$ rpki-client -vvf rpki.apnic.net/member_repository/A917C09A/B2966D9EEAD711F0B9CBFBE6646F56BC/Qe0RfxoN1CRX1JR491zcsoZTpx8.mft File: Qe0RfxoN1CRX1JR491zcsoZTpx8.mft (raw, json) Hash identifier: JjeW0a9DpwKZmNR/8m31Fn0W6lxmb9ogkfo2gzzFhGg= Subject key identifier: 9C:54:B2:EA:95:34:57:77:85:F3:32:6A:F5:5F:8C:F6:77:2D:01:7D Authority key identifier: 41:ED:11:7F:1A:0D:D4:24:57:D4:94:78:F7:5C:DC:B2:86:53:A7:1F Certificate issuer: /CN=A917C09A/serialNumber=41ED117F1A0DD42457D49478F75CDCB28653A71F Certificate serial: 49 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qe0RfxoN1CRX1JR491zcsoZTpx8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C09A/B2966D9EEAD711F0B9CBFBE6646F56BC/Qe0RfxoN1CRX1JR491zcsoZTpx8.mft Manifest number: 46 Signing time: Mon 11 May 2026 08:34:21 +0000 Manifest this update: Mon 11 May 2026 08:34:20 +0000 Manifest next update: Mon 18 May 2026 08:34:20 +0000 Files and hashes: 1: Qe0RfxoN1CRX1JR491zcsoZTpx8.crl (hash: VBe5larfrrNRK2odRRGHSj5yXejGrid3G04tOU8+NtI=) 2: BBB1B36C387911F18844C9F1B7833773.roa (hash: sySn8z7CtimAbBeWbFVeZLj6Bb/UV3HDRIyOYd+GVX0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C09A/B2966D9EEAD711F0B9CBFBE6646F56BC/Qe0RfxoN1CRX1JR491zcsoZTpx8.crl rsync://rpki.apnic.net/member_repository/A917C09A/B2966D9EEAD711F0B9CBFBE6646F56BC/Qe0RfxoN1CRX1JR491zcsoZTpx8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qe0RfxoN1CRX1JR491zcsoZTpx8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 08:34:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73 (0x49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C09A, serialNumber=41ED117F1A0DD42457D49478F75CDCB28653A71F Validity Not Before: May 11 08:34:20 2026 GMT Not After : May 18 08:34:20 2026 GMT Subject: CN=6a01948d-96db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:7e:8d:da:b8:f0:73:5e:73:3a:eb:40:85:cb: 61:52:d5:e4:43:56:18:c8:1b:8c:c4:6a:01:3b:e1: ad:ae:28:06:1e:ab:11:1f:81:09:09:52:62:dd:cf: 09:4b:25:31:43:cf:59:20:9d:d2:47:ec:d2:5f:c2: 61:31:42:ed:4f:0a:9f:d4:58:c8:8d:5a:58:bd:29: d3:15:82:32:8e:44:35:98:9f:52:a1:4d:be:4b:71: f6:ef:01:e6:40:9a:70:21:c7:0a:02:5e:b1:10:2f: 41:3b:29:0c:49:a8:31:23:2d:9c:e1:60:fa:63:2a: 00:33:51:a0:a8:ca:be:9a:21:12:16:f1:b9:2f:50: 5c:53:81:52:b6:fa:15:49:c3:42:6a:3c:5a:07:91: 7a:3b:13:6a:00:7f:19:cc:0f:36:43:c6:0a:89:55: 24:14:da:d0:e1:d2:f9:9f:e7:83:bb:be:fd:01:57: a8:be:ad:ab:59:4a:e3:b4:73:2f:26:f3:a9:81:28: 4b:61:3b:b4:71:52:7a:1d:85:75:51:14:c5:5a:ed: 6b:d5:27:c9:1f:39:53:49:c4:75:73:5a:46:14:c6: cc:d0:6b:10:c1:a2:4b:93:39:ae:63:26:be:62:09: c5:d9:3d:f7:99:70:04:18:5d:f1:45:11:9d:fd:a1: 22:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:54:B2:EA:95:34:57:77:85:F3:32:6A:F5:5F:8C:F6:77:2D:01:7D X509v3 Authority Key Identifier: keyid:41:ED:11:7F:1A:0D:D4:24:57:D4:94:78:F7:5C:DC:B2:86:53:A7:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C09A/B2966D9EEAD711F0B9CBFBE6646F56BC/Qe0RfxoN1CRX1JR491zcsoZTpx8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qe0RfxoN1CRX1JR491zcsoZTpx8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C09A/B2966D9EEAD711F0B9CBFBE6646F56BC/Qe0RfxoN1CRX1JR491zcsoZTpx8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:4c:17:ae:a2:62:03:d4:82:a9:9f:a3:9c:92:94:8e:a4:98: 24:2d:71:6e:82:96:71:07:81:3c:86:e5:8b:1e:0f:5f:56:a3: 9b:e6:58:24:bb:9d:ce:31:ea:96:3a:b3:d5:c0:4f:82:29:6b: cc:21:df:da:63:82:ea:c2:4e:e5:4c:ad:20:9d:c0:2f:cb:53: 8e:a7:b1:fc:e8:4d:c8:d0:42:85:5d:00:58:ef:ac:31:1c:2d: 31:1c:0e:e4:77:98:7c:b6:ea:ad:ff:ea:47:a3:a5:24:10:32: c5:a2:fd:36:67:55:e1:e6:0f:65:f5:a3:d1:bb:84:35:db:57: d5:4f:3b:50:de:b2:cb:64:94:33:b9:e8:c2:d4:0f:22:14:77: 3e:cc:9d:10:bf:19:6c:d3:49:d4:2e:2e:f5:b8:02:78:2c:dd: 18:55:d7:1a:1b:57:6c:ae:a5:e8:75:bf:29:f7:4b:26:b6:1f: 71:a8:71:f6:6e:91:af:4a:ef:4c:03:74:8e:ba:b5:61:ac:d0: 9f:21:96:e1:1f:01:25:d2:09:44:26:c5:f9:6f:76:30:df:97: 14:71:fd:bc:47:4c:f7:fb:67:9a:7a:59:73:44:03:8f:26:32: 04:af:3c:51:12:1d:26:ec:a0:a4:cd:aa:74:71:de:73:bf:43: f6:c0:b7:4c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBSTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QzA5QTExMC8GA1UEBRMoNDFFRDExN0YxQTBERDQyNDU3RDQ5NDc4Rjc1Q0RDQjI4 NjUzQTcxRjAeFw0yNjA1MTEwODM0MjBaFw0yNjA1MTgwODM0MjBaMBgxFjAUBgNV BAMTDTZhMDE5NDhkLTk2ZGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDkfo3auPBzXnM660CFy2FS1eRDVhjIG4zEagE74a2uKAYeqxEfgQkJUmLdzwlL JTFDz1kgndJH7NJfwmExQu1PCp/UWMiNWli9KdMVgjKORDWYn1KhTb5LcfbvAeZA mnAhxwoCXrEQL0E7KQxJqDEjLZzhYPpjKgAzUaCoyr6aIRIW8bkvUFxTgVK2+hVJ w0JqPFoHkXo7E2oAfxnMDzZDxgqJVSQU2tDh0vmf54O7vv0BV6i+ratZSuO0cy8m 86mBKEthO7RxUnodhXVRFMVa7WvVJ8kfOVNJxHVzWkYUxszQaxDBokuTOa5jJr5i CcXZPfeZcAQYXfFFEZ39oSLnAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUnFSy6pU0 V3eF8zJq9V+M9nctAX0wHwYDVR0jBBgwFoAUQe0RfxoN1CRX1JR491zcsoZTpx8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdDMDlBL0IyOTY2RDlFRUFE NzExRjBCOUNCRkJFNjY0NkY1NkJDL1FlMFJmeG9OMUNSWDFKUjQ5MXpjc29aVHB4 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUWUwUmZ4b04xQ1JYMUpSNDkxemNzb1pUcHg4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdD MDlBL0IyOTY2RDlFRUFENzExRjBCOUNCRkJFNjY0NkY1NkJDL1FlMFJmeG9OMUNS WDFKUjQ5MXpjc29aVHB4OC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAbTBeuomID1IKpn6OckpSOpJgkLXFugpZxB4E8huWLHg9fVqOb5lgku53OMeqW OrPVwE+CKWvMId/aY4Lqwk7lTK0gncAvy1OOp7H86E3I0EKFXQBY76wxHC0xHA7k d5h8tuqt/+pHo6UkEDLFov02Z1Xh5g9l9aPRu4Q121fVTztQ3rLLZJQzuejC1A8i FHc+zJ0Qvxls00nULi71uAJ4LN0YVdcaG1dsrqXodb8p90smth9xqHH2bpGvSu9M A3SOurVhrNCfIZbhHwEl0glEJsX5b3Yw35cUcf28R0z3+2eaellzRAOPJjIErzxR Eh0m7KCkzap0cd5zv0P2wLdM -----END CERTIFICATE-----Generated at Wed May 13 06:44:52 2026 by rpki-client