$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDCF5/5996712CF1E311F0BDEC72B5416F56BC/QwlkOa1FN43F5xIj-HJhJ7EZZe0.mft File: QwlkOa1FN43F5xIj-HJhJ7EZZe0.mft (raw, json) Hash identifier: mNuUJgpQejTjJJf3f5iZgZrfLD+fVlpBEv+O4fDbTJA= Subject key identifier: B2:90:98:88:8C:6F:12:74:2C:6E:70:AB:23:25:1C:2D:DC:08:84:71 Authority key identifier: 43:09:64:39:AD:45:37:8D:C5:E7:12:23:F8:72:61:27:B1:19:65:ED Certificate issuer: /CN=A91CDCF5/serialNumber=43096439AD45378DC5E71223F8726127B11965ED Certificate serial: 46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QwlkOa1FN43F5xIj-HJhJ7EZZe0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDCF5/5996712CF1E311F0BDEC72B5416F56BC/QwlkOa1FN43F5xIj-HJhJ7EZZe0.mft Manifest number: 44 Signing time: Tue 19 May 2026 08:18:33 +0000 Manifest this update: Tue 19 May 2026 08:18:33 +0000 Manifest next update: Tue 26 May 2026 08:18:33 +0000 Files and hashes: 1: QwlkOa1FN43F5xIj-HJhJ7EZZe0.crl (hash: Qudrg2Nv5YZCyGt3jjAP8+N7CT3VdPTupeEGWB2uIxQ=) 2: D735EAACF1EF11F0A394FA90446F56BC.roa (hash: Ys/2qaSppEBebOfLXvRLlfClHojsR1MQFiAQ4UPY7vM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDCF5/5996712CF1E311F0BDEC72B5416F56BC/QwlkOa1FN43F5xIj-HJhJ7EZZe0.crl rsync://rpki.apnic.net/member_repository/A91CDCF5/5996712CF1E311F0BDEC72B5416F56BC/QwlkOa1FN43F5xIj-HJhJ7EZZe0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QwlkOa1FN43F5xIj-HJhJ7EZZe0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 May 2026 08:18:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70 (0x46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDCF5, serialNumber=43096439AD45378DC5E71223F8726127B11965ED Validity Not Before: May 19 08:18:33 2026 GMT Not After : May 26 08:18:33 2026 GMT Subject: CN=6a0c1cd9-0e72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:18:ca:5f:3a:94:c3:83:86:3a:a5:90:ef:e8: 1e:ea:68:63:1d:dc:f9:24:4e:7a:a9:e8:16:c6:0b: ca:9e:65:60:e5:9e:ea:3d:69:f4:f1:18:c9:5f:ca: f2:f5:ac:f5:cd:7b:f7:74:87:99:f2:14:dc:26:52: 51:e5:27:8b:fc:0b:a0:a3:25:96:eb:7c:7f:85:de: 8d:e4:fd:77:8c:01:aa:28:53:63:81:3d:bc:cb:73: 3d:75:2c:0b:de:a3:63:fe:10:3c:c2:e4:90:e6:0f: 31:b9:58:3c:67:31:6a:8b:98:10:4d:2b:ed:a4:c6: f2:a9:80:c2:17:6c:d7:06:80:45:4b:2a:43:a4:30: b1:99:36:1b:bf:f8:9e:3f:b3:95:2e:3c:7c:98:c1: 86:19:a8:39:ea:fc:8b:18:62:ff:88:7b:71:72:8d: b2:0c:f9:31:22:c8:51:4f:f2:ff:2f:34:07:2c:bc: 80:60:ad:5f:4e:16:fb:29:d6:79:e7:63:09:8d:f2: 90:38:ba:10:a5:fa:85:54:ee:fe:22:8e:86:b3:4c: 88:a2:fb:a4:7b:bf:bb:c1:e6:5b:59:79:80:88:c8: 66:02:36:f4:94:17:8c:55:e0:c9:c9:16:26:98:c9: 0d:3e:9b:00:90:84:27:63:28:48:6b:00:b2:a1:b0: 10:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:90:98:88:8C:6F:12:74:2C:6E:70:AB:23:25:1C:2D:DC:08:84:71 X509v3 Authority Key Identifier: keyid:43:09:64:39:AD:45:37:8D:C5:E7:12:23:F8:72:61:27:B1:19:65:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDCF5/5996712CF1E311F0BDEC72B5416F56BC/QwlkOa1FN43F5xIj-HJhJ7EZZe0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QwlkOa1FN43F5xIj-HJhJ7EZZe0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDCF5/5996712CF1E311F0BDEC72B5416F56BC/QwlkOa1FN43F5xIj-HJhJ7EZZe0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:c4:36:f3:45:f9:85:e2:89:c2:3e:ac:08:a1:b0:68:ee:1f: 67:01:33:3d:9d:3c:e3:67:e7:6d:2f:ac:65:06:b9:09:3d:b7: 96:ac:b5:07:c8:e2:34:13:3c:71:1b:10:14:a6:44:23:3b:5e: aa:77:9f:f5:7b:bf:9d:50:91:33:29:de:43:be:89:bc:ec:a7: d6:d1:4e:3b:22:8b:bf:a9:9a:13:28:a3:ff:ce:f5:93:af:91: ab:7b:95:4b:93:0a:06:cb:6e:5c:61:5d:e3:e7:57:f0:83:95: 7b:46:9a:f7:28:79:ff:d8:39:0e:e4:fa:22:3c:eb:5b:73:e4: 5c:b0:3f:5c:5e:36:d2:7a:a3:e8:78:91:ef:9f:4a:ce:da:36: 83:ee:1b:a2:76:07:de:85:ed:8f:1d:52:29:e2:d2:78:74:21: a9:f6:0a:9c:07:45:0f:fa:c3:3f:8c:28:e1:d5:fd:a9:9a:69: 6e:fd:28:46:07:e3:66:56:f0:54:40:91:c9:e5:e7:db:7c:4b: 70:ea:f8:73:f0:66:17:76:cd:84:6f:b2:3e:24:28:20:00:ba: c2:25:50:45:38:f8:13:23:d7:88:8e:35:6e:34:38:00:6d:ef: 8e:72:62:6f:e2:60:f0:bb:5b:e5:c2:49:b5:28:77:4a:e5:fc: fc:82:66:2a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBRjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RENGNTExMC8GA1UEBRMoNDMwOTY0MzlBRDQ1Mzc4REM1RTcxMjIzRjg3MjYxMjdC MTE5NjVFRDAeFw0yNjA1MTkwODE4MzNaFw0yNjA1MjYwODE4MzNaMBgxFjAUBgNV BAMTDTZhMGMxY2Q5LTBlNzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3GMpfOpTDg4Y6pZDv6B7qaGMd3PkkTnqp6BbGC8qeZWDlnuo9afTxGMlfyvL1 rPXNe/d0h5nyFNwmUlHlJ4v8C6CjJZbrfH+F3o3k/XeMAaooU2OBPbzLcz11LAve o2P+EDzC5JDmDzG5WDxnMWqLmBBNK+2kxvKpgMIXbNcGgEVLKkOkMLGZNhu/+J4/ s5UuPHyYwYYZqDnq/IsYYv+Ie3FyjbIM+TEiyFFP8v8vNAcsvIBgrV9OFvsp1nnn YwmN8pA4uhCl+oVU7v4ijoazTIii+6R7v7vB5ltZeYCIyGYCNvSUF4xV4MnJFiaY yQ0+mwCQhCdjKEhrALKhsBCfAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUspCYiIxv EnQsbnCrIyUcLdwIhHEwHwYDVR0jBBgwFoAUQwlkOa1FN43F5xIj+HJhJ7EZZe0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNEQ0Y1LzU5OTY3MTJDRjFF MzExRjBCREVDNzJCNTQxNkY1NkJDL1F3bGtPYTFGTjQzRjV4SWotSEpoSjdFWlpl MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUXdsa09hMUZONDNGNXhJai1ISmhKN0VaWmUwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNE Q0Y1LzU5OTY3MTJDRjFFMzExRjBCREVDNzJCNTQxNkY1NkJDL1F3bGtPYTFGTjQz RjV4SWotSEpoSjdFWlplMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAxxDbzRfmF4onCPqwIobBo7h9nATM9nTzjZ+dtL6xlBrkJPbeWrLUHyOI0Ezxx GxAUpkQjO16qd5/1e7+dUJEzKd5Dvom87KfW0U47Iou/qZoTKKP/zvWTr5Gre5VL kwoGy25cYV3j51fwg5V7Rpr3KHn/2DkO5PoiPOtbc+RcsD9cXjbSeqPoeJHvn0rO 2jaD7huidgfehe2PHVIp4tJ4dCGp9gqcB0UP+sM/jCjh1f2pmmlu/ShGB+NmVvBU QJHJ5efbfEtw6vhz8GYXds2Eb7I+JCggALrCJVBFOPgTI9eIjjVuNDgAbe+OcmJv 4mDwu1vlwkm1KHdK5fz8gmYq -----END CERTIFICATE-----Generated at Thu May 21 11:05:16 2026 by rpki-client