$ rpki-client -vvf rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft File: Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft (raw, json) Hash identifier: kvTKpQo+5zUrV4jPK4DgBD83WhyHpwvWcSo+GjOMqAo= Subject key identifier: 32:4F:B7:66:D9:02:C3:D3:D4:37:73:67:80:2B:2D:7D:81:CC:13:E7 Authority key identifier: 43:F7:42:3F:93:D6:BA:09:69:40:59:FB:23:DE:F8:52:8D:26:49:9D Certificate issuer: /CN=A9186D9F/serialNumber=43F7423F93D6BA09694059FB23DEF8528D26499D Certificate serial: 017E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q_dCP5PWuglpQFn7I974Uo0mSZ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft Manifest number: 0171 Signing time: Mon 01 Jun 2026 05:28:55 +0000 Manifest this update: Mon 01 Jun 2026 05:28:54 +0000 Manifest next update: Mon 08 Jun 2026 05:28:54 +0000 Files and hashes: 1: Q_dCP5PWuglpQFn7I974Uo0mSZ0.crl (hash: 1ftupQgdgf4FUX301fSIQY5CQEUOYyfW4OrYHq/7Ju8=) 2: 17EA0C7A38DF11EF8EEDB25EC4F9AE02.roa (hash: qO2Q3Q5zR4BZKw3pBS7JR4NiTCN8t4Ujvg2GOjsbNkA=) 3: A63A2DFA2F5411EF9A12027FC4F9AE02.roa (hash: vZ2S+w3GcPa+h6MU9zMiF5RlRO5/+gC76nWMxy6HcwM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.crl rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q_dCP5PWuglpQFn7I974Uo0mSZ0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 05:28:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 382 (0x17e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186D9F, serialNumber=43F7423F93D6BA09694059FB23DEF8528D26499D Validity Not Before: Jun 1 05:28:54 2026 GMT Not After : Jun 8 05:28:54 2026 GMT Subject: CN=6a1d1897-b48b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:93:69:99:6d:71:4f:15:ce:94:c5:2b:ac:e9: 27:63:3b:a8:76:e8:ab:92:af:b0:68:cf:d9:f5:2d: 93:57:da:c2:b8:ec:87:13:8f:86:e5:3d:61:a4:fd: cd:6e:eb:b0:60:f0:8e:99:3a:92:19:eb:7c:71:7e: 8a:f0:ec:e3:01:1f:11:28:81:6f:08:06:00:08:b6: 7a:b9:90:1d:c5:cb:43:8f:b8:0c:21:55:86:a2:4b: 6c:7e:53:c6:8e:e8:a8:4b:9c:21:2a:5c:97:c5:f5: 60:a1:58:00:85:67:ca:60:ca:f9:57:85:02:53:ec: e6:75:18:7a:10:8f:47:d5:8e:6f:9c:34:6e:16:3e: 9d:e1:eb:0a:f4:0c:1b:8b:56:89:c7:34:9c:31:64: 05:cf:00:02:58:bb:00:63:22:e5:f7:a6:a9:19:d2: 7b:ab:a1:02:65:49:f2:ea:c4:0d:21:85:01:9f:81: ae:a7:42:fc:f5:17:95:90:83:04:f8:92:38:7a:2b: 0f:8c:d1:1f:d2:64:6c:72:2e:5b:2f:73:12:66:86: 2f:84:2e:5a:f7:6a:4f:d0:c2:e7:9f:52:71:a3:af: 62:14:0f:d3:bb:dc:af:7c:6c:87:fa:12:4b:ce:53: 45:50:49:0d:45:86:00:0c:0c:a7:c6:45:4a:3e:8b: cb:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:4F:B7:66:D9:02:C3:D3:D4:37:73:67:80:2B:2D:7D:81:CC:13:E7 X509v3 Authority Key Identifier: