$ rpki-client -vvf rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.mft File: qvquPFcDs5M3_T16lmbFjLjDtQk.mft (raw, json) Hash identifier: e1gVsw2HBFAUbcMIIZa2kXT89VmVr3qDnVK3lu9rkbA= Subject key identifier: CE:43:D1:A2:6F:17:D0:25:1B:1A:5E:5B:BE:4B:9F:E0:B5:F7:21:CE Authority key identifier: AA:FA:AE:3C:57:03:B3:93:37:FD:3D:7A:96:66:C5:8C:B8:C3:B5:09 Certificate issuer: /CN=A9117394/serialNumber=AAFAAE3C5703B39337FD3D7A9666C58CB8C3B509 Certificate serial: 3638 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qvquPFcDs5M3_T16lmbFjLjDtQk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.mft Manifest number: 35AD Signing time: Tue 12 May 2026 14:18:53 +0000 Manifest this update: Tue 12 May 2026 14:18:52 +0000 Manifest next update: Tue 19 May 2026 14:18:52 +0000 Files and hashes: 1: qvquPFcDs5M3_T16lmbFjLjDtQk.crl (hash: s9fFCREoc+0ZYBJkUMueuRfSgYectMLq+PZ4NkiH/Es=) 2: 90F73AF40E2511EBBB7F993CC4F9AE02.roa (hash: YjGvu7hS1PYqJK/ZSd5JlS+EEqqiFgJ4Qzr5idGzW0I=) 3: 4D91B0C25ED111EFAFFEA662C4F9AE02.roa (hash: x0LYtT3APJOM1BU3phk/GRsyUAfN6VfKZJ0ccXlvtdg=) 4: D52009B06A6311EFA96F023DC4F9AE02.roa (hash: VMik+VP2VW8b9tXPC9B03sMT9ppFEX01lrBrKEr5WZo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.crl rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qvquPFcDs5M3_T16lmbFjLjDtQk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 14:18:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13880 (0x3638) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117394, serialNumber=AAFAAE3C5703B39337FD3D7A9666C58CB8C3B509 Validity Not Before: May 12 14:18:52 2026 GMT Not After : May 19 14:18:52 2026 GMT Subject: CN=6a0336cc-43c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d7:5e:cc:47:9d:15:7e:9b:22:82:5a:22:ca: 83:78:6a:68:2c:18:91:6f:fd:fb:c1:8f:36:9d:e5: 74:1c:d6:c8:65:e6:e8:e4:8f:71:52:af:5d:73:7c: bd:84:40:c4:fa:72:fa:9e:14:9c:12:ab:d4:b9:90: 46:b7:89:db:32:cb:06:61:78:8f:2d:ce:11:07:93: e1:47:63:9c:05:12:2d:03:0b:3e:43:53:7f:5e:06: 89:9b:de:37:24:90:12:f2:a7:b0:87:7a:3b:0c:4d: be:d9:64:1a:70:28:3a:c8:72:3c:12:90:1f:78:09: 3a:aa:b6:7c:85:1c:52:75:ad:86:39:e2:05:ab:b8: ac:9b:98:dc:6b:08:9b:60:5f:7e:77:68:68:93:71: 27:47:be:a0:54:bc:ad:fc:9a:96:59:fa:a1:c2:6d: 5d:b4:5d:c9:ef:59:dd:00:2a:ad:d4:f1:1c:9b:cf: 5b:f4:40:18:e3:86:f2:87:6e:8f:c7:30:d0:13:f6: f4:1c:07:c4:5f:be:b4:6e:fe:9b:3d:a7:63:a8:d4: 55:c0:2f:70:cb:e2:b3:81:f1:24:33:e7:38:e6:6b: a6:20:a2:8e:61:bc:e5:cd:bf:16:b9:40:dc:48:15: 8b:53:3e:c7:7a:eb:85:75:3b:66:77:85:e9:ff:e1: 42:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:43:D1:A2:6F:17:D0:25:1B:1A:5E:5B:BE:4B:9F:E0:B5:F7:21:CE X509v3 Authority Key