$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.mft File: PQVW0ZO8kqIep0f5WMaXqX7F1dY.mft (raw, json) Hash identifier: bdJh68Mz1fnsNSKrAcS7m3Yj5mTwOzJmmWFW8zNEQOY= Subject key identifier: 13:56:6C:F2:F1:D4:F9:3C:F9:F5:E6:D7:B7:A7:FE:A6:60:14:E3:F9 Authority key identifier: 3D:05:56:D1:93:BC:92:A2:1E:A7:47:F9:58:C6:97:A9:7E:C5:D5:D6 Certificate issuer: /CN=A91E4668/serialNumber=3D0556D193BC92A21EA747F958C697A97EC5D5D6 Certificate serial: 0F3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQVW0ZO8kqIep0f5WMaXqX7F1dY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.mft Manifest number: 0F2E Signing time: Wed 20 May 2026 17:35:05 +0000 Manifest this update: Wed 20 May 2026 17:35:04 +0000 Manifest next update: Wed 27 May 2026 17:35:04 +0000 Files and hashes: 1: PQVW0ZO8kqIep0f5WMaXqX7F1dY.crl (hash: ZMjFa0A49Vl0oGwYpixTKNDgDthzbC6JYokQjzGA06I=) 2: A5B7D874091F11EFA6EDE141C4F9AE02.roa (hash: nwEIy7xPw+1tR+gqF3l6cQwTi+bhxEm67T3G2uPpLSc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.crl rsync://rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQVW0ZO8kqIep0f5WMaXqX7F1dY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 17:35:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3901 (0xf3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4668, serialNumber=3D0556D193BC92A21EA747F958C697A97EC5D5D6 Validity Not Before: May 20 17:35:04 2026 GMT Not After : May 27 17:35:04 2026 GMT Subject: CN=6a0df0c9-96bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ca:a1:22:65:16:9b:4d:0b:3d:e8:22:14:b4: 5e:14:64:41:f2:26:9e:96:5a:9b:59:f6:e7:bb:21: e9:aa:94:0a:0e:49:9b:b3:d9:25:fc:13:f0:5b:f8: 9e:be:e1:2e:3e:4f:98:ba:66:c5:0e:ed:42:ea:88: a2:f5:86:f6:56:97:15:cc:ec:10:c8:47:ba:ed:f8: 9e:bc:97:5f:b2:82:e1:e8:bd:1b:d9:1a:58:e6:72: 49:49:73:2d:14:e5:66:76:40:b1:d1:ba:21:83:cb: b2:1e:4e:6f:73:25:90:f0:b3:83:d1:7d:0f:65:72: 80:7b:74:b2:36:46:d1:04:cf:00:b5:d3:d7:9c:d0: ff:f7:72:28:1e:0a:0a:fd:52:b6:63:4e:0b:ce:92: c6:93:53:80:53:05:cc:db:77:bb:95:ad:a1:90:74: 1c:98:fc:ff:a4:80:5c:35:7b:ed:4a:77:74:31:b9: 03:06:1f:a2:b9:55:1b:66:4c:7d:80:4a:dd:4e:39: 08:c1:98:57:93:91:0c:ea:ab:af:94:75:63:6d:58: 5d:8d:95:fb:4c:d3:ee:92:5a:cf:32:71:3e:2e:fa: 0f:3e:59:c0:14:49:0e:cb:6b:07:00:6b:e2:6b:f0: 63:45:3e:ac:8e:fc:aa:eb:9e:4a:89:e8:13:77:56: f8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:56:6C:F2:F1:D4:F9:3C:F9:F5:E6:D7:B7:A7:FE:A6:60:14:E3:F9 X509v3 Authority Key Identifier: keyid:3D:05:56:D1:93:BC:92:A2:1E:A7:47:F9:58:C6:97:A9:7E:C5:D5:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQVW0ZO8kqIep0f5WMaXqX7F1dY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:6e:eb:da:63:4a:30:a7:14:93:d5:d5:44:e3:a0:2c:78:09: 73:70:fe:9e:f1:79:12:d0:73:a5:d3:db:15:51:22:fa:3f:aa: ac:5e:7f:ea:ea:0c:e4:f2:88:d0:cf:4d:7a:c6:d5:06:f7:98: 32:82:cf:91:b1:d7:92:24:8d:6c:32:65:c3:b6:da:28:38:d2: 0b:d8:d5:22:3c:35:09:65:bc:a3:11:57:58:93:78:7c:f9:0a: 7a:57:1b:7d:ab:0c:ac:aa:b1:36:bb:7b:d4:43:ae:52:cc:9b: 21:84:f2:08:1c:df:68:34:94:92:76:58:17:94:68:d1:24:09: 9a:25:b1:7d:03:96:52:cd:c2:fb:b0:72:4c:79:64:85:a2:51: 20:c5:8d:60:82:f2:cd:4b:34:ea:11:da:c3:56:90:46:ea:ff: e7:2d:db:91:28:30:11:15:ca:dc:82:c2:37:a0:27:c9:48:1f: 6d:2f:3e:3f:5e:9c:05:38:7f:67:18:3b:6c:29:7f:17:cb:e0: a2:a4:a5:76:2c:28:d9:84:2c:86:0b:9e:4e:b1:ec:19:52:4d: ce:31:45:12:b8:d0:b3:c0:42:0f:00:1d:73:4e:a3:04:d1:be: 97:f2:b1:97:f0:92:a6:60:18:dc:44:49:36:a4:59:f0:c0:41: d9:f2:d2:2d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDz0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ2NjgxMTAvBgNVBAUTKDNEMDU1NkQxOTNCQzkyQTIxRUE3NDdGOTU4QzY5N0E5 N0VDNUQ1RDYwHhcNMjYwNTIwMTczNTA0WhcNMjYwNTI3MTczNTA0WjAYMRYwFAYD VQQDEw02YTBkZjBjOS05NmJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoMqhImUWm00LPegiFLReFGRB8iaellqbWfbnuyHpqpQKDkmbs9kl/BPwW/ie vuEuPk+YumbFDu1C6oii9Yb2VpcVzOwQyEe67fievJdfsoLh6L0b2RpY5nJJSXMt FOVmdkCx0bohg8uyHk5vcyWQ8LOD0X0PZXKAe3SyNkbRBM8AtdPXnND/93IoHgoK /VK2Y04LzpLGk1OAUwXM23e7la2hkHQcmPz/pIBcNXvtSnd0MbkDBh+iuVUbZkx9 gErdTjkIwZhXk5EM6quvlHVjbVhdjZX7TNPuklrPMnE+LvoPPlnAFEkOy2sHAGvi a/BjRT6sjvyq655KiegTd1b4gQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBNWbPLx 1Pk8+fXm17en/qZgFOP5MB8GA1UdIwQYMBaAFD0FVtGTvJKiHqdH+VjGl6l+xdXW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDY2OC83QzkwMDlBQzk3 RjExMUU5QTJFNTE5ODFDNEY5QUUwMi9QUVZXMFpPOGtxSWVwMGY1V01hWHFYN0Yx ZFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BRVlcwWk84a3FJZXAwZjVXTWFYcVg3RjFkWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDY2OC83QzkwMDlBQzk3RjExMUU5QTJFNTE5ODFDNEY5QUUwMi9QUVZXMFpPOGtx SWVwMGY1V01hWHFYN0YxZFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaG7r2mNKMKcUk9XVROOgLHgJc3D+nvF5EtBzpdPbFVEi+j+qrF5/6uoM5PKI 0M9NesbVBveYMoLPkbHXkiSNbDJlw7baKDjSC9jVIjw1CWW8oxFXWJN4fPkKelcb fasMrKqxNrt71EOuUsybIYTyCBzfaDSUknZYF5Ro0SQJmiWxfQOWUs3C+7ByTHlk haJRIMWNYILyzUs06hHaw1aQRur/5y3bkSgwERXK3ILCN6AnyUgfbS8+P16cBTh/ Zxg7bCl/F8vgoqSldiwo2YQshgueTrHsGVJNzjFFErjQs8BCDwAdc06jBNG+l/Kx l/CSpmAY3ERJNqRZ8MBB2fLSLQ== -----END CERTIFICATE-----Generated at Thu May 21 09:39:13 2026 by rpki-client