$ rpki-client -vvf rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft File: qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft (raw, json) Hash identifier: IJ6xS2dWS93+oNq4NqIjm0y0R1C9h0PvaxFppjO9cnE= Subject key identifier: 94:84:94:76:4E:24:1E:D7:4A:3D:E2:92:44:DB:0D:3A:FC:A3:9B:B3 Authority key identifier: A8:56:8F:52:79:3C:C3:48:57:85:0C:4F:2E:D3:8A:E0:B1:89:70:F8 Certificate issuer: /CN=A9184324/serialNumber=A8568F52793CC34857850C4F2ED38AE0B18970F8 Certificate serial: 014F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qFaPUnk8w0hXhQxPLtOK4LGJcPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft Manifest number: 013A Signing time: Wed 13 May 2026 05:34:23 +0000 Manifest this update: Wed 13 May 2026 05:34:22 +0000 Manifest next update: Wed 20 May 2026 05:34:22 +0000 Files and hashes: 1: qFaPUnk8w0hXhQxPLtOK4LGJcPg.crl (hash: l9RIjle/9fz4KWDJk0DjinGMKfRAKZUGieQp8bDFH2I=) 2: 49AD69BAB97A11F082553162C4F9AE02.roa (hash: u+AOQs7swlbtyTKzbGqH0JVVjQoXfbRTN0aGMPHqYwM=) 3: 48C56FF2B97A11F082553162C4F9AE02.roa (hash: OtWdgE0NfWAtdp3sq2GPul7fJB1+qypIA/v5t4925Qw=) 4: 5C8F63FE7C4911EF81434A2DC4F9AE02.roa (hash: FTfGtoGrUVwrnxaveaM8/TkkP8CeSjEWf8+UAR8ONdk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.crl rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qFaPUnk8w0hXhQxPLtOK4LGJcPg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 05:34:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 335 (0x14f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184324, serialNumber=A8568F52793CC34857850C4F2ED38AE0B18970F8 Validity Not Before: May 13 05:34:22 2026 GMT Not After : May 20 05:34:22 2026 GMT Subject: CN=6a040d5e-efd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:52:d3:c6:cf:8f:22:f1:ec:c8:ff:2b:7e:03: 76:a4:ac:f3:1b:a7:7e:00:e2:78:01:a3:b2:4e:f0: ce:95:19:09:07:5d:82:38:43:dc:bf:dd:16:54:85: 02:b7:31:64:35:b0:4d:45:37:d3:39:02:ad:22:33: 62:54:c7:e4:f1:a6:b1:b3:1b:40:2e:77:60:f1:8b: ab:af:79:fb:15:e3:6d:5f:f0:e9:ba:a4:20:25:16: 57:1a:4e:f1:a7:7d:7e:a5:00:a7:88:d3:96:3b:76: 3d:31:a0:7c:a8:eb:e9:34:13:f0:f3:07:cc:41:3c: 33:22:e7:bf:0e:7f:dc:ad:47:8b:30:35:43:9d:14: ce:dd:de:e7:85:41:11:db:d9:40:24:42:57:ff:43: 1f:b3:30:c9:e1:a3:f9:ca:69:2c:f8:b0:fd:70:d9: 7c:9c:dc:4e:d7:54:bc:81:fe:a6:e3:7a:3c:04:64: 18:ee:3e:c6:a7:57:8e:bb:fb:8c:f2:03:32:1e:8b: 8e:ec:75:74:39:4c:2b:bb:ad:f9:4e:69:97:d9:36: 9f:5f:5b:ea:f7:4b:05:54:f4:c1:b5:3b:45:20:fa: 92:b6:09:ac:26:52:fa:6c:b7:fb:67:a1:f3:47:94: c9:d2:46:1c:53:d2:7c:33:79:7c:e9:8d:ab:8a:3e: e2:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:84:94:76:4E:24:1E:D7:4A:3D:E2:92:44:DB:0D:3A:FC:A3:9B:B3 