$ rpki-client -vvf rpki.apnic.net/member_repository/A9165C64/425B423CFFA311E98735A685C4F9AE02/QOvCWgi6XnVBzhQtK8KK5Pgoiks.mft File: QOvCWgi6XnVBzhQtK8KK5Pgoiks.mft (raw, json) Hash identifier: AdNe1mjX0tViPkYVFbo1YqsHvNa/hLkt5Nmq+Te0jbo= Subject key identifier: 8D:E6:BD:BA:E3:8A:2E:10:D0:3B:3B:64:FD:DA:CD:E4:E8:B4:BF:CE Authority key identifier: 40:EB:C2:5A:08:BA:5E:75:41:CE:14:2D:2B:C2:8A:E4:F8:28:8A:4B Certificate issuer: /CN=A9165C64/serialNumber=40EBC25A08BA5E7541CE142D2BC28AE4F8288A4B Certificate serial: 0D3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOvCWgi6XnVBzhQtK8KK5Pgoiks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165C64/425B423CFFA311E98735A685C4F9AE02/QOvCWgi6XnVBzhQtK8KK5Pgoiks.mft Manifest number: 0D2A Signing time: Wed 20 May 2026 18:07:09 +0000 Manifest this update: Wed 20 May 2026 18:07:09 +0000 Manifest next update: Wed 27 May 2026 18:07:09 +0000 Files and hashes: 1: QOvCWgi6XnVBzhQtK8KK5Pgoiks.crl (hash: ylxZtpWVU80WzVFw174ARMQ8spTO68zDpwMts4cd0rQ=) 2: FD9E07EAAB1111EF89574855C4F9AE02.roa (hash: 3bEt+BEL0/++S5Hn6XyvCpw2hPaq5SjA7QhpJ7kxSWM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165C64/425B423CFFA311E98735A685C4F9AE02/QOvCWgi6XnVBzhQtK8KK5Pgoiks.crl rsync://rpki.apnic.net/member_repository/A9165C64/425B423CFFA311E98735A685C4F9AE02/QOvCWgi6XnVBzhQtK8KK5Pgoiks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOvCWgi6XnVBzhQtK8KK5Pgoiks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 18:07:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3388 (0xd3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165C64, serialNumber=40EBC25A08BA5E7541CE142D2BC28AE4F8288A4B Validity Not Before: May 20 18:07:09 2026 GMT Not After : May 27 18:07:09 2026 GMT Subject: CN=6a0df84d-f3a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8a:0c:eb:15:98:5a:e2:fb:f6:fd:78:ff:94: c4:da:25:0f:bf:87:5a:89:02:73:96:24:06:6a:a1: 06:20:87:4b:1a:63:5d:1e:a6:2e:7f:ba:cc:2d:95: 6c:db:3d:f3:52:36:2a:19:06:4d:7f:43:0b:f7:90: 01:70:19:2c:ca:28:f7:85:b2:b5:25:ea:04:ae:dc: 07:71:22:8d:ec:33:53:42:2b:bf:ee:01:ad:1f:44: 29:fa:8b:02:ac:9b:f9:d6:21:d6:29:8a:e0:da:01: 3b:c8:98:07:5e:75:a0:7d:91:f3:48:7f:e3:7c:bb: c7:8f:35:09:99:de:7b:63:e5:dc:96:7b:66:b1:81: 07:0b:bf:0e:a3:f8:80:8b:78:29:e3:f5:a9:1d:2b: 24:0f:57:1e:e0:c6:98:3b:94:b8:fd:76:24:cc:30: 8c:f0:4f:33:8d:aa:d5:c6:47:cc:0a:2b:d0:81:41: 5c:c0:1b:df:c9:69:bf:8f:31:b6:27:1c:a4:5b:a1: d3:a2:da:af:bc:c4:43:d8:a3:f5:ba:cf:f7:a6:de: 04:6b:0f:b6:7a:b2:87:01:6a:2a:36:1f:53:66:b6: ca:3b:8f:f8:8e:46:a3:f6:78:c2:5c:02:a4:fb:c2: 38:82:57:d9:c3:3d:b1:59:ef:f3:8d:03:e2:7c:cc: 4b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:E6:BD:BA:E3:8A:2E:10:D0:3B:3B:64:FD:DA:CD:E4:E8:B4:BF:CE X509v3 Authority Key Identifier: keyid:40:EB:C2:5A:08:BA:5E:75:41:CE:14:2D:2B:C2:8A:E4:F8:28:8A:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165C64/425B423CFFA311E98735A685C4F9AE02/QOvCWgi6XnVBzhQtK8KK5Pgoiks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOvCWgi6XnVBzhQtK8KK5Pgoiks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165C64/425B423CFFA311E98735A685C4F9AE02/QOvCWgi6XnVBzhQtK8KK5Pgoiks.