$ rpki-client -vvf rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft File: qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft (raw, json) Hash identifier: fHoGCxjMmbwL/BjJxM1uPZ5wrDi+1XOtPxfCyXmnxYE= Subject key identifier: 96:9C:B4:88:02:5A:6D:32:E4:EC:ED:2A:78:AF:25:6D:DD:D6:63:F0 Authority key identifier: AB:11:E8:09:F2:BC:66:B0:D1:E6:0B:8A:31:F8:6B:5B:82:E0:0E:39 Certificate issuer: /CN=A9191FA5/serialNumber=AB11E809F2BC66B0D1E60B8A31F86B5B82E00E39 Certificate serial: 3735 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft Manifest number: 3643 Signing time: Tue 12 May 2026 14:28:27 +0000 Manifest this update: Tue 12 May 2026 14:28:26 +0000 Manifest next update: Tue 19 May 2026 14:28:26 +0000 Files and hashes: 1: qxHoCfK8ZrDR5guKMfhrW4LgDjk.crl (hash: uv5b6T7czNEukxtgXOLTFxKKx09RfFs5FzyL2ahkfgA=) 2: B8E7D994D00711EAB66A1255C4F9AE02.roa (hash: AoD1y/nYjPSOUSJHEbMuyBuaFVXXnCMYDMP9nMWhevk=) 3: FDE510BCC2E511EBBDB1B180C4F9AE02.roa (hash: KeHN4yC8HCgWU7NC7+u9JXzLgmJ0RzLzePi7iCwVwGQ=) 4: FF09B6BEC2E511EBBDB1B180C4F9AE02.roa (hash: CAJ81kegdxUmZ0yB+G3EOfDtceEQTggGkdXXt1XoU0I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.crl rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 14:28:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14133 (0x3735) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191FA5, serialNumber=AB11E809F2BC66B0D1E60B8A31F86B5B82E00E39 Validity Not Before: May 12 14:28:26 2026 GMT Not After : May 19 14:28:26 2026 GMT Subject: CN=6a03390b-0d65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:95:20:b4:ae:20:e0:76:90:2a:9a:49:29:01: 48:e5:d2:53:22:87:a2:ff:3a:5e:e1:07:f8:e5:84: 05:48:ea:a9:93:83:93:b6:86:22:48:33:6e:c8:0c: 2e:2b:f1:51:fa:14:a9:b0:19:c0:83:11:ae:1d:f9: 84:eb:ca:20:cf:63:a2:c1:ef:22:73:fd:38:97:af: 8e:ac:36:85:b2:be:03:55:c2:42:7b:93:a5:ef:5e: 34:62:e6:ed:e8:33:03:2c:a6:9a:e7:87:13:d6:fc: 47:e7:e8:c7:d9:eb:ac:10:9f:73:d3:a6:ba:47:5b: f5:07:ea:c4:d2:b1:5a:1d:1c:90:0c:1e:e3:e5:85: a7:76:b0:fa:50:5b:84:1c:39:46:05:ca:f2:5d:29: 68:9d:08:5f:b7:bb:65:ec:c7:61:0d:ed:05:d6:67: 5c:dc:c7:90:a6:df:a8:05:da:c1:0b:99:4f:d2:17: 62:ce:5a:15:88:6a:91:3f:23:7f:23:da:a2:62:87: 4e:16:7c:3c:65:9f:6f:58:79:c4:52:93:a7:58:13: df:02:95:e3:ad:ad:53:d3:cd:34:91:c0:51:02:b9: 99:ca:d7:43:df:e8:d5:26:61:88:fb:ef:d1:18:90: 96:40:a7:22:a1:0b:49:9d:ea:d3:3a:55:57:b4:8d: 55:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:9C:B4:88:02:5A:6D:32:E4:EC:ED:2A:78:AF:25:6D:DD:D6:63:F0 X509v3 Authority Key Identifier: