$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBBD7/F93219126CB911EA80832E2EC4F9AE02/qbsN-21P9jtyiDO-CtZiN5bsihk.mft File: qbsN-21P9jtyiDO-CtZiN5bsihk.mft (raw, json) Hash identifier: FY3nSvnsnwZSa2lpjLDWIJyFKxSSG1/yqY1Z2tfyhFQ= Subject key identifier: C7:1F:54:2A:EF:94:95:ED:9A:F6:4D:29:11:A9:1A:5D:8F:2C:C9:54 Authority key identifier: A9:BB:0D:FB:6D:4F:F6:3B:72:88:33:BE:0A:D6:62:37:96:EC:8A:19 Certificate issuer: /CN=A91EBBD7/serialNumber=A9BB0DFB6D4FF63B728833BE0AD6623796EC8A19 Certificate serial: 0AFE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbsN-21P9jtyiDO-CtZiN5bsihk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBBD7/F93219126CB911EA80832E2EC4F9AE02/qbsN-21P9jtyiDO-CtZiN5bsihk.mft Manifest number: 0AE9 Signing time: Wed 20 May 2026 19:25:32 +0000 Manifest this update: Wed 20 May 2026 19:25:32 +0000 Manifest next update: Wed 27 May 2026 19:25:32 +0000 Files and hashes: 1: qbsN-21P9jtyiDO-CtZiN5bsihk.crl (hash: Zf2sdzlRmJQOcDFcu4iLuV/5mdwqLsz5QreVWRabq+g=) 2: 651072686CBB11EA95256D30C4F9AE02.roa (hash: cASTkD6P0USvFC5JERidtks+A/4jhXTPcKKMZcEkZtY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBBD7/F93219126CB911EA80832E2EC4F9AE02/qbsN-21P9jtyiDO-CtZiN5bsihk.crl rsync://rpki.apnic.net/member_repository/A91EBBD7/F93219126CB911EA80832E2EC4F9AE02/qbsN-21P9jtyiDO-CtZiN5bsihk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbsN-21P9jtyiDO-CtZiN5bsihk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 19:25:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2814 (0xafe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBBD7, serialNumber=A9BB0DFB6D4FF63B728833BE0AD6623796EC8A19 Validity Not Before: May 20 19:25:32 2026 GMT Not After : May 27 19:25:32 2026 GMT Subject: CN=6a0e0aac-040a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3e:94:61:92:37:f6:b1:9a:30:76:07:7a:80: 2e:2a:16:24:cb:7e:f6:e0:57:97:84:48:fe:97:d2: 3c:0d:b5:fe:35:0d:ca:9a:ab:0d:00:b8:d6:37:01: 68:10:5b:47:e1:16:be:61:d9:6d:11:f7:7b:9c:87: 3c:e9:e5:e0:a0:65:3b:a1:6c:1f:a3:fe:ac:11:2b: cf:f3:20:4b:9f:0f:36:a5:8f:7f:c3:4f:8b:6d:d1: 1f:54:c3:09:dd:42:f9:01:35:ea:ff:76:7b:e5:0d: 31:3b:c7:d7:f0:e5:e4:fd:ab:cb:59:57:c5:3d:70: a9:8c:bc:09:98:b8:5d:72:cd:21:d3:6a:7a:07:cc: f8:02:4a:a9:55:16:f9:dd:24:b5:d1:d3:aa:e2:1b: cf:90:bb:a6:f7:15:54:fc:6e:1d:7f:69:e0:84:d6: f1:3d:91:a9:93:6a:cb:2f:65:e4:73:cb:c9:90:61: 45:f8:15:39:99:c1:eb:61:fd:09:f5:a5:1f:33:e3: 94:09:76:f7:8c:71:0d:df:8d:e7:f4:37:b4:98:20: b6:1c:ab:a6:cf:31:3f:85:75:1c:14:e4:84:0f:f7: 82:de:51:70:32:53:ea:cb:af:e9:c4:75:5f:06:e9: a1:8a:67:b9:c5:ff:3e:64:f4:d0:97:d4:b5:33:a5: 21:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:1F:54:2A:EF:94:95:ED:9A:F6:4D:29:11:A9:1A:5D:8F:2C:C9:54 X509v3 Authority Key Identifier: