$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.mft File: qSFNuZGEmynE8EXDNkcOnYLEjOI.mft (raw, json) Hash identifier: Qo2ujyjsp0ccdJgIe5iEJhSoZjNJE2Kv45oGwngw+4o= Subject key identifier: E7:46:B1:CC:87:ED:17:01:8D:63:39:A0:D0:78:B8:70:40:5A:4C:4F Authority key identifier: A9:21:4D:B9:91:84:9B:29:C4:F0:45:C3:36:47:0E:9D:82:C4:8C:E2 Certificate issuer: /CN=A91EB929/serialNumber=A9214DB991849B29C4F045C336470E9D82C48CE2 Certificate serial: 01AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFNuZGEmynE8EXDNkcOnYLEjOI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.mft Manifest number: 01A6 Signing time: Thu 21 May 2026 04:14:24 +0000 Manifest this update: Thu 21 May 2026 04:14:23 +0000 Manifest next update: Thu 28 May 2026 04:14:23 +0000 Files and hashes: 1: qSFNuZGEmynE8EXDNkcOnYLEjOI.crl (hash: SEYMbPxpZmlyHyYtMEUWiOJijWZjlQorMswyqISfYRw=) 2: 70C04006D5EF11EE8279357EC4F9AE02.roa (hash: PAkdiPUOa/hZ21DhoJPT77EObUJ8xzL2z4kBUhn+7Zo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.crl rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFNuZGEmynE8EXDNkcOnYLEjOI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 04:14:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 430 (0x1ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB929, serialNumber=A9214DB991849B29C4F045C336470E9D82C48CE2 Validity Not Before: May 21 04:14:23 2026 GMT Not After : May 28 04:14:23 2026 GMT Subject: CN=6a0e86a0-0ec6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:71:27:31:3a:12:e1:2f:ba:1f:6c:33:ea:01: 48:a7:31:f6:13:92:dd:8e:93:ce:64:e8:00:4e:88: 59:7e:ac:32:da:4b:11:bf:5b:7f:2e:a3:5d:b4:7d: a0:68:4c:b4:1b:1b:29:5c:4e:eb:04:5d:8f:95:a6: 09:ad:43:34:7f:f3:a6:dc:34:d0:1f:2b:e8:f0:b3: fe:cc:5d:96:83:c3:dd:f4:b4:b3:90:7d:3a:af:8c: 36:01:20:80:f5:fb:47:05:05:3b:62:6a:0d:c8:0a: ba:3c:e2:23:7a:ed:55:1f:c4:23:1a:3b:aa:31:d2: dc:4f:9a:4c:5b:c4:b3:96:d8:a3:e2:43:72:31:83: f1:20:c4:d8:52:3e:da:53:da:e1:6c:e0:5b:e4:b8: 55:f0:ca:85:18:b5:25:51:d4:45:ce:17:37:67:96: 35:dd:a8:ec:ae:9b:22:a0:a3:fd:46:d2:23:b3:07: 7e:e2:05:6a:27:16:a8:e5:ed:7b:cf:4a:c4:d5:a8: 15:f3:50:65:21:41:58:73:eb:a6:40:13:8f:9c:1d: 9a:60:06:64:21:3a:e9:5a:aa:c9:c3:94:31:57:a6: 63:97:78:da:8f:6d:28:e4:ed:91:4f:29:06:1d:09: bd:84:2b:e6:d0:7c:31:37:bd:08:c2:ed:b0:18:7d: 48:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:46:B1:CC:87:ED:17:01:8D:63:39:A0:D0:78:B8:70:40:5A:4C:4F X509v3 Authority Key Identifier: