$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft File: q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft (raw, json) Hash identifier: Kq6ffrgZDw8Kj7L6bfgxmGlwuqPIBAyvCAD1LfgUnvw= Subject key identifier: 8D:86:0D:55:DD:4C:4F:0C:6F:87:2D:8B:97:38:13:4A:AA:FE:F0:04 Authority key identifier: AB:67:E8:2F:C8:6A:AC:A8:2A:CF:F8:DC:36:45:CD:71:61:01:3F:76 Certificate issuer: /CN=A91D1E4C/serialNumber=AB67E82FC86AACA82ACFF8DC3645CD7161013F76 Certificate serial: 03B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft Manifest number: 0C6A Signing time: Wed 20 May 2026 20:24:57 +0000 Manifest this update: Wed 20 May 2026 20:24:56 +0000 Manifest next update: Wed 27 May 2026 20:24:56 +0000 Files and hashes: 1: q2foL8hqrKgqz_jcNkXNcWEBP3Y.crl (hash: YJW8iXBwv/zvT2k2fQji20LltJTGR2pLlaBxphA1hOY=) 2: FC358296CFA011EDA4AC5B18C4F9AE02.roa (hash: XL/ZcgALP761TCI8hEan3K78GIrb6EiGTeA4Vn2wUJI=) 3: 2AD1C746940111F0B07D7068C4F9AE02.roa (hash: AIsLYj1Q0Ri7p3sC6uZCzxYzj0O4+4SA75lfHau1SqU=) 4: 3DD8C628940111F09204AF71C4F9AE02.roa (hash: rKjGeR3bW3KsKLNlokaXVqhFpQOnZispIcGW123rOaY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.crl rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 951 (0x3b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1E4C, serialNumber=AB67E82FC86AACA82ACFF8DC3645CD7161013F76 Validity Not Before: May 20 20:24:56 2026 GMT Not After : May 27 20:24:56 2026 GMT Subject: CN=6a0e1898-af37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:24:e0:c8:57:83:45:e2:92:52:c5:49:02:10: 75:3c:e1:06:df:35:7d:e9:e4:46:4b:ab:75:24:4a: 06:b7:25:8d:0e:43:40:39:45:26:6b:ee:82:c0:fb: 10:a1:bd:36:14:d1:12:68:b8:75:80:4e:fd:3f:b3: b3:0a:5d:62:d7:ec:4f:8f:b5:70:13:85:04:4f:d5: c7:09:93:8b:36:df:31:ba:9b:0d:56:fe:74:fc:37: 2a:d4:60:48:00:a5:4a:70:2e:f5:d5:64:ff:69:dd: 19:d7:9f:fb:4c:0b:82:5c:e4:25:d3:a2:cc:a1:9a: cb:ea:4e:29:51:df:8a:be:6a:0e:13:4c:69:37:36: 3f:24:08:83:6c:5f:f1:dc:97:77:8c:0d:b9:cb:be: 0f:15:01:00:c0:cc:38:de:7c:41:98:88:8d:45:ee: 20:7e:1d:5e:6e:20:30:bc:58:7e:68:bd:51:1f:3b: 74:4f:41:30:ca:10:61:6a:60:51:af:97:e3:9d:7f: e0:e4:b9:a6:ac:13:fe:b4:e6:8f:bb:e8:9b:36:f5: b2:f3:08:8b:ed:0b:2a:25:e2:e1:08:74:cd:b7:87: 9d:9c:85:de:ce:9c:46:d1:1e:99:73:4e:09:f8:b2: a0:a7:10:b9:27:33:a0:af:69:8f:8d:e2:44:5e:3a: b8:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:86:0D:55:DD:4C:4F:0C:6F:87:2D:8B:97:38:13:4A:AA:FE:F0:04 X509v3 Authority Key Identifier: keyid:AB:67:E8:2F:C8:6A:AC:A8:2A:CF:F8:DC:36:45:CD:71:61:01:3F:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:10:83:45:8a:83:e7:a7:32:f9:11:ee:99:ac:be:6e:b0:89: 82:0f:6c:3e:2b:28:b2:87:0c:47:4a:b2:d1:76:83:6f:07:d4: c3:43:96:b0:b6:13:a2:a5:95:f9:1a:58:3a:66:8b:1c:26:d6: 0b:95:b2:49:95:db:78:f1:fa:53:f4:af:75:f4:01:64:e6:65: 8f:91:b2:a1:8f:58:4c:5e:43:e6:b7:fc:d2:6f:60:8a:0d:ec: ca:b0:f2:0e:14:c3:9d:ef:07:c4:a2:68:c9:58:c9:87:5a:cb: f2:fe:da:ed:3a:93:32:23:c8:34:eb:6d:16:74:a9:01:b6:7a: d6:13:88:14:aa:cf:b3:35:9f:0a:2b:37:c7:47:a8:78:45:b9: a9:38:1e:6d:7b:c6:06:2e:03:4b:eb:06:47:8e:81:f7:5f:3b: 7b:15:5f:7e:a1:c0:9e:d2:31:52:07:05:cf:ca:4f:e6:8f:9a: 48:e1:06:cb:57:9d:f1:09:d1:36:eb:8f:5e:a8:2b:5c:94:c8: f1:d5:02:62:d2:3d:86:91:1a:69:21:d1:23:de:36:bc:0f:84: c5:87:8f:68:d9:d0:f9:29:c0:b6:d5:8a:5f:01:df:68:3d:58: a0:8f:2d:d6:d9:3c:4d:e2:5a:1c:af:11:bb:e7:a3:88:be:cc: d9:42:30:2b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA7cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFFNEMxMTAvBgNVBAUTKEFCNjdFODJGQzg2QUFDQTgyQUNGRjhEQzM2NDVDRDcx NjEwMTNGNzYwHhcNMjYwNTIwMjAyNDU2WhcNMjYwNTI3MjAyNDU2WjAYMRYwFAYD VQQDEw02YTBlMTg5OC1hZjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtiTgyFeDReKSUsVJAhB1POEG3zV96eRGS6t1JEoGtyWNDkNAOUUma+6CwPsQ ob02FNESaLh1gE79P7OzCl1i1+xPj7VwE4UET9XHCZOLNt8xupsNVv50/Dcq1GBI AKVKcC711WT/ad0Z15/7TAuCXOQl06LMoZrL6k4pUd+KvmoOE0xpNzY/JAiDbF/x 3Jd3jA25y74PFQEAwMw43nxBmIiNRe4gfh1ebiAwvFh+aL1RHzt0T0EwyhBhamBR r5fjnX/g5LmmrBP+tOaPu+ibNvWy8wiL7QsqJeLhCHTNt4ednIXezpxG0R6Zc04J +LKgpxC5JzOgr2mPjeJEXjq4wQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI2GDVXd TE8Mb4cti5c4E0qq/vAEMB8GA1UdIwQYMBaAFKtn6C/IaqyoKs/43DZFzXFhAT92 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUU0Qy83REFEQTU2Q0Q5 NEQxMUVBQTYwNEFDNTNDNEY5QUUwMi9xMmZvTDhocXJLZ3F6X2pjTmtYTmNXRUJQ M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3EyZm9MOGhxcktncXpfamNOa1hOY1dFQlAzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUU0Qy83REFEQTU2Q0Q5NEQxMUVBQTYwNEFDNTNDNEY5QUUwMi9xMmZvTDhocXJL Z3F6X2pjTmtYTmNXRUJQM1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdBCDRYqD56cy+RHumay+brCJgg9sPisosocMR0qy0XaDbwfUw0OWsLYToqWV +RpYOmaLHCbWC5WySZXbePH6U/SvdfQBZOZlj5GyoY9YTF5D5rf80m9gig3syrDy DhTDne8HxKJoyVjJh1rL8v7a7TqTMiPINOttFnSpAbZ61hOIFKrPszWfCis3x0eo eEW5qTgebXvGBi4DS+sGR46B9187exVffqHAntIxUgcFz8pP5o+aSOEGy1ed8QnR NuuPXqgrXJTI8dUCYtI9hpEaaSHRI942vA+ExYePaNnQ+SnAttWKXwHfaD1YoI8t 1tk8TeJaHK8Ru+ejiL7M2UIwKw== -----END CERTIFICATE-----Generated at Thu May 21 12:25:55 2026 by rpki-client