16:78:c6:e4:a8:1e:28:9e:86:56:53:83:b6:58: 1f:bb:01:64:21:9b:14:22:75:22:26:57:5c:e3:80: a4:8d:e3:45:25:93:c3:87:93:a4:7e:2b:c5:a3:60: 2f:82:65:d6:1c:14:70:ca:fd:3b:01:d2:bf:66:62: 0e:46:08:b9:f8:89:9e:78:5d:e2:6e:98:0c:e0:b9: 66:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:E5:B6:93:2A:ED:50:69:72:1D:FB:D8:70:71:E0:23:DF:FC:7F:3E X509v3 Authority Key Identifier: keyid:B2:A7:84:EE:85:F5:53:83:67:29:7B:51:C0:86:8F:8F:1C:02:F9:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqeE7oX1U4NnKXtRwIaPjxwC-RE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:d4:13:11:d2:0a:25:66:74:3c:8d:d7:e8:26:29:6b:94:70: 9b:3f:0a:29:04:40:c5:c6:a2:3c:2d:0a:3e:ff:b7:e2:6d:ef: b5:72:67:e1:83:97:60:f3:12:71:13:cb:d2:8b:98:f5:01:d0: 41:93:ea:23:04:81:db:a1:5e:a8:1e:c7:7f:5f:bb:6d:80:a9: f5:a6:54:62:d8:ad:ad:1e:fb:15:aa:aa:ab:75:68:45:71:60: 01:ea:7d:10:0e:54:38:7f:5b:20:ba:33:42:6c:23:38:74:42: 6b:8d:63:82:cc:c9:c1:fa:cb:eb:bb:e2:4c:4d:f3:95:4d:2f: ea:db:e5:26:46:cf:7a:bf:67:7c:ac:11:ea:1a:11:22:6f:7b: 87:06:6d:d4:4c:d1:1f:a0:b9:42:3a:9d:c7:03:f5:2c:5f:ca: dd:41:d4:b4:cc:d0:5f:93:45:7b:79:3d:7b:09:21:36:22:59: 6d:ca:8c:65:b9:a2:9c:55:4a:0b:99:95:14:03:8a:5b:8f:f1: 4d:bd:cb:67:2b:b2:60:5b:35:c5:e6:b3:45:eb:48:0d:94:e9: 24:1a:2e:25:0e:b8:70:94:08:0c:d7:e8:f3:60:be:ef:16:49: 79:58:3d:a6:43:55:c8:69:c9:c3:5c:d9:89:b7:12:f1:43:5d: f4:ab:a5:f9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCfswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThGMDgxMTAvBgNVBAUTKEIyQTc4NEVFODVGNTUzODM2NzI5N0I1MUMwODY4RjhG MUMwMkY5MTEwHhcNMjYwNTIwMTgxOTA5WhcNMjYwNTI3MTgxOTA5WjAYMRYwFAYD VQQDEw02YTBkZmIxZS0yZTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoRlfRFaMsiD2ZBEPW7fwLvIK6rhMF1KbgUUMDAPKi3VPel5jdnTSHqamXkmL I3yWWnmvFtOS9KOYIWWQc9DnyqMGZ134e7Fo3p7ll/G2UqGJPLntEvJMhvHKfyk0 XTBPBLY8VFs1gdWdlZnBuPbtkW3rGgfoD6NH5+dU11srbJNVrPZdnqCzaVIE8O4o u1AhQkzF/gpXC4GhyUZYoWS7ccEV9gjMi+Z/9bWz6LzU/JyXquMCFnjG5KgeKJ6G VlODtlgfuwFkIZsUInUiJldc44CkjeNFJZPDh5OkfivFo2AvgmXWHBRwyv07AdK/ ZmIORgi5+ImeeF3ibpgM4LlmYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPjltpMq 7VBpch372HBx4CPf/H8+MB8GA1UdIwQYMBaAFLKnhO6F9VODZyl7UcCGj48cAvkR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEYwOC81QjE3RjZEMjA3 RDAxMUVBQTQ4NDg2NDRDNEY5QUUwMi9zcWVFN29YMVU0Tm5LWHRSd0lhUGp4d0Mt UkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NxZUU3b1gxVTRObktYdFJ3SWFQanh3Qy1SRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEYwOC81QjE3RjZEMjA3RDAxMUVBQTQ4NDg2NDRDNEY5QUUwMi9zcWVFN29YMVU0 Tm5LWHRSd0lhUGp4d0MtUkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABdQTEdIKJWZ0PI3X6CYpa5Rwmz8KKQRAxcaiPC0KPv+34m3vtXJn4YOXYPMS cRPL0ouY9QHQQZPqIwSB26FeqB7Hf1+7bYCp9aZUYtitrR77Faqqq3VoRXFgAep9 EA5UOH9bILozQmwjOHRCa41jgszJwfrL67viTE3zlU0v6tvlJkbPer9nfKwR6hoR Im97hwZt1EzRH6C5QjqdxwP1LF/K3UHUtMzQX5NFe3k9ewkhNiJZbcqMZbminFVK C5mVFAOKW4/xTb3LZyuyYFs1xeazRetIDZTpJBouJQ64cJQIDNfo82C+7xZJeVg9 pkNVyGnJw1zZibcS8UNd9Kul+Q== -----END CERTIFICATE-----Generated at Fri May 22 15:12:36 2026 by rpki-client