$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft File: 2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft (raw, json) Hash identifier: 4VFx8HNpXQHk1a9xF5bWPDyUYXCdG7qMKhdzYdYxuHM= Subject key identifier: F3:03:25:FE:DC:BD:F9:5F:1F:AE:0B:D4:90:D4:08:AD:45:AF:36:FB Authority key identifier: DA:AA:B1:2E:92:FA:0E:E0:43:C2:0E:EA:F2:BE:46:96:A2:C3:78:77 Certificate issuer: /CN=A91E6B73/serialNumber=DAAAB12E92FA0EE043C20EEAF2BE4696A2C37877 Certificate serial: 04D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qqxLpL6DuBDwg7q8r5GlqLDeHc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft Manifest number: 04CA Signing time: Wed 20 May 2026 23:56:12 +0000 Manifest this update: Wed 20 May 2026 23:56:12 +0000 Manifest next update: Wed 27 May 2026 23:56:12 +0000 Files and hashes: 1: 2qqxLpL6DuBDwg7q8r5GlqLDeHc.crl (hash: GVu5oqGsu9cz1naYxHGfwZYDiTcy7ql8dh1sFp5eJpg=) 2: 4F12B4886EEB11EC8699607FC4F9AE02.roa (hash: pn9LmjcYfqtWkrqq70s413/aWhMNAUVc8lSHHO31hw4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.crl rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qqxLpL6DuBDwg7q8r5GlqLDeHc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 23:56:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1236 (0x4d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6B73, serialNumber=DAAAB12E92FA0EE043C20EEAF2BE4696A2C37877 Validity Not Before: May 20 23:56:12 2026 GMT Not After : May 27 23:56:12 2026 GMT Subject: CN=6a0e4a1c-5d0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:fa:14:3e:ad:2b:ac:1b:50:24:26:85:5c:26: 14:81:63:48:19:00:93:c2:d4:61:60:94:9e:4c:7b: ce:a8:9e:0a:18:4d:91:49:69:0e:c2:1c:8e:9e:7a: 2f:da:d9:91:06:e1:f9:58:bf:15:ff:a3:ba:88:dd: 99:c5:47:b1:9a:cf:77:0f:61:6b:37:89:37:ce:d6: 21:f9:fb:9d:3b:c1:dc:bd:e2:27:6b:e7:8f:e5:c8: 03:a4:91:e8:95:36:05:dd:02:0e:2f:98:9a:a3:d4: 75:46:d8:2e:bf:52:7f:e2:b7:75:3f:90:15:ae:f7: 20:81:63:3c:97:b8:4a:6c:cf:81:7d:9a:ef:1b:a6: 1b:69:88:6b:85:21:17:fa:cf:be:71:ce:fc:34:b1: 36:3d:c7:45:52:a5:19:17:fb:1c:65:ea:05:2d:89: 2e:5d:c0:4f:fd:f9:03:ba:c9:e5:b8:90:e5:d6:57: f7:7d:11:d7:5e:27:bc:92:9f:eb:29:94:62:77:e3: b1:48:89:e6:79:38:dc:65:11:d3:df:a5:56:50:2d: fc:02:e6:e1:0f:ad:f3:65:25:04:dd:e1:1a:95:cf: 62:20:6f:81:71:99:13:23:ad:7d:a2:1f:f9:3d:ef: e0:c9:54:42:0d:bd:f9:c0:6a:3d:81:ba:da:af:30: f3:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:03:25:FE:DC:BD:F9:5F:1F:AE:0B:D4:90:D4:08:AD:45:AF:36:FB X509v3 Authority Key Identifier: keyid:DA:AA:B1:2E:92:FA:0E:E0:43:C2:0E:EA:F2:BE:46:96:A2:C3:78:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qqxLpL6DuBDwg7q8r5GlqLDeHc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:74:2f:8c:b4:82:b4:f4:14:6a:53:d7:82:9e:d2:d2:e5:19: 25:79:59:97:97:d6:42:26:78:23:b5:3f:63:c7:de:ed:60:f7: 51:3d:3a:39:b3:c4:59:07:a9:48:cc:df:c6:66:68:27:cb:2a: ae:01:96:ef:4c:9f:97:65:b9:2a:c2:93:57:12:71:dc:93:65: 79:56:97:ba:80:88:ee:88:f1:15:20:66:14:df:fb:70:08:73: ef:59:0f:5a:63:90:ea:1d:36:a8:60:ea:05:5b:26:00:5a:05: 02:eb:9a:47:6e:4b:1a:ea:c5:8a:93:42:4e:18:f2:ef:df:d8: 1b:bd:d9:b9:6a:a7:6a:e5:2a:7b:ec:67:d4:1c:2b:fc:61:0d: d5:f9:84:b1:04:cc:1d:14:ec:a4:ba:d6:96:45:5b:8b:df:92: 8d:3f:01:bb:dd:b1:46:0d:7c:08:7b:fe:95:6d:de:86:1d:4c: d8:21:9d:1e:1b:8a:de:c1:b7:b0:78:f4:19:3b:1b:25:14:bf: 5c:02:3d:f8:8a:b4:33:00:2b:74:4b:84:c6:2e:6a:c0:ff:4f: da:44:ab:22:6c:2b:ad:f1:2c:ad:71:ff:15:96:1b:b8:68:47: e0:5b:38:b2:3a:35:7a:6c:00:98:61:e8:06:75:23:59:09:e9: 04:9c:ca:f1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBNQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZCNzMxMTAvBgNVBAUTKERBQUFCMTJFOTJGQTBFRTA0M0MyMEVFQUYyQkU0Njk2 QTJDMzc4NzcwHhcNMjYwNTIwMjM1NjEyWhcNMjYwNTI3MjM1NjEyWjAYMRYwFAYD VQQDEw02YTBlNGExYy01ZDBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4PoUPq0rrBtQJCaFXCYUgWNIGQCTwtRhYJSeTHvOqJ4KGE2RSWkOwhyOnnov 2tmRBuH5WL8V/6O6iN2ZxUexms93D2FrN4k3ztYh+fudO8HcveIna+eP5cgDpJHo lTYF3QIOL5iao9R1Rtguv1J/4rd1P5AVrvcggWM8l7hKbM+BfZrvG6YbaYhrhSEX +s++cc78NLE2PcdFUqUZF/scZeoFLYkuXcBP/fkDusnluJDl1lf3fRHXXie8kp/r KZRid+OxSInmeTjcZRHT36VWUC38AubhD63zZSUE3eEalc9iIG+BcZkTI619oh/5 Pe/gyVRCDb35wGo9gbrarzDzFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPMDJf7c vflfH64L1JDUCK1Frzb7MB8GA1UdIwQYMBaAFNqqsS6S+g7gQ8IO6vK+Rpaiw3h3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkI3My9FQTgwOUZGMjZF RDIxMUVDQUUyRUI4MjlDNEY5QUUwMi8ycXF4THBMNkR1QkR3ZzdxOHI1R2xxTERl SGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJxcXhMcEw2RHVCRHdnN3E4cjVHbHFMRGVIYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkI3My9FQTgwOUZGMjZFRDIxMUVDQUUyRUI4MjlDNEY5QUUwMi8ycXF4THBMNkR1 QkR3ZzdxOHI1R2xxTERlSGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXHQvjLSCtPQUalPXgp7S0uUZJXlZl5fWQiZ4I7U/Y8fe7WD3UT06ObPEWQep SMzfxmZoJ8sqrgGW70yfl2W5KsKTVxJx3JNleVaXuoCI7ojxFSBmFN/7cAhz71kP WmOQ6h02qGDqBVsmAFoFAuuaR25LGurFipNCThjy79/YG73ZuWqnauUqe+xn1Bwr /GEN1fmEsQTMHRTspLrWlkVbi9+SjT8Bu92xRg18CHv+lW3ehh1M2CGdHhuK3sG3 sHj0GTsbJRS/XAI9+Iq0MwArdEuExi5qwP9P2kSrImwrrfEsrXH/FZYbuGhH4Fs4 sjo1emwAmGHoBnUjWQnpBJzK8Q== -----END CERTIFICATE-----Generated at Thu May 21 10:29:05 2026 by rpki-client