$ rpki-client -vvf rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft File: qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft (raw, json) Hash identifier: 6LgeCZxiNwNfgiNmZzypUr82XKt8q/K/Aa1VPYInl8U= Subject key identifier: E4:A3:57:B2:CB:51:9C:09:FB:48:3B:BB:79:78:4A:7C:76:0B:7B:B0 Authority key identifier: A8:56:8F:52:79:3C:C3:48:57:85:0C:4F:2E:D3:8A:E0:B1:89:70:F8 Certificate issuer: /CN=A9184324/serialNumber=A8568F52793CC34857850C4F2ED38AE0B18970F8 Certificate serial: 0159 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qFaPUnk8w0hXhQxPLtOK4LGJcPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft Manifest number: 0144 Signing time: Mon 01 Jun 2026 06:07:50 +0000 Manifest this update: Mon 01 Jun 2026 06:07:49 +0000 Manifest next update: Mon 08 Jun 2026 06:07:49 +0000 Files and hashes: 1: qFaPUnk8w0hXhQxPLtOK4LGJcPg.crl (hash: PAJN7RVs/u018uHEcqzPpu5CNqTjx6ri1rWnxDoaVSg=) 2: 48C56FF2B97A11F082553162C4F9AE02.roa (hash: OtWdgE0NfWAtdp3sq2GPul7fJB1+qypIA/v5t4925Qw=) 3: 49AD69BAB97A11F082553162C4F9AE02.roa (hash: u+AOQs7swlbtyTKzbGqH0JVVjQoXfbRTN0aGMPHqYwM=) 4: 5C8F63FE7C4911EF81434A2DC4F9AE02.roa (hash: FTfGtoGrUVwrnxaveaM8/TkkP8CeSjEWf8+UAR8ONdk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.crl rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qFaPUnk8w0hXhQxPLtOK4LGJcPg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 06:07:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 345 (0x159) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184324, serialNumber=A8568F52793CC34857850C4F2ED38AE0B18970F8 Validity Not Before: Jun 1 06:07:49 2026 GMT Not After : Jun 8 06:07:49 2026 GMT Subject: CN=6a1d21b6-ed18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9b:a0:df:d3:cf:2b:b6:af:6b:a7:90:a5:03: 8a:3e:45:10:e7:2a:7c:c8:d8:83:ba:a1:29:86:3d: 75:a7:09:78:2f:7e:ed:76:6b:aa:52:71:33:31:d6: 73:4d:fd:bb:58:de:48:a0:83:77:a8:ad:cd:53:08: bd:43:70:46:c4:68:79:4c:f9:83:7b:52:bc:5c:6f: c4:db:5a:f1:5a:44:d1:55:a5:df:af:2f:fa:f0:1c: e0:7f:99:7b:cb:78:f2:4c:fd:b5:ff:36:7b:a9:52: c6:3f:8d:8e:3c:09:91:2b:46:9c:fb:76:43:dc:f4: 57:6d:d0:43:91:12:73:97:aa:25:23:87:d4:22:27: de:f9:92:a6:43:64:50:45:d4:3b:35:e3:e8:c9:69: a7:40:c6:09:44:07:15:84:7e:f1:ca:ef:e4:f7:9e: 3f:97:67:86:90:43:0f:44:f2:b8:87:a4:d2:e7:62: bd:37:14:a4:bb:60:e2:db:ae:b7:e7:82:51:d2:b4: 9a:f1:65:dd:7a:d9:6d:65:df:c1:76:73:4f:6d:66: 3e:ba:67:39:4e:50:50:70:2c:9e:70:c6:19:40:e3: 1e:c9:6a:d8:84:a0:63:f7:c7:e1:01:5a:49:1c:23: b5:9b:0a:68:ba:60:42:c2:e9:63:14:73:ff:52:66: fb:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:A3:57:B2:CB:51:9C:09:FB:48:3B:BB:79:78:4A:7C:76:0B:7B:B0 