keyid:A9:BB:0D:FB:6D:4F:F6:3B:72:88:33:BE:0A:D6:62:37:96:EC:8A:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBBD7/F93219126CB911EA80832E2EC4F9AE02/qbsN-21P9jtyiDO-CtZiN5bsihk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbsN-21P9jtyiDO-CtZiN5bsihk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBBD7/F93219126CB911EA80832E2EC4F9AE02/qbsN-21P9jtyiDO-CtZiN5bsihk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:20:0d:28:c1:e7:f2:b7:85:a5:4a:df:48:02:e7:73:d6:68: 06:69:f1:c3:ce:43:82:05:c9:1b:60:f7:45:1c:17:81:ce:91: 75:25:3f:1e:63:79:3a:19:e6:f6:52:c9:e8:6e:90:39:76:90: 3e:70:2d:ba:33:a5:52:c8:70:ef:ed:23:2b:db:b2:1d:ea:a1: ee:35:3f:1b:cc:38:54:26:02:9f:2f:90:ee:e8:d2:88:5b:4d: 08:9d:37:90:8a:b9:f1:10:c3:6c:38:06:d3:54:25:1e:9b:36: 71:68:de:27:43:11:48:fc:6c:83:42:42:94:bc:6e:f9:28:c0: 93:5f:0c:e2:3e:d6:ac:84:b7:e8:70:05:bc:3f:cd:a5:f5:d0: 67:dc:01:a2:52:91:9a:c6:e1:f6:f6:1a:40:4f:d2:70:c4:ed: 82:8f:ec:f6:69:48:c0:ed:1e:15:ca:1e:4b:51:67:f2:7a:4b: da:94:c2:26:47:ad:30:1b:4b:de:dd:62:84:96:8e:19:51:89: f3:92:b0:61:f9:c1:7b:60:e5:df:0f:6e:60:c8:2f:3d:0c:67: d4:24:27:9e:84:54:fe:3c:e9:6c:47:55:54:28:db:e8:a6:02: 9d:be:6b:dd:ff:e1:e5:ad:99:af:79:53:9e:8e:0a:3a:73:5f: 35:1a:1c:1c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCv4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJCRDcxMTAvBgNVBAUTKEE5QkIwREZCNkQ0RkY2M0I3Mjg4MzNCRTBBRDY2MjM3 OTZFQzhBMTkwHhcNMjYwNTIwMTkyNTMyWhcNMjYwNTI3MTkyNTMyWjAYMRYwFAYD VQQDEw02YTBlMGFhYy0wNDBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApD6UYZI39rGaMHYHeoAuKhYky3724FeXhEj+l9I8DbX+NQ3KmqsNALjWNwFo EFtH4Ra+YdltEfd7nIc86eXgoGU7oWwfo/6sESvP8yBLnw82pY9/w0+LbdEfVMMJ 3UL5ATXq/3Z75Q0xO8fX8OXk/avLWVfFPXCpjLwJmLhdcs0h02p6B8z4AkqpVRb5 3SS10dOq4hvPkLum9xVU/G4df2nghNbxPZGpk2rLL2Xkc8vJkGFF+BU5mcHrYf0J 9aUfM+OUCXb3jHEN343n9De0mCC2HKumzzE/hXUcFOSED/eC3lFwMlPqy6/pxHVf Bumhime5xf8+ZPTQl9S1M6UhkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMcfVCrv lJXtmvZNKRGpGl2PLMlUMB8GA1UdIwQYMBaAFKm7DfttT/Y7cogzvgrWYjeW7IoZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkJENy9GOTMyMTkxMjZD QjkxMUVBODA4MzJFMkVDNEY5QUUwMi9xYnNOLTIxUDlqdHlpRE8tQ3RaaU41YnNp aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Fic04tMjFQOWp0eWlETy1DdFppTjVic2loay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkJENy9GOTMyMTkxMjZDQjkxMUVBODA4MzJFMkVDNEY5QUUwMi9xYnNOLTIxUDlq dHlpRE8tQ3RaaU41YnNpaGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACiANKMHn8reFpUrfSALnc9ZoBmnxw85DggXJG2D3RRwXgc6RdSU/HmN5Ohnm 9lLJ6G6QOXaQPnAtujOlUshw7+0jK9uyHeqh7jU/G8w4VCYCny+Q7ujSiFtNCJ03 kIq58RDDbDgG01QlHps2cWjeJ0MRSPxsg0JClLxu+SjAk18M4j7WrIS36HAFvD/N pfXQZ9wBolKRmsbh9vYaQE/ScMTtgo/s9mlIwO0eFcoeS1Fn8npL2pTCJketMBtL 3t1ihJaOGVGJ85KwYfnBe2Dl3w9uYMgvPQxn1CQnnoRU/jzpbEdVVCjb6KYCnb5r 3f/h5a2Zr3lTno4KOnNfNRocHA== -----END CERTIFICATE-----Generated at Thu May 21 10:27:41 2026 by rpki-client