$ rpki-client -vvf rpki.apnic.net/member_repository/A9190059/4799949ECE5D11F0A334CE74C4F9AE02/4CQ11RNJPD1BPTHtH44NyjCuDJ4.mft File: 4CQ11RNJPD1BPTHtH44NyjCuDJ4.mft (raw, json) Hash identifier: RZubz1/BJzvKgjrdwRGHM8zCcZgij5pNTdiDZVfzQrk= Subject key identifier: 16:5F:C6:B2:36:C4:5D:05:36:DE:CA:D6:3F:91:13:27:AB:0F:15:0F Authority key identifier: E0:24:35:D5:13:49:3C:3D:41:3D:31:ED:1F:8E:0D:CA:30:AE:0C:9E Certificate issuer: /CN=A9190059/serialNumber=E02435D513493C3D413D31ED1F8E0DCA30AE0C9E Certificate serial: 5A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4CQ11RNJPD1BPTHtH44NyjCuDJ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190059/4799949ECE5D11F0A334CE74C4F9AE02/4CQ11RNJPD1BPTHtH44NyjCuDJ4.mft Manifest number: 57 Signing time: Mon 11 May 2026 08:21:01 +0000 Manifest this update: Mon 11 May 2026 08:21:00 +0000 Manifest next update: Mon 18 May 2026 08:21:00 +0000 Files and hashes: 1: 4CQ11RNJPD1BPTHtH44NyjCuDJ4.crl (hash: wn1PG2IazsHA2GbNGMPGwmjBfHI0nnhaDwnLrGMmtGk=) 2: 0DA28718CE5E11F084703925C4F9AE02.roa (hash: aNAGDtc4oo9p4iSroAq26pCHqmBV0FiomHYHA3EdekQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190059/4799949ECE5D11F0A334CE74C4F9AE02/4CQ11RNJPD1BPTHtH44NyjCuDJ4.crl rsync://rpki.apnic.net/member_repository/A9190059/4799949ECE5D11F0A334CE74C4F9AE02/4CQ11RNJPD1BPTHtH44NyjCuDJ4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4CQ11RNJPD1BPTHtH44NyjCuDJ4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 08:20:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 90 (0x5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190059, serialNumber=E02435D513493C3D413D31ED1F8E0DCA30AE0C9E Validity Not Before: May 11 08:21:00 2026 GMT Not After : May 18 08:21:00 2026 GMT Subject: CN=6a01916c-0807 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:af:65:0a:c8:2f:ff:71:b3:61:0c:58:04:ef: c1:3c:b1:84:04:60:cc:d3:e3:74:f2:ca:83:2f:29: ce:96:80:de:55:61:36:69:0e:d0:47:5f:de:2e:5f: 45:d1:5d:8d:73:fb:a0:ab:a1:28:8b:32:88:10:2e: 7a:81:dc:50:98:94:f9:f1:3f:eb:0f:90:70:10:f2: 00:82:7e:d8:83:85:58:0d:9a:f9:2c:25:fa:25:e1: 43:24:6b:53:75:32:18:d4:2c:fa:1d:c5:e1:be:df: cf:fe:7c:32:22:eb:0d:98:bb:14:96:81:f6:95:47: cb:0f:6f:a4:22:16:49:f6:5b:29:85:5d:1f:a0:49: b9:bf:38:20:e1:2d:3b:d2:9e:09:c0:45:c5:de:17: 70:52:54:3f:e1:bc:b7:1b:a2:42:39:b7:98:5f:82: 67:7f:b8:23:c0:96:50:1a:e0:21:7c:5b:d3:80:b5: 70:de:d0:0e:fb:55:c0:36:3d:e5:25:5b:72:3e:d4: e7:6f:9d:07:e3:60:25:94:c2:6a:64:7a:f3:4e:cc: fd:53:41:14:6e:fd:30:1b:27:38:50:7f:a0:04:2f: 3f:5b:40:e7:c9:60:ca:21:35:fa:3a:f2:83:3e:0f: ae:2f:01:c6:15:47:08:ab:81:c8:a6:c2:45:1d:66: cc:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:5F:C6:B2:36:C4:5D:05:36:DE:CA:D6:3F:91:13:27:AB:0F:15:0F X509v3 Authority Key Identifier: keyid:E0:24:35:D5:13:49:3C:3D:41:3D:31:ED:1F:8E:0D:CA:30:AE:0C:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190059/4799949ECE5D11F0A334CE74C4F9AE02/4CQ11RNJPD1BPTHtH44NyjCuDJ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4CQ11RNJPD1BPTHtH44NyjCuDJ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190059/4799949ECE5D11F0A334CE74C4F9AE02/4CQ11RNJPD1BPTHtH44NyjCuDJ4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:f3:cf:a5:6e:5b:3b:6b:20:19:41:af:93:7d:bc:65:4d:4c: a5:d0:f2:6d:d5:31:8d:29:96:ce:19:98:bf:ad:fa:87:c2:ea: d4:48:ac:43:ff:a1:63:92:c9:e6:46:0d:6d:7a:95:67:2a:c2: c6:29:da:a3:73:f2:8d:7d:8c:13:bd:e5:31:d5:a2:ae:bf:9e: d6:1b:64:e8:49:aa:f0:e4:06:d1:87:2a:f9:7f:7c:64:bf:e0: e1:32:a6:27:86:56:49:ad:24:f6:5e:14:13:1a:3e:00:b0:3a: 97:6e:5d:b8:22:cc:c7:e1:6d:4b:15:07:23:a5:54:1b:8d:71: f8:32:ef:0b:6f:55:42:50:02:67:f7:ae:ca:45:e8:6f:36:05: c3:cd:85:7a:27:1b:db:eb:b3:55:07:20:27:b0:19:f1:1d:fe: 7f:c3:fd:58:0e:aa:47:ef:b7:ac:d0:26:bd:14:39:b9:05:f0: 13:51:4f:e7:22:15:74:31:9e:0d:48:a0:da:88:0c:29:29:5b: f6:33:8a:70:f6:6a:d9:43:56:f8:ed:8e:d4:bb:69:68:d0:89: d3:5a:9f:87:fb:fc:8e:16:11:08:7c:93:b2:87:7e:b4:71:18: 86:af:ba:2f:4c:67:dd:f7:ef:3f:bd:e7:2e:ff:25:fd:fa:62: ff:63:19:c1 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBWjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MDA1OTExMC8GA1UEBRMoRTAyNDM1RDUxMzQ5M0MzRDQxM0QzMUVEMUY4RTBEQ0Ez MEFFMEM5RTAeFw0yNjA1MTEwODIxMDBaFw0yNjA1MTgwODIxMDBaMBgxFjAUBgNV BAMTDTZhMDE5MTZjLTA4MDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCyr2UKyC//cbNhDFgE78E8sYQEYMzT43TyyoMvKc6WgN5VYTZpDtBHX94uX0XR XY1z+6CroSiLMogQLnqB3FCYlPnxP+sPkHAQ8gCCftiDhVgNmvksJfol4UMka1N1 MhjULPodxeG+38/+fDIi6w2YuxSWgfaVR8sPb6QiFkn2WymFXR+gSbm/OCDhLTvS ngnARcXeF3BSVD/hvLcbokI5t5hfgmd/uCPAllAa4CF8W9OAtXDe0A77VcA2PeUl W3I+1OdvnQfjYCWUwmpkevNOzP1TQRRu/TAbJzhQf6AELz9bQOfJYMohNfo68oM+ D64vAcYVRwirgcimwkUdZsyRAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUFl/GsjbE XQU23srWP5ETJ6sPFQ8wHwYDVR0jBBgwFoAU4CQ11RNJPD1BPTHtH44NyjCuDJ4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkwMDU5LzQ3OTk5NDlFQ0U1 RDExRjBBMzM0Q0U3NEM0RjlBRTAyLzRDUTExUk5KUEQxQlBUSHRINDROeWpDdURK NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNENRMTFSTkpQRDFCUFRIdEg0NE55akN1REo0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkw MDU5LzQ3OTk5NDlFQ0U1RDExRjBBMzM0Q0U3NEM0RjlBRTAyLzRDUTExUk5KUEQx QlBUSHRINDROeWpDdURKNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQC688+lbls7ayAZQa+TfbxlTUyl0PJt1TGNKZbOGZi/rfqHwurUSKxD/6Fjksnm Rg1tepVnKsLGKdqjc/KNfYwTveUx1aKuv57WG2ToSarw5AbRhyr5f3xkv+DhMqYn hlZJrST2XhQTGj4AsDqXbl24IszH4W1LFQcjpVQbjXH4Mu8Lb1VCUAJn967KRehv NgXDzYV6Jxvb67NVByAnsBnxHf5/w/1YDqpH77es0Ca9FDm5BfATUU/nIhV0MZ4N SKDaiAwpKVv2M4pw9mrZQ1b47Y7Uu2lo0InTWp+H+/yOFhEIfJOyh360cRiGr7ov TGfd9+8/vecu/yX9+mL/YxnB -----END CERTIFICATE-----Generated at Wed May 13 06:14:29 2026 by rpki-client