$ rpki-client -vvf rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.mft File: Q2NMcBuh8e_Oj1aqatHbKUWh258.mft (raw, json) Hash identifier: ZBMM69mYmr5Q43ZzdQI98bwaqTAKJLyEyH3WCCJzjBA= Subject key identifier: 8A:09:19:F8:0F:10:B2:9C:E1:E4:6A:F6:0A:9F:DC:D5:DF:4E:59:A5 Authority key identifier: 43:63:4C:70:1B:A1:F1:EF:CE:8F:56:AA:6A:D1:DB:29:45:A1:DB:9F Certificate issuer: /CN=A918549C/serialNumber=43634C701BA1F1EFCE8F56AA6AD1DB2945A1DB9F Certificate serial: 0165 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q2NMcBuh8e_Oj1aqatHbKUWh258.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.mft Manifest number: 015A Signing time: Thu 21 May 2026 05:08:33 +0000 Manifest this update: Thu 21 May 2026 05:08:32 +0000 Manifest next update: Thu 28 May 2026 05:08:32 +0000 Files and hashes: 1: Q2NMcBuh8e_Oj1aqatHbKUWh258.crl (hash: Hmjwgp/zVLL0A0WUnYbev02wBteOu63i/jYdC4/F6fE=) 2: ABA45B1A740611F0B304387CC4F9AE02.roa (hash: NoRAYMKDz7ruenjU4EI/k6TTzNlrpDAvnAEzcechXd0=) 3: 9C6F77784A3211EFBDBCEB2FC4F9AE02.roa (hash: POI2gtWNO02fmkeuPIBgEnMpIQB9HpbIZTb9ltFjGKA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.crl rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q2NMcBuh8e_Oj1aqatHbKUWh258.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 05:08:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 357 (0x165) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918549C, serialNumber=43634C701BA1F1EFCE8F56AA6AD1DB2945A1DB9F Validity Not Before: May 21 05:08:32 2026 GMT Not After : May 28 05:08:32 2026 GMT Subject: CN=6a0e9351-698c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:04:6e:c2:10:c1:11:1a:ab:57:b1:19:42:60: 1c:c1:6f:58:3b:8b:bf:2f:0e:14:46:49:6b:2c:a8: bf:e6:a5:f4:0f:22:e5:4a:97:40:09:b4:73:38:e4: 3a:42:f4:b3:da:a8:51:40:bf:6f:e0:c6:ea:20:0a: 7c:2b:9f:20:c5:43:e2:03:b4:07:c2:2a:9c:74:ab: 7c:09:c8:ef:53:92:30:74:d4:db:f6:b8:47:2a:2d: df:d6:7a:5d:2c:d5:c3:96:65:17:90:81:4f:9c:0c: 99:75:05:81:7e:a1:fa:2a:06:fa:ba:47:a7:a6:d6: 46:1c:de:f7:fb:5a:13:c0:ba:37:23:de:51:4d:d6: 39:59:78:fa:0b:4c:10:fc:17:54:99:95:d8:f0:44: a3:c3:f2:10:c8:d5:c1:47:6b:ef:9e:01:9d:b3:c0: b6:a2:bc:2b:a4:37:2f:06:41:31:eb:95:3b:44:ca: 33:1f:fe:77:1f:8f:14:79:be:af:7c:8e:19:96:46: ca:83:24:56:e0:f7:93:aa:f9:33:1e:8a:17:f9:c4: 1b:75:be:ad:a8:7f:32:ae:03:84:30:80:0c:89:fe: fc:30:11:9c:6f:8f:f4:6d:b7:78:85:90:50:fd:c3: 1d:d4:57:6a:fb:8e:2c:a9:bd:f1:ad:f5:59:0b:14: 37:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:09:19:F8:0F:10:B2:9C:E1:E4:6A:F6:0A:9F:DC:D5:DF:4E:59:A5 X509v3 Authority Key Identifier: keyid:43:63:4C:70:1B:A1:F1:EF:CE:8F:56:AA:6A:D1:DB:29:45:A1:DB:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q2NMcBuh8e_Oj1aqatHbKUWh258.