$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.mft File: QELCSQ19r-wzIDFu1ap04L7Kqak.mft (raw, json) Hash identifier: 7zgdhnMTp2QYk6llhOAoY87x8BVce4N4P76T4vUJVE8= Subject key identifier: 8C:7E:7D:CF:8A:93:13:14:3B:E5:E9:54:E8:5A:8B:02:8C:B3:55:E9 Authority key identifier: 40:42:C2:49:0D:7D:AF:EC:33:20:31:6E:D5:AA:74:E0:BE:CA:A9:A9 Certificate issuer: /CN=A91A7169/serialNumber=4042C2490D7DAFEC3320316ED5AA74E0BECAA9A9 Certificate serial: 0215 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.mft Manifest number: 01D0 Signing time: Mon 11 May 2026 04:27:35 +0000 Manifest this update: Mon 11 May 2026 04:27:34 +0000 Manifest next update: Mon 18 May 2026 04:27:34 +0000 Files and hashes: 1: QELCSQ19r-wzIDFu1ap04L7Kqak.crl (hash: ZQsMkf7xQfy6wwy8DWlALZRR/OP9zvGn5f+/S2cHFiY=) 2: FCF99042301011EFBC350682C4F9AE02.roa (hash: Gp1KX3pdnrlSvDAJ20hG9D6pIJ2t6fsfaUValhhyxHI=) 3: 3C0376CC6FD511F0BF33C829C4F9AE02.roa (hash: fSUiL2knLy7NpgkmM8gcogpyWEWfXu055rthPlYELwM=) 4: 3E0BA21CEBB211EEA93D9B14C4F9AE02.roa (hash: LEMt/Yfn5HB27yq040h/X2ZpeZ06WvUDmE6FF+n/xcg=) 5: 3D937A30EBB211EEA93D9B14C4F9AE02.roa (hash: djP439PV+bB6f/PEqXTLBnLRW09ZGvFx+3wLd3DXu9A=) 6: 3B8DEBA06FD511F0BF33C829C4F9AE02.roa (hash: onDMrjjQ14icCq/5REdHdzngDzUao5E9MVfp/qWaZvc=) 7: 72E97B3A1BDB11F0B77B1344C4F9AE02.roa (hash: Uz5YIB2qHzCEXEXaaIxzPkDCZiRONtPBbETQ8up2rL4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.crl rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 04:27:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 533 (0x215) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7169, serialNumber=4042C2490D7DAFEC3320316ED5AA74E0BECAA9A9 Validity Not Before: May 11 04:27:34 2026 GMT Not After : May 18 04:27:34 2026 GMT Subject: CN=6a015ab7-c4b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:cc:23:2b:14:8d:31:e6:6a:e7:2a:a8:30:56: df:1b:e4:c2:d4:ef:1a:49:19:b6:28:ca:1c:41:93: fe:1f:c8:97:55:85:c2:3f:1e:1a:ce:b8:50:1d:55: 40:00:e7:e6:0f:0e:6e:d5:6b:11:ca:48:0f:24:f8: cd:65:d2:0c:fc:41:54:e3:8c:6b:be:cb:a7:83:bd: 50:9e:0a:eb:ff:81:a7:a3:c6:3f:06:fd:1b:00:93: 4d:ad:bf:d4:f2:05:ba:02:73:39:b9:67:7b:85:44: 11:a4:83:41:7a:eb:88:12:3f:3c:a9:ce:2a:7d:45: 5f:f0:33:6f:2b:ff:42:29:cc:c9:66:07:0f:bc:0e: a6:bb:33:38:07:47:b5:fa:5c:dc:c8:36:bf:c8:0e: f2:2c:d8:3f:e0:47:63:1a:d1:df:78:ab:bc:97:ab: d2:ec:fa:5a:10:74:86:c9:bc:c6:a1:09:3c:1b:51: b7:e5:f2:b4:14:5e:b9:8c:5f:5b:1d:bb:46:bc:99: ba:e1:0f:2c:3e:03:bd:2d:2d:45:94:c7:7b:0e:82: ac:7b:56:d3:01:25:49:f5:a9:a6:b7:d3:3a:11:b3: ac:45:26:ec:95:be:b8:8c:36:80:87:8b:c0:83:93: 19:ad:6c:ae:9a:df:99:c8:b6:df:d9:0a:9d:05:c9: da:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:7E:7D:CF:8A:93:13:14:3B:E5:E9:54:E8:5A:8B:02:8C:B3:55:E9 X509v3 Authority Key Identifier: keyid:40:42:C2:49:0D:7D:AF:EC:33:20:31:6E:D5:AA:74:E0:BE:CA:A9:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:ea:6d:7c:9c:04:d2:b6:33:d0:dd:04:ad:ef:b1:74:5a:c2: 3f:e0:35:85:4f:29:b9:24:9a:48:71:dc:0b:64:c9:f4:0e:cf: 5e:2f:f3:a0:2e:65:74:69:94:50:02:69:6e:2c:3f:f4:a7:07: eb:b6:30:01:e3:90:72:08:26:70:9b:93:58:70:dd:b5:ee:0a: f1:11:42:00:70:77:4d:5f:38:e1:21:97:90:b3:e5:f3:ed:1b: e4:83:53:2c:a2:74:ea:54:62:44:94:67:69:e5:c7:8b:f1:7a: 44:87:e7:1d:cb:87:95:18:66:a7:39:f9:43:c6:87:1d:ba:58: 26:cf:c6:22:46:cf:11:ec:de:03:c0:2f:fe:3d:6d:e4:b3:5f: 18:70:0b:b3:60:5c:6d:7a:f5:97:c3:18:38:89:01:0b:53:10: 56:fa:61:9e:a4:ac:47:9d:fa:59:46:31:39:96:a2:2b:cb:ec: 37:9f:d5:53:21:bf:15:7b:6e:8d:f5:9c:6c:e4:08:c1:ac:69: 2d:59:82:db:7c:89:bb:57:67:dd:2b:22:1b:4c:61:9c:1a:30: 20:ca:ed:59:fa:bb:90:d4:7b:46:2a:79:a6:35:c0:da:8d:99: 00:7e:78:26:16:ae:13:a3:fa:c1:b5:e1:ab:f7:4b:3d:c4:82: 1e:89:3c:09 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTcxNjkxMTAvBgNVBAUTKDQwNDJDMjQ5MEQ3REFGRUMzMzIwMzE2RUQ1QUE3NEUw QkVDQUE5QTkwHhcNMjYwNTExMDQyNzM0WhcNMjYwNTE4MDQyNzM0WjAYMRYwFAYD VQQDEw02YTAxNWFiNy1jNGI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq8wjKxSNMeZq5yqoMFbfG+TC1O8aSRm2KMocQZP+H8iXVYXCPx4azrhQHVVA AOfmDw5u1WsRykgPJPjNZdIM/EFU44xrvsung71Qngrr/4Gno8Y/Bv0bAJNNrb/U 8gW6AnM5uWd7hUQRpINBeuuIEj88qc4qfUVf8DNvK/9CKczJZgcPvA6muzM4B0e1 +lzcyDa/yA7yLNg/4EdjGtHfeKu8l6vS7PpaEHSGybzGoQk8G1G35fK0FF65jF9b HbtGvJm64Q8sPgO9LS1FlMd7DoKse1bTASVJ9ammt9M6EbOsRSbslb64jDaAh4vA g5MZrWyumt+ZyLbf2QqdBcnazwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIx+fc+K kxMUO+XpVOhaiwKMs1XpMB8GA1UdIwQYMBaAFEBCwkkNfa/sMyAxbtWqdOC+yqmp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzE2OS82MjMzREQzRUVC QUUxMUVFOEEwRUQ5NjRDNEY5QUUwMi9RRUxDU1ExOXItd3pJREZ1MWFwMDRMN0tx YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FFTENTUTE5ci13eklERnUxYXAwNEw3S3Fhay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzE2OS82MjMzREQzRUVCQUUxMUVFOEEwRUQ5NjRDNEY5QUUwMi9RRUxDU1ExOXIt d3pJREZ1MWFwMDRMN0txYWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYuptfJwE0rYz0N0Ere+xdFrCP+A1hU8puSSaSHHcC2TJ9A7PXi/zoC5ldGmU UAJpbiw/9KcH67YwAeOQcggmcJuTWHDdte4K8RFCAHB3TV844SGXkLPl8+0b5INT LKJ06lRiRJRnaeXHi/F6RIfnHcuHlRhmpzn5Q8aHHbpYJs/GIkbPEezeA8Av/j1t 5LNfGHALs2BcbXr1l8MYOIkBC1MQVvphnqSsR536WUYxOZaiK8vsN5/VUyG/FXtu jfWcbOQIwaxpLVmC23yJu1dn3SsiG0xhnBowIMrtWfq7kNR7Rip5pjXA2o2ZAH54 JhauE6P6wbXhq/dLPcSCHok8CQ== -----END CERTIFICATE-----Generated at Wed May 13 02:29:39 2026 by rpki-client