$ rpki-client -vvf rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.mft File: cQovxyPTd706pfsnGkrolOV6dFQ.mft (raw, json) Hash identifier: zHhYEO4zvpEGP7zCzmAO1kEx629UxLg4dav4iN9cFKw= Subject key identifier: 8A:40:0D:8E:C2:D0:F4:B6:4C:16:19:90:0B:81:83:DF:96:ED:49:12 Authority key identifier: 71:0A:2F:C7:23:D3:77:BD:3A:A5:FB:27:1A:4A:E8:94:E5:7A:74:54 Certificate issuer: /CN=A91976E2/serialNumber=710A2FC723D377BD3AA5FB271A4AE894E57A7454 Certificate serial: 0431 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQovxyPTd706pfsnGkrolOV6dFQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.mft Manifest number: 0425 Signing time: Fri 15 May 2026 00:28:20 +0000 Manifest this update: Fri 15 May 2026 00:28:20 +0000 Manifest next update: Fri 22 May 2026 00:28:20 +0000 Files and hashes: 1: cQovxyPTd706pfsnGkrolOV6dFQ.crl (hash: wrJmP++2emHil9h1nzMUIkNR96XdJ5TjRHjvKscN8kk=) 2: FA3E8D68BA2911F0A4AFE171C4F9AE02.roa (hash: wvzSmGiBBAsDnd5ALgrVOTYDqqXOm9AnPF4Wak+3vdU=) 3: ADDCA5F4BA2911F0B6E66A71C4F9AE02.roa (hash: YHAl4wyL5lBLADe3tYGJfQq5g48eFSMbVbWuT+BMPaQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.crl rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQovxyPTd706pfsnGkrolOV6dFQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 May 2026 00:28:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1073 (0x431) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91976E2, serialNumber=710A2FC723D377BD3AA5FB271A4AE894E57A7454 Validity Not Before: May 15 00:28:20 2026 GMT Not After : May 22 00:28:20 2026 GMT Subject: CN=6a0668a4-b371 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:0b:ff:52:be:05:11:07:b2:44:a5:02:1d:37: 92:5e:9e:1a:8c:08:13:57:a3:da:52:dd:a4:0a:eb: e0:a0:e0:5a:44:31:1c:1d:b8:31:cc:18:e7:79:c7: d5:6f:96:94:86:d2:9a:22:71:b8:78:66:6f:1b:a5: 03:82:a5:9e:0a:a8:d8:dd:cd:22:98:ee:a1:57:1a: 1a:23:f9:ec:5d:b7:16:23:9d:e3:e2:ba:f6:0f:bc: fa:4b:f7:82:d1:7a:9f:7b:d6:cf:e0:7d:cf:ec:37: 22:0d:51:87:26:4d:e9:56:75:e3:8a:f6:fd:18:28: 83:59:55:a5:e6:e6:40:5d:0c:55:5c:3e:65:d3:7f: a4:6a:91:bf:f0:e1:df:7c:18:94:63:5f:d5:7e:de: 4a:07:5e:84:1b:83:03:aa:39:56:48:8f:ed:6a:6b: 1e:f6:84:c5:07:b5:77:64:12:6d:ae:85:1d:07:d9: 14:3f:40:58:2c:86:02:25:c2:6a:68:d1:fa:fd:a1: 10:f0:d4:27:d1:ea:10:a6:df:17:e8:ff:b4:90:3d: 3a:ec:cd:16:24:a6:48:8b:c9:b0:22:6c:68:2e:12: db:7c:01:05:bf:21:14:f3:a9:dc:1f:95:ee:a2:aa: 08:e3:b0:9c:ae:0a:65:44:d3:93:c4:4b:d9:6d:3c: d5:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:40:0D:8E:C2:D0:F4:B6:4C:16:19:90:0B:81:83:DF:96:ED:49:12 X509v3 Authority Key Identifier: keyid:71:0A:2F:C7:23:D3:77:BD:3A:A5:FB:27:1A:4A:E8:94:E5:7A:74:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQovxyPTd706pfsnGkrolOV6dFQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:18:61:1d:cc:49:5c:39:04:f5:5c:03:c2:64:e2:49:08:a6: 4e:3e:79:39:9a:62:c1:44:99:68:eb:d1:41:12:79:66:65:66: 19:bf:2c:a4:2a:6d:24:1e:ea:54:a9:f7:f7:5e:9c:2f:c3:25: 4e:bc:7e:5b:68:1a:35:39:c9:36:6e:1f:65:d9:01:19:1b:b0: bd:7e:3d:17:9f:61:ac:20:d8:cb:96:82:36:5e:dd:d2:ff:1b: 11:0c:d8:54:6e:14:62:95:23:b5:cd:dc:a7:f3:20:75:40:48: 11:ce:fd:3f:8c:3c:bb:41:df:25:74:ff:d7:8f:29:dd:7c:39: 3e:dc:1a:20:7a:9d:2c:76:51:cb:26:2e:8d:ab:10:c2:f4:c1: 53:84:63:e3:61:07:0b:e1:b8:b7:4c:a0:05:fa:5b:07:fc:38: b9:48:16:24:e9:60:f3:47:cd:0c:05:9c:50:b1:35:db:6a:8f: b9:20:84:78:c7:33:51:59:76:7a:aa:32:47:be:e9:62:ba:d6: 20:61:1a:92:b5:b1:36:6e:eb:12:8c:eb:f7:32:1b:ce:7e:a5: a4:bc:b0:c8:ba:29:04:54:fa:ef:f2:9e:c3:16:0b:6e:57:bf: 73:b5:ea:19:de:ef:d2:33:c7:16:ec:ec:ca:40:7b:87:cf:e2: 83:1a:0e:c6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBDEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTc2RTIxMTAvBgNVBAUTKDcxMEEyRkM3MjNEMzc3QkQzQUE1RkIyNzFBNEFFODk0 RTU3QTc0NTQwHhcNMjYwNTE1MDAyODIwWhcNMjYwNTIyMDAyODIwWjAYMRYwFAYD VQQDEw02YTA2NjhhNC1iMzcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Av/Ur4FEQeyRKUCHTeSXp4ajAgTV6PaUt2kCuvgoOBaRDEcHbgxzBjnecfV b5aUhtKaInG4eGZvG6UDgqWeCqjY3c0imO6hVxoaI/nsXbcWI53j4rr2D7z6S/eC 0Xqfe9bP4H3P7DciDVGHJk3pVnXjivb9GCiDWVWl5uZAXQxVXD5l03+kapG/8OHf fBiUY1/Vft5KB16EG4MDqjlWSI/tamse9oTFB7V3ZBJtroUdB9kUP0BYLIYCJcJq aNH6/aEQ8NQn0eoQpt8X6P+0kD067M0WJKZIi8mwImxoLhLbfAEFvyEU86ncH5Xu oqoI47CcrgplRNOTxEvZbTzVoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIpADY7C 0PS2TBYZkAuBg9+W7UkSMB8GA1UdIwQYMBaAFHEKL8cj03e9OqX7JxpK6JTlenRU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzZFMi80N0M0NEFEOEFF ODkxMUVDOEE4RDMzNjhDNEY5QUUwMi9jUW92eHlQVGQ3MDZwZnNuR2tyb2xPVjZk RlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NRb3Z4eVBUZDcwNnBmc25Ha3JvbE9WNmRGUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzZFMi80N0M0NEFEOEFFODkxMUVDOEE4RDMzNjhDNEY5QUUwMi9jUW92eHlQVGQ3 MDZwZnNuR2tyb2xPVjZkRlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbhhhHcxJXDkE9VwDwmTiSQimTj55OZpiwUSZaOvRQRJ5ZmVmGb8spCptJB7q VKn3916cL8MlTrx+W2gaNTnJNm4fZdkBGRuwvX49F59hrCDYy5aCNl7d0v8bEQzY VG4UYpUjtc3cp/MgdUBIEc79P4w8u0HfJXT/148p3Xw5PtwaIHqdLHZRyyYujasQ wvTBU4Rj42EHC+G4t0ygBfpbB/w4uUgWJOlg80fNDAWcULE122qPuSCEeMczUVl2 eqoyR77pYrrWIGEakrWxNm7rEozr9zIbzn6lpLywyLopBFT67/KewxYLble/c7Xq Gd7v0jPHFuzsykB7h8/igxoOxg== -----END CERTIFICATE-----Generated at Sat May 16 02:56:52 2026 by rpki-client