$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3456/6C27F25A41A111EAA47D1E86C4F9AE02/KQxAEPrcR2lH4Ak_Q_cATw18XBw.mft File: KQxAEPrcR2lH4Ak_Q_cATw18XBw.mft (raw, json) Hash identifier: LpxWAlb7Jb7M9j7Y5UoNAvpOChTkwiyZET9wUqJPNkI= Subject key identifier: 40:60:1C:D7:8D:6A:10:C6:26:D1:34:22:72:3E:AF:C8:98:46:2F:BF Authority key identifier: 29:0C:40:10:FA:DC:47:69:47:E0:09:3F:43:F7:00:4F:0D:7C:5C:1C Certificate issuer: /CN=A91A3456/serialNumber=290C4010FADC476947E0093F43F7004F0D7C5C1C Certificate serial: 0BCE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQxAEPrcR2lH4Ak_Q_cATw18XBw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3456/6C27F25A41A111EAA47D1E86C4F9AE02/KQxAEPrcR2lH4Ak_Q_cATw18XBw.mft Manifest number: 0BC1 Signing time: Tue 12 May 2026 19:01:42 +0000 Manifest this update: Tue 12 May 2026 19:01:42 +0000 Manifest next update: Tue 19 May 2026 19:01:42 +0000 Files and hashes: 1: KQxAEPrcR2lH4Ak_Q_cATw18XBw.crl (hash: XvVsr2Eb7Mwuu0UMK7njj5bObdbBJUBW2OmCyVk2K+I=) 2: 496096EE41A311EABAADCE0AC4F9AE02.roa (hash: owbB/QFVhS3E4rWN71OSFx1s7RgWi4YjBcaDXgNNaiI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3456/6C27F25A41A111EAA47D1E86C4F9AE02/KQxAEPrcR2lH4Ak_Q_cATw18XBw.crl rsync://rpki.apnic.net/member_repository/A91A3456/6C27F25A41A111EAA47D1E86C4F9AE02/KQxAEPrcR2lH4Ak_Q_cATw18XBw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQxAEPrcR2lH4Ak_Q_cATw18XBw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 19:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3022 (0xbce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3456, serialNumber=290C4010FADC476947E0093F43F7004F0D7C5C1C Validity Not Before: May 12 19:01:42 2026 GMT Not After : May 19 19:01:42 2026 GMT Subject: CN=6a037916-0540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1a:0b:e1:46:91:8c:85:64:60:c7:8b:8c:73: 0f:db:e8:fe:e1:49:c4:43:a8:c2:c6:70:e1:dd:3a: 7a:4c:bf:d4:73:2e:ad:f3:4b:ee:7a:bb:30:4a:54: 40:b5:11:44:29:c2:40:59:f9:78:34:2c:b9:d2:d1: 87:c9:69:7d:b6:61:db:61:75:18:f5:da:fe:17:cd: 75:c8:08:d4:71:15:67:ef:46:e6:65:99:57:34:d2: cb:e4:fc:1c:57:51:2d:3c:89:ae:5a:30:ec:e1:8a: b3:59:4c:b6:81:37:33:46:f0:ad:12:ef:99:83:e2: 25:b2:89:ea:0c:87:ae:85:84:b3:c8:8b:d7:77:4b: 0d:85:dd:a8:be:71:84:d8:3d:10:b4:a7:30:28:69: f7:55:d9:6f:77:ab:18:dd:6f:2d:3f:04:00:7f:6a: 3d:62:6e:d3:59:83:12:7a:1e:52:f4:0d:6a:36:f2: d4:8e:61:3a:3c:46:b1:d4:04:d3:51:0f:ae:d8:0d: 6a:32:c6:57:e6:0b:ea:c2:27:f9:68:fb:b3:d4:7e: 1d:34:2a:21:4c:13:2a:3b:50:c3:a6:f1:2e:62:c4: 94:af:5b:31:a6:1a:d2:f9:7c:24:b7:00:24:90:ce: 9f:bc:32:ed:d5:41:db:cd:dd:3b:e3:70:c1:97:f4: c8:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:60:1C:D7:8D:6A:10:C6:26:D1:34:22:72:3E:AF:C8:98:46:2F:BF X509v3 Authority Key Identifier: keyid:29:0C:40:10:FA:DC:47:69:47:E0:09:3F:43:F7:00:4F:0D:7C:5C:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3456/6C27F25A41A111EAA47D1E86C4F9AE02/KQxAEPrcR2lH4Ak_Q_cATw18XBw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQxAEPrcR2lH4Ak_Q_cATw18XBw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3456/6C27F25A41A111EAA47D1E86C4F9AE02/KQxAEPrcR2lH4Ak_Q_cATw18XBw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:b2:00:84:11:f6:b6:cd:b5:65:36:fc:28:d6:c3:2c:72:bb: c9:bf:45:53:2d:55:77:e7:bf:5f:4e:00:9e:39:49:af:65:9b: 8b:4d:54:76:5a:00:9e:24:12:32:f7:da:29:8c:f4:00:54:8b: db:88:70:a3:d4:ad:5b:d7:9d:d2:93:f0:f4:18:7e:25:40:01: 4f:c3:a1:04:f4:2e:99:24:2f:6c:d7:77:72:2b:10:b3:e0:2e: 6e:c0:bd:d7:ac:bb:eb:44:0c:97:30:b5:00:1e:be:61:ad:4f: 30:18:99:50:d4:7a:ae:4c:45:6b:09:8c:7e:d6:d7:1a:eb:b9: f3:cd:1a:02:19:17:76:6c:65:48:53:75:a9:b7:f1:2a:ed:87: bc:4e:9a:37:5e:9a:09:01:7b:43:5c:63:e0:8a:5c:b3:4d:c1: 45:c7:9c:95:c1:9a:e6:90:39:80:65:69:53:05:fe:3d:ee:92: 24:ff:77:da:db:fc:ea:7d:f5:c3:c9:b9:8f:ef:33:84:4a:48: 1b:5d:c3:00:2e:85:e8:b4:ad:51:17:67:2a:29:bf:6f:f6:90: e8:70:6d:56:b1:10:dd:7b:48:de:34:02:f8:77:00:9c:2f:a3: e5:6b:06:b9:65:5c:5b:56:28:b0:0b:db:eb:92:5f:2c:dd:c6: 94:e0:60:16 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC84wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM0NTYxMTAvBgNVBAUTKDI5MEM0MDEwRkFEQzQ3Njk0N0UwMDkzRjQzRjcwMDRG MEQ3QzVDMUMwHhcNMjYwNTEyMTkwMTQyWhcNMjYwNTE5MTkwMTQyWjAYMRYwFAYD VQQDEw02YTAzNzkxNi0wNTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAthoL4UaRjIVkYMeLjHMP2+j+4UnEQ6jCxnDh3Tp6TL/Ucy6t80vuerswSlRA tRFEKcJAWfl4NCy50tGHyWl9tmHbYXUY9dr+F811yAjUcRVn70bmZZlXNNLL5Pwc V1EtPImuWjDs4YqzWUy2gTczRvCtEu+Zg+IlsonqDIeuhYSzyIvXd0sNhd2ovnGE 2D0QtKcwKGn3Vdlvd6sY3W8tPwQAf2o9Ym7TWYMSeh5S9A1qNvLUjmE6PEax1ATT UQ+u2A1qMsZX5gvqwif5aPuz1H4dNCohTBMqO1DDpvEuYsSUr1sxphrS+XwktwAk kM6fvDLt1UHbzd0743DBl/TIowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEBgHNeN ahDGJtE0InI+r8iYRi+/MB8GA1UdIwQYMBaAFCkMQBD63EdpR+AJP0P3AE8NfFwc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzQ1Ni82QzI3RjI1QTQx QTExMUVBQTQ3RDFFODZDNEY5QUUwMi9LUXhBRVByY1IybEg0QWtfUV9jQVR3MThY QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tReEFFUHJjUjJsSDRBa19RX2NBVHcxOFhCdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzQ1Ni82QzI3RjI1QTQxQTExMUVBQTQ3RDFFODZDNEY5QUUwMi9LUXhBRVByY1Iy bEg0QWtfUV9jQVR3MThYQncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAY7IAhBH2ts21ZTb8KNbDLHK7yb9FUy1Vd+e/X04AnjlJr2Wbi01UdloAniQS MvfaKYz0AFSL24hwo9StW9ed0pPw9Bh+JUABT8OhBPQumSQvbNd3cisQs+AubsC9 16y760QMlzC1AB6+Ya1PMBiZUNR6rkxFawmMftbXGuu5880aAhkXdmxlSFN1qbfx Ku2HvE6aN16aCQF7Q1xj4Ipcs03BRceclcGa5pA5gGVpUwX+Pe6SJP932tv86n31 w8m5j+8zhEpIG13DAC6F6LStURdnKim/b/aQ6HBtVrEQ3XtI3jQC+HcAnC+j5WsG uWVcW1YosAvb65JfLN3GlOBgFg== -----END CERTIFICATE-----Generated at Wed May 13 09:29:20 2026 by rpki-client