keyid:43:F7:42:3F:93:D6:BA:09:69:40:59:FB:23:DE:F8:52:8D:26:49:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q_dCP5PWuglpQFn7I974Uo0mSZ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:34:46:5f:1e:31:db:0b:e6:2c:ca:99:08:ac:1e:fe:8b:6e: f3:48:d9:e4:4d:e9:19:22:82:9d:ac:22:08:35:ab:82:b1:b0: 0d:23:d2:7e:1e:32:13:49:d5:24:53:0e:99:c4:74:91:8d:be: 02:13:f2:02:28:35:cd:28:89:45:c1:d3:a4:2e:b7:a6:dd:d3: af:48:cc:2c:72:20:88:6a:b8:18:13:08:b7:e1:19:b2:53:87: c1:e0:ea:00:b1:95:bd:28:ed:b5:1e:a5:d1:3c:e9:f2:63:63: e6:dc:29:31:da:09:45:d8:d5:6d:d6:5a:a3:1f:44:fc:10:a6: 84:50:c3:f6:16:36:ff:0a:ae:fc:b9:4c:fb:0c:c2:61:01:31: 28:92:36:b7:9e:29:a3:09:5d:70:10:b7:4e:38:31:a8:52:96: 26:e1:67:59:65:16:fd:32:b8:30:3d:22:13:69:4e:a5:0f:d6: 53:d9:2b:e1:0e:32:52:d5:5d:41:c6:a0:ef:6c:49:06:fc:f8: fc:db:2a:90:67:ff:fa:62:56:8e:26:c1:cd:65:fd:e3:13:ba: f9:1e:a8:88:e6:8d:63:bf:0a:00:05:db:f3:66:fd:d6:61:9e: cd:ee:76:e9:4b:d4:40:25:07:10:e7:00:d9:1a:81:01:8f:8a: ba:25:93:6a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZEOUYxMTAvBgNVBAUTKDQzRjc0MjNGOTNENkJBMDk2OTQwNTlGQjIzREVGODUy OEQyNjQ5OUQwHhcNMjYwNjAxMDUyODU0WhcNMjYwNjA4MDUyODU0WjAYMRYwFAYD VQQDEw02YTFkMTg5Ny1iNDhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6pNpmW1xTxXOlMUrrOknYzuoduirkq+waM/Z9S2TV9rCuOyHE4+G5T1hpP3N buuwYPCOmTqSGet8cX6K8OzjAR8RKIFvCAYACLZ6uZAdxctDj7gMIVWGoktsflPG juioS5whKlyXxfVgoVgAhWfKYMr5V4UCU+zmdRh6EI9H1Y5vnDRuFj6d4esK9Awb i1aJxzScMWQFzwACWLsAYyLl96apGdJ7q6ECZUny6sQNIYUBn4Gup0L89ReVkIME +JI4eisPjNEf0mRsci5bL3MSZoYvhC5a92pP0MLnn1Jxo69iFA/Tu9yvfGyH+hJL zlNFUEkNRYYADAynxkVKPovLPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDJPt2bZ AsPT1DdzZ4ArLX2BzBPnMB8GA1UdIwQYMBaAFEP3Qj+T1roJaUBZ+yPe+FKNJkmd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkQ5Ri9BOTM2RTQ0MDJF MDQxMUVGODZGMjlENzlDNEY5QUUwMi9RX2RDUDVQV3VnbHBRRm43STk3NFVvMG1T WjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FfZENQNVBXdWdscFFGbjdJOTc0VW8wbVNaMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkQ5Ri9BOTM2RTQ0MDJFMDQxMUVGODZGMjlENzlDNEY5QUUwMi9RX2RDUDVQV3Vn bHBRRm43STk3NFVvMG1TWjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArDRGXx4x2wvmLMqZCKwe/otu80jZ5E3pGSKCnawiCDWrgrGwDSPSfh4yE0nV JFMOmcR0kY2+AhPyAig1zSiJRcHTpC63pt3Tr0jMLHIgiGq4GBMIt+EZslOHweDq ALGVvSjttR6l0Tzp8mNj5twpMdoJRdjVbdZaox9E/BCmhFDD9hY2/wqu/LlM+wzC YQExKJI2t54powldcBC3TjgxqFKWJuFnWWUW/TK4MD0iE2lOpQ/WU9kr4Q4yUtVd Qcag72xJBvz4/NsqkGf/+mJWjibBzWX94xO6+R6oiOaNY78KAAXb82b91mGeze52 6UvUQCUHEOcA2RqBAY+KuiWTag== -----END CERTIFICATE-----Generated at Tue Jun 2 21:33:40 2026 by rpki-client