$ rpki-client -vvf rpki.apnic.net/member_repository/A91E04E1/1C48D8E8FD9E11F0BFC962715F6F56BC/MQjy14qQC-lzk3j4GKWpYcpRLEs.mft File: MQjy14qQC-lzk3j4GKWpYcpRLEs.mft (raw, json) Hash identifier: fRSEDIaXub+ZjB5Qr5ak6lSrvly9I/MX+59Lw/L+riw= Subject key identifier: FC:A1:8C:9B:6B:37:15:A3:5D:35:7E:DC:59:3B:C2:94:FD:5D:76:F2 Authority key identifier: 31:08:F2:D7:8A:90:0B:E9:73:93:78:F8:18:A5:A9:61:CA:51:2C:4B Certificate issuer: /CN=A91E04E1/serialNumber=3108F2D78A900BE9739378F818A5A961CA512C4B Certificate serial: 3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MQjy14qQC-lzk3j4GKWpYcpRLEs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E04E1/1C48D8E8FD9E11F0BFC962715F6F56BC/MQjy14qQC-lzk3j4GKWpYcpRLEs.mft Manifest number: 3D Signing time: Thu 21 May 2026 08:38:41 +0000 Manifest this update: Thu 21 May 2026 08:38:40 +0000 Manifest next update: Thu 28 May 2026 08:38:40 +0000 Files and hashes: 1: MQjy14qQC-lzk3j4GKWpYcpRLEs.crl (hash: cTPEz8kf91ex2GgMecMUouXyRZ2f4Peafc4GCOMVLzA=) 2: B3695572FD9E11F087EE26735F6F56BC.roa (hash: rCPj89ZhrAuLJpKSrj2V9nyJ0NP4IwMB9Wn3wdAsanU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E04E1/1C48D8E8FD9E11F0BFC962715F6F56BC/MQjy14qQC-lzk3j4GKWpYcpRLEs.crl rsync://rpki.apnic.net/member_repository/A91E04E1/1C48D8E8FD9E11F0BFC962715F6F56BC/MQjy14qQC-lzk3j4GKWpYcpRLEs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MQjy14qQC-lzk3j4GKWpYcpRLEs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 08:38:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E04E1, serialNumber=3108F2D78A900BE9739378F818A5A961CA512C4B Validity Not Before: May 21 08:38:40 2026 GMT Not After : May 28 08:38:40 2026 GMT Subject: CN=6a0ec491-2af9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:77:23:74:95:21:47:5b:4b:31:dc:89:07:45: 72:4d:15:aa:84:63:86:5d:cb:5b:31:f4:5f:15:f4: f3:28:27:ac:15:ad:23:3e:a0:04:bf:01:a0:20:cb: 17:67:0e:ce:53:0e:72:c7:4a:82:c5:4a:7d:a4:d9: 80:a9:4f:4a:1f:06:e2:0d:4d:59:c3:c7:10:f3:cd: a3:b0:91:b3:31:07:c5:f6:df:f1:c8:d3:82:4e:b4: 99:ef:ec:7d:e9:cd:04:f5:a4:fe:a3:b3:c5:3f:37: 5c:a6:a9:5e:3f:4e:ce:dc:3a:00:c4:17:d9:6d:01: a8:28:4e:b8:fa:09:a1:b9:9f:2a:00:5d:23:6a:99: 01:53:b5:6d:52:4b:c3:38:ce:d6:26:96:9a:48:68: a8:58:ab:05:ab:56:1a:ca:8c:ed:e5:23:d3:86:ba: bb:50:c2:06:4a:91:cd:9f:69:fd:d0:15:1b:ae:0f: 3e:24:60:30:42:27:5d:f2:cd:99:ac:1b:46:0f:9a: b8:52:87:c6:75:47:ef:94:c7:19:ff:0e:bb:fd:70: dc:73:80:2c:9d:32:1c:0c:ff:c6:15:2a:77:62:e0: 30:6e:bb:93:85:d0:67:b1:0d:ce:5d:4b:db:ba:7b: d4:4d:9d:19:0b:30:7b:52:e1:43:94:3d:dc:a8:27: 63:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:A1:8C:9B:6B:37:15:A3:5D:35:7E:DC:59:3B:C2:94:FD:5D:76:F2 X509v3 Authority Key Identifier: