$ rpki-client -vvf rpki.apnic.net/member_repository/A91878FF/5B6BD15A17B711F1BF42BB44383D8C67/X_qGqIMhMTsqbeOLfxYwXRm5WM4.mft File: X_qGqIMhMTsqbeOLfxYwXRm5WM4.mft (raw, json) Hash identifier: Cj3ZxSG3asxRQseeWALgdo4+R2rNLU4wKX89VsX5geY= Subject key identifier: 09:76:B8:E4:CF:23:D2:BF:34:AB:F1:F5:E9:81:1A:0C:5E:EF:80:CD Authority key identifier: 5F:FA:86:A8:83:21:31:3B:2A:6D:E3:8B:7F:16:30:5D:19:B9:58:CE Certificate issuer: /CN=A91878FF/serialNumber=5FFA86A88321313B2A6DE38B7F16305D19B958CE Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X_qGqIMhMTsqbeOLfxYwXRm5WM4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91878FF/5B6BD15A17B711F1BF42BB44383D8C67/X_qGqIMhMTsqbeOLfxYwXRm5WM4.mft Manifest number: 33 Signing time: Mon 01 Jun 2026 09:28:57 +0000 Manifest this update: Mon 01 Jun 2026 09:28:57 +0000 Manifest next update: Mon 08 Jun 2026 09:28:57 +0000 Files and hashes: 1: X_qGqIMhMTsqbeOLfxYwXRm5WM4.crl (hash: pOdu97IRfQ0giSKl97ouAcedljiuOtOW/apskQpLENM=) 2: 58EB7FEA17BA11F192FEB12A393D8C67.roa (hash: 5nbX1XIJNdumuOJIpAiDvH+g4m9L4W7smTojDdZZ4A0=) 3: B1AC59CA17B911F18117E782383D8C67.roa (hash: +NS4dIto6+EmYFB1YZFztX1H1Dxs72FShVzE38yw9hI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91878FF/5B6BD15A17B711F1BF42BB44383D8C67/X_qGqIMhMTsqbeOLfxYwXRm5WM4.crl rsync://rpki.apnic.net/member_repository/A91878FF/5B6BD15A17B711F1BF42BB44383D8C67/X_qGqIMhMTsqbeOLfxYwXRm5WM4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X_qGqIMhMTsqbeOLfxYwXRm5WM4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 09:28:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91878FF, serialNumber=5FFA86A88321313B2A6DE38B7F16305D19B958CE Validity Not Before: Jun 1 09:28:57 2026 GMT Not After : Jun 8 09:28:57 2026 GMT Subject: CN=6a1d50d9-2dd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:e6:f7:21:d3:eb:41:ac:d3:7c:25:f1:97:b3: 2d:00:2b:72:c0:47:e8:62:1d:33:1b:9f:9d:c2:8b: 53:d1:15:89:bc:bc:59:b8:34:64:23:ed:8b:14:fd: 73:6f:39:b0:87:d0:a4:23:c7:ed:80:76:17:42:3e: 92:dc:fe:8b:87:83:35:66:ce:85:11:03:6b:ed:d5: da:a6:c8:ef:ff:df:c1:cd:2f:a2:82:35:1d:32:75: 0e:6a:43:5d:fd:85:cd:76:b8:19:22:ea:5f:bc:27: 83:2e:ae:a1:57:ee:9d:66:22:25:cf:23:a1:92:da: 74:37:6f:0c:b2:df:a3:a1:64:69:80:2c:02:28:13: 02:b7:21:c0:2b:a7:f2:28:d9:4b:0e:2e:d3:05:d0: 0d:c1:df:75:38:64:45:30:b0:be:0e:07:f1:49:0b: d9:f0:96:77:2d:d4:b5:18:a0:30:b1:ac:16:9a:ea: ea:53:18:39:4b:c5:5c:f2:f4:1b:06:f0:de:99:53: d1:34:a0:9b:6b:8d:65:fb:b1:85:76:c9:2c:f0:62: f3:07:70:b1:d3:3b:ff:6d:39:f5:f7:79:0c:7f:59: 7a:01:fb:80:62:ed:ab:56:9c:8b:92:d3:15:db:bd: 23:d7:f9:a6:aa:b3:d9:d9:f1:1d:5c:ba:ed:b1:1d: 63:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:76:B8:E4:CF:23:D2:BF:34:AB:F1:F5:E9:81:1A:0C:5E:EF:80:CD X509v3 Authority Key Identifier: keyid:5F:FA:86:A8:83:21:31:3B:2A:6D:E3:8B:7F:16:30:5D:19:B9:58:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91878FF/5B6BD15A17B711F1BF42BB44383D8C67/X_qGqIMhMTsqbeOLfxYwXRm5WM4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X_qGqIMhMTsqbeOLfxYwXRm5WM4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91878FF/5B6BD15A17B711F1BF42BB44383D8C67/X_qGqIMhMTsqbeOLfxYwXRm5WM4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:af:f1:5d:04:f4:83:8d:97:de:4e:6e:85:7c:81:c3:26:8e: d9:b8:83:3d:ce:d8:15:7a:9c:09:4e:a9:9b:0e:f2:9f:af:c5: e8:d8:c7:e1:a1:26:39:c9:0a:08:38:55:c8:c5:29:2b:29:27: 04:0f:70:61:bc:50:e8:20:15:5f:cd:58:72:ec:e1:4c:01:92: e0:b5:06:38:9a:3a:01:39:8b:6c:e1:96:73:60:7b:5d:91:d1: 84:a6:fc:bb:01:a2:f0:8f:4b:c3:f9:c4:22:e6:a8:05:5c:a8: 57:40:c3:29:8e:7b:bc:68:b6:9a:86:6d:64:33:c7:c6:95:7f: 1b:a1:ec:ff:da:67:a1:5b:83:89:79:d5:f5:ee:0c:88:4b:d4: de:f7:d7:47:66:83:79:cc:26:24:7d:4a:f3:88:e1:4a:bd:d5: 7a:f4:b9:c8:bd:6e:64:73:ce:bd:da:ea:9c:1a:48:20:2a:ce: 5e:23:b0:b1:1c:9f:b5:f7:64:b9:2f:77:25:7e:19:d4:06:04: fc:69:e9:63:2f:f5:70:b4:8a:44:55:45:4a:fb:78:81:0f:39: a5:50:34:48:7b:5e:b7:2e:4c:b2:85:69:df:fb:2b:7e:18:76: c4:e0:a9:8c:9c:1f:03:be:ff:ee:1e:d1:01:50:c0:85:a3:32: 2f:9a:eb:a0 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NzhGRjExMC8GA1UEBRMoNUZGQTg2QTg4MzIxMzEzQjJBNkRFMzhCN0YxNjMwNUQx OUI5NThDRTAeFw0yNjA2MDEwOTI4NTdaFw0yNjA2MDgwOTI4NTdaMBgxFjAUBgNV BAMTDTZhMWQ1MGQ5LTJkZDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCL5vch0+tBrNN8JfGXsy0AK3LAR+hiHTMbn53Ci1PRFYm8vFm4NGQj7YsU/XNv ObCH0KQjx+2AdhdCPpLc/ouHgzVmzoURA2vt1dqmyO//38HNL6KCNR0ydQ5qQ139 hc12uBki6l+8J4MurqFX7p1mIiXPI6GS2nQ3bwyy36OhZGmALAIoEwK3IcArp/Io 2UsOLtMF0A3B33U4ZEUwsL4OB/FJC9nwlnct1LUYoDCxrBaa6upTGDlLxVzy9BsG 8N6ZU9E0oJtrjWX7sYV2ySzwYvMHcLHTO/9tOfX3eQx/WXoB+4Bi7atWnIuS0xXb vSPX+aaqs9nZ8R1cuu2xHWNxAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUCXa45M8j 0r80q/H16YEaDF7vgM0wHwYDVR0jBBgwFoAUX/qGqIMhMTsqbeOLfxYwXRm5WM4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3OEZGLzVCNkJEMTVBMTdC NzExRjFCRjQyQkI0NDM4M0Q4QzY3L1hfcUdxSU1oTVRzcWJlT0xmeFl3WFJtNVdN NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWF9xR3FJTWhNVHNxYmVPTGZ4WXdYUm01V000LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3 OEZGLzVCNkJEMTVBMTdCNzExRjFCRjQyQkI0NDM4M0Q4QzY3L1hfcUdxSU1oTVRz cWJlT0xmeFl3WFJtNVdNNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCfr/FdBPSDjZfeTm6FfIHDJo7ZuIM9ztgVepwJTqmbDvKfr8Xo2MfhoSY5yQoI OFXIxSkrKScED3BhvFDoIBVfzVhy7OFMAZLgtQY4mjoBOYts4ZZzYHtdkdGEpvy7 AaLwj0vD+cQi5qgFXKhXQMMpjnu8aLaahm1kM8fGlX8boez/2mehW4OJedX17gyI S9Te99dHZoN5zCYkfUrziOFKvdV69LnIvW5kc8692uqcGkggKs5eI7CxHJ+192S5 L3clfhnUBgT8aeljL/VwtIpEVUVK+3iBDzmlUDRIe163LkyyhWnf+yt+GHbE4KmM nB8Dvv/uHtEBUMCFozIvmuug -----END CERTIFICATE-----Generated at Tue Jun 2 22:13:58 2026 by rpki-client