Identifier: keyid:AA:FA:AE:3C:57:03:B3:93:37:FD:3D:7A:96:66:C5:8C:B8:C3:B5:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qvquPFcDs5M3_T16lmbFjLjDtQk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:2d:4c:cd:9b:b3:29:ed:74:75:52:3f:a1:99:38:f0:d8:40: 53:ee:1b:58:4e:5f:69:31:bd:37:1e:d1:64:04:ee:a8:69:da: 09:ce:71:7e:fa:6c:c4:06:7e:d7:b4:1c:7c:73:a5:a5:44:58: 81:b6:9a:b0:d4:94:0e:f7:c9:86:66:99:09:4d:cf:5d:62:8d: 37:66:50:01:ee:f4:e9:bb:d5:6e:2e:90:cc:a4:bd:e4:c9:28: d3:6d:cc:51:25:4b:9b:2a:45:ce:66:ed:e5:a9:01:ed:ec:37: af:99:70:62:1b:88:fb:50:12:9c:fe:8c:6c:9c:b3:79:c6:30: 21:e2:a4:03:48:fe:0d:9f:4e:b2:36:ed:25:c4:56:40:51:6a: e0:df:95:a1:9f:11:21:7a:2b:1d:0f:e2:30:20:1d:ae:d4:e8: 55:28:cf:1b:1c:2f:de:81:da:2d:38:a4:4c:50:4b:7d:e3:6c: 7d:52:0c:71:79:ae:28:2b:af:64:e4:4b:78:6a:76:84:32:1e: a0:ca:e6:cb:b0:eb:91:f6:0d:21:1c:a5:fa:b4:9c:04:42:42: 62:0e:db:9b:e7:69:b7:ee:45:6a:9f:a8:de:04:a4:5d:83:5c: 27:6b:32:9b:b6:23:d3:99:d8:6a:9b:3c:93:c7:ee:d0:e4:7f: 6d:3c:8d:7b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNjgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTczOTQxMTAvBgNVBAUTKEFBRkFBRTNDNTcwM0IzOTMzN0ZEM0Q3QTk2NjZDNThD QjhDM0I1MDkwHhcNMjYwNTEyMTQxODUyWhcNMjYwNTE5MTQxODUyWjAYMRYwFAYD VQQDEw02YTAzMzZjYy00M2MzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlddezEedFX6bIoJaIsqDeGpoLBiRb/37wY82neV0HNbIZebo5I9xUq9dc3y9 hEDE+nL6nhScEqvUuZBGt4nbMssGYXiPLc4RB5PhR2OcBRItAws+Q1N/XgaJm943 JJAS8qewh3o7DE2+2WQacCg6yHI8EpAfeAk6qrZ8hRxSda2GOeIFq7ism5jcawib YF9+d2hok3EnR76gVLyt/JqWWfqhwm1dtF3J71ndACqt1PEcm89b9EAY44byh26P xzDQE/b0HAfEX760bv6bPadjqNRVwC9wy+KzgfEkM+c45mumIKKOYbzlzb8WuUDc SBWLUz7HeuuFdTtmd4Xp/+FCKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM5D0aJv F9AlGxpeW75Ln+C19yHOMB8GA1UdIwQYMBaAFKr6rjxXA7OTN/09epZmxYy4w7UJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzM5NC80RjU5MTg2QTFE NkYxMUUyOUI1NDQ2QjEwOEIwMkNEMi9xdnF1UEZjRHM1TTNfVDE2bG1iRmpMakR0 UWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F2cXVQRmNEczVNM19UMTZsbWJGakxqRHRRay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzM5NC80RjU5MTg2QTFENkYxMUUyOUI1NDQ2QjEwOEIwMkNEMi9xdnF1UEZjRHM1 TTNfVDE2bG1iRmpMakR0UWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvS1MzZuzKe10dVI/oZk48NhAU+4bWE5faTG9Nx7RZATuqGnaCc5xfvpsxAZ+ 17QcfHOlpURYgbaasNSUDvfJhmaZCU3PXWKNN2ZQAe706bvVbi6QzKS95Mko023M USVLmypFzmbt5akB7ew3r5lwYhuI+1ASnP6MbJyzecYwIeKkA0j+DZ9OsjbtJcRW QFFq4N+VoZ8RIXorHQ/iMCAdrtToVSjPGxwv3oHaLTikTFBLfeNsfVIMcXmuKCuv ZORLeGp2hDIeoMrmy7DrkfYNIRyl+rScBEJCYg7bm+dpt+5Fap+o3gSkXYNcJ2sy m7Yj05nYaps8k8fu0OR/bTyNew== -----END CERTIFICATE-----Generated at Wed May 13 12:19:51 2026 by rpki-client