keyid:31:08:F2:D7:8A:90:0B:E9:73:93:78:F8:18:A5:A9:61:CA:51:2C:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E04E1/1C48D8E8FD9E11F0BFC962715F6F56BC/MQjy14qQC-lzk3j4GKWpYcpRLEs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MQjy14qQC-lzk3j4GKWpYcpRLEs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E04E1/1C48D8E8FD9E11F0BFC962715F6F56BC/MQjy14qQC-lzk3j4GKWpYcpRLEs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:08:50:a7:39:e8:a0:83:2a:76:6c:3f:ec:60:52:9a:bc:e2: bf:8a:98:c1:5c:f0:22:2b:f4:a0:a6:93:5e:e5:c6:7b:cd:7f: ca:4f:5d:1a:26:97:67:1c:1a:8a:4f:1d:1e:67:4e:49:29:ce: 05:fd:02:36:db:af:44:83:f7:42:8f:d0:82:aa:97:65:16:72: 26:d4:8d:d9:03:67:09:53:06:ef:7e:7b:02:96:cf:32:db:72: 7f:82:f6:a7:75:1b:4f:54:ae:96:fb:fa:91:cc:af:ce:84:de: c5:aa:4d:d8:cf:45:ed:0d:a4:fe:16:f9:81:9d:0b:00:f1:69: 21:32:97:75:cf:28:61:bb:8f:12:9e:3c:6f:77:2a:5b:fc:87: 92:68:83:d8:80:62:c9:5b:c5:fc:8a:e3:c7:19:56:b8:bf:24: 4f:cf:1a:27:7e:88:a5:a6:6d:45:12:db:af:57:5d:a1:72:b2: 9d:d7:4e:da:a2:24:68:be:91:20:1a:eb:ba:4c:dc:5a:b8:e5: 08:3a:55:78:dd:e8:df:26:f5:c4:a2:95:92:fd:37:76:41:43: 3d:7d:b6:e4:7f:cc:75:6f:6d:d7:92:83:97:1a:69:e7:81:c9: f4:ac:7a:1d:1b:e7:66:83:70:ed:af:81:64:89:eb:fa:ea:36: 81:d1:9f:37 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MDRFMTExMC8GA1UEBRMoMzEwOEYyRDc4QTkwMEJFOTczOTM3OEY4MThBNUE5NjFD QTUxMkM0QjAeFw0yNjA1MjEwODM4NDBaFw0yNjA1MjgwODM4NDBaMBgxFjAUBgNV BAMTDTZhMGVjNDkxLTJhZjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2dyN0lSFHW0sx3IkHRXJNFaqEY4Zdy1sx9F8V9PMoJ6wVrSM+oAS/AaAgyxdn Ds5TDnLHSoLFSn2k2YCpT0ofBuINTVnDxxDzzaOwkbMxB8X23/HI04JOtJnv7H3p zQT1pP6js8U/N1ymqV4/Ts7cOgDEF9ltAagoTrj6CaG5nyoAXSNqmQFTtW1SS8M4 ztYmlppIaKhYqwWrVhrKjO3lI9OGurtQwgZKkc2faf3QFRuuDz4kYDBCJ13yzZms G0YPmrhSh8Z1R++Uxxn/Drv9cNxzgCydMhwM/8YVKndi4DBuu5OF0GexDc5dS9u6 e9RNnRkLMHtS4UOUPdyoJ2PrAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU/KGMm2s3 FaNdNX7cWTvClP1ddvIwHwYDVR0jBBgwFoAUMQjy14qQC+lzk3j4GKWpYcpRLEsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUwNEUxLzFDNDhEOEU4RkQ5 RTExRjBCRkM5NjI3MTVGNkY1NkJDL01RankxNHFRQy1semszajRHS1dwWWNwUkxF cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTVFqeTE0cVFDLWx6azNqNEdLV3BZY3BSTEVzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUw NEUxLzFDNDhEOEU4RkQ5RTExRjBCRkM5NjI3MTVGNkY1NkJDL01RankxNHFRQy1s emszajRHS1dwWWNwUkxFcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB4CFCnOeiggyp2bD/sYFKavOK/ipjBXPAiK/SgppNe5cZ7zX/KT10aJpdnHBqK Tx0eZ05JKc4F/QI2269Eg/dCj9CCqpdlFnIm1I3ZA2cJUwbvfnsCls8y23J/gvan dRtPVK6W+/qRzK/OhN7Fqk3Yz0XtDaT+FvmBnQsA8WkhMpd1zyhhu48Snjxvdypb /IeSaIPYgGLJW8X8iuPHGVa4vyRPzxonfoilpm1FEtuvV12hcrKd107aoiRovpEg Guu6TNxauOUIOlV43ejfJvXEopWS/Td2QUM9fbbkf8x1b23XkoOXGmnngcn0rHod G+dmg3Dtr4Fkiev66jaB0Z83 -----END CERTIFICATE-----Generated at Thu May 21 11:16:36 2026 by rpki-client