$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft File: q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft (raw, json) Hash identifier: YoOCbo7xSSasDu9y4Uf/xAkdFasSaTmbjLxFK3S7CM0= Subject key identifier: BD:C3:A9:84:BA:C5:18:AC:EE:CF:49:6B:0E:C2:9D:BA:9F:3A:6E:B1 Authority key identifier: AB:67:E8:2F:C8:6A:AC:A8:2A:CF:F8:DC:36:45:CD:71:61:01:3F:76 Certificate issuer: /CN=A91D1E4C/serialNumber=AB67E82FC86AACA82ACFF8DC3645CD7161013F76 Certificate serial: 03B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft Manifest number: 0C62 Signing time: Tue 12 May 2026 20:27:56 +0000 Manifest this update: Tue 12 May 2026 20:27:55 +0000 Manifest next update: Tue 19 May 2026 20:27:55 +0000 Files and hashes: 1: q2foL8hqrKgqz_jcNkXNcWEBP3Y.crl (hash: LJIE0P4MzDQ80TwQwO8gIAIE/6CCCg7JwsDTq+mlCqg=) 2: FC358296CFA011EDA4AC5B18C4F9AE02.roa (hash: XL/ZcgALP761TCI8hEan3K78GIrb6EiGTeA4Vn2wUJI=) 3: 2AD1C746940111F0B07D7068C4F9AE02.roa (hash: AIsLYj1Q0Ri7p3sC6uZCzxYzj0O4+4SA75lfHau1SqU=) 4: 3DD8C628940111F09204AF71C4F9AE02.roa (hash: rKjGeR3bW3KsKLNlokaXVqhFpQOnZispIcGW123rOaY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.crl rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 20:27:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 947 (0x3b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1E4C, serialNumber=AB67E82FC86AACA82ACFF8DC3645CD7161013F76 Validity Not Before: May 12 20:27:55 2026 GMT Not After : May 19 20:27:55 2026 GMT Subject: CN=6a038d4c-2e32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d6:9d:00:4e:bc:1d:0f:be:8e:59:53:5a:ca: 2a:d7:6e:31:80:a2:af:10:ca:2e:7f:52:55:3a:c4: 06:e4:34:1e:6a:36:c3:8b:02:90:ae:60:b5:74:96: 72:4b:81:42:b3:cf:d4:49:75:88:79:39:87:ff:28: 3c:6f:1e:de:3b:e5:e3:fa:94:d3:f7:88:81:f8:8a: ba:13:6b:8f:70:5f:e5:c3:28:33:03:f3:13:cb:e7: 42:09:55:ab:a6:11:16:13:3a:33:d7:25:44:fa:e4: 13:92:b2:6d:a4:a8:6e:5b:ee:79:da:49:7f:d4:57: d7:96:9f:58:0d:e1:c5:b8:73:66:5b:08:10:bf:d2: 20:71:5c:10:50:3f:ac:2f:76:a3:82:28:db:af:c1: 13:5e:ad:79:52:21:50:e8:2e:2d:0d:34:bf:82:2f: 98:de:c3:b0:fa:19:c5:53:74:fa:e5:64:c0:26:1d: 8d:55:5f:50:e2:fc:00:2f:14:4d:e4:53:6a:3f:6c: da:c6:80:91:5b:db:a3:a1:ab:7f:1c:44:98:c0:11: 32:6b:21:ad:11:8e:97:23:f3:28:f8:6d:01:ec:e7: 09:6d:a8:65:25:85:71:0a:a4:9b:6c:c1:53:ee:22: eb:79:b2:68:1e:ab:d9:c0:32:8c:fd:4a:87:f0:65: 3c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:C3:A9:84:BA:C5:18:AC:EE:CF:49:6B:0E:C2:9D:BA:9F:3A:6E:B1 X509v3 Authority Key Identifier: keyid:AB:67:E8:2F:C8:6A:AC:A8:2A:CF:F8:DC:36:45:CD:71:61:01:3F:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:9b:2d:5d:6f:2a:6d:ae:5e:cc:6b:a1:00:8c:82:d2:f9:0a: 9c:3f:14:a0:f1:80:03:48:3b:6d:39:9c:d8:ea:6a:ce:9f:5b: 0e:d8:2e:60:cc:6b:9b:ed:31:cd:af:70:4f:3a:f5:ce:12:32: 85:0c:4f:8a:cc:4d:ec:e3:1b:b0:b9:f0:0b:7c:fd:7d:1f:0c: 4a:e6:b8:2e:b1:02:5f:67:34:2b:61:df:46:16:59:dc:53:8a: bb:87:21:ee:a3:8d:81:b8:99:a8:6d:a0:3d:27:de:5d:e9:35: b2:bd:df:3e:a4:fe:c7:e6:c8:e2:d8:45:6e:69:dd:b3:58:13: d3:79:71:31:4d:c9:ba:8b:c3:c3:86:af:fd:2b:2e:87:36:45: fb:53:10:c6:2c:32:f2:e2:4c:99:59:4a:a6:4f:c0:ce:0b:43: 61:f6:9d:96:07:31:d5:be:35:5c:d7:ec:14:08:48:46:68:79: ad:7b:ea:85:af:ac:4f:55:ae:3e:73:4c:11:21:5d:18:1f:fa: a4:be:f1:d8:c7:21:44:12:15:6e:ba:fd:cb:8c:32:2b:dd:ae: a9:d4:3c:e7:9e:18:b9:ec:2e:39:3f:66:bd:15:1e:f5:4b:04: 5b:d7:f4:bd:d7:c9:92:85:13:87:60:6e:0a:2c:78:d1:0e:37: c2:c3:86:c8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA7MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFFNEMxMTAvBgNVBAUTKEFCNjdFODJGQzg2QUFDQTgyQUNGRjhEQzM2NDVDRDcx NjEwMTNGNzYwHhcNMjYwNTEyMjAyNzU1WhcNMjYwNTE5MjAyNzU1WjAYMRYwFAYD VQQDEw02YTAzOGQ0Yy0yZTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvNadAE68HQ++jllTWsoq124xgKKvEMouf1JVOsQG5DQeajbDiwKQrmC1dJZy S4FCs8/USXWIeTmH/yg8bx7eO+Xj+pTT94iB+Iq6E2uPcF/lwygzA/MTy+dCCVWr phEWEzoz1yVE+uQTkrJtpKhuW+552kl/1FfXlp9YDeHFuHNmWwgQv9IgcVwQUD+s L3ajgijbr8ETXq15UiFQ6C4tDTS/gi+Y3sOw+hnFU3T65WTAJh2NVV9Q4vwALxRN 5FNqP2zaxoCRW9ujoat/HESYwBEyayGtEY6XI/Mo+G0B7OcJbahlJYVxCqSbbMFT 7iLrebJoHqvZwDKM/UqH8GU8CwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL3DqYS6 xRis7s9Jaw7CnbqfOm6xMB8GA1UdIwQYMBaAFKtn6C/IaqyoKs/43DZFzXFhAT92 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUU0Qy83REFEQTU2Q0Q5 NEQxMUVBQTYwNEFDNTNDNEY5QUUwMi9xMmZvTDhocXJLZ3F6X2pjTmtYTmNXRUJQ M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3EyZm9MOGhxcktncXpfamNOa1hOY1dFQlAzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUU0Qy83REFEQTU2Q0Q5NEQxMUVBQTYwNEFDNTNDNEY5QUUwMi9xMmZvTDhocXJL Z3F6X2pjTmtYTmNXRUJQM1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAq5stXW8qba5ezGuhAIyC0vkKnD8UoPGAA0g7bTmc2Opqzp9bDtguYMxrm+0x za9wTzr1zhIyhQxPisxN7OMbsLnwC3z9fR8MSua4LrECX2c0K2HfRhZZ3FOKu4ch 7qONgbiZqG2gPSfeXek1sr3fPqT+x+bI4thFbmnds1gT03lxMU3JuovDw4av/Ssu hzZF+1MQxiwy8uJMmVlKpk/AzgtDYfadlgcx1b41XNfsFAhIRmh5rXvqha+sT1Wu PnNMESFdGB/6pL7x2MchRBIVbrr9y4wyK92uqdQ8554YuewuOT9mvRUe9UsEW9f0 vdfJkoUTh2BuCix40Q43wsOGyA== -----END CERTIFICATE-----Generated at Wed May 13 11:29:32 2026 by rpki-client