$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft File: CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft (raw, json) Hash identifier: w8N108DQgYUz2lDJMmFRx1ujhAnTbRo3zCd8scL92wc= Subject key identifier: 99:71:89:B2:F4:44:6C:C5:BA:BC:CD:61:24:8A:E6:79:9C:25:DB:6A Authority key identifier: 0A:A5:DE:29:26:5A:08:E2:7A:58:1D:89:44:65:BD:CD:B7:37:09:BB Certificate issuer: /CN=A91DC017/serialNumber=0AA5DE29265A08E27A581D894465BDCDB73709BB Certificate serial: 029A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft Manifest number: 0280 Signing time: Mon 11 May 2026 02:03:40 +0000 Manifest this update: Mon 11 May 2026 02:03:39 +0000 Manifest next update: Mon 18 May 2026 02:03:39 +0000 Files and hashes: 1: CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.crl (hash: CxNZUFko1ricd08ZKTwlzJj8TVevxGj86PePxFFTs04=) 2: 08A1C0B8DC5011EF9C212C5CC4F9AE02.roa (hash: 4eriJ+anZ8scJn8XHXKnKYPlWoQjR5KP9FszJSNrcus=) 3: C0C268B8441C11EF9E110F1EC4F9AE02.roa (hash: wTvqX5lh+hQgLml0mergBNQIB7VUtx22kJjyPfNulFg=) 4: 1B8DE01C641911EF83FFBF3CC4F9AE02.roa (hash: 5SoS9wM/g+HshG7EbVwFWNY7qgmWv+2rIEwCE8gvraE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.crl rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 02:03:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 666 (0x29a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC017, serialNumber=0AA5DE29265A08E27A581D894465BDCDB73709BB Validity Not Before: May 11 02:03:39 2026 GMT Not After : May 18 02:03:39 2026 GMT Subject: CN=6a0138fc-0c30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:60:44:fa:1c:f7:b6:e9:43:f6:be:30:a9:73: 7a:31:59:f5:ea:c6:f9:30:c7:83:12:0c:46:15:5f: 37:78:fa:b6:27:da:8d:35:ec:89:5d:86:a5:7d:df: a8:fd:34:14:8e:8b:a7:62:df:32:ad:de:0e:87:7a: ab:f2:3b:2c:8c:29:a5:6a:9b:2d:35:f2:c3:20:19: 51:d0:46:7a:85:a0:27:ff:22:04:c0:c4:ff:9a:d6: 54:a6:ad:68:02:ba:e9:27:e1:74:b9:61:95:07:41: 46:00:25:74:79:29:e5:82:d1:c3:86:5c:73:97:c7: fd:01:b7:70:c9:ee:c9:e2:59:70:1a:f7:99:0b:31: b9:ac:76:0d:8d:9a:64:db:cc:15:f7:ab:2b:57:5c: 80:c3:7b:55:01:54:26:58:20:36:1f:6e:03:d1:7a: 7b:68:d5:7f:e0:3b:c8:18:d9:83:98:dc:e9:2d:7b: fc:53:e9:67:e8:ba:07:81:59:33:cd:21:22:6b:84: d8:3a:d7:2f:7e:90:6c:7e:47:56:a6:0a:c2:5d:44: 80:62:4e:2c:71:f7:19:ed:8a:a3:d1:7e:11:97:0d: 0a:d2:87:4f:e0:00:b1:e5:43:a6:c7:a7:4e:ef:c6: c0:e1:01:fc:5c:1e:a3:12:3f:03:82:2f:65:7d:84: 88:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:71:89:B2:F4:44:6C:C5:BA:BC:CD:61:24:8A:E6:79:9C:25:DB:6A X509v3 Authority Key