$ rpki-client -vvf rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/bqxBZeyCmYqJiq391RHMKgRv7qc.mft File: bqxBZeyCmYqJiq391RHMKgRv7qc.mft (raw, json) Hash identifier: o3AfGv0imZZccuYf16k3CWYD1x0VgE8fV+BtYN9C+AM= Subject key identifier: 1B:78:0D:0F:75:85:FB:79:DE:B9:DD:B8:D0:DC:E4:BE:E8:C9:C3:1A Authority key identifier: 6E:AC:41:65:EC:82:99:8A:89:8A:AD:FD:D5:11:CC:2A:04:6F:EE:A7 Certificate issuer: /CN=A913075E/serialNumber=6EAC4165EC82998A898AADFDD511CC2A046FEEA7 Certificate serial: D6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bqxBZeyCmYqJiq391RHMKgRv7qc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/bqxBZeyCmYqJiq391RHMKgRv7qc.mft Manifest number: CA Signing time: Wed 13 May 2026 07:06:56 +0000 Manifest this update: Wed 13 May 2026 07:06:55 +0000 Manifest next update: Wed 20 May 2026 07:06:55 +0000 Files and hashes: 1: bqxBZeyCmYqJiq391RHMKgRv7qc.crl (hash: beIfgyuBALRsKzCYu0HH/10z8C7GMsL2Mcc9KWokmAM=) 2: CC76EFBE0CF011F1BD28D26D3B3D8C67.roa (hash: pPo72wH5P9yh6SYi+rljrRTVAVj0Im4oCqbfDQg3Uqs=) 3: 1964AE4C0CF111F19371326E3B3D8C67.roa (hash: kBlELAtaqehitJ1rtukp/W+NZbR0Eef5tO/5oqqFpEU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/bqxBZeyCmYqJiq391RHMKgRv7qc.crl rsync://rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/bqxBZeyCmYqJiq391RHMKgRv7qc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bqxBZeyCmYqJiq391RHMKgRv7qc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 07:06:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 214 (0xd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913075E, serialNumber=6EAC4165EC82998A898AADFDD511CC2A046FEEA7 Validity Not Before: May 13 07:06:55 2026 GMT Not After : May 20 07:06:55 2026 GMT Subject: CN=6a042310-1d8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6a:cd:b5:b1:09:26:fa:b6:af:9b:b4:da:e0: 25:a9:47:30:b3:8d:f5:77:56:4e:f3:5b:43:f3:9d: 08:26:b7:b3:60:05:80:6e:4d:cd:09:26:6f:d1:0e: 39:ed:38:e9:9c:f4:36:8a:6a:33:f3:a2:f1:cd:bd: 8e:f7:aa:f6:82:0a:b6:9a:0b:07:b1:e3:f6:3b:5c: 60:45:30:64:9a:49:24:59:1f:55:8e:e6:68:9f:b4: ac:f1:8b:64:db:c3:c6:ba:f6:f2:c6:ae:ff:e6:88: e0:e5:1f:e9:37:9c:bf:7c:02:47:be:7d:ab:83:b2: 48:a5:0a:80:59:f5:6b:d0:be:c1:65:32:21:f6:d8: ff:72:de:bd:40:e9:f7:5a:3f:b4:99:21:2b:e9:15: 42:c8:01:45:b5:f3:53:c3:23:49:c8:d3:bc:d6:45: 6f:25:5c:71:b4:e7:ff:9b:f1:61:8a:bd:1a:9e:08: ae:8e:64:3e:3f:7c:e5:8b:27:0c:1c:89:3e:58:e7: c0:24:60:d0:93:ef:8c:5d:6a:56:ed:19:6c:3a:b0: fc:67:54:44:1c:15:d3:8c:11:55:0c:73:85:42:13: db:39:a6:9b:6f:73:a7:2b:38:99:b0:c7:6b:93:fe: 0c:ea:03:c8:4d:e7:fe:72:f1:cc:a3:bf:9c:aa:8e: 08:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:78:0D:0F:75:85:FB:79:DE:B9:DD:B8:D0:DC:E4:BE:E8:C9:C3:1A X509v3 Authority Key Identifier: keyid:6E:AC:41:65:EC:82:99:8A:89:8A:AD:FD:D5:11:CC:2A:04:6F:EE:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/bqxBZeyCmYqJiq391RHMKgRv7qc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bqxBZeyCmYqJiq391RHMKgRv7qc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/bqxBZeyCmYqJiq391RHMKgRv7qc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:ef:69:a5:ad:3a:9c:5f:54:15:df:82:73:d0:18:7b:37:97: 96:89:9a:14:0a:20:f9:e4:c5:04:fb:c7:5c:32:cf:4b:f1:9b: b1:bb:e9:2e:65:77:04:00:fb:6c:58:ec:6d:f1:c9:9f:99:65: d1:60:88:00:d7:3b:ac:01:2a:10:6d:82:67:c3:fd:eb:6d:5e: f3:4c:a9:69:94:b7:db:c7:7e:b8:6d:88:ae:75:98:61:db:33: c2:bf:ed:0b:fb:26:bd:03:bb:db:88:f5:53:b5:e3:6b:ce:d7: 4a:35:1b:56:6b:ba:85:c4:bc:43:51:d0:4e:bc:32:90:12:43: 41:e0:f8:2e:b5:38:0e:01:ee:96:79:ad:d7:57:99:c1:d9:ae: 5d:9b:9d:81:c6:c8:a6:1d:42:df:fb:4f:9b:c8:45:3c:61:5a: 9d:b1:b1:b4:b4:4c:c2:1a:67:c1:10:6f:25:7b:7d:c2:8c:be: 72:50:dc:98:a7:d5:09:c5:39:4f:9e:71:37:12:75:b0:ea:37: c9:cc:36:ec:ea:e3:95:11:cd:ec:d7:41:d3:02:53:56:0b:98: 1f:a3:65:97:44:20:e5:82:56:30:ce:4b:49:a9:e3:ce:0b:69: 30:23:f6:ae:79:c5:a0:e9:77:fb:a8:ea:f9:5e:80:87:80:d3: 7d:04:c2:4c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA3NUUxMTAvBgNVBAUTKDZFQUM0MTY1RUM4Mjk5OEE4OThBQURGREQ1MTFDQzJB MDQ2RkVFQTcwHhcNMjYwNTEzMDcwNjU1WhcNMjYwNTIwMDcwNjU1WjAYMRYwFAYD VQQDEw02YTA0MjMxMC0xZDhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuGrNtbEJJvq2r5u02uAlqUcws431d1ZO81tD850IJrezYAWAbk3NCSZv0Q45 7TjpnPQ2imoz86Lxzb2O96r2ggq2mgsHseP2O1xgRTBkmkkkWR9VjuZon7Ss8Ytk 28PGuvbyxq7/5ojg5R/pN5y/fAJHvn2rg7JIpQqAWfVr0L7BZTIh9tj/ct69QOn3 Wj+0mSEr6RVCyAFFtfNTwyNJyNO81kVvJVxxtOf/m/Fhir0angiujmQ+P3zliycM HIk+WOfAJGDQk++MXWpW7RlsOrD8Z1REHBXTjBFVDHOFQhPbOaabb3OnKziZsMdr k/4M6gPITef+cvHMo7+cqo4IkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBt4DQ91 hft53rnduNDc5L7oycMaMB8GA1UdIwQYMBaAFG6sQWXsgpmKiYqt/dURzCoEb+6n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDc1RS9ENzA4QUIxQTMx NkUxMUYwQkIzMjdFMzBDNEY5QUUwMi9icXhCWmV5Q21ZcUppcTM5MVJITUtnUnY3 cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2JxeEJaZXlDbVlxSmlxMzkxUkhNS2dSdjdxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDc1RS9ENzA4QUIxQTMxNkUxMUYwQkIzMjdFMzBDNEY5QUUwMi9icXhCWmV5Q21Z cUppcTM5MVJITUtnUnY3cWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATe9ppa06nF9UFd+Cc9AYezeXlomaFAog+eTFBPvHXDLPS/GbsbvpLmV3BAD7 bFjsbfHJn5ll0WCIANc7rAEqEG2CZ8P9621e80ypaZS328d+uG2IrnWYYdszwr/t C/smvQO724j1U7Xja87XSjUbVmu6hcS8Q1HQTrwykBJDQeD4LrU4DgHulnmt11eZ wdmuXZudgcbIph1C3/tPm8hFPGFanbGxtLRMwhpnwRBvJXt9woy+clDcmKfVCcU5 T55xNxJ1sOo3ycw27OrjlRHN7NdB0wJTVguYH6Nll0Qg5YJWMM5LSanjzgtpMCP2 rnnFoOl3+6jq+V6Ah4DTfQTCTA== -----END CERTIFICATE-----Generated at Wed May 13 17:51:03 2026 by rpki-client