$ rpki-client -vvf rpki.apnic.net/member_repository/A916E9E3/4E0E3714A3A411F092013E29C4F9AE02/QRX9yGsnZiNgOztkXUcIQLgDm8g.mft File: QRX9yGsnZiNgOztkXUcIQLgDm8g.mft (raw, json) Hash identifier: 69Bmy5ZVvhNDUHZqbUVsgvhQhgfCY3uXdlRnsBhLfh0= Subject key identifier: 88:09:D3:E4:41:FA:74:9E:19:7E:AC:54:31:9A:90:6C:6B:F9:95:95 Authority key identifier: 41:15:FD:C8:6B:27:66:23:60:3B:3B:64:5D:47:08:40:B8:03:9B:C8 Certificate issuer: /CN=A916E9E3/serialNumber=4115FDC86B276623603B3B645D470840B8039BC8 Certificate serial: 70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRX9yGsnZiNgOztkXUcIQLgDm8g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E9E3/4E0E3714A3A411F092013E29C4F9AE02/QRX9yGsnZiNgOztkXUcIQLgDm8g.mft Manifest number: 70 Signing time: Mon 11 May 2026 07:58:17 +0000 Manifest this update: Mon 11 May 2026 07:58:16 +0000 Manifest next update: Mon 18 May 2026 07:58:16 +0000 Files and hashes: 1: QRX9yGsnZiNgOztkXUcIQLgDm8g.crl (hash: mz382TBZ0Lu+hoLxjwzLn5b/c/0kSpyDM6f1gxP9awM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E9E3/4E0E3714A3A411F092013E29C4F9AE02/QRX9yGsnZiNgOztkXUcIQLgDm8g.crl rsync://rpki.apnic.net/member_repository/A916E9E3/4E0E3714A3A411F092013E29C4F9AE02/QRX9yGsnZiNgOztkXUcIQLgDm8g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRX9yGsnZiNgOztkXUcIQLgDm8g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 07:58:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 112 (0x70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E9E3, serialNumber=4115FDC86B276623603B3B645D470840B8039BC8 Validity Not Before: May 11 07:58:16 2026 GMT Not After : May 18 07:58:16 2026 GMT Subject: CN=6a018c19-5e7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e5:08:bf:ed:03:2f:08:38:e8:4f:5f:bd:ec: 65:77:b2:63:e9:b5:d2:6e:7b:21:39:f7:7e:ef:3b: fd:27:8e:ae:d1:50:66:aa:66:70:05:e1:37:0f:7b: 8b:1c:ec:2f:1c:0d:63:5a:b0:56:d7:0b:a7:20:32: 5f:6c:11:df:24:51:0f:75:ae:c7:cc:6d:e1:86:b6: e7:73:37:b5:e1:1a:a6:81:24:ff:78:40:16:86:43: d0:d3:c4:07:89:f7:1c:c6:62:ac:59:72:ab:9e:44: cd:47:60:ba:60:ff:db:82:f4:c3:08:11:72:f5:3c: 3d:54:13:51:02:45:dc:52:13:ac:1a:70:a5:ab:be: 9d:ad:8c:3d:90:e0:a6:93:dc:6b:e1:81:e3:7b:ad: bb:ff:bc:37:27:36:7e:fe:d7:d9:1e:e0:ec:60:d4: 2c:42:ed:63:a7:fa:26:f4:ba:b4:05:03:50:7c:d5: 6d:83:dd:04:92:ea:1c:6e:09:ad:0d:4e:32:94:b5: 70:9b:d9:d5:2f:1e:41:4b:73:17:fa:c2:ee:e4:96: 56:2d:53:58:5d:f1:67:92:07:23:9a:34:f6:4f:76: 0d:80:40:12:fd:9e:c3:33:5e:5e:e1:22:a1:0c:d6: be:78:f8:35:83:6d:97:6e:85:4b:95:11:6d:cc:9f: dc:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:09:D3:E4:41:FA:74:9E:19:7E:AC:54:31:9A:90:6C:6B:F9:95:95 X509v3 Authority Key Identifier: