$ rpki-client -vvf rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.mft File: 1qn8yzagJxy8XxErtyBaV7n0hPc.mft (raw, json) Hash identifier: VEdDXLYBcQEJzibEES7fJ88VP/dM6vomZQh1CLqGN88= Subject key identifier: 3A:E0:CE:A6:F8:38:6E:99:8D:A4:3B:ED:4A:FF:72:58:14:59:4A:BD Authority key identifier: D6:A9:FC:CB:36:A0:27:1C:BC:5F:11:2B:B7:20:5A:57:B9:F4:84:F7 Certificate issuer: /CN=A9168126/serialNumber=D6A9FCCB36A0271CBC5F112BB7205A57B9F484F7 Certificate serial: 04C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qn8yzagJxy8XxErtyBaV7n0hPc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.mft Manifest number: 04AE Signing time: Thu 21 May 2026 00:02:50 +0000 Manifest this update: Thu 21 May 2026 00:02:49 +0000 Manifest next update: Thu 28 May 2026 00:02:49 +0000 Files and hashes: 1: 1qn8yzagJxy8XxErtyBaV7n0hPc.crl (hash: fQiiJaSVbU5TU72WRdwPfM6A6LR3VdiMTVHEsERXjac=) 2: 819150603F3411EF85BAC749C4F9AE02.roa (hash: fmRvDrlAVUP4IPzjCxKSFO/W9oPKrGtnnlxwGGwestk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.crl rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qn8yzagJxy8XxErtyBaV7n0hPc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 00:02:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1219 (0x4c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168126, serialNumber=D6A9FCCB36A0271CBC5F112BB7205A57B9F484F7 Validity Not Before: May 21 00:02:49 2026 GMT Not After : May 28 00:02:49 2026 GMT Subject: CN=6a0e4ba9-b50e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:95:f6:23:16:05:1f:17:b6:63:cd:1a:99:d3: b1:c2:4a:f8:4f:7e:4a:46:5f:bc:e6:d0:51:4a:02: ba:4e:24:41:2a:6d:32:91:b3:69:19:22:98:f1:1a: 75:79:80:08:a0:91:8d:54:de:bd:44:df:e6:b9:47: 12:d8:24:d6:7f:73:f7:e9:83:bc:1d:ae:d7:ca:6a: b5:cc:6e:2e:80:69:f1:dd:fb:f3:c5:d1:ba:1a:e0: 5e:07:69:50:72:d2:24:c2:3e:71:da:6f:45:ee:b1: f1:da:1b:79:ed:98:ff:f1:59:40:c1:fb:d0:a7:c1: 3d:c2:ef:fb:b7:a5:64:54:12:70:11:ec:57:41:1f: 5f:cd:50:48:34:d9:1f:d7:7e:34:5a:41:29:28:78: 62:dd:60:7e:fe:7a:44:b6:f8:b3:e3:f4:3b:af:41: ab:9e:91:d1:52:24:58:62:a6:47:3a:35:78:1b:b2: 60:5e:6d:eb:44:41:aa:c7:8e:08:b7:d5:27:24:80: a9:f8:8e:62:43:2b:e8:27:08:bb:49:0c:e9:e2:96: 87:b6:9a:8a:25:31:d0:d7:ea:fc:e4:65:cf:f4:80: 11:5b:4f:12:d3:e3:0d:1c:27:60:b4:58:8b:37:72: 03:cb:74:82:31:74:6f:c0:5b:f7:ae:71:b3:64:7a: ca:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:E0:CE:A6:F8:38:6E:99:8D:A4:3B:ED:4A:FF:72:58:14:59:4A:BD X509v3 Authority Key Identifier: