$ rpki-client -vvf rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.mft File: qeq8JGURbtEdbIza4gESN88fWd8.mft (raw, json) Hash identifier: KmXvej03swcimS54GBue7o5rXl5+8Q38cyv94cn1oj8= Subject key identifier: 5A:A2:F0:22:1F:0B:DE:1B:1D:F8:F1:39:C6:22:42:23:19:B7:37:44 Authority key identifier: A9:EA:BC:24:65:11:6E:D1:1D:6C:8C:DA:E2:01:12:37:CF:1F:59:DF Certificate issuer: /CN=A91871C2/serialNumber=A9EABC2465116ED11D6C8CDAE2011237CF1F59DF Certificate serial: 0844 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qeq8JGURbtEdbIza4gESN88fWd8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.mft Manifest number: 07F0 Signing time: Wed 20 May 2026 21:35:23 +0000 Manifest this update: Wed 20 May 2026 21:35:22 +0000 Manifest next update: Wed 27 May 2026 21:35:22 +0000 Files and hashes: 1: qeq8JGURbtEdbIza4gESN88fWd8.crl (hash: zdNR7x5zApNDgmlyP8P2bSDygFgC4arNnhut7tOTGm0=) 2: BA4083F84CEF11F0A46DCE81C4F9AE02.roa (hash: iWVOHg6QDBIqMpA3MO5LObP6AHCPSfyjRAL55UZ4G0g=) 3: C446B484559C11F0BBD2D127C4F9AE02.roa (hash: ZE3RMF3wHAnlFS7ZCENNLqhdWX3pKqPIaFPP+R0+EHA=) 4: A5307E284CEF11F092F69C81C4F9AE02.roa (hash: BtYPWm6haSNi67HssCRHuMs+/2A6YgL6H+ZvBM2G+Lg=) 5: B43753D005AC11ECB86F694EC4F9AE02.roa (hash: R34hnb67EtA7MxdkNi5WSU1aixEiNDr681Fh+Yd4Kag=) 6: C5465290559C11F0BBD2D127C4F9AE02.roa (hash: LJbta/JJVJ23WgZ0akF5Ov55pEZeCXuRcU1xDJv2re0=) 7: 8BF305A2F44711F0849EF3E6616F56BC.roa (hash: 8FXTDQ3pdrB9lI0tc6cwlsOBLuq+7Ubnrq4d6bTJfQo=) 8: F30B07CE705011F0A5A44E86C4F9AE02.roa (hash: yqzH+VRJDdIn8v1i8jejnoTV03RvjOrdo0NsV1Hhxj0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.crl rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qeq8JGURbtEdbIza4gESN88fWd8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 21:35:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2116 (0x844) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91871C2, serialNumber=A9EABC2465116ED11D6C8CDAE2011237CF1F59DF Validity Not Before: May 20 21:35:22 2026 GMT Not After : May 27 21:35:22 2026 GMT Subject: CN=6a0e291b-e373 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2c:8e:be:41:d1:95:1d:b1:4b:05:50:51:3a: ec:3e:22:58:a2:23:6a:7e:44:dc:89:2c:5a:fa:51: 58:d4:25:cb:19:d3:6a:82:05:12:9b:9d:ef:a1:be: 0a:53:b5:48:8f:e1:53:18:4e:d8:88:b6:10:9f:e6: c3:67:91:ea:28:db:65:20:42:6a:61:bb:43:cc:dd: 17:ab:7d:36:3e:e7:7d:b3:f3:9c:c2:4c:01:f4:53: 7d:44:cb:bc:a3:ab:ea:43:92:99:89:95:36:20:8d: 4e:96:01:3d:01:f9:3b:1d:2c:ba:43:aa:4c:67:68: bf:23:9a:51:5a:8e:be:c8:b9:18:34:f5:41:83:ab: 03:61:56:cd:07:3e:6c:8c:4f:71:19:00:b5:dc:ca: 0c:f5:fe:5e:76:13:94:5c:b3:c3:20:0b:ff:1b:da: 0d:17:b0:9b:0f:6b:02:f2:ee:a2:c7:6e:09:af:98: 22:e7:5f:3a:02:27:9f:e5:35:49:10:df:03:86:1d: d2:96:ea:25:52:7d:f0:ff:11:c8:af:8c:03:36:ff: 28:5d:b2:08:94:99:63:a7:67:8a:22:0a:c5:a4:e8: c1:65:1f:52:f0:b1:96:eb:55:81:4a:60:61:ac:aa: