$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.mft File: QOlPucJEwgzdpE57Dop6cZqXdA8.mft (raw, json) Hash identifier: uq8/dbAJSQWhDeJpNFJzvoU0Y/KynPMRpRe+poh+IYE= Subject key identifier: 70:70:EE:7E:DA:04:AF:C2:76:EB:D5:1A:50:ED:89:C6:5E:D2:75:E3 Authority key identifier: 40:E9:4F:B9:C2:44:C2:0C:DD:A4:4E:7B:0E:8A:7A:71:9A:97:74:0F Certificate issuer: /CN=A91BA2AB/serialNumber=40E94FB9C244C20CDDA44E7B0E8A7A719A97740F Certificate serial: 023D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlPucJEwgzdpE57Dop6cZqXdA8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.mft Manifest number: 0239 Signing time: Tue 23 Jun 2026 02:41:19 +0000 Manifest this update: Tue 23 Jun 2026 02:41:19 +0000 Manifest next update: Tue 30 Jun 2026 02:41:19 +0000 Files and hashes: 1: QOlPucJEwgzdpE57Dop6cZqXdA8.crl (hash: uy8NqAFYaTG/BBuAxXVQwkWeJ+RZlgm8xm1jkCbRP94=) 2: 7A8706087CA011EF8491607DC4F9AE02.roa (hash: NEAODUTKeBNCWNog3dkgj4g38ALv10sbj1oaLjD2vUI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.crl rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlPucJEwgzdpE57Dop6cZqXdA8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Jun 2026 02:41:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 573 (0x23d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA2AB, serialNumber=40E94FB9C244C20CDDA44E7B0E8A7A719A97740F Validity Not Before: Jun 23 02:41:19 2026 GMT Not After : Jun 30 02:41:19 2026 GMT Subject: CN=6a39f24f-1777 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f2:d9:f6:d3:4d:3a:05:6f:95:a7:ea:30:f5: 76:ea:5a:0d:3f:a3:39:83:5d:26:b0:df:2a:4f:69: db:b9:85:40:f0:61:f7:cb:f9:e2:b1:9d:5a:90:96: 6c:d6:ce:1a:9b:a6:14:18:0a:e5:ad:01:76:a7:1e: 4e:c1:0b:95:f8:5c:a3:b8:90:5a:70:d4:bd:3c:6d: 64:08:0d:4b:d3:56:7d:a8:bd:6b:25:0a:33:64:73: c5:c9:20:98:8c:f8:d8:f0:7d:7d:fa:0f:a8:79:50: b9:0e:d1:49:f9:9c:e9:72:66:f9:55:6f:a4:61:d2: e6:f8:c3:52:e6:67:f8:63:31:86:8c:e4:14:44:b0: 78:d4:bc:79:7f:15:45:08:b1:1a:e0:f8:24:bc:b5: df:86:dd:91:35:ca:98:e0:f0:99:90:de:f4:f3:5f: 35:10:d1:ac:29:a5:d8:41:d8:28:0d:18:3c:21:f7: 84:2b:9a:30:59:14:30:11:c0:ad:0e:0a:80:68:31: 2c:77:cc:d1:90:de:92:77:c9:0e:8d:31:3a:ba:fd: 0e:2f:b9:7b:6d:2f:eb:39:bb:5b:ba:16:da:d5:e4: 79:01:14:a9:3a:de:57:aa:9e:9e:9d:3b:e4:61:cd: eb:20:9c:97:3d:b1:3f:de:2d:b7:d6:b2:4d:1c:44: 69:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:70:EE:7E:DA:04:AF:C2:76:EB:D5:1A:50:ED:89:C6:5E:D2:75:E3 X509v3 Authority Key Identifier: keyid:40:E9:4F:B9:C2:44:C2:0C:DD:A4:4E:7B:0E:8A:7A:71:9A:97:74:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlPucJEwgzdpE57Dop6cZqXdA8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:cc:2c:28:91:d9:7a:ab:c1:f7:0a:6e:ac:0f:5d:bb:4e:4d: f4:56:f0:65:83:ae:54:14:08:39:fb:52:5b:ac:f6:a7:47:fd: 67:60:df:15:4f:15:ed:bf:4b:08:75:5d:34:e3:dc:cb:4f:e4: 7c:b5:ff:6b:cd:76:cc:75:61:c0:3c:52:ba:28:b2:e6:45:3c: 00:d2:0a:8c:6c:72:96:33:62:97:9f:50:83:f1:02:95:08:b8: 7c:2a:2b:1f:5e:48:10:ec:8a:7c:8b:75:93:28:00:3d:bd:3b: e7:ac:6f:d3:01:48:e3:45:0b:e8:7b:7e:c0:b7:d5:ed:80:a2: 02:0a:5c:f3:b7:02:64:74:aa:aa:f6:23:15:a7:39:52:a8:b1: 48:83:24:ae:6c:38:e6:85:b5:ac:1a:ce:4d:f9:df:84:ec:41: 17:3f:b1:99:01:40:eb:03:ec:6f:72:0d:8a:c3:a5:61:53:cf: d6:7a:56:41:31:dc:a4:56:39:f0:7d:97:4d:aa:fe:9c:52:9a: a8:6b:45:01:60:dd:06:41:a2:a6:b3:56:da:9f:ed:5f:76:40: 3b:90:a8:5b:e5:b5:ed:d8:3f:55:d3:f5:80:4e:ef:85:8e:10: 7d:dc:b4:f9:9e:e9:e9:b8:3b:99:78:05:68:20:d3:40:68:72: 33:53:66:2e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkEyQUIxMTAvBgNVBAUTKDQwRTk0RkI5QzI0NEMyMENEREE0NEU3QjBFOEE3QTcx OUE5Nzc0MEYwHhcNMjYwNjIzMDI0MTE5WhcNMjYwNjMwMDI0MTE5WjAYMRYwFAYD VQQDEw02YTM5ZjI0Zi0xNzc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzfLZ9tNNOgVvlafqMPV26loNP6M5g10msN8qT2nbuYVA8GH3y/nisZ1akJZs 1s4am6YUGArlrQF2px5OwQuV+FyjuJBacNS9PG1kCA1L01Z9qL1rJQozZHPFySCY jPjY8H19+g+oeVC5DtFJ+Zzpcmb5VW+kYdLm+MNS5mf4YzGGjOQURLB41Lx5fxVF CLEa4PgkvLXfht2RNcqY4PCZkN708181ENGsKaXYQdgoDRg8IfeEK5owWRQwEcCt DgqAaDEsd8zRkN6Sd8kOjTE6uv0OL7l7bS/rObtbuhba1eR5ARSpOt5Xqp6enTvk Yc3rIJyXPbE/3i231rJNHERpUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHBw7n7a BK/CduvVGlDticZe0nXjMB8GA1UdIwQYMBaAFEDpT7nCRMIM3aROew6KenGal3QP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTJBQi8xMTFFNTVFMDA5 N0UxMUVFQUU3RjM1MUZDNEY5QUUwMi9RT2xQdWNKRXdnemRwRTU3RG9wNmNacVhk QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FPbFB1Y0pFd2d6ZHBFNTdEb3A2Y1pxWGRBOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTJBQi8xMTFFNTVFMDA5N0UxMUVFQUU3RjM1MUZDNEY5QUUwMi9RT2xQdWNKRXdn emRwRTU3RG9wNmNacVhkQTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKswsKJHZeqvB9wpurA9du05N9FbwZYOuVBQIOftSW6z2p0f9Z2DfFU8V7b9L CHVdNOPcy0/kfLX/a812zHVhwDxSuiiy5kU8ANIKjGxyljNil59Qg/EClQi4fCor H15IEOyKfIt1kygAPb0756xv0wFI40UL6Ht+wLfV7YCiAgpc87cCZHSqqvYjFac5 UqixSIMkrmw45oW1rBrOTfnfhOxBFz+xmQFA6wPsb3INisOlYVPP1npWQTHcpFY5 8H2XTar+nFKaqGtFAWDdBkGiprNW2p/tX3ZAO5CoW+W17dg/VdP1gE7vhY4Qfdy0 +Z7p6bg7mXgFaCDTQGhyM1NmLg== -----END CERTIFICATE-----Generated at Wed Jun 24 11:23:41 2026 by rpki-client