$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0B89/FBF58362492811F1850958F6A5833773/qbDUr9uPeMPSyEfipHI6OFlXYoA.mft File: qbDUr9uPeMPSyEfipHI6OFlXYoA.mft (raw, json) Hash identifier: h/1pnxHLbbgXWpKTcRKBgzkDF7sZjpK7KS/AdAIdj9A= Subject key identifier: 1B:28:8D:F1:E0:75:03:7D:22:8B:74:93:A2:E8:EA:5E:6F:4C:B0:EC Authority key identifier: A9:B0:D4:AF:DB:8F:78:C3:D2:C8:47:E2:A4:72:3A:38:59:57:62:80 Certificate issuer: /CN=A91B0B89/serialNumber=A9B0D4AFDB8F78C3D2C847E2A4723A3859576280 Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbDUr9uPeMPSyEfipHI6OFlXYoA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0B89/FBF58362492811F1850958F6A5833773/qbDUr9uPeMPSyEfipHI6OFlXYoA.mft Manifest number: 09 Signing time: Tue 19 May 2026 09:03:59 +0000 Manifest this update: Tue 19 May 2026 09:03:58 +0000 Manifest next update: Tue 26 May 2026 09:03:58 +0000 Files and hashes: 1: qbDUr9uPeMPSyEfipHI6OFlXYoA.crl (hash: yPXzil8Yrzx6eJUEpxzDr0fWu+q6EfxW006EyIxKgCI=) 2: 5D089144492911F1B850B010A6833773.roa (hash: 7Omr/cVEKs+waddjhiEUfhIRfZGdS9UY5db1PiEBZhg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0B89/FBF58362492811F1850958F6A5833773/qbDUr9uPeMPSyEfipHI6OFlXYoA.crl rsync://rpki.apnic.net/member_repository/A91B0B89/FBF58362492811F1850958F6A5833773/qbDUr9uPeMPSyEfipHI6OFlXYoA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbDUr9uPeMPSyEfipHI6OFlXYoA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 May 2026 09:03:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0B89, serialNumber=A9B0D4AFDB8F78C3D2C847E2A4723A3859576280 Validity Not Before: May 19 09:03:58 2026 GMT Not After : May 26 09:03:58 2026 GMT Subject: CN=6a0c277e-7b22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ed:8f:fd:71:1c:32:78:91:76:f7:98:1a:cd: 06:af:48:72:38:5c:47:11:92:3e:18:7c:95:07:ce: 10:5d:0e:7a:05:c6:27:25:0e:9a:66:9e:f3:b1:b7: f8:cb:19:89:3d:89:98:33:52:33:c9:49:2a:e1:f6: f5:1a:81:e1:31:02:1b:3f:f9:6f:04:f5:a2:72:d5: e3:5b:ac:79:2f:f9:a0:d8:43:b3:e1:36:d0:e2:00: 00:53:7d:82:e5:93:d4:8d:a0:31:9a:fe:87:bc:f3: ae:ec:40:18:69:c2:31:32:8e:6c:4a:52:04:0e:58: 79:fa:ba:fa:a1:15:91:91:e1:92:69:84:cb:f3:54: a6:54:9b:1a:3a:6b:f9:99:e2:ab:e8:fd:83:b5:b5: 10:6f:e5:a6:d1:77:6d:cc:57:73:3c:a8:b1:7b:c9: 59:bc:12:5d:9c:b9:b8:f8:8a:da:ef:b0:68:c1:1e: b5:2c:22:77:74:25:0e:3e:25:7d:92:0b:dc:c7:af: 54:9d:42:cb:06:68:e2:2f:eb:8d:7d:8a:b4:7b:49: 5c:eb:5f:b8:be:32:9d:52:89:86:eb:f8:f4:1f:22: a0:d1:49:3d:15:19:75:ee:87:50:ef:51:1a:4b:d0: 92:10:4b:1b:5d:7a:fd:a2:b3:f4:b2:81:25:16:d1: ec:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:28:8D:F1:E0:75:03:7D:22:8B:74:93:A2:E8:EA:5E:6F:4C:B0:EC X509v3 Authority Key Identifier: keyid:A9:B0:D4:AF:DB:8F:78:C3:D2:C8:47:E2:A4:72:3A:38:59:57:62:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0B89/FBF58362492811F1850958F6A5833773/qbDUr9uPeMPSyEfipHI6OFlXYoA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbDUr9uPeMPSyEfipHI6OFlXYoA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0B89/FBF58362492811F1850958F6A5833773/qbDUr9uPeMPSyEfipHI6OFlXYoA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:84:3f:f4:5e:c9:ac:e6:a1:ca:f9:1a:a6:19:c1:4a:6c:c3: c1:aa:a4:77:69:a1:3a:bd:e4:42:1d:4d:01:2c:0c:77:08:9f: 4f:e0:a0:60:a3:b0:20:8f:7d:f6:d5:00:01:38:41:60:df:2d: ad:8a:57:a1:11:07:9d:98:d5:33:a8:66:11:44:6a:d0:10:b2: ab:90:61:6e:bb:a8:05:c3:eb:d0:45:d2:68:24:5e:80:b4:bb: d8:25:33:b8:44:5f:3a:5d:fa:eb:cd:51:19:5b:ec:67:c5:c6: 23:6e:f4:ba:bb:be:3d:22:d1:13:82:5e:de:cc:09:23:fe:a8: de:38:ac:95:3e:8c:54:b7:ce:6f:97:3a:1b:ad:78:cf:12:9e: 7e:84:b4:cb:a6:32:4a:85:e8:4b:52:07:f7:9b:6b:ab:af:19: 45:69:05:29:1e:5d:17:5d:f6:d5:a0:c3:5e:99:9d:f3:d4:16: 60:22:35:5d:3a:17:4b:3e:37:d5:84:57:f9:74:8b:77:b8:fb: b9:88:5f:16:88:f4:19:70:f1:19:a0:d2:de:f2:25:9d:7a:0e: 8a:8b:df:3f:ce:c6:77:32:5b:1c:79:14:77:18:33:e9:77:51: cd:2e:a0:5d:f6:f4:fd:fd:98:ad:f5:58:50:e6:92:d1:e9:3c: d5:79:0b:cf -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MEI4OTExMC8GA1UEBRMoQTlCMEQ0QUZEQjhGNzhDM0QyQzg0N0UyQTQ3MjNBMzg1 OTU3NjI4MDAeFw0yNjA1MTkwOTAzNThaFw0yNjA1MjYwOTAzNThaMBgxFjAUBgNV BAMTDTZhMGMyNzdlLTdiMjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDG7Y/9cRwyeJF295gazQavSHI4XEcRkj4YfJUHzhBdDnoFxiclDppmnvOxt/jL GYk9iZgzUjPJSSrh9vUageExAhs/+W8E9aJy1eNbrHkv+aDYQ7PhNtDiAABTfYLl k9SNoDGa/oe8867sQBhpwjEyjmxKUgQOWHn6uvqhFZGR4ZJphMvzVKZUmxo6a/mZ 4qvo/YO1tRBv5abRd23MV3M8qLF7yVm8El2cubj4itrvsGjBHrUsInd0JQ4+JX2S C9zHr1SdQssGaOIv6419irR7SVzrX7i+Mp1SiYbr+PQfIqDRST0VGXXuh1DvURpL 0JIQSxtdev2is/SygSUW0ewxAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUGyiN8eB1 A30ii3SToujqXm9MsOwwHwYDVR0jBBgwFoAUqbDUr9uPeMPSyEfipHI6OFlXYoAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIwQjg5L0ZCRjU4MzYyNDky ODExRjE4NTA5NThGNkE1ODMzNzczL3FiRFVyOXVQZU1QU3lFZmlwSEk2T0ZsWFlv QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcWJEVXI5dVBlTVBTeUVmaXBISTZPRmxYWW9BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIw Qjg5L0ZCRjU4MzYyNDkyODExRjE4NTA5NThGNkE1ODMzNzczL3FiRFVyOXVQZU1Q U3lFZmlwSEk2T0ZsWFlvQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCbhD/0Xsms5qHK+RqmGcFKbMPBqqR3aaE6veRCHU0BLAx3CJ9P4KBgo7Agj332 1QABOEFg3y2tilehEQedmNUzqGYRRGrQELKrkGFuu6gFw+vQRdJoJF6AtLvYJTO4 RF86XfrrzVEZW+xnxcYjbvS6u749ItETgl7ezAkj/qjeOKyVPoxUt85vlzobrXjP Ep5+hLTLpjJKhehLUgf3m2urrxlFaQUpHl0XXfbVoMNemZ3z1BZgIjVdOhdLPjfV hFf5dIt3uPu5iF8WiPQZcPEZoNLe8iWdeg6Ki98/zsZ3MlsceRR3GDPpd1HNLqBd 9vT9/Zit9VhQ5pLR6TzVeQvP -----END CERTIFICATE-----Generated at Thu May 21 09:34:20 2026 by rpki-client