b9:f0:31:cd:f7:6c:f5:7a:c2:67:24:86:3f:2b:61: bc:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:A2:F0:22:1F:0B:DE:1B:1D:F8:F1:39:C6:22:42:23:19:B7:37:44 X509v3 Authority Key Identifier: keyid:A9:EA:BC:24:65:11:6E:D1:1D:6C:8C:DA:E2:01:12:37:CF:1F:59:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qeq8JGURbtEdbIza4gESN88fWd8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:0a:16:2b:2b:c0:32:c8:d0:3d:04:c0:f7:9c:f3:62:bc:55: 97:81:76:1b:5b:70:aa:28:68:da:70:0b:c1:13:5a:f6:63:cf: f7:fb:2f:e8:2f:81:44:8c:dc:6d:51:04:33:4c:57:6f:f2:90: f8:99:d1:79:61:6b:91:26:3b:97:69:96:53:e4:27:e8:6b:10: a1:a6:e2:27:74:07:aa:2a:62:8b:c3:24:1a:74:a1:e9:27:cd: 99:63:29:ce:04:87:95:64:89:82:a9:17:23:b9:ca:08:6f:52: 7f:ae:b0:75:de:57:81:a8:71:73:2c:8f:4a:b3:db:9a:03:a0: 32:d3:84:11:a7:1c:19:2a:f8:59:6b:5f:8e:b9:ca:c0:09:e3: 89:84:2b:d9:d2:7b:80:bd:cf:03:48:92:5d:72:46:98:b9:1a: d6:d3:a6:ad:d3:92:15:ab:df:4b:a0:8d:10:fa:bf:85:e1:4b: 7d:66:9b:4e:45:af:8b:ca:9e:f4:4d:b6:78:2e:46:b9:62:72: 50:75:f6:66:a7:59:25:bf:ab:b5:69:61:9f:eb:da:a5:9a:ad: e5:7f:15:6e:47:47:20:99:7b:8c:4c:3a:25:31:06:ad:a4:99: 40:68:fc:0a:b4:59:2d:47:3a:92:5e:b1:ff:57:e1:14:9f:ff: 59:8b:38:b0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCEQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODcxQzIxMTAvBgNVBAUTKEE5RUFCQzI0NjUxMTZFRDExRDZDOENEQUUyMDExMjM3 Q0YxRjU5REYwHhcNMjYwNTIwMjEzNTIyWhcNMjYwNTI3MjEzNTIyWjAYMRYwFAYD VQQDEw02YTBlMjkxYi1lMzczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtCyOvkHRlR2xSwVQUTrsPiJYoiNqfkTciSxa+lFY1CXLGdNqggUSm53vob4K U7VIj+FTGE7YiLYQn+bDZ5HqKNtlIEJqYbtDzN0Xq302Pud9s/OcwkwB9FN9RMu8 o6vqQ5KZiZU2II1OlgE9Afk7HSy6Q6pMZ2i/I5pRWo6+yLkYNPVBg6sDYVbNBz5s jE9xGQC13MoM9f5edhOUXLPDIAv/G9oNF7CbD2sC8u6ix24Jr5gi5186Aief5TVJ EN8Dhh3SluolUn3w/xHIr4wDNv8oXbIIlJljp2eKIgrFpOjBZR9S8LGW61WBSmBh rKq58DHN92z1esJnJIY/K2G8nQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFqi8CIf C94bHfjxOcYiQiMZtzdEMB8GA1UdIwQYMBaAFKnqvCRlEW7RHWyM2uIBEjfPH1nf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzFDMi9ERTYxNjY2ODU1 QTkxMUVCOTlBRkRBNURDNEY5QUUwMi9xZXE4SkdVUmJ0RWRiSXphNGdFU044OGZX ZDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FlcThKR1VSYnRFZGJJemE0Z0VTTjg4ZldkOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzFDMi9ERTYxNjY2ODU1QTkxMUVCOTlBRkRBNURDNEY5QUUwMi9xZXE4SkdVUmJ0 RWRiSXphNGdFU044OGZXZDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJgoWKyvAMsjQPQTA95zzYrxVl4F2G1twqiho2nALwRNa9mPP9/sv6C+BRIzc bVEEM0xXb/KQ+JnReWFrkSY7l2mWU+Qn6GsQoabiJ3QHqipii8MkGnSh6SfNmWMp zgSHlWSJgqkXI7nKCG9Sf66wdd5XgahxcyyPSrPbmgOgMtOEEaccGSr4WWtfjrnK wAnjiYQr2dJ7gL3PA0iSXXJGmLka1tOmrdOSFavfS6CNEPq/heFLfWabTkWvi8qe 9E22eC5GuWJyUHX2ZqdZJb+rtWlhn+vapZqt5X8VbkdHIJl7jEw6JTEGraSZQGj8 CrRZLUc6kl6x/1fhFJ//WYs4sA== -----END CERTIFICATE-----Generated at Thu May 21 10:17:14 2026 by rpki-client