$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft File: qmMtxAKnAveanDaT6cxGxZge6Ow.mft (raw, json) Hash identifier: YrNaWseUGIytipE0/wQb8aWeVZGncAKfyq3MbBER55s= Subject key identifier: B5:A3:AF:50:76:E6:65:9B:FE:A1:35:54:73:B0:68:E4:25:0D:79:38 Authority key identifier: AA:63:2D:C4:02:A7:02:F7:9A:9C:36:93:E9:CC:46:C5:98:1E:E8:EC Certificate issuer: /CN=A91ADBA2/serialNumber=AA632DC402A702F79A9C3693E9CC46C5981EE8EC Certificate serial: 1AB1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmMtxAKnAveanDaT6cxGxZge6Ow.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft Manifest number: 1AA7 Signing time: Wed 20 May 2026 16:19:21 +0000 Manifest this update: Wed 20 May 2026 16:19:21 +0000 Manifest next update: Wed 27 May 2026 16:19:21 +0000 Files and hashes: 1: qmMtxAKnAveanDaT6cxGxZge6Ow.crl (hash: 1iNLr027wqjKkzuIDYMpH2KczKd760Gaf5U0ZXtdFTM=) 2: 6C30EF68D9AD11EBA5CFBB17C4F9AE02.roa (hash: IsnopfiraJYXUMgM3zC6fdbepjtRf+a2njqVEtH3VtA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.crl rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmMtxAKnAveanDaT6cxGxZge6Ow.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 16:19:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6833 (0x1ab1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADBA2, serialNumber=AA632DC402A702F79A9C3693E9CC46C5981EE8EC Validity Not Before: May 20 16:19:21 2026 GMT Not After : May 27 16:19:21 2026 GMT Subject: CN=6a0ddf09-bdc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:8a:01:76:44:65:7b:57:df:fd:3f:b6:cd:a4: d6:72:e1:4e:09:b6:ab:1c:03:2d:52:73:4f:09:7a: 88:41:3a:ca:59:b5:9e:9d:df:81:9c:68:e2:86:93: 17:80:8d:ca:bd:75:31:85:10:f9:96:81:e3:28:c1: 7d:c0:14:4b:76:de:eb:db:c3:1a:5f:c5:9a:ad:ac: c0:af:76:8c:1a:13:f3:bc:92:e1:ab:5b:5d:a7:47: 79:3c:86:c1:ac:d9:ee:5a:60:ec:03:5d:1b:58:59: 78:54:ae:4f:d4:7a:4c:c8:1d:9d:12:ce:7e:cc:32: 24:7d:c1:16:0f:32:a0:3e:45:e9:f4:76:9d:d3:5a: 53:05:93:5b:14:75:b2:47:16:46:13:59:62:3e:7d: d6:98:e1:80:e2:08:ee:59:9d:52:a8:9a:36:05:6b: 2f:28:c8:ed:ca:f7:fc:34:03:1b:46:84:cf:62:90: 45:f0:e9:f0:16:f5:39:b0:4c:ec:71:c3:02:97:c8: 63:72:c0:ee:53:eb:c6:1d:94:f6:eb:ff:e5:e6:15: 67:da:2f:a3:ba:73:7a:87:e6:83:c6:b2:64:ef:07: 62:24:f5:00:93:79:f2:09:0d:a6:7e:9d:61:46:ba: 03:8d:2d:ba:97:02:83:fc:35:05:d1:bd:c2:f3:e9: 03:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:A3:AF:50:76:E6:65:9B:FE:A1:35:54:73:B0:68:E4:25:0D:79:38 X509v3 Authority Key Identifier: keyid:AA:63:2D:C4:02:A7:02:F7:9A:9C:36:93:E9:CC:46:C5:98:1E:E8:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmMtxAKnAveanDaT6cxGxZge6Ow.