keyid:A9:21:4D:B9:91:84:9B:29:C4:F0:45:C3:36:47:0E:9D:82:C4:8C:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFNuZGEmynE8EXDNkcOnYLEjOI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:36:50:7a:89:fa:da:e1:d7:3a:21:67:79:aa:04:96:07:ff: 5b:82:9b:d2:fd:ad:e3:21:0f:09:43:4d:c4:6d:96:46:1f:b6: 7b:26:b5:6f:22:07:ad:7d:11:a6:18:91:32:9c:41:77:26:72: 88:1c:f5:8a:9e:e6:07:3f:fd:b9:e0:f7:3e:36:1b:d9:2b:43: e7:1a:a9:a7:65:2b:16:c8:ab:72:94:95:d6:c6:d3:ec:6e:79: 1d:4b:6e:7f:c1:4f:38:16:b2:43:3d:24:eb:34:59:a7:d0:c3: 21:7a:3f:34:a7:64:be:6b:84:4b:c8:c0:ab:60:ef:ea:50:f8: bc:23:bd:b4:22:10:a6:44:9d:69:60:11:87:38:60:fe:f6:90: 04:79:9c:78:a7:42:ca:12:81:4c:e5:fe:93:d0:64:12:ed:e4: dc:b8:4e:84:c7:c2:6a:5b:8c:ae:69:a9:fd:e4:b2:00:8c:ca: b7:39:60:48:b9:da:ee:77:6b:50:3c:87:84:31:ed:0b:a6:c4: 04:a2:6d:4f:d2:1a:b2:78:78:ae:5f:34:34:42:ee:b5:c4:a8: af:6c:fa:29:ed:35:2f:d3:21:2f:ab:e0:64:cf:be:79:4d:5f: 92:bd:52:dc:87:7a:81:5e:73:d6:18:bb:7a:09:fb:0d:9c:c1: 46:de:d7:f3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI5MjkxMTAvBgNVBAUTKEE5MjE0REI5OTE4NDlCMjlDNEYwNDVDMzM2NDcwRTlE ODJDNDhDRTIwHhcNMjYwNTIxMDQxNDIzWhcNMjYwNTI4MDQxNDIzWjAYMRYwFAYD VQQDEw02YTBlODZhMC0wZWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmHEnMToS4S+6H2wz6gFIpzH2E5LdjpPOZOgATohZfqwy2ksRv1t/LqNdtH2g aEy0GxspXE7rBF2PlaYJrUM0f/Om3DTQHyvo8LP+zF2Wg8Pd9LSzkH06r4w2ASCA 9ftHBQU7YmoNyAq6POIjeu1VH8QjGjuqMdLcT5pMW8Szltij4kNyMYPxIMTYUj7a U9rhbOBb5LhV8MqFGLUlUdRFzhc3Z5Y13ajsrpsioKP9RtIjswd+4gVqJxao5e17 z0rE1agV81BlIUFYc+umQBOPnB2aYAZkITrpWqrJw5QxV6Zjl3jaj20o5O2RTykG HQm9hCvm0HwxN70Iwu2wGH1IXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOdGscyH 7RcBjWM5oNB4uHBAWkxPMB8GA1UdIwQYMBaAFKkhTbmRhJspxPBFwzZHDp2CxIzi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjkyOS9CRUJERUE5OEQ1 RUUxMUVFOUUyMDE3N0RDNEY5QUUwMi9xU0ZOdVpHRW15bkU4RVhETmtjT25ZTEVq T0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FTRk51WkdFbXluRThFWEROa2NPbllMRWpPSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjkyOS9CRUJERUE5OEQ1RUUxMUVFOUUyMDE3N0RDNEY5QUUwMi9xU0ZOdVpHRW15 bkU4RVhETmtjT25ZTEVqT0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgDZQeon62uHXOiFneaoElgf/W4Kb0v2t4yEPCUNNxG2WRh+2eya1byIHrX0R phiRMpxBdyZyiBz1ip7mBz/9ueD3PjYb2StD5xqpp2UrFsircpSV1sbT7G55HUtu f8FPOBayQz0k6zRZp9DDIXo/NKdkvmuES8jAq2Dv6lD4vCO9tCIQpkSdaWARhzhg /vaQBHmceKdCyhKBTOX+k9BkEu3k3LhOhMfCaluMrmmp/eSyAIzKtzlgSLna7ndr UDyHhDHtC6bEBKJtT9Iasnh4rl80NELutcSor2z6Ke01L9MhL6vgZM++eU1fkr1S 3Id6gV5z1hi7egn7DZzBRt7X8w== -----END CERTIFICATE-----Generated at Thu May 21 11:14:56 2026 by rpki-client