$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC075/D67784301C2A11F19DD1604B353D8C67/qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.mft File: qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.mft (raw, json) Hash identifier: q5hc9yp0Vjb/2vWUnb6syE1lkJf2WYyGRjK31Sr1ehU= Subject key identifier: 3A:D6:03:25:6D:BC:73:AF:31:95:AA:0D:92:E5:BF:2F:D7:7C:F8:82 Authority key identifier: AA:D8:17:99:F6:48:70:B9:1A:09:D2:C0:4B:87:D0:F9:60:7E:F0:1C Certificate issuer: /CN=A91AC075/serialNumber=AAD81799F64870B91A09D2C04B87D0F9607EF01C Certificate serial: 2C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC075/D67784301C2A11F19DD1604B353D8C67/qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.mft Manifest number: 29 Signing time: Thu 21 May 2026 08:54:52 +0000 Manifest this update: Thu 21 May 2026 08:54:51 +0000 Manifest next update: Thu 28 May 2026 08:54:51 +0000 Files and hashes: 1: qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.crl (hash: VEYLWCY4W4YBL7i/56OWXq1KY11qVdqZzkYn97JisiM=) 2: 4D14307E1C2C11F186EF2187353D8C67.roa (hash: 8n1lBtRiuUToqQoaz+XovDqW+aJBw7UTosZ8OjYJOZ0=) 3: CDBA019C39F311F1ADEB5DEEC0833773.roa (hash: iidMH4KhBMhVgK4N0PlQBp3CYB4iLSSSQ1RpsnRFm3E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC075/D67784301C2A11F19DD1604B353D8C67/qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.crl rsync://rpki.apnic.net/member_repository/A91AC075/D67784301C2A11F19DD1604B353D8C67/qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 08:54:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44 (0x2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC075, serialNumber=AAD81799F64870B91A09D2C04B87D0F9607EF01C Validity Not Before: May 21 08:54:51 2026 GMT Not After : May 28 08:54:51 2026 GMT Subject: CN=6a0ec85c-149f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ca:c4:19:67:5c:85:ef:94:37:90:0d:60:95: d4:23:2e:fb:60:15:07:51:85:d7:e9:ed:62:ef:21: b1:e3:65:88:49:d4:c7:41:5d:69:ae:9e:12:e3:9a: 1e:85:d9:d6:06:bf:69:e7:5e:ae:7f:ef:29:f1:bf: 64:22:85:ca:8b:cc:af:82:24:9c:de:9b:0e:54:0b: 1b:07:cb:6d:65:81:3e:f0:09:2a:6e:f0:9e:ef:ed: c0:26:5c:cd:cf:00:23:73:f3:3b:33:d2:49:30:6a: 3f:b1:8b:f7:62:db:30:a1:05:aa:9b:7a:1b:ed:d0: c5:3d:98:da:94:58:45:01:34:81:e7:22:7b:1a:fa: 50:35:22:14:c5:fa:f6:b4:1e:96:d7:80:b2:90:ff: f3:7a:0a:a0:fd:66:9d:0c:af:48:a7:c3:50:3e:b9: dc:a4:66:6b:00:cf:c3:f3:88:41:59:5f:ba:ba:96: 33:a7:81:64:4b:17:e5:f0:35:63:99:31:83:0a:37: 2c:e6:bf:e8:05:a4:5e:a7:19:7a:9e:60:63:46:d0: 0c:52:02:45:8e:f6:2a:82:17:bc:ff:b3:95:c9:00: 1a:19:19:19:2e:e4:b4:71:1a:94:e7:67:67:43:db: 5a:33:c3:ae:2f:92:fd:ba:7d:b3:43:ad:68:d4:72: bd:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:D6:03:25:6D:BC:73:AF:31:95:AA:0D:92:E5:BF:2F:D7:7C:F8:82 