keyid:D6:A9:FC:CB:36:A0:27:1C:BC:5F:11:2B:B7:20:5A:57:B9:F4:84:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qn8yzagJxy8XxErtyBaV7n0hPc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:16:f2:e9:80:d1:94:11:55:3d:92:5b:69:d0:fd:52:3d:39: a6:46:d0:35:0a:b1:94:3a:8d:de:50:8d:cd:dd:06:91:57:5a: 5c:2c:58:c0:c4:d0:3e:4f:3d:2d:54:db:5e:95:21:fc:07:bb: 98:9e:b6:10:ad:8c:d5:27:e9:61:28:ba:f9:f5:09:2c:ec:76: e0:f9:a0:fe:e6:11:79:a4:2a:72:10:5d:cc:42:a6:8d:57:a9: e4:44:4b:c9:aa:cc:c4:45:19:97:2b:bc:81:a2:bf:69:95:41: 28:05:01:66:07:51:bd:a8:60:02:f4:0e:6b:15:5d:3d:09:1f: c9:96:cb:11:54:75:35:a2:c3:9f:b6:7f:03:96:f8:35:1b:aa: 06:5d:32:3e:c6:5f:91:3e:70:01:44:11:49:9e:4a:90:9a:63: fe:bc:de:6a:0e:a9:c1:56:48:0a:25:b7:15:e4:29:07:83:b6: b1:55:4b:ce:fc:de:ba:e7:a5:66:96:8c:22:75:51:4b:84:b0: df:20:c3:48:10:58:5f:a9:ae:10:a8:8c:62:49:fd:fc:df:35: a1:af:73:ad:ce:ff:73:07:72:92:38:bb:00:e5:93:ea:56:9b: ab:77:4f:8f:68:11:b0:c3:f3:86:da:b9:cd:8a:d5:b7:94:fa: 38:68:ac:da -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgxMjYxMTAvBgNVBAUTKEQ2QTlGQ0NCMzZBMDI3MUNCQzVGMTEyQkI3MjA1QTU3 QjlGNDg0RjcwHhcNMjYwNTIxMDAwMjQ5WhcNMjYwNTI4MDAwMjQ5WjAYMRYwFAYD VQQDEw02YTBlNGJhOS1iNTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAspX2IxYFHxe2Y80amdOxwkr4T35KRl+85tBRSgK6TiRBKm0ykbNpGSKY8Rp1 eYAIoJGNVN69RN/muUcS2CTWf3P36YO8Ha7Xymq1zG4ugGnx3fvzxdG6GuBeB2lQ ctIkwj5x2m9F7rHx2ht57Zj/8VlAwfvQp8E9wu/7t6VkVBJwEexXQR9fzVBINNkf 1340WkEpKHhi3WB+/npEtviz4/Q7r0GrnpHRUiRYYqZHOjV4G7JgXm3rREGqx44I t9UnJICp+I5iQyvoJwi7SQzp4paHtpqKJTHQ1+r85GXP9IARW08S0+MNHCdgtFiL N3IDy3SCMXRvwFv3rnGzZHrKDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDrgzqb4 OG6ZjaQ77Ur/clgUWUq9MB8GA1UdIwQYMBaAFNap/Ms2oCccvF8RK7cgWle59IT3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODEyNi8xNTdGNjZFQTgw MDYxMUVDQjAzQTBFNjFDNEY5QUUwMi8xcW44eXphZ0p4eThYeEVydHlCYVY3bjBo UGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFxbjh5emFnSnh5OFh4RXJ0eUJhVjduMGhQYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODEyNi8xNTdGNjZFQTgwMDYxMUVDQjAzQTBFNjFDNEY5QUUwMi8xcW44eXphZ0p4 eThYeEVydHlCYVY3bjBoUGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqhby6YDRlBFVPZJbadD9Uj05pkbQNQqxlDqN3lCNzd0GkVdaXCxYwMTQPk89 LVTbXpUh/Ae7mJ62EK2M1SfpYSi6+fUJLOx24Pmg/uYReaQqchBdzEKmjVep5ERL yarMxEUZlyu8gaK/aZVBKAUBZgdRvahgAvQOaxVdPQkfyZbLEVR1NaLDn7Z/A5b4 NRuqBl0yPsZfkT5wAUQRSZ5KkJpj/rzeag6pwVZICiW3FeQpB4O2sVVLzvzeuuel ZpaMInVRS4Sw3yDDSBBYX6muEKiMYkn9/N81oa9zrc7/cwdykji7AOWT6labq3dP j2gRsMPzhtq5zYrVt5T6OGis2g== -----END CERTIFICATE-----Generated at Thu May 21 10:39:57 2026 by rpki-client