$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.mft File: spEQIVRHIYPPUNKub6MOG940K_Q.mft (raw, json) Hash identifier: KhjddmavNWIPy5HiFP1o2KnX+vLsX0CauzoQw9Vs7bk= Subject key identifier: 91:63:79:B3:78:32:C5:C9:1F:03:D4:86:BB:30:85:3C:7C:00:A5:16 Authority key identifier: B2:91:10:21:54:47:21:83:CF:50:D2:AE:6F:A3:0E:1B:DE:34:2B:F4 Certificate issuer: /CN=A91FB095/serialNumber=B291102154472183CF50D2AE6FA30E1BDE342BF4 Certificate serial: 023F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spEQIVRHIYPPUNKub6MOG940K_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.mft Manifest number: 0229 Signing time: Thu 21 May 2026 02:50:57 +0000 Manifest this update: Thu 21 May 2026 02:50:56 +0000 Manifest next update: Thu 28 May 2026 02:50:56 +0000 Files and hashes: 1: spEQIVRHIYPPUNKub6MOG940K_Q.crl (hash: ymfcnBuvfp8NSZP9gUc9qrjAmSvB+AZyt4sC8xL2BK8=) 2: 35A46D4E1A5611EE93742844C4F9AE02.roa (hash: ebN5g/mLZ+iv553qbwuex8M4P6A1JM4zrqLcn9GGHns=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.crl rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spEQIVRHIYPPUNKub6MOG940K_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 02:50:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 575 (0x23f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB095, serialNumber=B291102154472183CF50D2AE6FA30E1BDE342BF4 Validity Not Before: May 21 02:50:56 2026 GMT Not After : May 28 02:50:56 2026 GMT Subject: CN=6a0e7310-a343 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:58:9a:f9:07:a0:b5:82:5e:55:b9:f0:3d:50: 7b:72:80:b7:5b:5f:92:37:fe:de:80:1d:e8:5a:ff: 0f:b9:8a:e3:03:63:63:97:02:8c:ba:17:31:91:b1: ad:c3:8b:2a:6a:cd:ac:84:57:f8:93:e3:bc:d4:e1: 03:41:24:47:09:af:69:45:07:13:71:7e:c2:2e:e5: 2e:97:a0:ce:1b:2b:bf:2f:9f:2e:f5:c8:6c:b4:c5: 7e:26:4b:1e:df:73:4f:00:0d:b8:d1:7b:82:bf:4c: 2b:2b:60:31:21:3b:3c:a9:21:f7:33:f3:7c:5d:d2: 23:85:e4:62:8a:02:ea:89:97:13:69:c4:71:d7:8d: b4:9a:66:b7:cc:a7:24:82:2e:2f:60:93:64:d7:f3: b7:66:e0:f4:20:34:b5:0c:c8:51:d8:5e:e3:2c:42: 57:15:bc:7f:44:48:1d:2a:b8:22:cb:b9:ea:22:9d: a4:13:f2:5a:9f:65:9d:7d:00:97:58:9c:d4:77:99: 2e:fc:5f:0f:c1:db:cf:f5:ee:4f:a1:23:94:f6:9e: 24:f8:1c:87:e2:9e:0d:42:97:14:b7:77:ca:31:b8: 7e:0e:ed:98:f9:1d:70:8e:ef:5c:2c:f2:71:da:b0: 65:b1:f2:e0:5e:9f:51:ae:b7:a2:06:7b:41:bb:f8: 11:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:63:79:B3:78:32:C5:C9:1F:03:D4:86:BB:30:85:3C:7C:00:A5:16 X509v3 Authority Key Identifier: keyid:B2:91:10:21:54:47:21:83:CF:50:D2:AE:6F:A3:0E:1B:DE:34:2B:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spEQIVRHIYPPUNKub6MOG940K_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:e7:4d:33:3b:63:dc:08:84:ba:43:0d:1f:4b:72:78:4b:b9: 45:0d:32:8b:88:0b:ae:b4:98:c4:1d:ed:27:11:cb:a1:43:ed: a1:cf:78:3e:a9:e8:36:97:a2:c1:e1:84:4c:e4:b2:c9:4c:2b: 3a:d5:4f:38:05:6c:8a:05:2c:68:c6:70:51:26:9d:7c:4a:bd: 79:67:33:4c:73:6f:33:a6:d2:14:86:91:55:e5:53:88:72:b7: 61:d0:49:1e:0d:68:b4:2b:df:28:e6:bd:9e:60:6f:ef:e5:f7: 67:0c:de:a2:96:d1:f4:23:2d:c7:af:63:cd:fe:41:a9:f1:29: c8:bf:0a:2e:c7:93:36:9c:22:27:60:17:08:90:1c:48:4f:29: a4:1a:0c:42:fe:11:1d:cb:55:6d:83:cc:46:a4:07:e9:75:9d: 63:28:64:97:01:8c:45:1b:64:6d:c5:a3:4b:67:8f:c7:4b:6e: 5c:a6:ed:ed:e5:86:6b:16:b9:9b:17:10:3d:2c:db:df:d8:98: 1a:10:46:36:e8:04:81:d3:5c:c7:76:93:9b:0f:37:62:5f:ee: df:4c:3b:d0:d5:07:84:43:24:20:3b:66:5e:cc:14:96:33:63: ec:8a:6b:01:80:99:39:79:79:73:41:fe:35:64:c4:54:23:48: 50:17:cc:1a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAj8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkIwOTUxMTAvBgNVBAUTKEIyOTExMDIxNTQ0NzIxODNDRjUwRDJBRTZGQTMwRTFC REUzNDJCRjQwHhcNMjYwNTIxMDI1MDU2WhcNMjYwNTI4MDI1MDU2WjAYMRYwFAYD VQQDEw02YTBlNzMxMC1hMzQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiVia+QegtYJeVbnwPVB7coC3W1+SN/7egB3oWv8PuYrjA2NjlwKMuhcxkbGt w4sqas2shFf4k+O81OEDQSRHCa9pRQcTcX7CLuUul6DOGyu/L58u9chstMV+Jkse 33NPAA240XuCv0wrK2AxITs8qSH3M/N8XdIjheRiigLqiZcTacRx1420mma3zKck gi4vYJNk1/O3ZuD0IDS1DMhR2F7jLEJXFbx/REgdKrgiy7nqIp2kE/Jan2WdfQCX WJzUd5ku/F8PwdvP9e5PoSOU9p4k+ByH4p4NQpcUt3fKMbh+Du2Y+R1wju9cLPJx 2rBlsfLgXp9RrreiBntBu/gRCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJFjebN4 MsXJHwPUhrswhTx8AKUWMB8GA1UdIwQYMBaAFLKRECFURyGDz1DSrm+jDhveNCv0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjA5NS9BQUJFQjU2QTFB NTMxMUVFQTQ2MDg4MTRDNEY5QUUwMi9zcEVRSVZSSElZUFBVTkt1YjZNT0c5NDBL X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NwRVFJVlJISVlQUFVOS3ViNk1PRzk0MEtfUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjA5NS9BQUJFQjU2QTFBNTMxMUVFQTQ2MDg4MTRDNEY5QUUwMi9zcEVRSVZSSElZ UFBVTkt1YjZNT0c5NDBLX1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIudNMztj3AiEukMNH0tyeEu5RQ0yi4gLrrSYxB3tJxHLoUPtoc94PqnoNpei weGETOSyyUwrOtVPOAVsigUsaMZwUSadfEq9eWczTHNvM6bSFIaRVeVTiHK3YdBJ Hg1otCvfKOa9nmBv7+X3ZwzeopbR9CMtx69jzf5BqfEpyL8KLseTNpwiJ2AXCJAc SE8ppBoMQv4RHctVbYPMRqQH6XWdYyhklwGMRRtkbcWjS2ePx0tuXKbt7eWGaxa5 mxcQPSzb39iYGhBGNugEgdNcx3aTmw83Yl/u30w70NUHhEMkIDtmXswUljNj7Ipr AYCZOXl5c0H+NWTEVCNIUBfMGg== -----END CERTIFICATE-----Generated at Thu May 21 09:38:52 2026 by rpki-client