$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft File: sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft (raw, json) Hash identifier: JiN+kwYp2YJYBIAabEUUmJSaoZM7IZmyMFp/uvsZ9ts= Subject key identifier: CE:D8:6F:36:0B:C8:32:A2:25:16:05:78:10:74:B4:9C:BC:4E:42:61 Authority key identifier: B2:A2:5D:DE:1A:9E:C9:1B:59:98:6A:53:2F:78:83:54:36:18:32:48 Certificate issuer: /CN=A91BC966/serialNumber=B2A25DDE1A9EC91B59986A532F78835436183248 Certificate serial: 0CE1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqJd3hqeyRtZmGpTL3iDVDYYMkg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft Manifest number: 0CAC Signing time: Tue 12 May 2026 18:39:03 +0000 Manifest this update: Tue 12 May 2026 18:39:02 +0000 Manifest next update: Tue 19 May 2026 18:39:02 +0000 Files and hashes: 1: sqJd3hqeyRtZmGpTL3iDVDYYMkg.crl (hash: Sk10FBgMV5C8TyTy1Ktivj7GxGjovvE2Uzq+YrwYCPo=) 2: 5DA849821C1211EA819EA46EC4F9AE02.roa (hash: eCHx5TEwPytpGbIBlZulCq7A1nRaBvbKK495Pm+3Ngg=) 3: A6A53FA2D67E11EEAA2CA218C4F9AE02.roa (hash: BRmPmtc5QBOF2VogbiXT+Z/yISNL/WKoFANPMdmFsXw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.crl rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqJd3hqeyRtZmGpTL3iDVDYYMkg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 18:39:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3297 (0xce1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC966, serialNumber=B2A25DDE1A9EC91B59986A532F78835436183248 Validity Not Before: May 12 18:39:02 2026 GMT Not After : May 19 18:39:02 2026 GMT Subject: CN=6a0373c7-ec2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:25:9b:63:6e:f0:7a:03:c6:c6:db:89:ae:ee: 4f:34:82:cc:33:fe:32:64:3d:e3:73:fd:83:6b:8b: 4b:dc:50:89:b7:98:8e:0d:30:a6:1d:6b:64:84:38: 60:db:67:b7:80:ac:09:d5:4b:40:fe:94:36:17:7e: 08:d3:a1:0f:f7:5d:a2:67:ac:5c:43:01:88:4c:e3: 3c:4c:bd:71:04:53:7c:96:e7:c2:3c:f4:23:7b:77: c9:aa:47:58:c7:90:50:7d:56:b5:6b:52:83:5a:e4: 13:45:8b:26:ce:4f:70:78:49:f3:18:2c:a7:3e:9d: fc:1c:30:7f:c7:5d:18:76:53:c2:7e:8f:6f:0b:dc: a0:d2:30:42:ba:65:b5:23:24:98:ad:5b:86:91:db: 52:f8:5d:b1:52:50:69:c4:5f:8f:d0:3f:ca:0f:d6: 7e:97:26:84:a7:25:ab:35:07:6a:7e:f5:41:d2:88: c7:4b:08:1c:f5:c5:64:3f:44:b6:90:81:c1:b9:36: 92:86:be:c8:88:23:28:57:ac:49:73:c0:4b:a3:39: ba:92:aa:56:4c:1d:36:5f:6a:e2:d7:21:c0:b7:8a: 63:8e:df:a1:5e:7e:b4:b0:a5:0f:e8:b6:52:78:e8: 85:df:59:37:8b:e7:38:a2:cd:8c:ac:61:4a:f9:2e: 1b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:D8:6F:36:0B:C8:32:A2:25:16:05:78:10:74:B4:9C:BC:4E:42:61 X509v3 Authority Key Identifier: keyid:B2:A2:5D:DE:1A:9E:C9:1B:59:98:6A:53:2F:78:83:54:36:18:32:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqJd3hqeyRtZmGpTL3iDVDYYMkg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:98:ff:24:c3:4e:79:1b:48:ac:16:8b:f0:a9:68:88:a9:82: 33:5f:12:04:be:a7:10:7e:d4:f5:86:8d:08:b3:12:6f:d4:93: 45:3c:c4:58:ad:6b:78:1a:64:e4:1e:61:f0:8d:f7:8c:0d:b2: 5d:57:c9:f0:4a:40:5b:18:c7:43:50:15:74:6b:2e:b7:d1:a7: a0:31:61:16:0f:d3:2d:1d:ae:78:d8:a1:a8:54:91:db:50:f1: 87:32:0f:3e:e9:e9:17:5d:ca:5d:4b:56:9c:88:87:18:b6:3f: ca:28:15:0f:55:f9:4e:fc:bc:6b:2e:5e:45:14:55:e3:b1:a9: 1a:f2:ee:49:4c:47:36:1b:6c:82:6d:81:02:43:6b:25:61:f7: 2e:56:25:cb:12:f6:32:fa:5e:0d:0a:65:28:3a:eb:b6:8c:df: b8:65:69:88:da:24:66:2d:56:68:45:72:5a:3c:57:32:a3:9c: d4:e5:38:1c:61:00:f7:c7:e9:64:49:79:37:b4:3d:c7:5f:45: a0:56:b2:1f:1e:29:4e:25:f8:e7:5b:55:7f:b9:f2:2f:1f:9a: 34:8e:ea:96:7d:0d:f3:2d:37:68:52:5f:02:ae:29:9a:3e:6d: 9d:c2:53:ec:82:1b:92:60:cd:79:37:23:17:f9:29:a9:40:9b: b5:29:ec:b2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM5NjYxMTAvBgNVBAUTKEIyQTI1RERFMUE5RUM5MUI1OTk4NkE1MzJGNzg4MzU0 MzYxODMyNDgwHhcNMjYwNTEyMTgzOTAyWhcNMjYwNTE5MTgzOTAyWjAYMRYwFAYD VQQDEw02YTAzNzNjNy1lYzJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwSWbY27wegPGxtuJru5PNILMM/4yZD3jc/2Da4tL3FCJt5iODTCmHWtkhDhg 22e3gKwJ1UtA/pQ2F34I06EP912iZ6xcQwGITOM8TL1xBFN8lufCPPQje3fJqkdY x5BQfVa1a1KDWuQTRYsmzk9weEnzGCynPp38HDB/x10YdlPCfo9vC9yg0jBCumW1 IySYrVuGkdtS+F2xUlBpxF+P0D/KD9Z+lyaEpyWrNQdqfvVB0ojHSwgc9cVkP0S2 kIHBuTaShr7IiCMoV6xJc8BLozm6kqpWTB02X2ri1yHAt4pjjt+hXn60sKUP6LZS eOiF31k3i+c4os2MrGFK+S4bTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM7YbzYL yDKiJRYFeBB0tJy8TkJhMB8GA1UdIwQYMBaAFLKiXd4anskbWZhqUy94g1Q2GDJI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzk2Ni9BMTk1MkJBMjFD MTExMUVBQjZDM0M3NkRDNEY5QUUwMi9zcUpkM2hxZXlSdFptR3BUTDNpRFZEWVlN a2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NxSmQzaHFleVJ0Wm1HcFRMM2lEVkRZWU1rZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Qzk2Ni9BMTk1MkJBMjFDMTExMUVBQjZDM0M3NkRDNEY5QUUwMi9zcUpkM2hxZXlS dFptR3BUTDNpRFZEWVlNa2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhZj/JMNOeRtIrBaL8KloiKmCM18SBL6nEH7U9YaNCLMSb9STRTzEWK1reBpk 5B5h8I33jA2yXVfJ8EpAWxjHQ1AVdGsut9GnoDFhFg/TLR2ueNihqFSR21DxhzIP PunpF13KXUtWnIiHGLY/yigVD1X5Tvy8ay5eRRRV47GpGvLuSUxHNhtsgm2BAkNr JWH3LlYlyxL2MvpeDQplKDrrtozfuGVpiNokZi1WaEVyWjxXMqOc1OU4HGEA98fp ZEl5N7Q9x19FoFayHx4pTiX451tVf7nyLx+aNI7qln0N8y03aFJfAq4pmj5tncJT 7IIbkmDNeTcjF/kpqUCbtSnssg== -----END CERTIFICATE-----Generated at Wed May 13 06:50:01 2026 by rpki-client