$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.mft File: qmLHn-GEOUEsWwLPS-tUqy674Yg.mft (raw, json) Hash identifier: ohxcVekGNWHnk3AdF/v9S+nLbk+gh30SDmFs7LShJBM= Subject key identifier: 9D:4B:ED:A3:3F:2E:4B:06:79:A2:72:FC:48:53:3C:5E:F5:A3:B4:3C Authority key identifier: AA:62:C7:9F:E1:84:39:41:2C:5B:02:CF:4B:EB:54:AB:2E:BB:E1:88 Certificate issuer: /CN=A91F6BFA/serialNumber=AA62C79FE18439412C5B02CF4BEB54AB2EBBE188 Certificate serial: 0B3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmLHn-GEOUEsWwLPS-tUqy674Yg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.mft Manifest number: 0B22 Signing time: Wed 20 May 2026 19:20:48 +0000 Manifest this update: Wed 20 May 2026 19:20:47 +0000 Manifest next update: Wed 27 May 2026 19:20:47 +0000 Files and hashes: 1: qmLHn-GEOUEsWwLPS-tUqy674Yg.crl (hash: x63yTVfW2WIg9tPoN3b8hEz8IUhE11+gWh8VJXWo1SM=) 2: 3AFE6DA8F72911EDB956BA86C4F9AE02.roa (hash: 06JDuEw0u9UTrCmVjHn/IvdBcebyeZXlu9hwRmQETbc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.crl rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmLHn-GEOUEsWwLPS-tUqy674Yg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 19:20:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2879 (0xb3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6BFA, serialNumber=AA62C79FE18439412C5B02CF4BEB54AB2EBBE188 Validity Not Before: May 20 19:20:47 2026 GMT Not After : May 27 19:20:47 2026 GMT Subject: CN=6a0e0990-34a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e6:01:35:c0:c2:ac:0f:76:04:95:88:00:c3: 52:ea:1e:c8:52:fe:7e:d1:7f:e0:b9:17:62:21:1c: 02:7d:af:5f:7c:bb:4e:66:43:4e:7e:44:be:90:4e: 49:1f:a9:69:09:1b:9e:d6:ce:69:45:1b:78:c7:90: 88:ce:05:6f:df:7e:7b:d3:08:f3:47:47:a6:5e:f2: 32:b7:83:f4:04:ef:58:7b:96:96:47:1f:60:50:0d: 27:2e:38:80:9f:83:f0:f9:6c:d0:bb:ef:2e:77:0b: 60:74:61:a0:af:2c:8f:3a:b0:db:c1:12:03:b1:90: 42:25:e2:46:cd:b7:71:f5:99:44:fa:04:5f:e6:8b: bf:b5:5b:a2:f2:ca:03:fe:37:33:d3:cd:77:39:9a: f0:58:f3:be:78:bf:ec:6c:dc:ab:35:a2:e3:4c:a4: 2f:34:4a:a2:c5:95:49:1e:24:43:0c:da:23:5c:34: 77:ea:70:c6:9a:55:ab:b5:b3:8e:d1:0d:16:69:ef: 44:cb:fa:f5:f3:09:ee:82:8d:74:bb:de:b5:63:03: 90:27:10:22:3a:a6:2b:d2:00:46:f3:4b:a3:da:e0: 51:68:0a:e2:b4:e9:69:7e:80:2e:3f:32:63:72:34: 54:cf:83:ab:ff:84:aa:fe:6a:6c:4a:ea:6f:82:46: 02:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:4B:ED:A3:3F:2E:4B:06:79:A2:72:FC:48:53:3C:5E:F5:A3:B4:3C X509v3 Authority Key Identifier: keyid:AA:62:C7:9F:E1:84:39:41:2C:5B:02:CF:4B:EB:54:AB:2E:BB:E1:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmLHn-GEOUEsWwLPS-tUqy674Yg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dc:5d:0b:77:68:b2:5e:17:74:4a:5c:bb:3f:a4:27:61:30:05: 0a:82:4b:37:13:08:13:95:2a:c3:78:c3:3b:30:fa:15:48:6e: 79:f6:af:e6:c8:4d:42:4c:43:b3:60:d2:5c:da:26:88:56:3b: 5d:31:2a:94:7e:03:64:3f:de:f8:96:8c:07:4e:7f:6b:ff:93: a0:47:6d:4f:a9:ed:7b:96:3d:fd:3b:3c:7d:d6:48:cd:12:38: 1d:62:ae:49:bc:bc:5e:3d:3a:99:d4:0c:1a:77:39:04:57:64: 71:a5:e5:1b:b8:f2:19:40:bc:be:80:1a:03:cf:cf:ed:46:1b: 94:05:27:5d:eb:3a:65:47:19:72:e7:2a:1f:0a:d5:7a:31:de: 45:14:00:aa:d0:08:36:d0:c4:7d:71:81:9a:bc:7e:c9:01:15: a4:bc:4d:30:3d:08:23:b1:e8:3f:16:06:47:de:39:7d:3e:40: 4f:38:7e:88:a8:9e:84:7a:da:9e:44:f1:be:a1:83:c8:c9:7e: fe:4f:14:9c:80:cd:da:6f:c7:13:f8:62:5c:56:0e:84:24:1e: 5a:29:ec:67:5c:ad:85:e9:1e:39:ce:c5:44:6a:87:d7:53:a7: 9c:7e:07:74:2d:31:bd:2f:e5:cd:97:07:b2:84:25:73:be:42: f1:1f:25:31 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCz8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZCRkExMTAvBgNVBAUTKEFBNjJDNzlGRTE4NDM5NDEyQzVCMDJDRjRCRUI1NEFC MkVCQkUxODgwHhcNMjYwNTIwMTkyMDQ3WhcNMjYwNTI3MTkyMDQ3WjAYMRYwFAYD VQQDEw02YTBlMDk5MC0zNGE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1uYBNcDCrA92BJWIAMNS6h7IUv5+0X/guRdiIRwCfa9ffLtOZkNOfkS+kE5J H6lpCRue1s5pRRt4x5CIzgVv33570wjzR0emXvIyt4P0BO9Ye5aWRx9gUA0nLjiA n4Pw+WzQu+8udwtgdGGgryyPOrDbwRIDsZBCJeJGzbdx9ZlE+gRf5ou/tVui8soD /jcz0813OZrwWPO+eL/sbNyrNaLjTKQvNEqixZVJHiRDDNojXDR36nDGmlWrtbOO 0Q0Wae9Ey/r18wnugo10u961YwOQJxAiOqYr0gBG80uj2uBRaAritOlpfoAuPzJj cjRUz4Or/4Sq/mpsSupvgkYCJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ1L7aM/ LksGeaJy/EhTPF71o7Q8MB8GA1UdIwQYMBaAFKpix5/hhDlBLFsCz0vrVKsuu+GI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkJGQS80MEQ0QjdFQzY2 MDMxMUVBOTlBRDRGNDZDNEY5QUUwMi9xbUxIbi1HRU9VRXNXd0xQUy10VXF5Njc0 WWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FtTEhuLUdFT1VFc1d3TFBTLXRVcXk2NzRZZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkJGQS80MEQ0QjdFQzY2MDMxMUVBOTlBRDRGNDZDNEY5QUUwMi9xbUxIbi1HRU9V RXNXd0xQUy10VXF5Njc0WWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA3F0Ld2iyXhd0Sly7P6QnYTAFCoJLNxMIE5Uqw3jDOzD6FUhuefav5shNQkxD s2DSXNomiFY7XTEqlH4DZD/e+JaMB05/a/+ToEdtT6nte5Y9/Ts8fdZIzRI4HWKu Sby8Xj06mdQMGnc5BFdkcaXlG7jyGUC8voAaA8/P7UYblAUnXes6ZUcZcucqHwrV ejHeRRQAqtAINtDEfXGBmrx+yQEVpLxNMD0II7HoPxYGR945fT5ATzh+iKiehHra nkTxvqGDyMl+/k8UnIDN2m/HE/hiXFYOhCQeWinsZ1ythekeOc7FRGqH11OnnH4H dC0xvS/lzZcHsoQlc75C8R8lMQ== -----END CERTIFICATE-----Generated at Thu May 21 12:17:39 2026 by rpki-client