X509v3 Authority Key Identifier: keyid:AA:D8:17:99:F6:48:70:B9:1A:09:D2:C0:4B:87:D0:F9:60:7E:F0:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC075/D67784301C2A11F19DD1604B353D8C67/qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC075/D67784301C2A11F19DD1604B353D8C67/qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:64:62:fa:73:c7:70:91:99:ea:13:3e:75:58:41:64:4d:2e: af:32:e5:e3:0f:23:fc:4a:c0:fa:f3:ec:1b:13:d7:86:0e:94: 3b:89:be:a7:2b:81:db:ea:98:8c:3e:54:b2:1b:f6:31:37:77: 8f:e6:28:23:a8:fa:07:88:f2:44:08:cb:80:f1:71:ef:ae:ca: cb:b4:d1:9c:81:82:8c:e0:f0:6d:a4:0b:be:3c:20:94:2f:70: 4d:6b:49:88:8f:b7:8a:fe:16:30:17:45:98:a1:da:6f:c2:67: c6:5b:c0:c1:51:f0:6f:22:b5:9c:95:3e:58:f4:ab:ab:4d:95: e6:9a:a1:31:ba:e8:60:38:f6:50:73:44:bf:dc:17:59:3f:81: 0b:8a:8a:17:f8:d2:9b:d3:11:3e:66:fa:d3:d7:e1:2f:af:fc: c6:33:04:b6:49:c9:93:bf:47:84:f6:2c:ae:79:56:61:89:ba: c5:1a:54:20:d9:22:57:7f:5b:aa:36:b9:77:f8:e9:f0:0f:b9: d1:71:f3:94:e5:34:03:2f:d2:22:65:1c:5c:8b:55:eb:65:17: de:5d:fd:c2:a9:54:24:3e:48:a0:69:8e:03:87:65:9d:55:f2: 5f:39:5e:93:01:85:72:c3:4c:11:48:f5:31:6b:88:8e:e1:40: b1:b4:b3:af -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QzA3NTExMC8GA1UEBRMoQUFEODE3OTlGNjQ4NzBCOTFBMDlEMkMwNEI4N0QwRjk2 MDdFRjAxQzAeFw0yNjA1MjEwODU0NTFaFw0yNjA1MjgwODU0NTFaMBgxFjAUBgNV BAMTDTZhMGVjODVjLTE0OWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvysQZZ1yF75Q3kA1gldQjLvtgFQdRhdfp7WLvIbHjZYhJ1MdBXWmunhLjmh6F 2dYGv2nnXq5/7ynxv2QihcqLzK+CJJzemw5UCxsHy21lgT7wCSpu8J7v7cAmXM3P ACNz8zsz0kkwaj+xi/di2zChBaqbehvt0MU9mNqUWEUBNIHnInsa+lA1IhTF+va0 HpbXgLKQ//N6CqD9Zp0Mr0inw1A+udykZmsAz8PziEFZX7q6ljOngWRLF+XwNWOZ MYMKNyzmv+gFpF6nGXqeYGNG0AxSAkWO9iqCF7z/s5XJABoZGRku5LRxGpTnZ2dD 21ozw64vkv26fbNDrWjUcr2HAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUOtYDJW28 c68xlaoNkuW/L9d8+IIwHwYDVR0jBBgwFoAUqtgXmfZIcLkaCdLAS4fQ+WB+8Bww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFDMDc1L0Q2Nzc4NDMwMUMy QTExRjE5REQxNjA0QjM1M0Q4QzY3L3F0Z1htZlpJY0xrYUNkTEFTNGZRLVdCLThC dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcXRnWG1mWkljTGthQ2RMQVM0ZlEtV0ItOEJ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFD MDc1L0Q2Nzc4NDMwMUMyQTExRjE5REQxNjA0QjM1M0Q4QzY3L3F0Z1htZlpJY0xr YUNkTEFTNGZRLVdCLThCdy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBKZGL6c8dwkZnqEz51WEFkTS6vMuXjDyP8SsD68+wbE9eGDpQ7ib6nK4Hb6piM PlSyG/YxN3eP5igjqPoHiPJECMuA8XHvrsrLtNGcgYKM4PBtpAu+PCCUL3BNa0mI j7eK/hYwF0WYodpvwmfGW8DBUfBvIrWclT5Y9KurTZXmmqExuuhgOPZQc0S/3BdZ P4ELiooX+NKb0xE+ZvrT1+Evr/zGMwS2ScmTv0eE9iyueVZhibrFGlQg2SJXf1uq Nrl3+OnwD7nRcfOU5TQDL9IiZRxci1XrZRfeXf3CqVQkPkigaY4Dh2WdVfJfOV6T AYVyw0wRSPUxa4iO4UCxtLOv -----END CERTIFICATE-----Generated at Thu May 21 12:58:33 2026 by rpki-client