$ rpki-client -vvf rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.mft File: qKOD5jSR4Rute14s0kFBYh9NtBY.mft (raw, json) Hash identifier: 74B4+S7pTMzakESUDGj3rdsFwmf01Ie88GC/au+90YQ= Subject key identifier: 42:18:20:BB:DA:CC:C0:38:62:B5:10:52:1F:5F:BD:3D:B1:6B:E1:CB Authority key identifier: A8:A3:83:E6:34:91:E1:1B:AD:7B:5E:2C:D2:41:41:62:1F:4D:B4:16 Certificate issuer: /CN=A913BB9E/serialNumber=A8A383E63491E11BAD7B5E2CD24141621F4DB416 Certificate serial: 0677 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qKOD5jSR4Rute14s0kFBYh9NtBY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.mft Manifest number: 066C Signing time: Tue 12 May 2026 22:42:01 +0000 Manifest this update: Tue 12 May 2026 22:42:01 +0000 Manifest next update: Tue 19 May 2026 22:42:01 +0000 Files and hashes: 1: qKOD5jSR4Rute14s0kFBYh9NtBY.crl (hash: 78McQYevhPi6tYNlwdkLPFQeSr5YzdHXjKiPH/Zdzjw=) 2: FD62B046DF1611ED81C1BE7CC4F9AE02.roa (hash: RpPhdY8+tXmNKm2CO6PsrLMjG0gZZmTjNB6euQu9tho=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.crl rsync://rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qKOD5jSR4Rute14s0kFBYh9NtBY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 22:42:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1655 (0x677) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913BB9E, serialNumber=A8A383E63491E11BAD7B5E2CD24141621F4DB416 Validity Not Before: May 12 22:42:01 2026 GMT Not After : May 19 22:42:01 2026 GMT Subject: CN=6a03acb9-5e0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f0:74:bf:7c:e3:8e:32:b2:b0:68:be:b8:9d: e7:44:2c:57:c6:ed:aa:1d:5a:4c:6f:a4:66:72:b5: 0c:41:ae:b8:aa:e5:ff:93:40:f6:78:ae:ff:c3:08: 93:66:00:6b:ac:5e:79:ce:0b:46:31:46:4e:7f:75: 5e:c0:55:37:f9:76:48:3a:92:e7:e4:20:b4:81:cd: da:91:65:b1:71:79:04:c1:96:75:e2:c3:9e:5a:3c: b9:ca:42:b1:19:63:17:b4:2b:e2:6a:b2:95:50:ba: 96:6d:3d:75:b2:fa:fd:25:70:7d:23:77:7d:9f:3e: 6a:ce:c6:76:77:9d:1d:06:98:da:7b:4e:89:a6:98: 19:6b:ec:5b:03:4e:b4:ed:39:5e:5b:50:88:dc:15: b4:b0:cc:52:20:77:e6:50:69:23:be:97:10:f8:e4: 93:d5:d7:65:c1:ff:61:02:d7:85:c5:c8:58:6d:d7: 5c:67:6f:f5:a6:83:a1:e8:95:dd:f8:77:f5:e6:b4: 7c:91:93:28:24:ca:af:04:6d:54:53:7f:d9:2c:97: 6d:7f:09:09:8e:f3:74:35:5c:76:c8:d2:80:37:26: 9c:d6:c2:3e:02:4c:39:0d:8a:49:90:2a:68:4c:0c: 2f:2e:f4:b9:78:59:e3:d3:00:0c:8f:3b:8a:9d:d2: f0:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:18:20:BB:DA:CC:C0:38:62:B5:10:52:1F:5F:BD:3D:B1:6B:E1:CB X509v3 Authority Key Identifier: keyid:A8:A3:83:E6:34:91:E1:1B:AD:7B:5E:2C:D2:41:41:62:1F:4D:B4:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qKOD5jSR4Rute14s0kFBYh9NtBY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:9c:7e:6d:e3:ca:25:2a:b8:b1:1b:c4:95:a7:b7:20:f5:e4: 50:ee:28:56:63:6a:6b:1f:3f:c5:97:8b:94:31:be:ff:33:d2: ad:0e:2c:ae:90:15:04:cc:de:3b:fc:db:25:55:07:d0:dd:83: 40:af:ed:12:28:ac:78:37:58:6e:d0:0a:5f:b7:7f:21:2a:2e: 8c:e6:20:95:89:37:70:07:f0:99:df:1a:a2:5c:db:83:b7:69: 1a:37:95:8f:e9:2b:b4:fc:03:9b:92:e1:80:c0:2d:77:2f:c8: f6:10:37:8f:8d:0d:45:a7:f4:84:d4:20:fb:a1:55:0f:72:b1: 8f:2c:a7:49:a9:92:7c:3a:e2:8e:6f:1e:12:5e:85:f2:70:09: 42:ac:13:56:1b:16:2b:3a:7e:01:88:dd:b5:22:9e:8e:fa:f8: 66:cc:a3:c1:13:bf:a1:bd:62:83:19:6f:e0:aa:d8:8e:78:93: 2e:16:39:c9:5f:17:b6:82:eb:99:f1:59:c8:09:b2:b5:18:1b: 24:1d:d7:f9:3c:4d:d2:9c:1d:c2:bd:92:48:6c:4c:5a:ce:82: 23:9c:da:8e:cd:7a:13:1a:5c:aa:39:b9:39:79:6e:35:ec:e3: 04:3d:c3:f4:47:e5:0b:a8:c8:5c:c5:e8:ff:13:94:d5:9b:ba: a2:76:0b:8a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBncwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0JCOUUxMTAvBgNVBAUTKEE4QTM4M0U2MzQ5MUUxMUJBRDdCNUUyQ0QyNDE0MTYy MUY0REI0MTYwHhcNMjYwNTEyMjI0MjAxWhcNMjYwNTE5MjI0MjAxWjAYMRYwFAYD VQQDEw02YTAzYWNiOS01ZTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzvB0v3zjjjKysGi+uJ3nRCxXxu2qHVpMb6RmcrUMQa64quX/k0D2eK7/wwiT ZgBrrF55zgtGMUZOf3VewFU3+XZIOpLn5CC0gc3akWWxcXkEwZZ14sOeWjy5ykKx GWMXtCviarKVULqWbT11svr9JXB9I3d9nz5qzsZ2d50dBpjae06JppgZa+xbA060 7TleW1CI3BW0sMxSIHfmUGkjvpcQ+OST1ddlwf9hAteFxchYbddcZ2/1poOh6JXd +Hf15rR8kZMoJMqvBG1UU3/ZLJdtfwkJjvN0NVx2yNKANyac1sI+Akw5DYpJkCpo TAwvLvS5eFnj0wAMjzuKndLwHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEIYILva zMA4YrUQUh9fvT2xa+HLMB8GA1UdIwQYMBaAFKijg+Y0keEbrXteLNJBQWIfTbQW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQkI5RS80M0UyQzQyNkM3 RjgxMUVCODA5NDc1MTVDNEY5QUUwMi9xS09ENWpTUjRSdXRlMTRzMGtGQlloOU50 QlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FLT0Q1alNSNFJ1dGUxNHMwa0ZCWWg5TnRCWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QkI5RS80M0UyQzQyNkM3RjgxMUVCODA5NDc1MTVDNEY5QUUwMi9xS09ENWpTUjRS dXRlMTRzMGtGQlloOU50QlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAG5x+bePKJSq4sRvElae3IPXkUO4oVmNqax8/xZeLlDG+/zPSrQ4srpAVBMze O/zbJVUH0N2DQK/tEiiseDdYbtAKX7d/ISoujOYglYk3cAfwmd8aolzbg7dpGjeV j+krtPwDm5LhgMAtdy/I9hA3j40NRaf0hNQg+6FVD3KxjyynSamSfDrijm8eEl6F 8nAJQqwTVhsWKzp+AYjdtSKejvr4ZsyjwRO/ob1igxlv4KrYjniTLhY5yV8XtoLr mfFZyAmytRgbJB3X+TxN0pwdwr2SSGxMWs6CI5zajs16Expcqjm5OXluNezjBD3D 9EflC6jIXMXo/xOU1Zu6onYLig== -----END CERTIFICATE-----Generated at Wed May 13 11:44:25 2026 by rpki-client