X509v3 Authority Key Identifier: keyid:A8:56:8F:52:79:3C:C3:48:57:85:0C:4F:2E:D3:8A:E0:B1:89:70:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qFaPUnk8w0hXhQxPLtOK4LGJcPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:70:27:ee:3f:40:2e:f1:f1:fa:f8:ac:10:9a:6a:34:9e:5b: 89:b7:4a:f6:12:92:66:3d:0f:0b:be:77:2a:0b:e8:25:33:00: b1:a8:95:2a:70:0d:dc:24:f5:6a:e8:6f:d4:87:e2:b9:7d:f1: 3d:ef:eb:a2:aa:1f:f7:f5:70:a3:15:81:4a:67:fc:3a:e5:ce: c5:d9:e6:17:bc:92:9c:61:69:6d:d4:d4:1d:e1:06:40:56:08: b5:1e:43:44:80:53:cd:0e:29:75:9e:9e:fc:3b:2f:64:8a:05: 50:1a:d0:18:8b:2a:ea:ff:eb:fa:28:de:eb:ed:42:82:5e:96: 69:b4:62:cf:76:35:51:1a:ac:ea:6c:d0:21:a9:44:7b:9a:0b: 65:2a:ab:ef:93:c0:29:a3:42:27:11:f9:e1:a5:21:ff:1f:b8: 40:25:f6:01:48:fc:7c:53:97:03:1f:46:bc:70:d3:b6:4b:e8: d5:40:8a:ec:72:a3:5d:6c:59:50:0d:43:6b:10:55:96:64:27: 44:ff:73:4f:df:b3:04:29:3d:49:25:4f:db:4d:e4:d0:10:87: f5:93:7e:b1:af:e8:2c:27:05:6e:ad:28:99:db:de:3d:82:eb: 35:bd:d3:a4:58:09:d0:2a:94:3d:b4:be:5e:4b:ff:a0:32:ed: cd:5d:43:ab -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQzMjQxMTAvBgNVBAUTKEE4NTY4RjUyNzkzQ0MzNDg1Nzg1MEM0RjJFRDM4QUUw QjE4OTcwRjgwHhcNMjYwNTEzMDUzNDIyWhcNMjYwNTIwMDUzNDIyWjAYMRYwFAYD VQQDEw02YTA0MGQ1ZS1lZmQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzVLTxs+PIvHsyP8rfgN2pKzzG6d+AOJ4AaOyTvDOlRkJB12COEPcv90WVIUC tzFkNbBNRTfTOQKtIjNiVMfk8aaxsxtALndg8Yurr3n7FeNtX/DpuqQgJRZXGk7x p31+pQCniNOWO3Y9MaB8qOvpNBPw8wfMQTwzIue/Dn/crUeLMDVDnRTO3d7nhUER 29lAJEJX/0MfszDJ4aP5ymks+LD9cNl8nNxO11S8gf6m43o8BGQY7j7Gp1eOu/uM 8gMyHouO7HV0OUwru635TmmX2TafX1vq90sFVPTBtTtFIPqStgmsJlL6bLf7Z6Hz R5TJ0kYcU9J8M3l86Y2rij7inwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJSElHZO JB7XSj3ikkTbDTr8o5uzMB8GA1UdIwQYMBaAFKhWj1J5PMNIV4UMTy7TiuCxiXD4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDMyNC9FQUE5Q0NENDdC MUMxMUVGQUMxMDk0MTZDNEY5QUUwMi9xRmFQVW5rOHcwaFhoUXhQTHRPSzRMR0pj UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3FGYVBVbms4dzBoWGhReFBMdE9LNExHSmNQZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDMyNC9FQUE5Q0NENDdCMUMxMUVGQUMxMDk0MTZDNEY5QUUwMi9xRmFQVW5rOHcw aFhoUXhQTHRPSzRMR0pjUGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATnAn7j9ALvHx+visEJpqNJ5bibdK9hKSZj0PC753KgvoJTMAsaiVKnAN3CT1 auhv1IfiuX3xPe/roqof9/VwoxWBSmf8OuXOxdnmF7ySnGFpbdTUHeEGQFYItR5D RIBTzQ4pdZ6e/DsvZIoFUBrQGIsq6v/r+ije6+1Cgl6WabRiz3Y1URqs6mzQIalE e5oLZSqr75PAKaNCJxH54aUh/x+4QCX2AUj8fFOXAx9GvHDTtkvo1UCK7HKjXWxZ UA1DaxBVlmQnRP9zT9+zBCk9SSVP203k0BCH9ZN+sa/oLCcFbq0omdvePYLrNb3T pFgJ0CqUPbS+Xkv/oDLtzV1Dqw== -----END CERTIFICATE-----Generated at Wed May 13 11:43:44 2026 by rpki-client