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:17:45:b2:fd:ef:aa:1b:5b:03:67:e8:fe:f0:7d:0c:4a:56: 0e:e6:1d:0b:ad:5e:85:7d:08:b3:71:c2:20:0c:cc:b9:8d:8d: a1:06:aa:0c:91:4e:34:7c:47:74:ce:a7:54:6f:1b:a7:1c:cc: 6a:1e:7f:c2:da:23:80:f5:49:fe:7e:05:ff:dd:98:ee:a7:61: 4a:8b:06:a7:83:8a:f5:6e:35:f8:7e:34:99:b6:5f:eb:5e:11: 2c:87:07:4b:9f:e5:d5:72:af:5b:27:b6:c4:37:81:af:72:16: aa:ce:d4:9a:da:61:be:97:80:cc:2a:90:74:99:a6:48:5f:85: 9f:9c:42:b5:f2:51:92:8e:fb:5e:74:f7:65:90:eb:ef:6e:ac: ef:b4:44:b6:45:60:a8:e4:bd:c2:c5:cc:a5:71:54:d3:ac:3c: 12:a8:27:7f:ee:8d:e2:0a:0f:9b:14:3b:c3:24:7f:a7:3e:41: 32:fe:3a:fb:70:c2:c3:2d:8a:35:2f:26:28:94:03:7e:cd:76: 6d:f8:d2:62:4d:74:bd:fd:51:a8:02:4d:07:b9:c4:64:ee:8c: ca:9a:54:0d:40:2a:4d:73:aa:fc:fb:fb:42:6f:77:b5:0f:33: 3e:75:f0:4d:6c:e2:2d:65:9f:f1:f6:b3:b3:61:4a:0a:bb:c2: a4:a2:49:bc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDTwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVDNjQxMTAvBgNVBAUTKDQwRUJDMjVBMDhCQTVFNzU0MUNFMTQyRDJCQzI4QUU0 RjgyODhBNEIwHhcNMjYwNTIwMTgwNzA5WhcNMjYwNTI3MTgwNzA5WjAYMRYwFAYD VQQDEw02YTBkZjg0ZC1mM2E5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq4oM6xWYWuL79v14/5TE2iUPv4daiQJzliQGaqEGIIdLGmNdHqYuf7rMLZVs 2z3zUjYqGQZNf0ML95ABcBksyij3hbK1JeoErtwHcSKN7DNTQiu/7gGtH0Qp+osC rJv51iHWKYrg2gE7yJgHXnWgfZHzSH/jfLvHjzUJmd57Y+XclntmsYEHC78Oo/iA i3gp4/WpHSskD1ce4MaYO5S4/XYkzDCM8E8zjarVxkfMCivQgUFcwBvfyWm/jzG2 JxykW6HTotqvvMRD2KP1us/3pt4Eaw+2erKHAWoqNh9TZrbKO4/4jkaj9njCXAKk +8I4glfZwz2xWe/zjQPifMxLJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI3mvbrj ii4Q0Ds7ZP3azeTotL/OMB8GA1UdIwQYMBaAFEDrwloIul51Qc4ULSvCiuT4KIpL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUM2NC80MjVCNDIzQ0ZG QTMxMUU5ODczNUE2ODVDNEY5QUUwMi9RT3ZDV2dpNlhuVkJ6aFF0SzhLSzVQZ29p a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FPdkNXZ2k2WG5WQnpoUXRLOEtLNVBnb2lrcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NUM2NC80MjVCNDIzQ0ZGQTMxMUU5ODczNUE2ODVDNEY5QUUwMi9RT3ZDV2dpNlhu VkJ6aFF0SzhLSzVQZ29pa3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeRdFsv3vqhtbA2fo/vB9DEpWDuYdC61ehX0Is3HCIAzMuY2NoQaqDJFONHxH dM6nVG8bpxzMah5/wtojgPVJ/n4F/92Y7qdhSosGp4OK9W41+H40mbZf614RLIcH S5/l1XKvWye2xDeBr3IWqs7UmtphvpeAzCqQdJmmSF+Fn5xCtfJRko77XnT3ZZDr 726s77REtkVgqOS9wsXMpXFU06w8Eqgnf+6N4goPmxQ7wyR/pz5BMv46+3DCwy2K NS8mKJQDfs12bfjSYk10vf1RqAJNB7nEZO6MyppUDUAqTXOq/Pv7Qm93tQ8zPnXw TWziLWWf8fazs2FKCrvCpKJJvA== -----END CERTIFICATE-----Generated at Thu May 21 10:20:48 2026 by rpki-client