keyid:41:15:FD:C8:6B:27:66:23:60:3B:3B:64:5D:47:08:40:B8:03:9B:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E9E3/4E0E3714A3A411F092013E29C4F9AE02/QRX9yGsnZiNgOztkXUcIQLgDm8g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRX9yGsnZiNgOztkXUcIQLgDm8g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E9E3/4E0E3714A3A411F092013E29C4F9AE02/QRX9yGsnZiNgOztkXUcIQLgDm8g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:c9:a3:f7:f0:58:1c:f5:b1:96:cd:6e:5d:94:39:f0:d2:cc: 80:78:1c:cd:fc:ad:b2:63:01:6f:71:0b:20:af:7f:bd:56:8a: c4:0e:0a:cb:56:69:c2:99:d7:88:9b:35:92:58:ee:64:83:50: c7:7b:13:ba:c4:ba:66:74:6e:b0:c0:1c:75:3d:2f:e3:b5:78: 95:ce:01:76:02:22:33:bb:a8:c8:7b:7c:59:d2:6b:8d:d0:e3: 83:aa:e9:fe:21:48:f7:57:6f:9c:d0:2b:6a:a5:0d:b1:40:da: a6:26:d1:c4:86:49:7b:68:fc:10:6f:e7:e2:36:7b:91:07:56: c8:76:46:1b:b9:84:06:d0:d1:00:65:fd:70:15:1c:a3:03:a8: 7b:1a:11:98:af:c6:8c:08:df:5e:c2:7e:d5:50:26:0a:d8:bf: 9b:4c:85:84:9c:5a:6c:b6:3b:8d:fe:9a:c9:b3:b2:a4:88:4c: 23:73:77:95:08:70:60:4e:16:3f:1f:83:dd:4a:ed:87:41:79: c9:de:aa:32:7a:34:8e:07:3f:1b:a7:85:41:c6:1d:e8:ca:aa: f1:25:92:af:23:e2:51:b0:f1:cb:f2:e3:02:be:b3:30:3a:64: 5f:53:24:b9:83:15:f8:ce:bd:47:10:dc:93:6e:61:43:cc:98: b7:9b:1b:d4 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBcDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 RTlFMzExMC8GA1UEBRMoNDExNUZEQzg2QjI3NjYyMzYwM0IzQjY0NUQ0NzA4NDBC ODAzOUJDODAeFw0yNjA1MTEwNzU4MTZaFw0yNjA1MTgwNzU4MTZaMBgxFjAUBgNV BAMTDTZhMDE4YzE5LTVlN2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCx5Qi/7QMvCDjoT1+97GV3smPptdJueyE5937vO/0njq7RUGaqZnAF4TcPe4sc 7C8cDWNasFbXC6cgMl9sEd8kUQ91rsfMbeGGtudzN7XhGqaBJP94QBaGQ9DTxAeJ 9xzGYqxZcqueRM1HYLpg/9uC9MMIEXL1PD1UE1ECRdxSE6wacKWrvp2tjD2Q4KaT 3GvhgeN7rbv/vDcnNn7+19ke4Oxg1CxC7WOn+ib0urQFA1B81W2D3QSS6hxuCa0N TjKUtXCb2dUvHkFLcxf6wu7kllYtU1hd8WeSByOaNPZPdg2AQBL9nsMzXl7hIqEM 1r54+DWDbZduhUuVEW3Mn9y5AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUiAnT5EH6 dJ4ZfqxUMZqQbGv5lZUwHwYDVR0jBBgwFoAUQRX9yGsnZiNgOztkXUcIQLgDm8gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZFOUUzLzRFMEUzNzE0QTNB NDExRjA5MjAxM0UyOUM0RjlBRTAyL1FSWDl5R3NuWmlOZ096dGtYVWNJUUxnRG04 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUVJYOXlHc25aaU5nT3p0a1hVY0lRTGdEbThnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZF OUUzLzRFMEUzNzE0QTNBNDExRjA5MjAxM0UyOUM0RjlBRTAyL1FSWDl5R3NuWmlO Z096dGtYVWNJUUxnRG04Zy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBayaP38Fgc9bGWzW5dlDnw0syAeBzN/K2yYwFvcQsgr3+9VorEDgrLVmnCmdeI mzWSWO5kg1DHexO6xLpmdG6wwBx1PS/jtXiVzgF2AiIzu6jIe3xZ0muN0OODqun+ IUj3V2+c0CtqpQ2xQNqmJtHEhkl7aPwQb+fiNnuRB1bIdkYbuYQG0NEAZf1wFRyj A6h7GhGYr8aMCN9ewn7VUCYK2L+bTIWEnFpstjuN/prJs7KkiEwjc3eVCHBgThY/ H4PdSu2HQXnJ3qoyejSOBz8bp4VBxh3oyqrxJZKvI+JRsPHL8uMCvrMwOmRfUyS5 gxX4zr1HENyTbmFDzJi3mxvU -----END CERTIFICATE-----Generated at Wed May 13 06:36:14 2026 by rpki-client