$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8833/D944369E1ABE11F1B69EC140363D8C67/qEvZ3QdcIKR7wRCKk02GCHtZhsc.mft File: qEvZ3QdcIKR7wRCKk02GCHtZhsc.mft (raw, json) Hash identifier: bXilFQhiecRpfCjI6RpGOA2S7trR+v+OwAfbLVc+vos= Subject key identifier: 3D:8E:E1:37:94:48:BE:D8:06:49:06:22:8F:66:FC:EC:F0:CB:92:47 Authority key identifier: A8:4B:D9:DD:07:5C:20:A4:7B:C1:10:8A:93:4D:86:08:7B:59:86:C7 Certificate issuer: /CN=A91B8833/serialNumber=A84BD9DD075C20A47BC1108A934D86087B5986C7 Certificate serial: 3D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qEvZ3QdcIKR7wRCKk02GCHtZhsc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8833/D944369E1ABE11F1B69EC140363D8C67/qEvZ3QdcIKR7wRCKk02GCHtZhsc.mft Manifest number: 35 Signing time: Mon 01 Jun 2026 09:30:22 +0000 Manifest this update: Mon 01 Jun 2026 09:30:22 +0000 Manifest next update: Mon 08 Jun 2026 09:30:22 +0000 Files and hashes: 1: qEvZ3QdcIKR7wRCKk02GCHtZhsc.crl (hash: WgGd99EHthzeAIcBZA7LAA0L9o0dRG+5zHZagU31L9k=) 2: ECE8AB3C1ACB11F1B8C39BC73A3D8C67.roa (hash: 1VgHobz4nzrs5NBqb89qRpxnur9wCmTVYrTP5UDXUqY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8833/D944369E1ABE11F1B69EC140363D8C67/qEvZ3QdcIKR7wRCKk02GCHtZhsc.crl rsync://rpki.apnic.net/member_repository/A91B8833/D944369E1ABE11F1B69EC140363D8C67/qEvZ3QdcIKR7wRCKk02GCHtZhsc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qEvZ3QdcIKR7wRCKk02GCHtZhsc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 09:30:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8833, serialNumber=A84BD9DD075C20A47BC1108A934D86087B5986C7 Validity Not Before: Jun 1 09:30:22 2026 GMT Not After : Jun 8 09:30:22 2026 GMT Subject: CN=6a1d512e-4363 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a7:b8:21:0b:e4:08:12:8d:46:0e:2b:34:9d: d2:d8:c1:3f:cc:e2:cf:d7:80:c2:d9:ee:ad:f2:8f: c8:39:7f:5e:f8:5e:1e:17:4e:1f:4f:da:e5:58:01: 13:38:63:e8:a9:e3:d3:c9:87:c5:36:c0:d3:44:e4: 24:4d:39:23:f8:f5:2f:4b:40:d1:00:56:85:ae:70: 07:d1:d0:35:c3:1f:f8:02:ff:08:b5:b8:d9:b2:66: d7:33:c1:6b:e0:1c:24:4b:f7:b1:11:c9:8c:c2:49: b6:c2:fe:85:7e:fc:c9:0c:d7:41:0b:07:65:a6:2f: e3:3e:78:25:53:aa:5d:9a:30:85:c9:53:b5:27:e1: c1:09:69:13:2f:3d:f3:16:ae:33:55:66:39:8f:5a: 1d:3a:7c:f4:94:4d:59:99:a0:48:19:81:6d:90:cf: 77:4b:c0:5a:49:9b:b2:e7:68:90:48:be:f3:fe:6c: 29:a5:af:ea:6e:fa:2c:71:1e:9b:f3:ef:21:51:ec: 39:7f:52:63:81:36:1b:0d:d9:20:e4:ce:2f:14:ad: f8:40:e6:ed:88:e6:e3:c1:bd:09:e4:a5:dd:3c:fe: 36:ee:d6:b9:31:5d:cc:b9:3a:0a:ad:39:db:e1:e7: f2:61:53:f6:77:fe:1a:9d:df:e1:67:19:42:11:9e: ee:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:8E:E1:37:94:48:BE:D8:06:49:06:22:8F:66:FC:EC:F0:CB:92:47 X509v3 Authority Key Identifier: keyid:A8:4B:D9:DD:07:5C:20:A4:7B:C1:10:8A:93:4D:86:08:7B:59:86:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8833/D944369E1ABE11F1B69EC140363D8C67/qEvZ3QdcIKR7wRCKk02GCHtZhsc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qEvZ3QdcIKR7wRCKk02GCHtZhsc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8833/D944369E1ABE11F1B69EC140363D8C67/qEvZ3QdcIKR7wRCKk02GCHtZhsc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:ca:2c:db:d2:ea:33:83:69:3b:32:d3:f3:0a:e1:56:27:e8: fe:4e:df:69:e8:c8:7a:09:49:9a:c9:4d:a5:7e:1d:20:ed:e6: 97:71:61:c3:a8:b7:c0:80:45:a1:6a:d4:83:be:c8:de:d5:35: b6:da:ed:3b:cc:ed:79:4c:28:54:c0:29:20:bb:25:8b:20:d0: cc:cb:73:cf:35:f1:03:c1:68:17:6a:89:2b:83:98:50:e1:62: 56:5b:45:80:50:5c:79:7e:16:e9:c8:5f:1d:fe:22:79:58:3d: d3:31:d5:14:c1:44:51:55:03:9d:bb:ec:07:fb:be:4d:ac:00: ff:74:41:08:b7:0e:9d:46:ba:a7:ea:e2:53:a4:c4:b0:bb:20: 69:51:68:c1:bd:31:07:81:fa:ad:23:8f:81:45:61:e8:31:b4: d4:45:9b:3b:32:41:38:0e:05:f9:90:ac:9a:ef:a4:a2:cc:d2: 8e:cc:fc:bd:21:14:b4:fe:cd:80:72:4b:b7:73:bf:59:a1:fd: 32:e5:11:f1:e0:7c:cb:c3:95:c0:c9:c4:48:ce:64:42:49:be: 20:20:50:65:b5:48:79:e4:24:ee:ad:d0:2c:9e:f5:ac:1f:89: 1b:8b:b1:6c:28:6d:7c:a7:77:82:8f:fa:ae:32:3a:01:ba:f5: 86:21:d4:4c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC ODgzMzExMC8GA1UEBRMoQTg0QkQ5REQwNzVDMjBBNDdCQzExMDhBOTM0RDg2MDg3 QjU5ODZDNzAeFw0yNjA2MDEwOTMwMjJaFw0yNjA2MDgwOTMwMjJaMBgxFjAUBgNV BAMTDTZhMWQ1MTJlLTQzNjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCup7ghC+QIEo1GDis0ndLYwT/M4s/XgMLZ7q3yj8g5f174Xh4XTh9P2uVYARM4 Y+ip49PJh8U2wNNE5CRNOSP49S9LQNEAVoWucAfR0DXDH/gC/wi1uNmyZtczwWvg HCRL97ERyYzCSbbC/oV+/MkM10ELB2WmL+M+eCVTql2aMIXJU7Un4cEJaRMvPfMW rjNVZjmPWh06fPSUTVmZoEgZgW2Qz3dLwFpJm7LnaJBIvvP+bCmlr+pu+ixxHpvz 7yFR7Dl/UmOBNhsN2SDkzi8UrfhA5u2I5uPBvQnkpd08/jbu1rkxXcy5OgqtOdvh 5/JhU/Z3/hqd3+FnGUIRnu43AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUPY7hN5RI vtgGSQYij2b87PDLkkcwHwYDVR0jBBgwFoAUqEvZ3QdcIKR7wRCKk02GCHtZhscw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4ODMzL0Q5NDQzNjlFMUFC RTExRjFCNjlFQzE0MDM2M0Q4QzY3L3FFdlozUWRjSUtSN3dSQ0trMDJHQ0h0Wmhz Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcUV2WjNRZGNJS1I3d1JDS2swMkdDSHRaaHNjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4 ODMzL0Q5NDQzNjlFMUFCRTExRjFCNjlFQzE0MDM2M0Q4QzY3L3FFdlozUWRjSUtS N3dSQ0trMDJHQ0h0WmhzYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA9yizb0uozg2k7MtPzCuFWJ+j+Tt9p6Mh6CUmayU2lfh0g7eaXcWHDqLfAgEWh atSDvsje1TW22u07zO15TChUwCkguyWLINDMy3PPNfEDwWgXaokrg5hQ4WJWW0WA UFx5fhbpyF8d/iJ5WD3TMdUUwURRVQOdu+wH+75NrAD/dEEItw6dRrqn6uJTpMSw uyBpUWjBvTEHgfqtI4+BRWHoMbTURZs7MkE4DgX5kKya76SizNKOzPy9IRS0/s2A cku3c79Zof0y5RHx4HzLw5XAycRIzmRCSb4gIFBltUh55CTurdAsnvWsH4kbi7Fs KG18p3eCj/quMjoBuvWGIdRM -----END CERTIFICATE-----Generated at Tue Jun 2 21:20:03 2026 by rpki-client