$ rpki-client -vvf rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft File: qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft (raw, json) Hash identifier: 42nbhyGlcT9hZMiebf/rTAjEe8t9rqzZhkn7pOeFNSA= Subject key identifier: 8C:2B:59:1B:E3:6C:B2:87:54:39:9D:3D:0A:6A:4C:92:C8:44:17:EE Authority key identifier: AB:11:E8:09:F2:BC:66:B0:D1:E6:0B:8A:31:F8:6B:5B:82:E0:0E:39 Certificate issuer: /CN=A9191FA5/serialNumber=AB11E809F2BC66B0D1E60B8A31F86B5B82E00E39 Certificate serial: 3738 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft Manifest number: 3646 Signing time: Mon 18 May 2026 14:27:46 +0000 Manifest this update: Mon 18 May 2026 14:27:46 +0000 Manifest next update: Mon 25 May 2026 14:27:46 +0000 Files and hashes: 1: qxHoCfK8ZrDR5guKMfhrW4LgDjk.crl (hash: hIDkomRSa59lDLlWgWktEA0uotxdH4SpuqZHD4S+Y3Y=) 2: FF09B6BEC2E511EBBDB1B180C4F9AE02.roa (hash: CAJ81kegdxUmZ0yB+G3EOfDtceEQTggGkdXXt1XoU0I=) 3: B8E7D994D00711EAB66A1255C4F9AE02.roa (hash: AoD1y/nYjPSOUSJHEbMuyBuaFVXXnCMYDMP9nMWhevk=) 4: FDE510BCC2E511EBBDB1B180C4F9AE02.roa (hash: KeHN4yC8HCgWU7NC7+u9JXzLgmJ0RzLzePi7iCwVwGQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.crl rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 May 2026 14:27:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14136 (0x3738) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191FA5, serialNumber=AB11E809F2BC66B0D1E60B8A31F86B5B82E00E39 Validity Not Before: May 18 14:27:46 2026 GMT Not After : May 25 14:27:46 2026 GMT Subject: CN=6a0b21e2-59a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:64:09:fd:32:10:d2:f0:8d:2f:cb:09:c8:07: 99:2d:e9:7d:25:8d:27:ef:ba:1f:e8:c4:d6:7d:d4: 84:cf:21:2b:62:d8:2c:3b:ce:25:dd:48:a1:4c:2d: fa:61:3a:5a:1c:b2:a8:a3:27:23:b9:90:cf:a3:b4: 0c:22:3d:10:31:ef:5c:73:99:16:d5:91:9d:0d:71: 27:6a:bc:f5:4b:e9:3e:ab:76:f0:32:1c:0a:11:6e: 1d:44:50:e4:d2:ae:cc:1d:64:4f:99:b5:ad:be:90: e9:db:96:bf:18:58:62:83:73:4b:c5:40:7a:c6:1b: 82:55:12:7e:42:a2:51:6c:a5:c1:ac:97:e9:8f:90: a5:a8:38:2d:6d:fe:2e:30:e4:be:fb:2f:68:bb:f5: b0:f7:5b:4e:6e:7d:67:19:04:42:66:0c:95:32:99: 80:1c:1a:d2:5a:fd:c8:42:a9:6c:67:4e:d5:d9:28: b7:30:4f:2d:a3:ee:a5:43:a4:e8:f1:95:16:c5:f2: 90:1f:30:2c:71:3a:01:87:88:0b:8f:ba:9f:77:a4: e8:41:a3:71:bc:1c:1a:97:ee:e2:66:3f:a1:83:af: a9:6d:3e:b6:b9:cf:0c:2c:0a:67:d9:c3:b9:20:52: 39:aa:0c:b6:8b:d0:72:1a:f1:fc:6b:ae:02:b2:0d: 27:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:2B:59:1B:E3:6C:B2:87:54:39:9D:3D:0A:6A:4C:92:C8:44:17:EE X509v3 Authority Key Identifier: keyid:AB:11:E8:09:F2:BC:66:B0:D1:E6:0B:8A:31:F8:6B:5B:82:E0:0E:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:7e:39:ad:e2:51:80:71:d1:44:6c:18:d8:96:fa:a9:b5:c4: 09:74:97:a2:61:99:77:43:2a:bb:43:fd:81:b5:f1:e9:ae:1c: a7:22:08:8b:9a:13:76:7a:fa:ef:75:4c:53:ea:e1:35:32:8a: 00:5b:68:3d:45:11:54:cd:5e:48:ab:7e:10:b3:0c:74:aa:ae: aa:fa:59:7f:fd:22:8a:65:39:e8:5b:15:ed:c9:f8:f9:3d:17: 4b:12:14:4f:22:48:12:28:20:dc:3f:a7:15:84:39:9c:48:94: f6:b3:28:4a:df:7f:61:14:bc:18:60:b4:0a:01:f2:c4:40:42: c5:68:dd:ae:2d:b7:1a:2e:2a:8d:b1:84:ea:3a:84:61:11:73: 33:0c:e4:5a:b3:4a:a0:b8:25:35:dc:06:f0:29:7b:16:9b:f1: 27:7d:81:85:e0:72:47:9f:ba:df:74:f5:03:18:8d:f5:26:a2: 5c:00:89:69:38:90:e8:f4:53:b8:c6:25:ee:fd:cf:e6:85:4a: a8:ea:05:50:ae:df:7e:1f:62:90:61:c3:83:06:76:ec:9d:59: 48:35:28:52:c6:2a:a2:46:32:45:91:d5:9f:0e:00:01:2b:c7: f7:6f:1a:07:c9:59:34:d4:70:6b:77:21:a9:f8:05:9c:79:96: 09:80:e0:3c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNzgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFGQTUxMTAvBgNVBAUTKEFCMTFFODA5RjJCQzY2QjBEMUU2MEI4QTMxRjg2QjVC ODJFMDBFMzkwHhcNMjYwNTE4MTQyNzQ2WhcNMjYwNTI1MTQyNzQ2WjAYMRYwFAYD VQQDEw02YTBiMjFlMi01OWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjmQJ/TIQ0vCNL8sJyAeZLel9JY0n77of6MTWfdSEzyErYtgsO84l3UihTC36 YTpaHLKooycjuZDPo7QMIj0QMe9cc5kW1ZGdDXEnarz1S+k+q3bwMhwKEW4dRFDk 0q7MHWRPmbWtvpDp25a/GFhig3NLxUB6xhuCVRJ+QqJRbKXBrJfpj5ClqDgtbf4u MOS++y9ou/Ww91tObn1nGQRCZgyVMpmAHBrSWv3IQqlsZ07V2Si3ME8to+6lQ6To 8ZUWxfKQHzAscToBh4gLj7qfd6ToQaNxvBwal+7iZj+hg6+pbT62uc8MLApn2cO5 IFI5qgy2i9ByGvH8a64Csg0npQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIwrWRvj bLKHVDmdPQpqTJLIRBfuMB8GA1UdIwQYMBaAFKsR6AnyvGaw0eYLijH4a1uC4A45 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUZBNS8wODA1NkNFNDFE ODcxMUUyOUREM0M2REUwOEIwMkNEMi9xeEhvQ2ZLOFpyRFI1Z3VLTWZoclc0TGdE amsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F4SG9DZks4WnJEUjVndUtNZmhyVzRMZ0Rqay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUZBNS8wODA1NkNFNDFEODcxMUUyOUREM0M2REUwOEIwMkNEMi9xeEhvQ2ZLOFpy RFI1Z3VLTWZoclc0TGdEamsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAT345reJRgHHRRGwY2Jb6qbXECXSXomGZd0Mqu0P9gbXx6a4cpyIIi5oTdnr6 73VMU+rhNTKKAFtoPUURVM1eSKt+ELMMdKquqvpZf/0iimU56FsV7cn4+T0XSxIU TyJIEigg3D+nFYQ5nEiU9rMoSt9/YRS8GGC0CgHyxEBCxWjdri23Gi4qjbGE6jqE YRFzMwzkWrNKoLglNdwG8Cl7FpvxJ32BheByR5+633T1AxiN9SaiXACJaTiQ6PRT uMYl7v3P5oVKqOoFUK7ffh9ikGHDgwZ27J1ZSDUoUsYqokYyRZHVnw4AASvH928a B8lZNNRwa3chqfgFnHmWCYDgPA== -----END CERTIFICATE-----Generated at Tue May 19 15:45:19 2026 by rpki-client