$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft File: sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft (raw, json) Hash identifier: q/QYdlPG3rBzw+lQ+u6s6xFCKea9LeLK4+aO7k8jQOo= Subject key identifier: 0C:0B:BB:21:70:09:6B:90:49:69:D9:F8:E2:F1:76:0E:FC:79:C8:A9 Authority key identifier: B2:A2:5D:DE:1A:9E:C9:1B:59:98:6A:53:2F:78:83:54:36:18:32:48 Certificate issuer: /CN=A91BC966/serialNumber=B2A25DDE1A9EC91B59986A532F78835436183248 Certificate serial: 0CE5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqJd3hqeyRtZmGpTL3iDVDYYMkg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft Manifest number: 0CB0 Signing time: Wed 20 May 2026 18:36:50 +0000 Manifest this update: Wed 20 May 2026 18:36:49 +0000 Manifest next update: Wed 27 May 2026 18:36:49 +0000 Files and hashes: 1: sqJd3hqeyRtZmGpTL3iDVDYYMkg.crl (hash: ZSz85bTwPmzsYUGWRuTnzp9j3ZN2KnriwrzU/thnBlc=) 2: 5DA849821C1211EA819EA46EC4F9AE02.roa (hash: eCHx5TEwPytpGbIBlZulCq7A1nRaBvbKK495Pm+3Ngg=) 3: A6A53FA2D67E11EEAA2CA218C4F9AE02.roa (hash: BRmPmtc5QBOF2VogbiXT+Z/yISNL/WKoFANPMdmFsXw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.crl rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqJd3hqeyRtZmGpTL3iDVDYYMkg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 18:36:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3301 (0xce5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC966, serialNumber=B2A25DDE1A9EC91B59986A532F78835436183248 Validity Not Before: May 20 18:36:49 2026 GMT Not After : May 27 18:36:49 2026 GMT Subject: CN=6a0dff42-8444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:54:97:8a:74:3f:88:9f:ab:a0:0e:46:d5:bc: 8c:37:94:d4:6a:26:f9:48:a8:7e:07:cc:b4:a3:23: f5:9e:49:64:56:db:0b:00:1c:9c:df:20:17:18:44: ef:e0:cc:ac:d4:11:56:9a:36:ce:a2:ee:86:86:e2: e6:45:b3:af:da:74:f3:9c:54:e7:7f:f4:c7:ee:d4: 79:20:6d:27:d0:a5:d6:d4:8c:4e:ca:46:66:c9:a5: a2:48:00:5a:c4:13:63:e9:d3:75:51:7f:26:c4:5a: 97:13:97:ca:0a:47:85:cf:80:8c:b7:69:32:fb:76: c2:93:87:60:1f:74:f5:29:1c:5e:fd:34:00:b9:02: df:46:5b:80:75:98:47:6a:25:db:63:5b:ff:81:47: a4:0c:ba:12:88:ff:c2:70:f1:f7:c8:e9:a0:5e:18: e4:1c:24:53:8c:3f:af:8b:a2:ff:3a:ba:83:4b:ea: 33:4b:85:cd:b4:7f:a9:66:eb:0a:db:49:6e:c8:63: 81:23:14:9c:f8:73:0a:b7:12:81:8f:48:0a:82:30: cc:93:e5:85:17:ef:b9:ec:e4:db:da:dd:b4:ef:8f: 6e:d8:9b:dc:0f:28:62:65:96:b4:52:08:d3:08:92: 5b:4a:9e:f5:bc:ec:29:82:c1:d4:90:50:be:77:8d: 3e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:0B:BB:21:70:09:6B:90:49:69:D9:F8:E2:F1:76:0E:FC:79:C8:A9 X509v3 Authority Key Identifier: keyid:B2:A2:5D:DE:1A:9E:C9:1B:59:98:6A:53:2F:78:83:54:36:18:32:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqJd3hqeyRtZmGpTL3iDVDYYMkg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:42:56:44:40:70:ef:c8:d7:6a:d0:cc:20:93:67:c2:41:2f: cc:20:29:0d:bb:a5:cb:1c:77:2c:27:74:98:03:49:98:44:e4: cd:b1:7e:f9:40:ff:c3:82:4d:57:77:9a:d2:dd:07:13:50:a3: 96:f3:a7:23:9e:18:3e:a8:a8:22:eb:71:e5:d0:06:05:d3:75: e7:9d:b9:a3:1c:04:98:f4:b0:c2:33:da:2e:c3:36:8f:e9:8d: 89:36:db:95:46:58:24:c0:c6:08:83:6d:fc:68:24:e5:45:80: 5a:25:23:88:24:01:51:17:70:79:0e:75:81:dd:be:fe:37:17: ca:e8:e5:2d:39:3d:08:8d:25:f2:e5:5d:9e:fa:36:2f:2e:80: 86:62:5b:be:f6:56:78:a1:2b:0f:f9:c1:36:86:ca:08:34:16: cb:fb:0c:9a:ad:38:aa:a3:82:ba:8f:80:5e:f0:2a:75:9b:40: 71:a9:b5:93:39:62:13:18:51:f6:1a:f8:bc:f7:b8:e3:a5:9d: 15:61:2f:79:00:fb:bf:ae:cd:9d:ad:9e:35:eb:d9:ad:ec:3f: b2:0f:52:b0:c8:01:6c:e8:58:0c:1f:43:ec:d0:57:ca:8e:2e: 1a:bc:88:40:e0:0c:e0:2a:6c:69:57:8c:9d:d4:87:67:a6:0d: 9e:31:5d:ea -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM5NjYxMTAvBgNVBAUTKEIyQTI1RERFMUE5RUM5MUI1OTk4NkE1MzJGNzg4MzU0 MzYxODMyNDgwHhcNMjYwNTIwMTgzNjQ5WhcNMjYwNTI3MTgzNjQ5WjAYMRYwFAYD VQQDEw02YTBkZmY0Mi04NDQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0lSXinQ/iJ+roA5G1byMN5TUaib5SKh+B8y0oyP1nklkVtsLAByc3yAXGETv 4Mys1BFWmjbOou6GhuLmRbOv2nTznFTnf/TH7tR5IG0n0KXW1IxOykZmyaWiSABa xBNj6dN1UX8mxFqXE5fKCkeFz4CMt2ky+3bCk4dgH3T1KRxe/TQAuQLfRluAdZhH aiXbY1v/gUekDLoSiP/CcPH3yOmgXhjkHCRTjD+vi6L/OrqDS+ozS4XNtH+pZusK 20luyGOBIxSc+HMKtxKBj0gKgjDMk+WFF++57OTb2t20749u2JvcDyhiZZa0UgjT CJJbSp71vOwpgsHUkFC+d40+0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAwLuyFw CWuQSWnZ+OLxdg78ecipMB8GA1UdIwQYMBaAFLKiXd4anskbWZhqUy94g1Q2GDJI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzk2Ni9BMTk1MkJBMjFD MTExMUVBQjZDM0M3NkRDNEY5QUUwMi9zcUpkM2hxZXlSdFptR3BUTDNpRFZEWVlN a2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NxSmQzaHFleVJ0Wm1HcFRMM2lEVkRZWU1rZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Qzk2Ni9BMTk1MkJBMjFDMTExMUVBQjZDM0M3NkRDNEY5QUUwMi9zcUpkM2hxZXlS dFptR3BUTDNpRFZEWVlNa2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgUJWREBw78jXatDMIJNnwkEvzCApDbulyxx3LCd0mANJmETkzbF++UD/w4JN V3ea0t0HE1CjlvOnI54YPqioIutx5dAGBdN15525oxwEmPSwwjPaLsM2j+mNiTbb lUZYJMDGCINt/Ggk5UWAWiUjiCQBURdweQ51gd2+/jcXyujlLTk9CI0l8uVdnvo2 Ly6AhmJbvvZWeKErD/nBNobKCDQWy/sMmq04qqOCuo+AXvAqdZtAcam1kzliExhR 9hr4vPe446WdFWEveQD7v67Nna2eNevZrew/sg9SsMgBbOhYDB9D7NBXyo4uGryI QOAM4CpsaVeMndSHZ6YNnjFd6g== -----END CERTIFICATE-----Generated at Thu May 21 09:38:10 2026 by rpki-client