$ rpki-client -vvf rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.mft File: PQqIwMyj7oZ3zRffPuht5x38ESk.mft (raw, json) Hash identifier: mbEln4bYpHoqOjmc9c8mITlFa7vskCWVKubcaYDDzW8= Subject key identifier: 91:EB:EB:BD:D7:E4:62:6A:5D:EB:71:11:53:5D:4E:3B:3C:B3:0F:D1 Authority key identifier: 3D:0A:88:C0:CC:A3:EE:86:77:CD:17:DF:3E:E8:6D:E7:1D:FC:11:29 Certificate issuer: /CN=A91607DE/serialNumber=3D0A88C0CCA3EE8677CD17DF3EE86DE71DFC1129 Certificate serial: 040B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQqIwMyj7oZ3zRffPuht5x38ESk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.mft Manifest number: 0404 Signing time: Fri 29 May 2026 00:16:59 +0000 Manifest this update: Fri 29 May 2026 00:16:59 +0000 Manifest next update: Fri 05 Jun 2026 00:16:59 +0000 Files and hashes: 1: PQqIwMyj7oZ3zRffPuht5x38ESk.crl (hash: bxZZAW1E5utWmU0ir0C6DkLURVqGfWnlb+WDfsyaoC4=) 2: FD398FA0BB5D11ECA62F8674C4F9AE02.roa (hash: lCNfDmCO6Vy6uu5QW43aJqJrNK0XuY+KKPY1oeY2SkM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.crl rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQqIwMyj7oZ3zRffPuht5x38ESk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Jun 2026 00:16:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1035 (0x40b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91607DE, serialNumber=3D0A88C0CCA3EE8677CD17DF3EE86DE71DFC1129 Validity Not Before: May 29 00:16:59 2026 GMT Not After : Jun 5 00:16:59 2026 GMT Subject: CN=6a18dafb-763d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:73:47:86:1a:76:58:13:19:16:4a:7d:4a:72: 88:a8:56:d3:f7:56:78:f9:d4:6b:b9:38:aa:e4:d8: fc:d7:2c:f6:bc:8a:6c:a2:1f:34:01:8e:28:f7:58: 3e:0b:3d:80:f1:27:93:53:02:bd:5f:7b:c1:5e:58: b0:73:f0:03:0d:88:b2:19:18:c9:6d:0a:94:ee:36: 56:65:ef:59:ac:20:b6:e1:bf:e7:ca:a6:31:bc:8d: 07:fa:27:51:db:38:03:4f:ae:02:19:f5:38:81:5f: fb:a0:5f:63:19:91:a5:35:d4:ae:72:2b:bb:fb:ab: 4d:94:b4:41:26:b2:26:67:77:00:b2:e9:c2:93:da: 1f:c1:81:3f:c2:21:ea:dc:02:55:08:24:4f:7d:86: 00:bc:24:db:b0:f4:83:35:4f:13:a9:e4:ee:91:c6: 9d:ef:62:20:f1:17:91:8f:aa:f4:5a:ec:4c:ab:9f: 8b:42:49:eb:8c:10:64:6c:c0:dc:02:00:a3:1b:ac: 59:1a:a9:59:fe:4d:e1:57:fa:64:34:4e:15:f8:97: 88:b7:54:fa:6e:9c:ad:de:d8:fa:97:8a:d9:c9:d5: 94:6e:8c:21:de:2b:a1:cb:91:d8:fa:36:a7:46:27: 48:2d:55:8c:a1:80:58:7b:08:24:27:15:7f:c4:e5: c5:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:EB:EB:BD:D7:E4:62:6A:5D:EB:71:11:53:5D:4E:3B:3C:B3:0F:D1 X509v3 Authority Key Identifier: keyid:3D:0A:88:C0:CC:A3:EE:86:77:CD:17:DF:3E:E8:6D:E7:1D:FC:11:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQqIwMyj7oZ3zRffPuht5x38ESk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:48:e1:d9:cc:07:20:81:fb:a3:c9:b3:44:14:f5:39:cf:10: 5e:e3:08:08:c4:e7:aa:17:cb:d0:68:dc:2e:e5:7e:14:75:42: c5:02:29:49:b3:2f:6b:82:d5:95:7e:89:08:e5:bf:84:7f:71: c3:51:e0:33:5e:d4:3e:ee:f8:d0:e4:77:a0:c1:f4:c9:8c:cd: ce:67:34:eb:77:87:42:90:05:9b:75:db:8c:c1:76:2a:3a:08: d9:ca:2d:a8:b9:95:48:57:26:c2:c1:21:1a:43:0a:fe:08:45: 1c:48:4b:1d:da:da:4b:12:09:80:cb:52:9e:ad:06:e8:e3:e7: bc:5c:8b:e0:46:44:13:c9:20:37:61:79:10:88:7a:a2:eb:7c: 0f:db:8d:2e:7c:cd:b4:31:d1:51:10:b2:c7:91:21:2c:4b:24: de:67:bb:2f:df:7f:13:72:ce:e2:1b:53:fb:9a:17:d8:53:d5: 2d:bf:32:42:01:fb:61:bc:1d:74:1c:b1:2d:82:e2:24:78:35: 58:b9:cf:55:08:10:d9:70:c1:6f:9b:97:73:bb:06:c7:0e:23: 89:e8:36:8b:be:6e:38:e4:0d:05:60:eb:a0:9f:35:c9:4a:9a: de:d7:cb:0f:3a:5f:b4:6a:ee:9a:56:40:9d:4f:fa:a3:b9:4e: 2f:83:67:a7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBAswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA3REUxMTAvBgNVBAUTKDNEMEE4OEMwQ0NBM0VFODY3N0NEMTdERjNFRTg2REU3 MURGQzExMjkwHhcNMjYwNTI5MDAxNjU5WhcNMjYwNjA1MDAxNjU5WjAYMRYwFAYD VQQDEw02YTE4ZGFmYi03NjNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz3NHhhp2WBMZFkp9SnKIqFbT91Z4+dRruTiq5Nj81yz2vIpsoh80AY4o91g+ Cz2A8SeTUwK9X3vBXliwc/ADDYiyGRjJbQqU7jZWZe9ZrCC24b/nyqYxvI0H+idR 2zgDT64CGfU4gV/7oF9jGZGlNdSuciu7+6tNlLRBJrImZ3cAsunCk9ofwYE/wiHq 3AJVCCRPfYYAvCTbsPSDNU8TqeTukcad72Ig8ReRj6r0WuxMq5+LQknrjBBkbMDc AgCjG6xZGqlZ/k3hV/pkNE4V+JeIt1T6bpyt3tj6l4rZydWUbowh3iuhy5HY+jan RidILVWMoYBYewgkJxV/xOXF0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJHr673X 5GJqXetxEVNdTjs8sw/RMB8GA1UdIwQYMBaAFD0KiMDMo+6Gd80X3z7obecd/BEp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDdERS9DNzY4MTRDNkJC NUExMUVDOTA4QUM5NkVDNEY5QUUwMi9QUXFJd015ajdvWjN6UmZmUHVodDV4MzhF U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BRcUl3TXlqN29aM3pSZmZQdWh0NXgzOEVTay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDdERS9DNzY4MTRDNkJCNUExMUVDOTA4QUM5NkVDNEY5QUUwMi9QUXFJd015ajdv WjN6UmZmUHVodDV4MzhFU2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdUjh2cwHIIH7o8mzRBT1Oc8QXuMICMTnqhfL0GjcLuV+FHVCxQIpSbMva4LV lX6JCOW/hH9xw1HgM17UPu740OR3oMH0yYzNzmc063eHQpAFm3XbjMF2KjoI2cot qLmVSFcmwsEhGkMK/ghFHEhLHdraSxIJgMtSnq0G6OPnvFyL4EZEE8kgN2F5EIh6 out8D9uNLnzNtDHRURCyx5EhLEsk3me7L99/E3LO4htT+5oX2FPVLb8yQgH7Ybwd dByxLYLiJHg1WLnPVQgQ2XDBb5uXc7sGxw4jieg2i75uOOQNBWDroJ81yUqa3tfL DzpftGrumlZAnU/6o7lOL4Nnpw== -----END CERTIFICATE-----Generated at Fri May 29 17:06:11 2026 by rpki-client