X509v3 Authority Key Identifier: keyid:A8:56:8F:52:79:3C:C3:48:57:85:0C:4F:2E:D3:8A:E0:B1:89:70:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qFaPUnk8w0hXhQxPLtOK4LGJcPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:bb:dd:24:00:cc:41:39:15:7b:a8:e3:ca:c5:46:c0:69:de: c6:b5:15:a8:7a:7e:f1:f5:d0:bd:0a:d3:17:83:2e:d3:1c:04: af:fb:af:20:4d:fd:61:6b:5b:1a:42:8b:ee:4e:96:8b:30:8b: f4:3b:f5:c1:7e:75:ac:e8:22:00:6c:94:6f:c3:fd:74:6d:b8: 88:15:4c:4f:41:9e:d8:de:93:25:50:5a:a3:d2:5a:4b:80:ff: 3c:1f:ca:24:18:61:14:d0:96:36:7f:ff:eb:8f:6d:33:c9:21: 16:37:16:70:8c:60:53:f6:9e:23:c8:ad:f7:a1:13:85:b9:a6: e5:e7:9e:e4:0c:51:65:a6:8f:32:8d:69:d6:11:a1:b5:2c:41: c0:14:70:80:b4:50:ce:a6:e8:a7:d0:42:c2:67:45:9d:c7:02: 17:80:a4:c0:72:7d:9e:4c:3a:13:50:13:9a:d5:f0:27:b0:91: ef:2b:aa:7f:e5:f6:21:e3:69:1e:c1:df:fa:a7:34:0c:78:34: fe:fc:29:db:15:6b:93:ab:63:6c:6a:97:ab:b0:a7:75:b9:ff: 87:72:5f:24:35:e9:b3:18:47:e5:4d:b8:ab:0e:1b:3d:12:6d: 70:ce:64:81:42:43:05:cf:ee:da:9e:6d:84:ae:ec:86:3c:89: 33:9d:f5:b6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQzMjQxMTAvBgNVBAUTKEE4NTY4RjUyNzkzQ0MzNDg1Nzg1MEM0RjJFRDM4QUUw QjE4OTcwRjgwHhcNMjYwNjAxMDYwNzQ5WhcNMjYwNjA4MDYwNzQ5WjAYMRYwFAYD VQQDEw02YTFkMjFiNi1lZDE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxZug39PPK7ava6eQpQOKPkUQ5yp8yNiDuqEphj11pwl4L37tdmuqUnEzMdZz Tf27WN5IoIN3qK3NUwi9Q3BGxGh5TPmDe1K8XG/E21rxWkTRVaXfry/68Bzgf5l7 y3jyTP21/zZ7qVLGP42OPAmRK0ac+3ZD3PRXbdBDkRJzl6olI4fUIife+ZKmQ2RQ RdQ7NePoyWmnQMYJRAcVhH7xyu/k954/l2eGkEMPRPK4h6TS52K9NxSku2Di2663 54JR0rSa8WXdetltZd/BdnNPbWY+umc5TlBQcCyecMYZQOMeyWrYhKBj98fhAVpJ HCO1mwpoumBCwuljFHP/Umb7zQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOSjV7LL UZwJ+0g7u3l4Snx2C3uwMB8GA1UdIwQYMBaAFKhWj1J5PMNIV4UMTy7TiuCxiXD4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDMyNC9FQUE5Q0NENDdC MUMxMUVGQUMxMDk0MTZDNEY5QUUwMi9xRmFQVW5rOHcwaFhoUXhQTHRPSzRMR0pj UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3FGYVBVbms4dzBoWGhReFBMdE9LNExHSmNQZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDMyNC9FQUE5Q0NENDdCMUMxMUVGQUMxMDk0MTZDNEY5QUUwMi9xRmFQVW5rOHcw aFhoUXhQTHRPSzRMR0pjUGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABbvdJADMQTkVe6jjysVGwGnexrUVqHp+8fXQvQrTF4Mu0xwEr/uvIE39YWtb GkKL7k6WizCL9Dv1wX51rOgiAGyUb8P9dG24iBVMT0Ge2N6TJVBao9JaS4D/PB/K JBhhFNCWNn//649tM8khFjcWcIxgU/aeI8it96EThbmm5eee5AxRZaaPMo1p1hGh tSxBwBRwgLRQzqbop9BCwmdFnccCF4CkwHJ9nkw6E1ATmtXwJ7CR7yuqf+X2IeNp HsHf+qc0DHg0/vwp2xVrk6tjbGqXq7Cndbn/h3JfJDXpsxhH5U24qw4bPRJtcM5k gUJDBc/u2p5thK7shjyJM531tg== -----END CERTIFICATE-----Generated at Tue Jun 2 21:20:04 2026 by rpki-client