$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.mft File: q1PZkoECuRnbfFRlyN1f8mZ0Q7M.mft (raw, json) Hash identifier: y/UGk1J1+RFhgbc+05LIIMk7uZGYZ+4sXdDp/kH57tI= Subject key identifier: 1B:0D:E9:CC:BD:B9:02:A0:B1:98:73:14:78:21:57:D1:BF:39:2A:06 Authority key identifier: AB:53:D9:92:81:02:B9:19:DB:7C:54:65:C8:DD:5F:F2:66:74:43:B3 Certificate issuer: /CN=A91C7E5B/serialNumber=AB53D9928102B919DB7C5465C8DD5FF2667443B3 Certificate serial: CE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.mft Manifest number: C4 Signing time: Thu 21 May 2026 07:07:01 +0000 Manifest this update: Thu 21 May 2026 07:07:00 +0000 Manifest next update: Thu 28 May 2026 07:07:00 +0000 Files and hashes: 1: q1PZkoECuRnbfFRlyN1f8mZ0Q7M.crl (hash: JbJDNyX147Kv8Eu4lgD1pqBXLn/tJWjOGC082GtfGLM=) 2: 1FC17CE2EB2D11F0971959663D6F56BC.roa (hash: w/3re6+mcHn3z7mWQlt9gMEkLcEqozWFLvA0qzfndLw=) 3: C3DCFE54EB2911F0BD7173483B6F56BC.roa (hash: GRUkISuSjrdPycV7YoKPvCtNvhdJEKU1KQQr0iDkDpg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.crl rsync://rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 07:07:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 206 (0xce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7E5B, serialNumber=AB53D9928102B919DB7C5465C8DD5FF2667443B3 Validity Not Before: May 21 07:07:00 2026 GMT Not After : May 28 07:07:00 2026 GMT Subject: CN=6a0eaf15-bf42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:59:a6:f4:73:38:55:d8:58:4c:9c:b5:f4:36: 19:7a:38:cc:33:c3:8d:9c:f4:1a:49:ac:73:cb:2b: 01:91:d5:1b:11:e1:0b:9b:3d:0e:6e:c7:83:78:ce: 1c:01:ad:e6:96:10:64:f0:44:ce:67:4b:c7:52:68: 8b:f9:e5:aa:df:28:ed:36:66:3d:e0:32:c3:39:b6: b0:99:2e:c0:e0:dc:8f:89:3c:62:05:4c:74:4a:b1: 63:f7:f0:24:e5:62:15:c9:4a:6f:70:11:fa:f6:11: 91:d4:a1:34:76:c0:8d:9f:b7:27:fd:af:b5:9a:9c: a7:81:27:e8:eb:5a:b4:74:6e:58:3d:88:e6:02:54: 32:71:81:25:3d:f1:5f:b1:48:d4:3b:8e:a6:64:4b: 91:86:74:2a:21:03:1f:5d:c0:b2:db:e0:69:f2:81: fe:79:b3:da:2a:fe:4a:fd:7b:52:e7:8f:09:f0:72: 07:e3:a0:de:27:8a:a7:e3:e7:d7:d0:7a:de:71:8c: 2c:f7:51:18:90:23:20:df:54:cb:bc:b4:f6:a1:c8: bd:76:b1:0b:ea:77:91:70:8a:e3:08:e3:ba:4b:7c: 2c:95:08:c5:72:61:da:52:a5:d6:d4:31:3d:0a:3b: 5a:04:9a:d2:d4:ac:90:5d:e8:2b:36:8a:f2:3c:41: b3:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:0D:E9:CC:BD:B9:02:A0:B1:98:73:14:78:21:57:D1:BF:39:2A:06 X509v3 Authority Key Identifier: keyid:AB:53:D9:92:81:02:B9:19:DB:7C:54:65:C8:DD:5F:F2:66:74:43:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:18:b7:21:c8:c7:e5:0f:b1:f5:0b:5f:a9:06:9f:0f:79:d7: f3:5b:0c:b1:06:12:7e:87:49:a2:e6:03:e5:15:95:b5:38:e8: e3:9f:d3:46:cd:2b:8d:0c:78:c1:db:b6:bb:90:6c:e9:57:09: 80:83:ed:c4:d7:89:4a:78:b1:c0:b9:61:14:b7:b2:37:64:71: ba:05:7e:01:40:0e:d9:a9:41:72:5c:f7:8e:11:a0:6b:cd:06: 3d:e6:a7:ea:b3:ae:28:82:b6:b0:4e:b6:77:2b:e2:f7:39:19: a4:22:95:1d:ee:3f:6f:20:2f:84:48:c0:9b:55:64:54:e3:e9: 22:d9:13:6f:37:0f:53:d8:0c:33:86:84:10:ab:d6:28:b8:fa: 8c:a9:cd:56:8a:c2:94:90:a1:79:50:f9:d8:9b:68:b0:c5:6a: 97:c3:68:ba:2c:01:43:a9:fe:bb:de:2f:41:24:b2:94:3f:76: e8:f4:95:de:a7:37:43:e0:c4:90:88:83:af:2a:04:b8:dd:ac: aa:fc:d4:bd:29:67:bd:af:55:59:e8:79:5f:c0:93:76:d5:b3: d0:ac:6a:81:25:ee:50:38:db:2b:bf:ef:a8:3c:da:5d:d5:aa: 65:9c:07:84:3c:19:9d:f9:58:a3:14:3c:c0:0d:4f:6f:0d:6c: 14:e8:20:18 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdFNUIxMTAvBgNVBAUTKEFCNTNEOTkyODEwMkI5MTlEQjdDNTQ2NUM4REQ1RkYy NjY3NDQzQjMwHhcNMjYwNTIxMDcwNzAwWhcNMjYwNTI4MDcwNzAwWjAYMRYwFAYD VQQDEw02YTBlYWYxNS1iZjQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzVmm9HM4VdhYTJy19DYZejjMM8ONnPQaSaxzyysBkdUbEeELmz0ObseDeM4c Aa3mlhBk8ETOZ0vHUmiL+eWq3yjtNmY94DLDObawmS7A4NyPiTxiBUx0SrFj9/Ak 5WIVyUpvcBH69hGR1KE0dsCNn7cn/a+1mpyngSfo61q0dG5YPYjmAlQycYElPfFf sUjUO46mZEuRhnQqIQMfXcCy2+Bp8oH+ebPaKv5K/XtS548J8HIH46DeJ4qn4+fX 0HrecYws91EYkCMg31TLvLT2oci9drEL6neRcIrjCOO6S3wslQjFcmHaUqXW1DE9 CjtaBJrS1KyQXegrNoryPEGz9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBsN6cy9 uQKgsZhzFHghV9G/OSoGMB8GA1UdIwQYMBaAFKtT2ZKBArkZ23xUZcjdX/JmdEOz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0U1Qi9EODRFN0JGMjND NkUxMUYwOUQ3NkEyNERDNEY5QUUwMi9xMVBaa29FQ3VSbmJmRlJseU4xZjhtWjBR N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ExUFprb0VDdVJuYmZGUmx5TjFmOG1aMFE3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0U1Qi9EODRFN0JGMjNDNkUxMUYwOUQ3NkEyNERDNEY5QUUwMi9xMVBaa29FQ3VS bmJmRlJseU4xZjhtWjBRN00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvBi3IcjH5Q+x9QtfqQafD3nX81sMsQYSfodJouYD5RWVtTjo45/TRs0rjQx4 wdu2u5Bs6VcJgIPtxNeJSnixwLlhFLeyN2RxugV+AUAO2alBclz3jhGga80GPean 6rOuKIK2sE62dyvi9zkZpCKVHe4/byAvhEjAm1VkVOPpItkTbzcPU9gMM4aEEKvW KLj6jKnNVorClJCheVD52JtosMVql8NouiwBQ6n+u94vQSSylD926PSV3qc3Q+DE kIiDryoEuN2sqvzUvSlnva9VWeh5X8CTdtWz0KxqgSXuUDjbK7/vqDzaXdWqZZwH hDwZnflYoxQ8wA1Pbw1sFOggGA== -----END CERTIFICATE-----Generated at Fri May 22 12:06:22 2026 by rpki-client