$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.mft File: qSFjXHST8hzSYJPVkDUQgC9ONYY.mft (raw, json) Hash identifier: 52Ryx6JeT7mqWP5dssYkcWjrhKz9hCVhahzUfabMGj0= Subject key identifier: 0F:5A:4C:69:EE:D1:52:A2:1C:97:85:36:2A:E8:EE:FA:79:87:C4:33 Authority key identifier: A9:21:63:5C:74:93:F2:1C:D2:60:93:D5:90:35:10:80:2F:4E:35:86 Certificate issuer: /CN=A91C1A4E/serialNumber=A921635C7493F21CD26093D5903510802F4E3586 Certificate serial: 0C35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFjXHST8hzSYJPVkDUQgC9ONYY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.mft Manifest number: 0C14 Signing time: Wed 20 May 2026 18:52:32 +0000 Manifest this update: Wed 20 May 2026 18:52:31 +0000 Manifest next update: Wed 27 May 2026 18:52:31 +0000 Files and hashes: 1: qSFjXHST8hzSYJPVkDUQgC9ONYY.crl (hash: N/UK3oPVg6EiFq2mbDVR2XI3lR5QXqEAr85KABrNWKo=) 2: 8610B9DCF33F11EEB412F210C4F9AE02.roa (hash: +qCBgSwgU8M+3DqJXTVNThr1zCfTVO4cctLLYlIo8ns=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.crl rsync://rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFjXHST8hzSYJPVkDUQgC9ONYY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 18:52:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3125 (0xc35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1A4E, serialNumber=A921635C7493F21CD26093D5903510802F4E3586 Validity Not Before: May 20 18:52:31 2026 GMT Not After : May 27 18:52:31 2026 GMT Subject: CN=6a0e02f0-2c5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c4:b1:8d:ba:c3:34:32:18:a1:29:ea:d3:7d: ab:fd:ec:80:28:49:ad:c8:29:1c:1e:3b:43:a1:91: 57:c8:10:68:a0:10:df:e0:76:b1:3e:33:3a:bc:30: 6a:48:8b:23:aa:5c:74:ab:b5:df:ba:de:c3:76:ee: 2c:84:9f:c5:0d:0f:3e:64:3b:96:ae:a0:96:c7:7c: 5c:af:b3:6a:92:55:58:2c:71:72:a0:6a:f8:b2:1d: 3c:50:8f:aa:93:a7:d4:f1:58:94:c2:4d:dc:15:d5: fc:48:46:05:43:7f:79:ed:19:bc:9c:81:4f:6b:b5: f1:b0:ad:c4:75:bb:b8:2d:74:d0:36:e5:58:f8:34: eb:19:82:21:73:f8:7c:89:21:c0:4c:d0:ee:61:aa: 8a:62:34:52:3b:ec:30:f2:6d:ca:4c:f9:aa:5a:f0: 74:28:c5:23:43:17:13:e7:41:d2:41:1a:7f:3e:ec: 36:6c:6c:c3:a5:3c:51:b2:9a:c9:46:b0:ac:1a:26: 46:99:49:9d:87:a7:fd:47:91:64:13:12:57:57:01: c1:a6:64:f5:81:b2:c1:62:bf:55:96:f8:31:1c:9a: 4d:a3:fd:20:16:d6:ce:a5:90:87:db:91:c2:0e:41: 7c:7e:1e:15:49:77:3e:50:8c:88:8c:c2:1c:5a:66: 6c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:5A:4C:69:EE:D1:52:A2:1C:97:85:36:2A:E8:EE:FA:79:87:C4:33 X509v3 Authority Key Identifier: keyid:A9:21:63:5C:74:93:F2:1C:D2:60:93:D5:90:35:10:80:2F:4E:35:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFjXHST8hzSYJPVkDUQgC9ONYY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:92:ac:7e:69:01:fe:eb:86:b4:00:66:53:21:6c:3e:87:9e: ce:b5:0b:78:57:5b:5d:ab:bc:eb:51:c7:d4:95:48:28:06:9e: 86:33:2a:b0:52:24:86:9e:a4:29:ec:f9:f4:fc:e5:af:c0:0a: 7c:11:21:e3:cf:c4:42:fa:93:d3:16:1a:f4:6a:cd:8c:6f:68: 8f:99:aa:c2:bf:d8:56:28:b2:6a:65:e5:8f:16:f2:cd:2a:36: de:5f:c8:fe:55:b2:3f:99:e1:c9:5b:3c:17:b7:2a:aa:8a:ed: 0f:f6:f8:1e:1c:49:6f:da:33:21:58:39:b1:87:d3:7c:3b:45: 1e:cf:ee:42:e9:8a:7a:ff:2b:ea:22:b5:f5:7f:75:a7:74:5b: 1d:ee:1c:f6:06:73:56:fa:72:af:1f:cc:fb:cf:20:1f:d5:66: ed:3e:71:4d:ce:e1:f4:88:54:e1:bb:95:78:e7:24:72:a1:16: 9e:dc:cc:fd:7e:75:4f:92:61:4e:9a:a8:e7:95:f8:0f:c5:79: 9f:7b:b1:c9:b3:4c:c0:a5:ff:f1:7c:4d:f4:6f:f8:cf:a7:80: f0:0a:74:24:4f:6d:92:1c:76:94:43:50:a0:6b:7a:bd:ab:69: 94:e8:59:bd:fc:f3:10:46:0d:25:0c:eb:34:80:26:2e:67:d3: 34:f0:5e:4e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDDUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFBNEUxMTAvBgNVBAUTKEE5MjE2MzVDNzQ5M0YyMUNEMjYwOTNENTkwMzUxMDgw MkY0RTM1ODYwHhcNMjYwNTIwMTg1MjMxWhcNMjYwNTI3MTg1MjMxWjAYMRYwFAYD VQQDEw02YTBlMDJmMC0yYzVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm8SxjbrDNDIYoSnq032r/eyAKEmtyCkcHjtDoZFXyBBooBDf4HaxPjM6vDBq SIsjqlx0q7Xfut7Ddu4shJ/FDQ8+ZDuWrqCWx3xcr7NqklVYLHFyoGr4sh08UI+q k6fU8ViUwk3cFdX8SEYFQ3957Rm8nIFPa7XxsK3Edbu4LXTQNuVY+DTrGYIhc/h8 iSHATNDuYaqKYjRSO+ww8m3KTPmqWvB0KMUjQxcT50HSQRp/Puw2bGzDpTxRsprJ RrCsGiZGmUmdh6f9R5FkExJXVwHBpmT1gbLBYr9VlvgxHJpNo/0gFtbOpZCH25HC DkF8fh4VSXc+UIyIjMIcWmZsFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA9aTGnu 0VKiHJeFNiro7vp5h8QzMB8GA1UdIwQYMBaAFKkhY1x0k/Ic0mCT1ZA1EIAvTjWG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUE0RS9BNDlCNEQ3NDM3 QzYxMUVBOUQ5NkFFNTFDNEY5QUUwMi9xU0ZqWEhTVDhoelNZSlBWa0RVUWdDOU9O WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FTRmpYSFNUOGh6U1lKUFZrRFVRZ0M5T05ZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUE0RS9BNDlCNEQ3NDM3QzYxMUVBOUQ5NkFFNTFDNEY5QUUwMi9xU0ZqWEhTVDho elNZSlBWa0RVUWdDOU9OWVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFpKsfmkB/uuGtABmUyFsPoeezrULeFdbXau861HH1JVIKAaehjMqsFIkhp6k Kez59Pzlr8AKfBEh48/EQvqT0xYa9GrNjG9oj5mqwr/YViiyamXljxbyzSo23l/I /lWyP5nhyVs8F7cqqortD/b4HhxJb9ozIVg5sYfTfDtFHs/uQumKev8r6iK19X91 p3RbHe4c9gZzVvpyrx/M+88gH9Vm7T5xTc7h9IhU4buVeOckcqEWntzM/X51T5Jh Tpqo55X4D8V5n3uxybNMwKX/8XxN9G/4z6eA8Ap0JE9tkhx2lENQoGt6vatplOhZ vfzzEEYNJQzrNIAmLmfTNPBeTg== -----END CERTIFICATE-----Generated at Thu May 21 10:29:05 2026 by rpki-client