$ rpki-client -vvf rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft File: 0Q5D4Fk97x241_RMbxzRPnPC8jA.mft (raw, json) Hash identifier: 7c2nQndftNxiloEZTWIoBDN53KziW/QZ3FIQm0tZLpY= Subject key identifier: 20:0D:78:EF:CE:A4:58:64:25:F9:8F:34:AA:F5:4D:D0:1D:D4:79:F5 Authority key identifier: D1:0E:43:E0:59:3D:EF:1D:B8:D7:F4:4C:6F:1C:D1:3E:73:C2:F2:30 Certificate issuer: /CN=A91325DC/serialNumber=D10E43E0593DEF1DB8D7F44C6F1CD13E73C2F230 Certificate serial: 0BDE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Q5D4Fk97x241_RMbxzRPnPC8jA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft Manifest number: 0BC7 Signing time: Tue 12 May 2026 19:04:08 +0000 Manifest this update: Tue 12 May 2026 19:04:08 +0000 Manifest next update: Tue 19 May 2026 19:04:08 +0000 Files and hashes: 1: 0Q5D4Fk97x241_RMbxzRPnPC8jA.crl (hash: /V4ap/xrSmGQ8wvSQLe4XivqkkCfQePHMkcExaghqUE=) 2: 5F47B232DF0711F0899AA5EF5C6F56BC.roa (hash: RljGAjjwZ/pe6/m6sE6jioJluQgFaLFt64ScvocrVSM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.crl rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Q5D4Fk97x241_RMbxzRPnPC8jA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 19:04:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3038 (0xbde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91325DC, serialNumber=D10E43E0593DEF1DB8D7F44C6F1CD13E73C2F230 Validity Not Before: May 12 19:04:08 2026 GMT Not After : May 19 19:04:08 2026 GMT Subject: CN=6a0379a8-fe3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:91:25:fa:f3:c7:44:be:45:e0:c6:f7:e3:e3: 1b:40:92:07:2e:83:53:96:e7:49:cf:46:5b:79:c5: ca:bd:43:29:22:ca:9d:16:20:1c:93:a6:c6:a4:89: ca:dc:6f:d9:e9:c1:9b:51:3b:9f:02:e3:bb:54:0b: b9:28:55:59:1f:e0:93:b9:57:9a:f8:18:a7:8c:64: 3a:51:3b:c6:a0:d5:d7:c2:7c:bc:9f:1b:90:c9:61: 9b:34:d2:a1:a3:d5:32:43:26:b6:3e:ba:af:6b:f1: 0d:e9:62:c0:f5:40:f3:f4:38:e9:d4:12:dc:fd:25: 7b:7c:1a:60:c8:34:0e:0e:d0:79:03:67:a3:d8:da: 73:b2:a8:78:8b:33:97:d0:ba:49:d4:c0:f5:a2:1c: 4d:91:e2:cf:b5:0a:c0:c3:60:ff:f6:e4:34:8d:fa: c6:b6:e9:50:4c:18:8d:9b:5b:46:3d:49:41:47:7c: 5b:d3:ea:18:3f:ff:03:b3:44:e7:e4:81:fa:70:d4: 9b:41:80:27:c2:70:31:5d:3a:3b:63:41:63:21:e3: 8e:e6:b7:ff:57:47:75:fb:77:b9:c8:ab:2f:f3:bb: 4d:cc:df:c1:10:cc:2d:2a:32:9b:f9:c6:94:50:72: c2:be:c0:58:98:84:8e:4d:94:ba:d9:94:f1:90:2a: 9f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:0D:78:EF:CE:A4:58:64:25:F9:8F:34:AA:F5:4D:D0:1D:D4:79:F5 X509v3 Authority Key Identifier: keyid:D1:0E:43:E0:59:3D:EF:1D:B8:D7:F4:4C:6F:1C:D1:3E:73:C2:F2:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Q5D4Fk97x241_RMbxzRPnPC8jA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:a3:3f:c8:ec:e5:30:cd:3c:03:7d:9f:3b:36:ae:7b:7b:ce: cb:3e:ff:eb:82:26:69:2e:91:74:ba:c1:26:db:88:02:18:be: e3:db:5e:03:ab:2e:be:0e:7d:bb:00:c5:c8:ad:a3:b2:50:65: 73:eb:44:62:73:df:9d:10:dc:ff:bb:ff:63:54:fd:11:b8:60: 14:cf:93:30:c8:cd:4b:d4:ad:ba:c1:e0:50:b4:9b:1d:7d:69: 4d:0a:3a:ef:e4:a5:93:da:b1:08:ab:e1:a6:9c:c0:01:32:a5: f9:a3:30:e5:56:4c:02:45:24:e4:c3:57:5a:2e:3e:a0:4b:1c: c3:45:be:d1:b0:2c:66:a8:51:9e:e1:70:b9:0e:d6:27:7d:ef: b4:de:74:a8:94:e1:91:20:bb:05:75:f3:6f:4a:25:58:d4:7d: ee:b4:ce:b8:41:06:6e:20:ea:24:2c:eb:d1:f4:51:a5:eb:f3: fe:ab:80:a9:d6:85:53:46:af:d6:8d:6d:e1:0b:8f:af:98:98: 57:83:8e:01:20:6b:5e:b5:41:5a:5e:dc:e2:3e:53:79:52:a7: 38:7e:dc:8b:42:22:ab:c9:9c:50:71:c6:0d:26:59:9c:6e:85: 7e:12:55:b0:42:ed:4e:4e:9f:e6:44:ad:8c:80:ec:15:65:34: ee:49:bf:bd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC94wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI1REMxMTAvBgNVBAUTKEQxMEU0M0UwNTkzREVGMURCOEQ3RjQ0QzZGMUNEMTNF NzNDMkYyMzAwHhcNMjYwNTEyMTkwNDA4WhcNMjYwNTE5MTkwNDA4WjAYMRYwFAYD VQQDEw02YTAzNzlhOC1mZTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArJEl+vPHRL5F4Mb34+MbQJIHLoNTludJz0ZbecXKvUMpIsqdFiAck6bGpInK 3G/Z6cGbUTufAuO7VAu5KFVZH+CTuVea+BinjGQ6UTvGoNXXwny8nxuQyWGbNNKh o9UyQya2Prqva/EN6WLA9UDz9Djp1BLc/SV7fBpgyDQODtB5A2ej2Npzsqh4izOX 0LpJ1MD1ohxNkeLPtQrAw2D/9uQ0jfrGtulQTBiNm1tGPUlBR3xb0+oYP/8Ds0Tn 5IH6cNSbQYAnwnAxXTo7Y0FjIeOO5rf/V0d1+3e5yKsv87tNzN/BEMwtKjKb+caU UHLCvsBYmISOTZS62ZTxkCqffwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCANeO/O pFhkJfmPNKr1TdAd1Hn1MB8GA1UdIwQYMBaAFNEOQ+BZPe8duNf0TG8c0T5zwvIw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjVEQy80NjEyRDUxRTQz MTYxMUVBQjI2Mjc4MURDNEY5QUUwMi8wUTVENEZrOTd4MjQxX1JNYnh6UlBuUEM4 akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBRNUQ0Rms5N3gyNDFfUk1ieHpSUG5QQzhqQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjVEQy80NjEyRDUxRTQzMTYxMUVBQjI2Mjc4MURDNEY5QUUwMi8wUTVENEZrOTd4 MjQxX1JNYnh6UlBuUEM4akEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEaM/yOzlMM08A32fOzaue3vOyz7/64ImaS6RdLrBJtuIAhi+49teA6suvg59 uwDFyK2jslBlc+tEYnPfnRDc/7v/Y1T9EbhgFM+TMMjNS9StusHgULSbHX1pTQo6 7+Slk9qxCKvhppzAATKl+aMw5VZMAkUk5MNXWi4+oEscw0W+0bAsZqhRnuFwuQ7W J33vtN50qJThkSC7BXXzb0olWNR97rTOuEEGbiDqJCzr0fRRpevz/quAqdaFU0av 1o1t4QuPr5iYV4OOASBrXrVBWl7c4j5TeVKnOH7ci0Iiq8mcUHHGDSZZnG6FfhJV sELtTk6f5kStjIDsFWU07km/vQ== -----END CERTIFICATE-----Generated at Wed May 13 08:32:35 2026 by rpki-client