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:6e:9c:f3:7a:b5:97:6f:ea:6e:ae:f2:9e:a4:9b:9b:ba:d2: aa:5f:f3:17:c3:c2:a9:c0:f6:72:48:54:65:d0:f5:62:3f:eb: f1:68:53:a6:35:3d:cc:d5:02:53:0c:2d:9b:a9:8f:3d:08:b2: a7:cb:8d:65:6e:d3:4b:3e:af:e1:1f:56:5a:a7:7b:ac:9d:78: 4b:0e:d9:79:dd:bf:fd:8b:a7:b7:58:23:e5:95:c4:5d:55:2e: 12:4a:1d:a6:86:16:87:5e:3e:dc:8f:16:82:70:a4:fe:8c:4e: 2c:0f:3f:b5:72:a7:56:a9:55:59:2f:d6:24:0b:24:fe:18:12: ab:4d:1f:bf:c3:62:27:9e:54:5a:7d:54:72:a2:0d:cb:a7:9b: 00:a6:35:93:eb:5e:f3:c4:fe:41:2e:d2:d6:6e:45:55:39:a7: d5:b4:80:c3:1c:30:09:e6:ca:96:d9:2e:7c:8c:ec:3c:9b:51: 4f:1c:8e:58:9b:17:8e:df:c1:55:44:d6:31:15:da:b2:09:52: c7:2a:13:e3:8f:50:8b:0f:ee:ef:24:d5:fb:84:12:6a:5f:d4: bf:3c:cd:e5:99:6b:ad:17:d4:f6:56:e5:a2:c3:6d:de:44:de: 1a:8e:8e:52:99:e0:96:e8:da:a4:18:7f:08:f1:71:ec:67:d9: 4f:0c:8f:da -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU0OUMxMTAvBgNVBAUTKDQzNjM0QzcwMUJBMUYxRUZDRThGNTZBQTZBRDFEQjI5 NDVBMURCOUYwHhcNMjYwNTIxMDUwODMyWhcNMjYwNTI4MDUwODMyWjAYMRYwFAYD VQQDEw02YTBlOTM1MS02OThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArwRuwhDBERqrV7EZQmAcwW9YO4u/Lw4URklrLKi/5qX0DyLlSpdACbRzOOQ6 QvSz2qhRQL9v4MbqIAp8K58gxUPiA7QHwiqcdKt8CcjvU5IwdNTb9rhHKi3f1npd LNXDlmUXkIFPnAyZdQWBfqH6Kgb6ukenptZGHN73+1oTwLo3I95RTdY5WXj6C0wQ /BdUmZXY8ESjw/IQyNXBR2vvngGds8C2orwrpDcvBkEx65U7RMozH/53H48Ueb6v fI4ZlkbKgyRW4PeTqvkzHooX+cQbdb6tqH8yrgOEMIAMif78MBGcb4/0bbd4hZBQ /cMd1Fdq+44sqb3xrfVZCxQ3mQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIoJGfgP ELKc4eRq9gqf3NXfTlmlMB8GA1UdIwQYMBaAFENjTHAbofHvzo9WqmrR2ylFoduf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTQ5Qy9ERTg3MThDNDRB MzExMUVGQjdCQkQ1MUNDNEY5QUUwMi9RMk5NY0J1aDhlX09qMWFxYXRIYktVV2gy NTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1EyTk1jQnVoOGVfT2oxYXFhdEhiS1VXaDI1OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTQ5Qy9ERTg3MThDNDRBMzExMUVGQjdCQkQ1MUNDNEY5QUUwMi9RMk5NY0J1aDhl X09qMWFxYXRIYktVV2gyNTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAY26c83q1l2/qbq7ynqSbm7rSql/zF8PCqcD2ckhUZdD1Yj/r8WhTpjU9zNUC Uwwtm6mPPQiyp8uNZW7TSz6v4R9WWqd7rJ14Sw7Zed2//Yunt1gj5ZXEXVUuEkod poYWh14+3I8WgnCk/oxOLA8/tXKnVqlVWS/WJAsk/hgSq00fv8NiJ55UWn1UcqIN y6ebAKY1k+te88T+QS7S1m5FVTmn1bSAwxwwCebKltkufIzsPJtRTxyOWJsXjt/B VUTWMRXasglSxyoT449Qiw/u7yTV+4QSal/UvzzN5ZlrrRfU9lblosNt3kTeGo6O UpnglujapBh/CPFx7GfZTwyP2g== -----END CERTIFICATE-----Generated at Thu May 21 13:55:47 2026 by rpki-client