$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6A04/30D77996C9AE11F0BA222745C4F9AE02/QVaOgAk79NEF6TJNX4ISRTGsQT8.mft File: QVaOgAk79NEF6TJNX4ISRTGsQT8.mft (raw, json) Hash identifier: Q1pJqxDJhryYdl2pYCs459OeqONon7Qif+DB23iRc6c= Subject key identifier: 10:02:01:48:44:49:CF:47:F7:B6:13:35:4B:23:EE:56:CD:1F:77:32 Authority key identifier: 41:56:8E:80:09:3B:F4:D1:05:E9:32:4D:5F:82:12:45:31:AC:41:3F Certificate issuer: /CN=A91B6A04/serialNumber=41568E80093BF4D105E9324D5F82124531AC413F Certificate serial: 60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVaOgAk79NEF6TJNX4ISRTGsQT8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6A04/30D77996C9AE11F0BA222745C4F9AE02/QVaOgAk79NEF6TJNX4ISRTGsQT8.mft Manifest number: 5F Signing time: Tue 19 May 2026 07:57:48 +0000 Manifest this update: Tue 19 May 2026 07:57:48 +0000 Manifest next update: Tue 26 May 2026 07:57:48 +0000 Files and hashes: 1: QVaOgAk79NEF6TJNX4ISRTGsQT8.crl (hash: 6/fxADEhiZ+WiM04VPpMJoYSP8HbKg6guqZSgL4KSsA=) 2: CC22B2AA26A411F18AD5785BC0833773.roa (hash: ONSQA97L2ArdKzlTZtF0u83bufLlLinNTHkHJvb1UuM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6A04/30D77996C9AE11F0BA222745C4F9AE02/QVaOgAk79NEF6TJNX4ISRTGsQT8.crl rsync://rpki.apnic.net/member_repository/A91B6A04/30D77996C9AE11F0BA222745C4F9AE02/QVaOgAk79NEF6TJNX4ISRTGsQT8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVaOgAk79NEF6TJNX4ISRTGsQT8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 May 2026 07:57:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 96 (0x60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6A04, serialNumber=41568E80093BF4D105E9324D5F82124531AC413F Validity Not Before: May 19 07:57:48 2026 GMT Not After : May 26 07:57:48 2026 GMT Subject: CN=6a0c17fc-98a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d7:f3:6e:09:bf:f8:cc:36:2c:44:0d:d4:c4: 11:f6:47:31:02:e0:5b:7c:2e:73:94:f2:3e:6d:c4: a0:2e:af:53:2a:12:84:84:8f:04:c4:b7:4d:3b:04: c9:8c:17:73:cd:81:4b:a7:e8:bc:22:e6:cd:7d:f4: 6c:be:6a:27:5d:8a:db:1e:fa:b5:85:84:95:80:1f: 96:cb:0e:5d:aa:5e:4e:74:e5:81:8a:28:e1:3a:d1: 16:c3:a4:f7:8a:5f:d3:48:e0:25:e5:bb:85:1a:a6: 7c:4d:24:fa:44:2d:6c:b6:a8:62:95:7f:21:53:9f: e5:27:83:47:79:a1:2b:37:83:eb:f3:c0:74:8b:c8: d9:b1:cb:27:af:15:89:ce:b0:a4:39:b7:1b:b6:69: 08:49:83:01:70:d2:26:e3:92:c4:58:03:41:ba:2b: 73:bf:b6:54:10:92:7a:bb:05:ac:8c:f3:ee:1f:6d: 66:9f:e7:18:1e:0f:09:0b:42:9f:9c:38:8a:77:29: 72:c2:d4:e3:15:0c:ad:4d:b1:5b:2a:17:d5:29:33: 7a:6c:d2:4a:01:bf:6e:71:b0:8b:82:95:4a:e4:c3: db:b8:e0:1f:48:6c:dd:b3:fe:00:52:f1:d7:e5:23: 18:b7:9a:70:85:a9:7f:98:e3:37:10:78:f2:07:5c: be:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:02:01:48:44:49:CF:47:F7:B6:13:35:4B:23:EE:56:CD:1F:77:32 X509v3 Authority Key Identifier: keyid:41:56:8E:80:09:3B:F4:D1:05:E9:32:4D:5F:82:12:45:31:AC:41:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6A04/30D77996C9AE11F0BA222745C4F9AE02/QVaOgAk79NEF6TJNX4ISRTGsQT8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVaOgAk79NEF6TJNX4ISRTGsQT8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6A04/30D77996C9AE11F0BA222745C4F9AE02/QVaOgAk79NEF6TJNX4ISRTGsQT8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:fa:35:a2:7f:52:58:66:c3:1d:c4:00:d5:b8:e6:b5:33:7c: d2:b5:dd:cd:12:fc:35:fb:93:2e:4c:91:e6:ed:53:c6:0f:5a: 3d:5d:ce:ac:09:c4:f5:db:59:e7:a7:91:47:d8:33:27:dd:f8: a2:3c:61:01:ba:5a:a7:c0:92:ee:1c:84:92:14:d0:96:b3:78: 5d:ff:4b:01:87:54:66:61:88:f7:fa:a9:8d:24:d5:1a:46:76: 20:ea:48:09:83:6e:72:7b:38:29:b1:56:96:a7:05:02:c6:1a: c3:79:24:2c:23:85:7a:61:8f:f9:4a:61:ca:bb:95:6c:6b:24: 80:52:a7:ab:d7:43:c4:28:61:30:62:27:8f:51:a1:70:71:6d: 45:9d:0b:24:e4:5a:a8:a4:6f:95:1c:5c:74:3d:44:c7:c5:92: 9c:1e:ad:e8:c9:02:00:f4:d4:cd:6e:3b:dd:31:3f:8a:ba:8b: e0:2e:50:82:0c:e5:3b:a4:50:3d:db:3c:76:8b:c9:b7:31:15: 88:93:3a:b9:10:01:21:97:61:8c:28:74:e5:fe:84:44:67:e5: 23:c4:50:f6:6b:b3:6d:8f:de:b9:b1:fb:ba:5c:2f:9c:c2:c2: 4d:62:63:ee:29:34:eb:56:85:a1:83:42:a3:fa:10:a6:5d:4b: ee:be:c6:34 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBYDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NkEwNDExMC8GA1UEBRMoNDE1NjhFODAwOTNCRjREMTA1RTkzMjRENUY4MjEyNDUz MUFDNDEzRjAeFw0yNjA1MTkwNzU3NDhaFw0yNjA1MjYwNzU3NDhaMBgxFjAUBgNV BAMTDTZhMGMxN2ZjLTk4YTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDD1/NuCb/4zDYsRA3UxBH2RzEC4Ft8LnOU8j5txKAur1MqEoSEjwTEt007BMmM F3PNgUun6Lwi5s199Gy+aidditse+rWFhJWAH5bLDl2qXk505YGKKOE60RbDpPeK X9NI4CXlu4UapnxNJPpELWy2qGKVfyFTn+Ung0d5oSs3g+vzwHSLyNmxyyevFYnO sKQ5txu2aQhJgwFw0ibjksRYA0G6K3O/tlQQknq7BayM8+4fbWaf5xgeDwkLQp+c OIp3KXLC1OMVDK1NsVsqF9UpM3ps0koBv25xsIuClUrkw9u44B9IbN2z/gBS8dfl Ixi3mnCFqX+Y4zcQePIHXL4PAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUEAIBSERJ z0f3thM1SyPuVs0fdzIwHwYDVR0jBBgwFoAUQVaOgAk79NEF6TJNX4ISRTGsQT8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2QTA0LzMwRDc3OTk2QzlB RTExRjBCQTIyMjc0NUM0RjlBRTAyL1FWYU9nQWs3OU5FRjZUSk5YNElTUlRHc1FU OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUVZhT2dBazc5TkVGNlRKTlg0SVNSVEdzUVQ4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2 QTA0LzMwRDc3OTk2QzlBRTExRjBCQTIyMjc0NUM0RjlBRTAyL1FWYU9nQWs3OU5F RjZUSk5YNElTUlRHc1FUOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA0+jWif1JYZsMdxADVuOa1M3zStd3NEvw1+5MuTJHm7VPGD1o9Xc6sCcT121nn p5FH2DMn3fiiPGEBulqnwJLuHISSFNCWs3hd/0sBh1RmYYj3+qmNJNUaRnYg6kgJ g25yezgpsVaWpwUCxhrDeSQsI4V6YY/5SmHKu5VsaySAUqer10PEKGEwYiePUaFw cW1FnQsk5FqopG+VHFx0PUTHxZKcHq3oyQIA9NTNbjvdMT+KuovgLlCCDOU7pFA9 2zx2i8m3MRWIkzq5EAEhl2GMKHTl/oREZ+UjxFD2a7Ntj965sfu6XC+cwsJNYmPu KTTrVoWhg0Kj+hCmXUvuvsY0 -----END CERTIFICATE-----Generated at Thu May 21 09:38:12 2026 by rpki-client