$ rpki-client -vvf rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.mft File: qL9U9ggZZyIZNcsXzBPr-4QaYMI.mft (raw, json) Hash identifier: eyx+Gj+3TMHgIpLc2wHj5Y1duNPDLx/JlO7psdnO3PY= Subject key identifier: 71:20:D8:12:03:FB:D1:E6:3C:BA:DE:A1:E9:49:6D:1D:38:C0:6C:8B Authority key identifier: A8:BF:54:F6:08:19:67:22:19:35:CB:17:CC:13:EB:FB:84:1A:60:C2 Certificate issuer: /CN=A914D6FC/serialNumber=A8BF54F6081967221935CB17CC13EBFB841A60C2 Certificate serial: 02B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qL9U9ggZZyIZNcsXzBPr-4QaYMI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.mft Manifest number: 02AD Signing time: Wed 13 May 2026 01:35:26 +0000 Manifest this update: Wed 13 May 2026 01:35:26 +0000 Manifest next update: Wed 20 May 2026 01:35:26 +0000 Files and hashes: 1: qL9U9ggZZyIZNcsXzBPr-4QaYMI.crl (hash: UN5AC6yd+5xlJm8+ixyESvToaplTgm3d2ZVZQeC9pFI=) 2: 11EC50B48B8F11EF8DE96E60C4F9AE02.roa (hash: Ae2D09RrIAEsj2zD2tu6+cplYXPngj1cvZnsDaiUJHM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.crl rsync://rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qL9U9ggZZyIZNcsXzBPr-4QaYMI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 01:35:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 697 (0x2b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D6FC, serialNumber=A8BF54F6081967221935CB17CC13EBFB841A60C2 Validity Not Before: May 13 01:35:26 2026 GMT Not After : May 20 01:35:26 2026 GMT Subject: CN=6a03d55e-471a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:44:0a:49:54:63:d6:ce:07:a5:d6:89:4f:c5: b0:db:30:08:11:40:e4:1f:d1:ab:4c:b4:05:95:41: 6d:31:b0:ad:34:4c:d1:28:05:b0:00:4c:85:09:c2: e0:11:6d:45:fd:8e:b7:03:9a:fd:a8:29:54:b0:42: 39:c6:ce:cb:bd:12:96:3d:c6:a7:8c:8f:b0:8f:40: 44:7d:ce:b4:ba:20:53:aa:04:08:85:75:d8:2f:15: ce:0b:c4:2c:23:84:44:c7:b4:0f:d2:05:65:fb:62: 3d:f2:12:d1:0d:1d:26:3d:7f:cc:99:58:9c:fd:9c: 4e:0f:52:36:82:16:e0:a3:4a:f6:20:fb:74:5c:ab: 50:11:d4:12:d6:36:be:33:73:fb:bc:4f:98:0b:2c: ef:5b:12:57:b6:05:45:12:12:89:8c:ae:64:93:73: 34:db:f2:7f:1b:c9:b8:9c:ce:62:ea:35:29:60:65: c1:c4:66:27:75:2d:2f:ba:b5:54:c6:60:35:57:d6: 8f:5d:ca:2b:9c:9d:cd:35:f6:3d:60:a7:f3:e2:ba: 8e:0e:68:3d:a5:04:d5:53:ad:33:85:8e:97:4f:16: d0:7c:33:01:20:c8:f7:59:b1:41:59:8b:08:cc:db: 84:b8:68:87:f3:cb:aa:14:ea:05:4e:be:20:be:1e: dc:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:20:D8:12:03:FB:D1:E6:3C:BA:DE:A1:E9:49:6D:1D:38:C0:6C:8B X509v3 Authority Key Identifier: keyid:A8:BF:54:F6:08:19:67:22:19:35:CB:17:CC:13:EB:FB:84:1A:60:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qL9U9ggZZyIZNcsXzBPr-4QaYMI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:9b:48:ff:64:89:27:53:2d:8f:76:21:a9:5e:f3:4f:ba:1d: a3:fc:53:b0:a2:66:95:42:b7:41:a0:af:9b:cf:49:70:1f:07: 2f:f9:28:e1:fd:17:7a:b9:32:12:04:e0:20:60:49:51:a5:16: ab:c3:65:15:f8:3c:2f:c1:c3:cb:07:e9:4b:db:cb:95:23:68: 72:3e:a6:24:0f:22:49:c2:7f:7a:5f:3c:b9:23:eb:61:50:1e: 7f:1b:c9:dd:d3:85:5c:71:43:7b:c1:6d:77:99:fb:89:38:ce: b9:e8:b6:a7:78:a0:e4:0f:dc:7d:5e:a4:c7:47:4d:54:5e:e5: d5:d9:1a:56:04:b2:14:f0:94:5e:19:11:15:a7:a9:9c:21:b3: c8:3a:ad:bf:fb:71:a2:6b:fe:d7:bb:7e:cb:73:4d:fd:3b:c6: 1a:49:a5:a2:cf:09:4c:f5:3e:69:04:8a:9f:b0:c3:61:7c:0b: 78:8b:1f:2f:47:a2:9f:2c:af:ac:a1:df:93:0c:50:1e:5f:77: 79:69:1d:fb:db:17:f9:d0:27:6e:1f:95:3d:93:50:e6:23:b0: 93:2d:3a:54:ed:65:63:a8:44:89:79:df:1d:33:f7:e7:f9:b9: 44:d7:04:48:ec:e3:df:c3:f0:a8:74:d8:32:55:7d:2e:2d:c0: f7:55:38:ff -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICArkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQ2RkMxMTAvBgNVBAUTKEE4QkY1NEY2MDgxOTY3MjIxOTM1Q0IxN0NDMTNFQkZC ODQxQTYwQzIwHhcNMjYwNTEzMDEzNTI2WhcNMjYwNTIwMDEzNTI2WjAYMRYwFAYD VQQDEw02YTAzZDU1ZS00NzFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn0QKSVRj1s4HpdaJT8Ww2zAIEUDkH9GrTLQFlUFtMbCtNEzRKAWwAEyFCcLg EW1F/Y63A5r9qClUsEI5xs7LvRKWPcanjI+wj0BEfc60uiBTqgQIhXXYLxXOC8Qs I4REx7QP0gVl+2I98hLRDR0mPX/MmVic/ZxOD1I2ghbgo0r2IPt0XKtQEdQS1ja+ M3P7vE+YCyzvWxJXtgVFEhKJjK5kk3M02/J/G8m4nM5i6jUpYGXBxGYndS0vurVU xmA1V9aPXcornJ3NNfY9YKfz4rqODmg9pQTVU60zhY6XTxbQfDMBIMj3WbFBWYsI zNuEuGiH88uqFOoFTr4gvh7cNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHEg2BID +9HmPLreoelJbR04wGyLMB8GA1UdIwQYMBaAFKi/VPYIGWciGTXLF8wT6/uEGmDC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDZGQy84ODc1OTE4MjQz MkYxMUVEQkJEOThGNUNDNEY5QUUwMi9xTDlVOWdnWlp5SVpOY3NYekJQci00UWFZ TUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FMOVU5Z2daWnlJWk5jc1h6QlByLTRRYVlNSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDZGQy84ODc1OTE4MjQzMkYxMUVEQkJEOThGNUNDNEY5QUUwMi9xTDlVOWdnWlp5 SVpOY3NYekJQci00UWFZTUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuJtI/2SJJ1Mtj3YhqV7zT7odo/xTsKJmlUK3QaCvm89JcB8HL/ko4f0Xerky EgTgIGBJUaUWq8NlFfg8L8HDywfpS9vLlSNocj6mJA8iScJ/el88uSPrYVAefxvJ 3dOFXHFDe8Ftd5n7iTjOuei2p3ig5A/cfV6kx0dNVF7l1dkaVgSyFPCUXhkRFaep nCGzyDqtv/txomv+17t+y3NN/TvGGkmlos8JTPU+aQSKn7DDYXwLeIsfL0einyyv rKHfkwxQHl93eWkd+9sX+dAnbh+VPZNQ5iOwky06VO1lY6hEiXnfHTP35/m5RNcE SOzj38PwqHTYMlV9Li3A91U4/w== -----END CERTIFICATE-----Generated at Wed May 13 12:26:55 2026 by rpki-client