Identifier: keyid:0A:A5:DE:29:26:5A:08:E2:7A:58:1D:89:44:65:BD:CD:B7:37:09:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:40:b9:94:ca:1f:db:ab:fd:89:03:2c:20:41:2e:a0:d6:ff: 67:e6:b8:55:da:a2:01:4b:68:c8:b5:d6:77:dc:a0:55:c2:43: 98:54:54:39:00:8d:b1:0a:bc:39:75:28:cc:04:02:01:2f:18: 1e:05:74:db:4d:ad:7c:18:6b:ff:a3:cb:80:c6:f4:6d:af:c7: 68:52:2a:16:69:5b:a0:0d:05:90:56:4a:c7:ca:ce:58:8d:4c: f0:e6:9e:3b:15:45:f1:55:0d:1c:7e:f7:d7:9e:f9:78:19:6e: 55:5d:20:fc:64:6b:f3:3c:c5:39:99:8d:95:db:63:24:ac:a8: 3a:bc:25:4e:30:ce:c5:5f:5f:ef:b3:f4:78:e1:ae:74:b3:fc: f6:c0:a1:28:42:03:cf:c7:7a:b7:16:5d:80:41:de:d9:47:d2: bb:c9:da:1f:aa:b4:e3:35:a8:14:bf:a3:c3:00:fb:d7:07:5e: aa:19:7f:17:dd:bd:ad:2d:af:d2:b9:9d:a1:d2:3b:94:2b:dc: cc:b4:bb:11:bb:ba:10:92:f0:4d:51:e2:05:2c:57:6d:69:36: 23:9f:02:96:3e:f5:28:2d:e0:7c:9b:4d:80:58:b9:f4:13:60: 34:08:72:fd:ea:a9:f7:0d:0d:ea:8e:7f:60:a1:1f:ac:80:4c: 6e:72:dc:67 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMwMTcxMTAvBgNVBAUTKDBBQTVERTI5MjY1QTA4RTI3QTU4MUQ4OTQ0NjVCRENE QjczNzA5QkIwHhcNMjYwNTExMDIwMzM5WhcNMjYwNTE4MDIwMzM5WjAYMRYwFAYD VQQDEw02YTAxMzhmYy0wYzMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyWBE+hz3tulD9r4wqXN6MVn16sb5MMeDEgxGFV83ePq2J9qNNeyJXYalfd+o /TQUjounYt8yrd4Oh3qr8jssjCmlapstNfLDIBlR0EZ6haAn/yIEwMT/mtZUpq1o ArrpJ+F0uWGVB0FGACV0eSnlgtHDhlxzl8f9Abdwye7J4llwGveZCzG5rHYNjZpk 28wV96srV1yAw3tVAVQmWCA2H24D0Xp7aNV/4DvIGNmDmNzpLXv8U+ln6LoHgVkz zSEia4TYOtcvfpBsfkdWpgrCXUSAYk4scfcZ7Yqj0X4Rlw0K0odP4ACx5UOmx6dO 78bA4QH8XB6jEj8Dgi9lfYSIzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJlxibL0 RGzFurzNYSSK5nmcJdtqMB8GA1UdIwQYMBaAFAql3ikmWgjielgdiURlvc23Nwm7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzAxNy8xMDVBQzhGQzkw QzMxMUVEQkExRENDMjNDNEY5QUUwMi9DcVhlS1NaYUNPSjZXQjJKUkdXOXpiYzND YnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NxWGVLU1phQ09KNldCMkpSR1c5emJjM0Nicy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzAxNy8xMDVBQzhGQzkwQzMxMUVEQkExRENDMjNDNEY5QUUwMi9DcVhlS1NaYUNP SjZXQjJKUkdXOXpiYzNDYnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfEC5lMof26v9iQMsIEEuoNb/Z+a4VdqiAUtoyLXWd9ygVcJDmFRUOQCNsQq8 OXUozAQCAS8YHgV0202tfBhr/6PLgMb0ba/HaFIqFmlboA0FkFZKx8rOWI1M8Oae OxVF8VUNHH731575eBluVV0g/GRr8zzFOZmNldtjJKyoOrwlTjDOxV9f77P0eOGu dLP89sChKEIDz8d6txZdgEHe2UfSu8naH6q04zWoFL+jwwD71wdeqhl/F929rS2v 0rmdodI7lCvczLS7Ebu6EJLwTVHiBSxXbWk2I58Clj71KC3gfJtNgFi59BNgNAhy /eqp9w0N6o5/YKEfrIBMbnLcZw== -----END CERTIFICATE-----Generated at Wed May 13 03:25:17 2026 by rpki-client