$ rpki-client -vvf rpki.apnic.net/member_repository/A91878FF/5B6BD15A17B711F1BF42BB44383D8C67/X_qGqIMhMTsqbeOLfxYwXRm5WM4.mft File: X_qGqIMhMTsqbeOLfxYwXRm5WM4.mft (raw, json) Hash identifier: jbs0hxhdkkjUZ31ptzeNQOuobr3FoaPBkXv+DmqdboE= Subject key identifier: 27:EF:78:E7:4D:F6:DE:ED:52:E1:65:76:2B:CD:7A:CE:4F:A9:3D:A5 Authority key identifier: 5F:FA:86:A8:83:21:31:3B:2A:6D:E3:8B:7F:16:30:5D:19:B9:58:CE Certificate issuer: /CN=A91878FF/serialNumber=5FFA86A88321313B2A6DE38B7F16305D19B958CE Certificate serial: 2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X_qGqIMhMTsqbeOLfxYwXRm5WM4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91878FF/5B6BD15A17B711F1BF42BB44383D8C67/X_qGqIMhMTsqbeOLfxYwXRm5WM4.mft Manifest number: 29 Signing time: Wed 13 May 2026 08:56:39 +0000 Manifest this update: Wed 13 May 2026 08:56:38 +0000 Manifest next update: Wed 20 May 2026 08:56:38 +0000 Files and hashes: 1: X_qGqIMhMTsqbeOLfxYwXRm5WM4.crl (hash: 6vIQb5UkRE8ooLbICI44cBS73eIeBt50nMTjO9xFpKg=) 2: B1AC59CA17B911F18117E782383D8C67.roa (hash: +NS4dIto6+EmYFB1YZFztX1H1Dxs72FShVzE38yw9hI=) 3: 58EB7FEA17BA11F192FEB12A393D8C67.roa (hash: 5nbX1XIJNdumuOJIpAiDvH+g4m9L4W7smTojDdZZ4A0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91878FF/5B6BD15A17B711F1BF42BB44383D8C67/X_qGqIMhMTsqbeOLfxYwXRm5WM4.crl rsync://rpki.apnic.net/member_repository/A91878FF/5B6BD15A17B711F1BF42BB44383D8C67/X_qGqIMhMTsqbeOLfxYwXRm5WM4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X_qGqIMhMTsqbeOLfxYwXRm5WM4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 08:09:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91878FF, serialNumber=5FFA86A88321313B2A6DE38B7F16305D19B958CE Validity Not Before: May 13 08:56:38 2026 GMT Not After : May 20 08:56:38 2026 GMT Subject: CN=6a043cc7-7b7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e2:d0:5e:6a:3a:91:1d:72:9c:b9:77:fc:8b: 25:20:be:dd:fe:bc:99:f8:55:a8:79:41:bb:87:bf: 56:7c:b4:74:e8:4f:ec:8d:37:67:e4:91:ea:13:b1: 59:b1:b4:bb:bb:43:53:ea:69:99:2e:37:0e:6e:bc: f2:18:0b:f2:3a:8b:e8:f1:7f:81:8f:94:ca:f1:b1: 84:d9:b0:8b:63:5e:17:94:b9:8e:85:44:c1:31:c2: 28:4a:3a:ca:e6:d3:22:91:1a:ac:06:a5:d6:eb:25: b9:99:82:bb:4c:12:d0:bc:8a:39:28:d1:16:03:7b: 8e:28:2f:ed:86:0f:d9:3a:ac:cc:d8:c5:47:35:f2: e4:57:b9:b9:61:e4:4f:33:de:5a:79:e3:15:46:02: 0e:c8:09:b4:a5:7e:de:74:9b:64:8c:1f:ab:6b:29: 01:5f:76:e9:19:68:f9:78:d9:db:4d:ad:9e:2f:27: b2:62:fa:8e:87:1f:2a:44:3a:e0:e4:38:54:6e:47: 08:81:e3:91:dc:0b:7d:c9:00:62:21:9c:db:18:7b: af:34:45:6c:a7:5f:e7:34:b7:ed:c9:a8:f4:97:05: 93:41:d5:b8:e9:71:3e:96:96:6f:f7:a9:21:73:b2: 8c:79:48:ad:7f:9f:1a:b4:b4:d0:52:82:9c:e7:81: bd:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:EF:78:E7:4D:F6:DE:ED:52:E1:65:76:2B:CD:7A:CE:4F:A9:3D:A5 X509v3 Authority Key Identifier: keyid:5F:FA:86:A8:83:21:31:3B:2A:6D:E3:8B:7F:16:30:5D:19:B9:58:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91878FF/5B6BD15A17B711F1BF42BB44383D8C67/X_qGqIMhMTsqbeOLfxYwXRm5WM4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X_qGqIMhMTsqbeOLfxYwXRm5WM4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91878FF/5B6BD15A17B711F1BF42BB44383D8C67/X_qGqIMhMTsqbeOLfxYwXRm5WM4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:c8:0e:0b:7f:f0:b9:84:8f:78:37:fe:5d:4c:2b:b6:21:83: a3:fc:65:df:a9:68:9e:aa:47:d6:f7:24:3b:68:45:c2:7c:4c: e9:67:3f:b9:d3:fd:68:34:9a:9a:ba:28:6f:b9:5d:05:a3:80: 8d:dc:40:89:a4:e1:41:f9:68:4a:80:f6:98:bb:2b:5a:c8:7b: eb:29:c1:ee:ce:d7:8f:01:75:33:dd:6f:e1:26:e8:8e:e4:f7: c4:02:eb:d5:1a:b8:88:20:c7:87:42:f0:4c:47:51:a4:4f:c0: fc:a4:38:da:c6:f7:fd:a6:17:1b:c8:09:a8:7b:30:76:69:03: 8c:22:18:5d:23:71:cc:c6:56:b4:ba:5d:72:06:f2:a9:98:55: 88:5f:ad:53:7d:6d:18:15:be:25:30:ef:58:0f:69:c4:8f:9c: fd:fb:65:d8:87:c5:bb:1d:bb:96:0d:04:f1:70:e8:fa:10:a5: dc:c2:c2:67:cf:c5:5c:80:6b:26:e3:98:f3:50:b4:35:1f:54: a7:db:d9:44:7a:55:3a:b1:4a:e2:9a:34:12:4b:27:1e:01:1b: f1:cc:8e:e7:41:0e:1c:bb:36:08:d9:05:bd:7e:fc:08:21:27: ba:17:b8:33:5a:a1:fc:29:c7:f5:2a:ac:a1:0e:c3:73:48:4c: 6c:99:36:52 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NzhGRjExMC8GA1UEBRMoNUZGQTg2QTg4MzIxMzEzQjJBNkRFMzhCN0YxNjMwNUQx OUI5NThDRTAeFw0yNjA1MTMwODU2MzhaFw0yNjA1MjAwODU2MzhaMBgxFjAUBgNV BAMTDTZhMDQzY2M3LTdiN2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC14tBeajqRHXKcuXf8iyUgvt3+vJn4Vah5QbuHv1Z8tHToT+yNN2fkkeoTsVmx tLu7Q1PqaZkuNw5uvPIYC/I6i+jxf4GPlMrxsYTZsItjXheUuY6FRMExwihKOsrm 0yKRGqwGpdbrJbmZgrtMEtC8ijko0RYDe44oL+2GD9k6rMzYxUc18uRXublh5E8z 3lp54xVGAg7ICbSlft50m2SMH6trKQFfdukZaPl42dtNrZ4vJ7Ji+o6HHypEOuDk OFRuRwiB45HcC33JAGIhnNsYe680RWynX+c0t+3JqPSXBZNB1bjpcT6Wlm/3qSFz sox5SK1/nxq0tNBSgpzngb3ZAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUJ+945032 3u1S4WV2K816zk+pPaUwHwYDVR0jBBgwFoAUX/qGqIMhMTsqbeOLfxYwXRm5WM4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3OEZGLzVCNkJEMTVBMTdC NzExRjFCRjQyQkI0NDM4M0Q4QzY3L1hfcUdxSU1oTVRzcWJlT0xmeFl3WFJtNVdN NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWF9xR3FJTWhNVHNxYmVPTGZ4WXdYUm01V000LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3 OEZGLzVCNkJEMTVBMTdCNzExRjFCRjQyQkI0NDM4M0Q4QzY3L1hfcUdxSU1oTVRz cWJlT0xmeFl3WFJtNVdNNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBEyA4Lf/C5hI94N/5dTCu2IYOj/GXfqWieqkfW9yQ7aEXCfEzpZz+50/1oNJqa uihvuV0Fo4CN3ECJpOFB+WhKgPaYuytayHvrKcHuztePAXUz3W/hJuiO5PfEAuvV GriIIMeHQvBMR1GkT8D8pDjaxvf9phcbyAmoezB2aQOMIhhdI3HMxla0ul1yBvKp mFWIX61TfW0YFb4lMO9YD2nEj5z9+2XYh8W7HbuWDQTxcOj6EKXcwsJnz8VcgGsm 45jzULQ1H1Sn29lEelU6sUrimjQSSyceARvxzI7nQQ4cuzYI2QW9fvwIISe6F7gz WqH8Kcf1KqyhDsNzSExsmTZS -----END CERTIFICATE-----Generated at Wed May 13 11:47:52 2026 by rpki-client