$ rpki-client -vvf rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.mft File: Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.mft (raw, json) Hash identifier: ELDKjwNyzQ13U3pX/doJ/b0KUjK7yNiaRg9l5MfWGlY= Subject key identifier: B9:39:10:19:F5:7D:3A:05:F2:71:AA:B3:2F:2A:36:55:30:17:09:16 Authority key identifier: 43:8D:82:3E:C3:34:4B:4B:F1:C9:9E:11:DE:0F:56:F8:42:EF:D9:8E Certificate issuer: /CN=A9199885/serialNumber=438D823EC3344B4BF1C99E11DE0F56F842EFD98E Certificate serial: 2174 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.mft Manifest number: 5696 Signing time: Tue 12 May 2026 14:54:24 +0000 Manifest this update: Tue 12 May 2026 14:54:24 +0000 Manifest next update: Tue 19 May 2026 14:54:24 +0000 Files and hashes: 1: Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.crl (hash: kGdfxwhT7OImkHqRVZZFBy259TZYRSkmvtQ5Xf5vhVg=) 2: 0211478AB48E11EF81F55F3CC4F9AE02.roa (hash: eXbj2/2PGJubPsuJy/6g3AgLU0HNFQl847an+DeMHhU=) 3: 01804686B48E11EF81F55F3CC4F9AE02.roa (hash: N4+8fycTDr0KyyL1T8BnM1QnlOy4E1P+9kvY0kSTWus=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.crl rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 14:54:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8564 (0x2174) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199885, serialNumber=438D823EC3344B4BF1C99E11DE0F56F842EFD98E Validity Not Before: May 12 14:54:24 2026 GMT Not After : May 19 14:54:24 2026 GMT Subject: CN=6a033f20-94ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:95:8b:09:4a:85:a7:42:da:d6:bf:fe:a7:0f: a6:c7:03:0c:fb:87:56:b0:bc:83:29:ea:db:43:19: 7a:7f:03:3c:4c:2e:b9:c2:3a:38:91:99:a2:23:61: a2:d9:1a:42:da:c5:8a:7a:7d:cb:6d:6b:35:9d:7b: 18:43:d7:e7:80:ac:0f:4f:42:a3:f8:73:cc:54:32: 5d:28:46:12:62:a5:0f:3e:f7:4e:0e:93:55:bf:a5: 22:c5:15:03:67:6b:89:e7:d4:af:b8:ca:55:aa:85: dd:1c:a7:ab:cc:27:3a:cd:04:ee:82:db:af:81:ab: b9:8d:09:a7:a0:9d:78:33:9d:0c:b2:fd:63:2c:c9: b4:ad:51:60:0f:06:e0:43:c4:f5:24:de:97:8f:ea: 9f:55:1e:79:78:6e:31:82:98:69:ad:52:d9:1e:9d: da:43:9c:69:45:57:76:aa:60:5f:e4:e9:a0:a6:a1: 21:0c:cb:09:6f:d7:8c:fa:8e:a0:e0:68:54:4c:e7: 0d:e9:bf:37:a8:2b:bb:39:ce:6e:85:b4:4e:d2:4c: 67:be:5a:a4:ce:c1:8e:65:9f:e2:07:81:35:4f:3a: b0:b2:16:8e:1f:07:60:2e:1c:c5:85:6f:00:b4:31: 3a:af:ce:1b:ed:f1:f5:b2:f0:4c:d7:68:3a:a6:2e: 1d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:39:10:19:F5:7D:3A:05:F2:71:AA:B3:2F:2A:36:55:30:17:09:16 X509v3 Authority Key Identifier: keyid:43:8D:82:3E:C3:34:4B:4B:F1:C9:9E:11:DE:0F:56:F8:42:EF:D9:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:c7:2e:be:32:e3:81:2b:31:a0:6b:59:fd:44:bd:1e:ea:ef: 54:d2:4b:56:8d:d7:df:3a:98:85:54:b0:2b:0a:2f:65:55:9e: db:64:15:8a:f8:11:b9:25:4e:eb:64:c7:93:e1:4c:61:c3:4b: 38:a3:df:c9:9c:c0:f3:07:99:b8:88:aa:54:a5:fe:67:55:8c: 56:0f:f4:42:47:34:73:53:5e:3e:88:90:65:06:60:37:da:46: 90:8c:19:f0:84:de:69:b3:9e:81:07:5d:89:d8:d3:8b:25:2c: 78:33:14:e8:bc:cf:23:8a:ed:2a:e9:f4:f2:af:30:d6:74:72: dc:85:de:fd:cc:44:af:82:05:4e:e9:f9:2d:4e:6a:ad:a2:e2: a5:56:7d:56:be:8a:39:65:5e:c8:9d:c1:ca:c9:92:d4:7f:40: 01:74:e9:46:98:1c:a8:e3:11:e4:99:20:5a:f0:75:57:2f:8f: 2a:61:1f:78:f0:f1:47:2d:ae:cc:2a:b6:2a:c9:fd:52:87:4f: b1:e0:f6:97:6f:8d:92:94:3c:54:9e:da:00:4a:b0:99:fd:1a: 21:36:ba:76:0e:4c:bd:8c:7a:0c:37:7f:50:34:f2:43:5c:7e: af:45:5e:d7:b0:39:2e:34:8c:57:2e:6f:68:d0:11:e1:69:68: bf:34:81:18 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICIXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk4ODUxMTAvBgNVBAUTKDQzOEQ4MjNFQzMzNDRCNEJGMUM5OUUxMURFMEY1NkY4 NDJFRkQ5OEUwHhcNMjYwNTEyMTQ1NDI0WhcNMjYwNTE5MTQ1NDI0WjAYMRYwFAYD VQQDEw02YTAzM2YyMC05NGNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArpWLCUqFp0La1r/+pw+mxwMM+4dWsLyDKerbQxl6fwM8TC65wjo4kZmiI2Gi 2RpC2sWKen3LbWs1nXsYQ9fngKwPT0Kj+HPMVDJdKEYSYqUPPvdODpNVv6UixRUD Z2uJ59SvuMpVqoXdHKerzCc6zQTugtuvgau5jQmnoJ14M50Msv1jLMm0rVFgDwbg Q8T1JN6Xj+qfVR55eG4xgphprVLZHp3aQ5xpRVd2qmBf5OmgpqEhDMsJb9eM+o6g 4GhUTOcN6b83qCu7Oc5uhbRO0kxnvlqkzsGOZZ/iB4E1TzqwshaOHwdgLhzFhW8A tDE6r84b7fH1svBM12g6pi4ddQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLk5EBn1 fToF8nGqsy8qNlUwFwkWMB8GA1UdIwQYMBaAFEONgj7DNEtL8cmeEd4PVvhC79mO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTg4NS9EMDUwNjg1QTFE OTgxMUUyQUU2QjFGODMwOEIwMkNEMi9RNDJDUHNNMFMwdnh5WjRSM2c5Vy1FTHYy WTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1E0MkNQc00wUzB2eHlaNFIzZzlXLUVMdjJZNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTg4NS9EMDUwNjg1QTFEOTgxMUUyQUU2QjFGODMwOEIwMkNEMi9RNDJDUHNNMFMw dnh5WjRSM2c5Vy1FTHYyWTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFscuvjLjgSsxoGtZ/US9HurvVNJLVo3X3zqYhVSwKwovZVWe22QVivgRuSVO 62THk+FMYcNLOKPfyZzA8weZuIiqVKX+Z1WMVg/0Qkc0c1NePoiQZQZgN9pGkIwZ 8ITeabOegQddidjTiyUseDMU6LzPI4rtKun08q8w1nRy3IXe/cxEr4IFTun5LU5q raLipVZ9Vr6KOWVeyJ3BysmS1H9AAXTpRpgcqOMR5JkgWvB1Vy+PKmEfePDxRy2u zCq2Ksn9UodPseD2l2+NkpQ8VJ7aAEqwmf0aITa6dg5MvYx6DDd/UDTyQ1x+r0Ve 17A5LjSMVy5vaNAR4WlovzSBGA== -----END CERTIFICATE-----Generated at Wed May 13 07:59:01 2026 by rpki-client