$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3B89/D8356BACB07411EA87B60F73C4F9AE02/QpCYAlfGdws2CulWLaWJPGDa2nc.mft File: QpCYAlfGdws2CulWLaWJPGDa2nc.mft (raw, json) Hash identifier: 6UDBHfnBqYn6IH4QS9FzZEyE9S4UuettnoCCrtzgST0= Subject key identifier: EF:A6:0B:0C:89:53:5D:76:A2:29:52:73:F4:32:11:FE:15:CF:5D:7C Authority key identifier: 42:90:98:02:57:C6:77:0B:36:0A:E9:56:2D:A5:89:3C:60:DA:DA:77 Certificate issuer: /CN=A91C3B89/serialNumber=4290980257C6770B360AE9562DA5893C60DADA77 Certificate serial: 0989 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpCYAlfGdws2CulWLaWJPGDa2nc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3B89/D8356BACB07411EA87B60F73C4F9AE02/QpCYAlfGdws2CulWLaWJPGDa2nc.mft Manifest number: 0989 Signing time: Wed 20 May 2026 20:02:17 +0000 Manifest this update: Wed 20 May 2026 20:02:17 +0000 Manifest next update: Wed 27 May 2026 20:02:17 +0000 Files and hashes: 1: QpCYAlfGdws2CulWLaWJPGDa2nc.crl (hash: bPUwwXnshGsTqZK5+h/42Q/bKvkO5GRvFLBmqLPzYOw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3B89/D8356BACB07411EA87B60F73C4F9AE02/QpCYAlfGdws2CulWLaWJPGDa2nc.crl rsync://rpki.apnic.net/member_repository/A91C3B89/D8356BACB07411EA87B60F73C4F9AE02/QpCYAlfGdws2CulWLaWJPGDa2nc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpCYAlfGdws2CulWLaWJPGDa2nc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 20:02:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2441 (0x989) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3B89, serialNumber=4290980257C6770B360AE9562DA5893C60DADA77 Validity Not Before: May 20 20:02:17 2026 GMT Not After : May 27 20:02:17 2026 GMT Subject: CN=6a0e1349-9cbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3d:43:f4:61:7f:de:8b:e4:09:31:85:b4:16: 38:48:39:96:cf:79:e2:3d:a0:cd:7b:6a:8a:ed:6d: 56:ef:11:81:56:3c:37:04:54:bb:8f:30:23:3a:34: 5d:62:3a:4b:fa:14:d2:57:4e:ab:b7:e7:32:05:e8: 0e:02:2a:b3:64:09:43:f4:b3:00:37:14:e1:03:65: 68:0a:ca:41:bf:25:34:b5:2b:34:46:15:e3:47:e4: 59:a6:3c:96:78:49:d8:65:30:6a:3a:38:c0:e4:13: c3:57:19:62:ce:a4:ce:e1:31:42:d9:20:d5:8f:19: 6a:08:1a:6b:2d:4b:d1:0b:e8:48:33:25:6e:29:58: 26:98:23:ab:0e:06:ce:33:7e:12:22:37:8a:d4:30: a8:6f:33:2f:ba:f2:f8:36:c4:ce:a4:20:82:86:ac: 7b:ca:28:71:41:c2:8a:34:02:fb:f9:6a:bb:ae:67: ea:1f:c8:40:ca:8a:b0:7b:7a:9d:30:ed:35:59:fe: 38:eb:d5:ee:08:d5:f8:f8:b6:48:aa:8a:df:98:02: af:2f:db:f6:55:6b:fe:a2:08:1b:6f:25:80:bd:ab: 09:4d:c2:39:98:f7:4f:e5:0e:82:86:3e:2e:8b:f8: 85:39:19:08:f0:7e:2c:6e:61:9e:2b:58:d9:95:f8: ba:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:A6:0B:0C:89:53:5D:76:A2:29:52:73:F4:32:11:FE:15:CF:5D:7C X509v3 Authority Key Identifier: keyid:42:90:98:02:57:C6:77:0B:36:0A:E9:56:2D:A5:89:3C:60:DA:DA:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3B89/D8356BACB07411EA87B60F73C4F9AE02/QpCYAlfGdws2CulWLaWJPGDa2nc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpCYAlfGdws2CulWLaWJPGDa2nc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3B89/D8356BACB07411EA87B60F73C4F9AE02/QpCYAlfGdws2CulWLaWJPGDa2nc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:14:70:36:e8:0d:7b:ab:e6:95:54:fe:06:f3:06:b7:55:26: 42:7b:0b:37:18:ec:f0:c2:d3:b6:9f:8f:33:85:b7:f3:53:ce: a0:09:58:e7:b9:01:01:30:8a:4c:23:10:9e:67:06:d8:fe:72: 9b:1d:36:d2:e7:0f:a6:94:10:2d:1d:de:f1:84:72:3e:cc:81: c4:7c:a9:0b:05:8e:70:2a:7d:5b:87:6a:f5:0d:bd:95:8d:6a: ad:8e:de:1b:ac:76:83:7c:e7:8b:fb:8a:91:78:ca:1a:1f:72: 4a:73:d9:28:3e:b5:66:dd:99:38:f5:5d:a3:c3:5a:59:13:c7: c3:9c:79:95:bd:4d:c7:93:70:e3:44:e0:33:2c:a5:65:91:c8: 9c:b9:6f:00:8e:03:47:b6:f1:8e:30:7a:06:ea:0a:3d:68:1a: 2f:16:1c:b6:0c:86:41:48:06:cf:74:0d:db:17:e9:54:6c:b8: 16:d3:c7:54:b2:b4:bb:d2:e1:62:87:f2:08:02:9d:57:18:79: cd:b2:03:73:16:33:02:a6:cc:1c:38:b9:53:04:3d:9c:0f:5b: 45:dc:ec:bc:90:0c:78:4d:21:c0:f4:7d:be:2a:96:05:d6:d7: a4:be:d3:de:35:f0:a4:09:6a:63:43:59:28:98:40:fc:b0:26: 53:28:09:2a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNCODkxMTAvBgNVBAUTKDQyOTA5ODAyNTdDNjc3MEIzNjBBRTk1NjJEQTU4OTND NjBEQURBNzcwHhcNMjYwNTIwMjAwMjE3WhcNMjYwNTI3MjAwMjE3WjAYMRYwFAYD VQQDEw02YTBlMTM0OS05Y2JiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsz1D9GF/3ovkCTGFtBY4SDmWz3niPaDNe2qK7W1W7xGBVjw3BFS7jzAjOjRd YjpL+hTSV06rt+cyBegOAiqzZAlD9LMANxThA2VoCspBvyU0tSs0RhXjR+RZpjyW eEnYZTBqOjjA5BPDVxlizqTO4TFC2SDVjxlqCBprLUvRC+hIMyVuKVgmmCOrDgbO M34SIjeK1DCobzMvuvL4NsTOpCCChqx7yihxQcKKNAL7+Wq7rmfqH8hAyoqwe3qd MO01Wf4469XuCNX4+LZIqorfmAKvL9v2VWv+oggbbyWAvasJTcI5mPdP5Q6Chj4u i/iFORkI8H4sbmGeK1jZlfi6QQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO+mCwyJ U112oilSc/QyEf4Vz118MB8GA1UdIwQYMBaAFEKQmAJXxncLNgrpVi2liTxg2tp3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0I4OS9EODM1NkJBQ0Iw NzQxMUVBODdCNjBGNzNDNEY5QUUwMi9RcENZQWxmR2R3czJDdWxXTGFXSlBHRGEy bmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FwQ1lBbGZHZHdzMkN1bFdMYVdKUEdEYTJuYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0I4OS9EODM1NkJBQ0IwNzQxMUVBODdCNjBGNzNDNEY5QUUwMi9RcENZQWxmR2R3 czJDdWxXTGFXSlBHRGEybmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlhRwNugNe6vmlVT+BvMGt1UmQnsLNxjs8MLTtp+PM4W381POoAlY57kBATCK TCMQnmcG2P5ymx020ucPppQQLR3e8YRyPsyBxHypCwWOcCp9W4dq9Q29lY1qrY7e G6x2g3zni/uKkXjKGh9ySnPZKD61Zt2ZOPVdo8NaWRPHw5x5lb1Nx5Nw40TgMyyl ZZHInLlvAI4DR7bxjjB6BuoKPWgaLxYctgyGQUgGz3QN2xfpVGy4FtPHVLK0u9Lh YofyCAKdVxh5zbIDcxYzAqbMHDi5UwQ9nA9bRdzsvJAMeE0hwPR9viqWBdbXpL7T 3jXwpAlqY0NZKJhA/LAmUygJKg== -----END CERTIFICATE-----Generated at Thu May 21 10:15:32 2026 by rpki-client