keyid:AB:11:E8:09:F2:BC:66:B0:D1:E6:0B:8A:31:F8:6B:5B:82:E0:0E:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:74:6c:d2:4e:64:5c:6e:44:38:c5:91:91:ee:9d:10:e6:f3: dd:96:ff:b7:ea:4b:94:10:c3:8a:3a:30:2c:93:3e:55:b2:2f: f9:3a:8f:7d:9f:aa:ee:c0:13:5f:7a:07:29:14:39:be:04:f3: 4d:b9:37:66:c7:a1:8f:1f:cf:ab:55:2f:e0:26:dd:2a:8e:40: a2:a6:6a:4c:44:e7:99:20:d2:cd:fa:74:37:2a:6e:f3:12:ef: 85:10:99:3d:32:f8:12:a0:66:05:88:76:58:e5:e5:6d:b8:5b: b6:ae:a0:9f:e6:e9:b8:02:58:e6:b2:98:ce:9c:a5:7b:a4:1b: 11:b1:f7:cd:d6:62:5c:b8:84:3c:fc:8b:a6:34:1f:27:72:ab: b8:87:f9:1a:8a:bd:1a:39:0d:af:d9:c0:16:f9:dd:ff:8d:12: 13:25:43:db:5b:10:44:63:9f:0f:df:69:a5:08:12:b1:8c:a2: 86:a9:3c:56:e9:48:36:5b:fa:0f:10:fe:1f:b7:a9:48:99:7d: 0b:18:f1:39:40:b5:20:d6:2b:51:4d:e7:79:67:00:cf:a3:9e: 9b:cd:28:7e:2d:6f:b0:8a:86:16:7e:88:ad:0f:46:a7:c8:b5: fe:99:61:4c:70:d1:29:10:a2:cc:39:fe:42:0f:bf:55:9c:1d: fd:15:b2:28 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNzUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFGQTUxMTAvBgNVBAUTKEFCMTFFODA5RjJCQzY2QjBEMUU2MEI4QTMxRjg2QjVC ODJFMDBFMzkwHhcNMjYwNTEyMTQyODI2WhcNMjYwNTE5MTQyODI2WjAYMRYwFAYD VQQDEw02YTAzMzkwYi0wZDY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsZUgtK4g4HaQKppJKQFI5dJTIoei/zpe4Qf45YQFSOqpk4OTtoYiSDNuyAwu K/FR+hSpsBnAgxGuHfmE68ogz2Oiwe8ic/04l6+OrDaFsr4DVcJCe5Ol7140Yubt 6DMDLKaa54cT1vxH5+jH2eusEJ9z06a6R1v1B+rE0rFaHRyQDB7j5YWndrD6UFuE HDlGBcryXSlonQhft7tl7MdhDe0F1mdc3MeQpt+oBdrBC5lP0hdizloViGqRPyN/ I9qiYodOFnw8ZZ9vWHnEUpOnWBPfApXjra1T0800kcBRArmZytdD3+jVJmGI++/R GJCWQKcioQtJnerTOlVXtI1VNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJactIgC Wm0y5OztKnivJW3d1mPwMB8GA1UdIwQYMBaAFKsR6AnyvGaw0eYLijH4a1uC4A45 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUZBNS8wODA1NkNFNDFE ODcxMUUyOUREM0M2REUwOEIwMkNEMi9xeEhvQ2ZLOFpyRFI1Z3VLTWZoclc0TGdE amsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F4SG9DZks4WnJEUjVndUtNZmhyVzRMZ0Rqay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUZBNS8wODA1NkNFNDFEODcxMUUyOUREM0M2REUwOEIwMkNEMi9xeEhvQ2ZLOFpy RFI1Z3VLTWZoclc0TGdEamsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPnRs0k5kXG5EOMWRke6dEObz3Zb/t+pLlBDDijowLJM+VbIv+TqPfZ+q7sAT X3oHKRQ5vgTzTbk3Zsehjx/Pq1Uv4CbdKo5AoqZqTETnmSDSzfp0Nypu8xLvhRCZ PTL4EqBmBYh2WOXlbbhbtq6gn+bpuAJY5rKYzpyle6QbEbH3zdZiXLiEPPyLpjQf J3KruIf5Goq9GjkNr9nAFvnd/40SEyVD21sQRGOfD99ppQgSsYyihqk8VulINlv6 DxD+H7epSJl9CxjxOUC1INYrUU3neWcAz6Oem80ofi1vsIqGFn6IrQ9Gp8i1/plh THDRKRCizDn+Qg+/VZwd/RWyKA== -----END CERTIFICATE-----Generated at Wed May 13 04:04:50 2026 by rpki-client