$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft File: qrDiti9jQ4lXMMBUiOf8TibFGmw.mft (raw, json) Hash identifier: QFXUcHswEeXl0E/dodOdQs2xvejV+VrJt5P3NwfIJUY= Subject key identifier: 43:8F:BE:CD:53:C3:86:30:97:09:BF:20:92:94:13:4F:19:29:C7:18 Authority key identifier: AA:B0:E2:B6:2F:63:43:89:57:30:C0:54:88:E7:FC:4E:26:C5:1A:6C Certificate issuer: /CN=A91DCAE8/serialNumber=AAB0E2B62F6343895730C05488E7FC4E26C51A6C Certificate serial: 35BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft Manifest number: 3580 Signing time: Wed 20 May 2026 14:46:40 +0000 Manifest this update: Wed 20 May 2026 14:46:39 +0000 Manifest next update: Wed 27 May 2026 14:46:39 +0000 Files and hashes: 1: qrDiti9jQ4lXMMBUiOf8TibFGmw.crl (hash: UpWsjIeWx0mMKeyE0bGB9Utz2uPMKHZ1a28PIuJJ4j4=) 2: 56F533B4A63011EEA6054D52C4F9AE02.roa (hash: 0iMCnY3705MLKSQeDX6iv1qsWDcFTiwdaLS+CFP3lvY=) 3: 006CE5442FBA11ECA05BB46EC4F9AE02.roa (hash: gGlyAExoFEUqT98bADKmBZWyQcG57UwG1nHtGghueEI=) 4: 2D89110A9A5311EE9CB13140C4F9AE02.roa (hash: lYpkRD/vPCqBa7Vd4N6W0BGqOH9jxtp9EJocrqn7xs0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.crl rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 14:46:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13755 (0x35bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCAE8, serialNumber=AAB0E2B62F6343895730C05488E7FC4E26C51A6C Validity Not Before: May 20 14:46:39 2026 GMT Not After : May 27 14:46:39 2026 GMT Subject: CN=6a0dc950-8e7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:08:16:c1:52:c1:87:92:85:04:1a:e5:18:6b: da:6f:c0:00:b0:fd:b6:86:3c:a8:1c:91:90:c6:f8: 8b:e3:a7:e2:c5:68:f2:8f:ac:30:13:d5:01:1e:8b: 27:b5:50:a9:8d:54:74:f2:6e:2a:21:69:bb:f6:54: 09:6d:cf:8a:1d:50:9c:dd:c8:b6:51:82:1d:8e:30: 2d:cc:28:ac:e3:68:53:44:4a:ff:03:c2:57:f8:c1: ac:57:6a:31:1a:b7:9a:3f:60:e0:77:28:26:4d:2d: bb:6c:83:0b:93:69:34:2a:00:d8:94:ab:25:de:4d: 98:e9:fc:75:82:d0:1b:2d:5d:49:cf:cc:b0:a5:88: 75:f8:b9:61:fa:eb:23:f8:d3:f2:bc:3a:6b:b7:bb: 1b:5e:2c:ca:17:58:d8:a1:d6:fe:10:d0:41:7d:73: 95:7a:ed:9f:b0:96:28:6e:26:2d:0b:71:57:55:25: 2f:a4:cc:b0:66:6d:a1:0c:32:7c:c8:6f:e1:83:76: d1:61:83:f0:72:ba:ee:fd:5c:20:ac:7d:d1:0f:c9: 7f:b3:74:d6:77:09:1f:1b:da:ec:35:a0:07:9d:77: 75:db:79:61:10:d9:74:cb:a1:f0:8f:e0:83:6e:24: 58:e2:79:41:2f:aa:77:61:56:c3:b2:d6:80:8d:5f: e5:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:8F:BE:CD:53:C3:86:30:97:09:BF:20:92:94:13:4F:19:29:C7:18 X509v3 Authority Key Identifier: keyid:AA:B0:E2:B6:2F:63:43:89:57:30:C0:54:88:E7:FC:4E:26:C5:1A:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:39:7b:fb:4d:c3:d0:df:a4:29:2f:a1:2e:30:3d:24:ae:4f: 13:4b:fb:ab:6d:8f:ba:7d:56:50:0c:b8:05:ac:7a:8b:72:10: 7f:7a:89:d5:ae:2d:31:f3:34:76:4d:d8:46:72:fe:18:5d:c2: 48:3a:06:38:82:09:8d:92:a9:cb:ce:23:0b:56:63:50:ac:60: a9:5f:d0:a2:f9:83:45:25:e7:9a:88:82:8b:c0:8c:70:34:c9: 99:6d:cf:ff:49:ac:56:1c:95:7b:c2:e0:84:11:61:05:8f:48: 69:e9:a2:f7:22:14:f6:31:2d:bf:ca:b0:4d:2f:b7:cd:62:56: da:1b:c1:f2:f3:6f:ed:e3:49:99:46:c9:c4:c4:b7:ca:1c:4e: a0:7c:98:60:4e:df:64:12:30:06:d1:67:86:c8:65:09:0d:e0: 98:73:9d:ce:67:58:0f:c0:6a:a4:09:6a:8a:22:5c:a5:71:ea: e2:ee:d7:e8:db:7d:7e:03:fc:89:9a:05:e0:5a:86:dd:4c:6e: f3:05:23:31:45:84:05:49:a1:f3:59:c1:55:fb:68:f1:54:e7: ea:1a:3d:8a:6a:ac:cd:d6:4a:33:a8:bf:1d:3d:62:94:d4:5d: e0:d9:61:1b:9d:c3:49:15:12:48:23:46:84:3b:7f:6f:26:a4: f0:63:be:3e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENBRTgxMTAvBgNVBAUTKEFBQjBFMkI2MkY2MzQzODk1NzMwQzA1NDg4RTdGQzRF MjZDNTFBNkMwHhcNMjYwNTIwMTQ0NjM5WhcNMjYwNTI3MTQ0NjM5WjAYMRYwFAYD VQQDEw02YTBkYzk1MC04ZTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuAgWwVLBh5KFBBrlGGvab8AAsP22hjyoHJGQxviL46fixWjyj6wwE9UBHosn tVCpjVR08m4qIWm79lQJbc+KHVCc3ci2UYIdjjAtzCis42hTREr/A8JX+MGsV2ox GreaP2DgdygmTS27bIMLk2k0KgDYlKsl3k2Y6fx1gtAbLV1Jz8ywpYh1+Llh+usj +NPyvDprt7sbXizKF1jYodb+ENBBfXOVeu2fsJYobiYtC3FXVSUvpMywZm2hDDJ8 yG/hg3bRYYPwcrru/VwgrH3RD8l/s3TWdwkfG9rsNaAHnXd123lhENl0y6Hwj+CD biRY4nlBL6p3YVbDstaAjV/lWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEOPvs1T w4Ywlwm/IJKUE08ZKccYMB8GA1UdIwQYMBaAFKqw4rYvY0OJVzDAVIjn/E4mxRps MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0FFOC84QjZBREUxNDFE OTMxMUUyOTJDQjIzRjcwOEIwMkNEMi9xckRpdGk5alE0bFhNTUJVaU9mOFRpYkZH bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FyRGl0aTlqUTRsWE1NQlVpT2Y4VGliRkdtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0FFOC84QjZBREUxNDFEOTMxMUUyOTJDQjIzRjcwOEIwMkNEMi9xckRpdGk5alE0 bFhNTUJVaU9mOFRpYkZHbXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgTl7+03D0N+kKS+hLjA9JK5PE0v7q22Pun1WUAy4Bax6i3IQf3qJ1a4tMfM0 dk3YRnL+GF3CSDoGOIIJjZKpy84jC1ZjUKxgqV/QovmDRSXnmoiCi8CMcDTJmW3P /0msVhyVe8LghBFhBY9Iaemi9yIU9jEtv8qwTS+3zWJW2hvB8vNv7eNJmUbJxMS3 yhxOoHyYYE7fZBIwBtFnhshlCQ3gmHOdzmdYD8BqpAlqiiJcpXHq4u7X6Nt9fgP8 iZoF4FqG3Uxu8wUjMUWEBUmh81nBVfto8VTn6ho9imqszdZKM6i/HT1ilNRd4Nlh G53DSRUSSCNGhDt/byak8GO+Pg== -----END CERTIFICATE-----Generated at Thu May 21 10:20:22 2026 by rpki-client