$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft File: 2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft (raw, json) Hash identifier: quXxY4odt9IZJRPYPH3bFSjdUO1EOHDgze7sfeNLd8k= Subject key identifier: 77:20:46:F6:15:A2:62:82:98:D5:0A:A9:FE:9B:B5:A6:09:FD:AD:A9 Authority key identifier: D9:04:D5:52:C0:EF:32:F2:49:AB:A4:59:7B:D8:4A:15:EE:55:55:C1 Certificate issuer: /CN=A91A5ED2/serialNumber=D904D552C0EF32F249ABA4597BD84A15EE5555C1 Certificate serial: D1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2QTVUsDvMvJJq6RZe9hKFe5VVcE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft Manifest number: C8 Signing time: Fri 05 Jun 2026 07:12:19 +0000 Manifest this update: Fri 05 Jun 2026 07:12:18 +0000 Manifest next update: Fri 12 Jun 2026 07:12:18 +0000 Files and hashes: 1: 2QTVUsDvMvJJq6RZe9hKFe5VVcE.crl (hash: E1V7xd+66raxeeqLEEHvTxNoP6DMvFtA6OS9EDuAcpI=) 2: 5A9C0D58311C11F0B91A2E64C4F9AE02.roa (hash: EOyR31nb50n9WnNlb3rcrt1TfJ23uFl543E7Owa7HQI=) 3: 7C0B5320D61411F0877B8D3FC4F9AE02.roa (hash: KpQfxiJyvIICVPsdtuLBwSdbonk+CBS6pnKnS4H/dIw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.crl rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2QTVUsDvMvJJq6RZe9hKFe5VVcE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 07:12:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 209 (0xd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5ED2, serialNumber=D904D552C0EF32F249ABA4597BD84A15EE5555C1 Validity Not Before: Jun 5 07:12:18 2026 GMT Not After : Jun 12 07:12:18 2026 GMT Subject: CN=6a2276d2-c110 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:60:0e:e6:8e:61:f7:f2:3d:a3:66:e3:ae:9e: 0c:55:57:00:9f:d8:b1:1e:aa:8c:57:7a:6a:32:5d: 5e:29:c9:ca:b9:e6:ec:7b:a1:51:34:30:18:88:b9: 14:da:5e:71:c6:66:fe:41:fa:db:3e:b6:a4:5b:0c: 95:b4:a6:fb:e3:b1:d9:1b:7b:c1:74:ed:65:03:15: 46:4b:43:8b:a2:f5:35:7e:07:04:0d:38:5c:28:32: a9:63:9d:ab:9d:01:0b:d5:c6:21:65:20:e7:79:8a: 52:63:82:91:cb:58:00:03:eb:18:34:17:35:31:f9: 56:38:a7:4f:c8:4d:23:96:24:a4:df:65:25:cd:7c: 5d:47:65:40:cf:e3:bc:47:9e:a1:f9:02:44:99:7d: f4:ce:ff:34:26:62:47:28:2e:5a:8c:23:aa:54:bc: a3:21:65:08:ab:1f:f1:97:6a:fb:1b:d5:0d:c7:6c: 94:4d:33:01:c2:d8:d2:a9:9f:2e:d7:e4:65:40:0f: fc:a3:28:5c:c4:ff:a2:05:2e:14:4a:37:8c:e4:c0: 73:4a:ff:e0:52:35:7f:3a:4f:a1:e3:0c:89:71:1f: 2f:78:c8:93:b0:ff:01:40:7c:6f:75:cc:7e:62:4e: b4:f9:c2:fe:5c:70:e0:cf:b7:fa:27:c2:1a:a3:83: 94:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:20:46:F6:15:A2:62:82:98:D5:0A:A9:FE:9B:B5:A6:09:FD:AD:A9 X509v3 Authority Key Identifier: keyid:D9:04:D5:52:C0:EF:32:F2:49:AB:A4:59:7B:D8:4A:15:EE:55:55:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2QTVUsDvMvJJq6RZe9hKFe5VVcE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:56:09:99:18:d6:c2:f8:56:e8:87:45:fc:7c:df:3c:52:58: 51:29:8e:e2:c6:a6:c3:31:ec:8e:62:54:e3:ca:39:36:c0:3b: 35:6f:4a:58:7d:e8:8e:f1:69:bb:99:15:e8:9c:eb:75:a7:34: 57:66:44:6e:cc:a2:e9:1e:b2:8c:e9:6d:c2:4f:07:15:96:dc: ae:a0:34:31:4e:80:4d:c7:ae:d0:91:a6:93:81:fd:69:a0:21: 84:c5:47:09:58:57:72:08:d3:dd:5c:c5:95:3c:b4:a3:dd:95: 56:d1:09:23:fe:19:70:e0:ba:0c:fc:fe:ec:03:d3:0d:33:c4: 08:81:ae:58:70:a8:7b:34:79:51:22:e1:49:bb:e3:0f:73:6e: b6:26:af:23:92:ae:26:52:44:6c:ab:d9:2f:a3:0c:44:d8:16: 84:47:ff:42:2b:a3:56:23:80:3c:64:0b:e7:06:d6:8c:e9:2e: f2:ba:61:28:ea:d8:1c:5b:f8:0a:63:73:90:e0:73:ad:8a:f3: a0:bf:03:73:da:ab:48:47:f6:89:20:f2:24:b6:33:84:2a:92: 5a:a7:8c:f9:e0:e7:ce:03:d2:6e:96:5b:21:c6:40:9d:2b:6d: 71:33:5b:09:eb:b0:5e:d8:18:89:4a:82:24:99:25:32:5e:b7: bd:6d:6c:ac -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVFRDIxMTAvBgNVBAUTKEQ5MDRENTUyQzBFRjMyRjI0OUFCQTQ1OTdCRDg0QTE1 RUU1NTU1QzEwHhcNMjYwNjA1MDcxMjE4WhcNMjYwNjEyMDcxMjE4WjAYMRYwFAYD VQQDEw02YTIyNzZkMi1jMTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtmAO5o5h9/I9o2bjrp4MVVcAn9ixHqqMV3pqMl1eKcnKuebse6FRNDAYiLkU 2l5xxmb+QfrbPrakWwyVtKb747HZG3vBdO1lAxVGS0OLovU1fgcEDThcKDKpY52r nQEL1cYhZSDneYpSY4KRy1gAA+sYNBc1MflWOKdPyE0jliSk32UlzXxdR2VAz+O8 R56h+QJEmX30zv80JmJHKC5ajCOqVLyjIWUIqx/xl2r7G9UNx2yUTTMBwtjSqZ8u 1+RlQA/8oyhcxP+iBS4USjeM5MBzSv/gUjV/Ok+h4wyJcR8veMiTsP8BQHxvdcx+ Yk60+cL+XHDgz7f6J8Iao4OUWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHcgRvYV omKCmNUKqf6btaYJ/a2pMB8GA1UdIwQYMBaAFNkE1VLA7zLySaukWXvYShXuVVXB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUVEMi9GMjQ1QjJENjMx MUIxMUYwQTJGNTExNjBDNEY5QUUwMi8yUVRWVXNEdk12SkpxNlJaZTloS0ZlNVZW Y0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJRVFZVc0R2TXZKSnE2UlplOWhLRmU1VlZjRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUVEMi9GMjQ1QjJENjMxMUIxMUYwQTJGNTExNjBDNEY5QUUwMi8yUVRWVXNEdk12 SkpxNlJaZTloS0ZlNVZWY0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYVYJmRjWwvhW6IdF/HzfPFJYUSmO4samwzHsjmJU48o5NsA7NW9KWH3ojvFp u5kV6Jzrdac0V2ZEbsyi6R6yjOltwk8HFZbcrqA0MU6ATceu0JGmk4H9aaAhhMVH CVhXcgjT3VzFlTy0o92VVtEJI/4ZcOC6DPz+7APTDTPECIGuWHCoezR5USLhSbvj D3NutiavI5KuJlJEbKvZL6MMRNgWhEf/QiujViOAPGQL5wbWjOku8rphKOrYHFv4 CmNzkOBzrYrzoL8Dc9qrSEf2iSDyJLYzhCqSWqeM+eDnzgPSbpZbIcZAnSttcTNb CeuwXtgYiUqCJJklMl63vW1srA== -----END CERTIFICATE-----Generated at Sat Jun 6 13:21:21 2026 by rpki-client