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:09:5c:99:a0:9f:03:22:0d:84:75:65:36:f8:54:5c:15:b0: a6:18:9c:4b:93:97:f6:85:f0:16:61:32:69:a5:d7:8c:35:47: 8a:85:32:89:a5:71:c2:c1:82:12:53:5b:a7:f3:91:20:0a:24: b4:72:31:be:7e:1a:39:27:af:a7:f9:20:be:fd:b8:d5:9c:51: 64:c8:20:49:a0:c2:ee:fd:3c:c6:1c:d1:10:07:f0:c6:8b:b9: 83:5c:73:2f:8a:5c:f2:74:a1:0a:2b:64:2f:49:70:52:eb:14: bd:fe:4a:14:2f:76:26:7c:19:b0:2d:f1:a6:0d:7d:7e:b3:0b: fb:27:93:e1:ba:c0:c4:ec:db:dc:50:fc:fb:51:95:fa:0d:0b: 5d:57:47:19:15:d9:a0:7f:54:71:a7:11:3e:21:f0:94:55:f9: ba:a6:e2:6b:6f:9b:0e:d7:71:e6:20:87:4f:80:7b:0d:3a:eb: 6e:c1:13:a5:76:a3:e2:fe:09:fe:bb:bb:b5:61:6e:4a:08:b6: e1:23:0a:af:cd:63:5e:4c:75:06:32:27:1d:54:eb:82:90:cf: da:98:a3:87:c3:bd:66:02:a8:d9:28:c2:6d:c4:3d:a4:dc:f5: 9b:7b:94:ae:d4:7c:f2:10:84:8d:2d:50:f5:41:0b:b6:6d:87: 96:04:bd:36 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGrEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURCQTIxMTAvBgNVBAUTKEFBNjMyREM0MDJBNzAyRjc5QTlDMzY5M0U5Q0M0NkM1 OTgxRUU4RUMwHhcNMjYwNTIwMTYxOTIxWhcNMjYwNTI3MTYxOTIxWjAYMRYwFAYD VQQDEw02YTBkZGYwOS1iZGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoYoBdkRle1ff/T+2zaTWcuFOCbarHAMtUnNPCXqIQTrKWbWend+BnGjihpMX gI3KvXUxhRD5loHjKMF9wBRLdt7r28MaX8WarazAr3aMGhPzvJLhq1tdp0d5PIbB rNnuWmDsA10bWFl4VK5P1HpMyB2dEs5+zDIkfcEWDzKgPkXp9Had01pTBZNbFHWy RxZGE1liPn3WmOGA4gjuWZ1SqJo2BWsvKMjtyvf8NAMbRoTPYpBF8OnwFvU5sEzs ccMCl8hjcsDuU+vGHZT26//l5hVn2i+junN6h+aDxrJk7wdiJPUAk3nyCQ2mfp1h RroDjS26lwKD/DUF0b3C8+kDvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLWjr1B2 5mWb/qE1VHOwaOQlDXk4MB8GA1UdIwQYMBaAFKpjLcQCpwL3mpw2k+nMRsWYHujs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREJBMi9ENjk1NDQxMjU1 M0IxMUU3QUEwRURFMkFDNEY5QUUwMi9xbU10eEFLbkF2ZWFuRGFUNmN4R3haZ2U2 T3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FtTXR4QUtuQXZlYW5EYVQ2Y3hHeFpnZTZPdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REJBMi9ENjk1NDQxMjU1M0IxMUU3QUEwRURFMkFDNEY5QUUwMi9xbU10eEFLbkF2 ZWFuRGFUNmN4R3haZ2U2T3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALAlcmaCfAyINhHVlNvhUXBWwphicS5OX9oXwFmEyaaXXjDVHioUyiaVxwsGC ElNbp/ORIAoktHIxvn4aOSevp/kgvv241ZxRZMggSaDC7v08xhzREAfwxou5g1xz L4pc8nShCitkL0lwUusUvf5KFC92JnwZsC3xpg19frML+yeT4brAxOzb3FD8+1GV +g0LXVdHGRXZoH9UcacRPiHwlFX5uqbia2+bDtdx5iCHT4B7DTrrbsETpXaj4v4J /ru7tWFuSgi24SMKr81jXkx1BjInHVTrgpDP2pijh8O9ZgKo2SjCbcQ9pNz1m3uU rtR88hCEjS1Q9UELtm2HlgS9Ng== -----END CERTIFICATE-----Generated at Thu May 21 10:37:37 2026 by rpki-client