$ rpki-client -vvf rpki.apnic.net/member_repository/A91E04E1/1C48D8E8FD9E11F0BFC962715F6F56BC/MQjy14qQC-lzk3j4GKWpYcpRLEs.mft File: MQjy14qQC-lzk3j4GKWpYcpRLEs.mft (raw, json) Hash identifier: YviiC/ky4EW0DEN8Q21Il3sDFYuBYtcEbuT8xUpf3O4= Subject key identifier: A8:21:D5:B4:D4:62:84:A5:B0:F3:51:6A:96:6E:1C:92:B9:74:43:1B Authority key identifier: 31:08:F2:D7:8A:90:0B:E9:73:93:78:F8:18:A5:A9:61:CA:51:2C:4B Certificate issuer: /CN=A91E04E1/serialNumber=3108F2D78A900BE9739378F818A5A961CA512C4B Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MQjy14qQC-lzk3j4GKWpYcpRLEs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E04E1/1C48D8E8FD9E11F0BFC962715F6F56BC/MQjy14qQC-lzk3j4GKWpYcpRLEs.mft Manifest number: 39 Signing time: Wed 13 May 2026 08:42:25 +0000 Manifest this update: Wed 13 May 2026 08:42:24 +0000 Manifest next update: Wed 20 May 2026 08:42:24 +0000 Files and hashes: 1: MQjy14qQC-lzk3j4GKWpYcpRLEs.crl (hash: 8gP1GIB2fNV4106mJ2oVNoMXN13mMMx4fuai9xjcU90=) 2: B3695572FD9E11F087EE26735F6F56BC.roa (hash: rCPj89ZhrAuLJpKSrj2V9nyJ0NP4IwMB9Wn3wdAsanU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E04E1/1C48D8E8FD9E11F0BFC962715F6F56BC/MQjy14qQC-lzk3j4GKWpYcpRLEs.crl rsync://rpki.apnic.net/member_repository/A91E04E1/1C48D8E8FD9E11F0BFC962715F6F56BC/MQjy14qQC-lzk3j4GKWpYcpRLEs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MQjy14qQC-lzk3j4GKWpYcpRLEs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 08:42:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E04E1, serialNumber=3108F2D78A900BE9739378F818A5A961CA512C4B Validity Not Before: May 13 08:42:24 2026 GMT Not After : May 20 08:42:24 2026 GMT Subject: CN=6a043971-d005 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:42:bb:68:04:a7:0f:86:8e:57:66:66:6d:d0: fd:18:83:93:10:2d:5d:07:27:ba:3f:44:d8:89:95: 31:36:9a:a1:c2:84:30:cf:ce:e4:24:7e:f0:64:2d: ad:7e:69:1d:bc:7b:30:2c:2d:37:63:7a:d1:89:4b: ad:0a:37:81:8f:cb:eb:99:52:96:e7:aa:b6:4d:48: a2:8d:3e:a7:d1:74:a5:8d:1e:63:9d:b8:f8:ee:aa: 61:46:45:2d:4f:29:95:6e:6e:27:65:55:61:66:45: 89:ce:4b:e7:e9:86:9d:42:4f:4e:7b:1a:a2:20:a5: 7c:0c:e8:09:7b:39:dd:3b:ee:7f:d6:76:1a:e4:30: 4b:0c:55:f6:6a:03:04:55:2d:f8:31:7b:14:db:69: 78:52:97:94:38:86:7d:36:d1:45:f1:f1:41:4d:bf: 5e:10:1a:7e:5e:72:00:06:a0:3e:13:fc:a9:87:f3: 1f:47:66:a9:5f:5c:99:4e:58:78:76:a9:48:e2:da: 74:30:35:39:1e:bf:ef:21:d6:18:52:cd:91:bf:2a: 0b:69:88:05:f3:37:61:32:d0:45:68:af:36:e9:b2: c7:72:68:96:b0:bb:55:7f:3a:0b:72:c5:9e:9a:da: 15:95:08:36:5d:2d:2a:e4:b6:48:e3:6e:cd:08:1a: db:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:21:D5:B4:D4:62:84:A5:B0:F3:51:6A:96:6E:1C:92:B9:74:43:1B X509v3 Authority Key Identifier: keyid:31:08:F2:D7:8A:90:0B:E9:73:93:78:F8:18:A5:A9:61:CA:51:2C:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E04E1/1C48D8E8FD9E11F0BFC962715F6F56BC/MQjy14qQC-lzk3j4GKWpYcpRLEs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MQjy14qQC-lzk3j4GKWpYcpRLEs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E04E1/1C48D8E8FD9E11F0BFC962715F6F56BC/MQjy14qQC-lzk3j4GKWpYcpRLEs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:4e:eb:96:1e:ec:e3:e7:6d:39:9f:e8:7b:a7:b3:5f:e4:26: 3e:69:14:58:84:5c:10:e9:4c:da:24:23:99:8e:ad:af:50:e6: d5:ee:d2:39:ea:c9:03:6a:b6:36:e9:e5:f2:5e:07:75:79:61: 93:03:a8:f9:2c:2a:43:55:fc:b0:f7:bf:f0:6a:6d:58:d5:84: 76:3a:e6:2c:b7:fb:b9:b3:5a:65:df:96:af:f5:b7:39:d1:cf: b4:b4:f5:25:b8:f6:d6:46:fd:68:1b:ec:f2:98:27:2a:5e:59: f5:b8:14:06:b6:2a:e9:7f:82:ab:69:f3:37:6d:20:1d:bb:5b: fc:7e:5f:30:4e:f1:2f:8b:96:a0:ff:4f:41:04:33:c6:46:08: c1:a4:4e:3f:b5:6c:bb:86:2e:2a:af:80:f5:4c:b5:e5:05:64: c9:50:e1:a1:85:69:ee:6f:e0:09:d4:e1:aa:fd:09:06:92:a3: 95:31:88:66:85:63:6b:52:1d:b2:fd:f8:8c:18:47:60:fe:d2: 98:72:58:a3:12:2c:09:c9:a3:2d:49:bd:bd:6b:98:05:f7:b6: 3e:e2:15:d6:95:f6:7b:55:63:d5:4b:f9:6e:68:a9:8b:50:5a: d2:cc:cd:d5:ca:38:93:5f:87:c9:d2:64:b0:6d:bb:82:1d:22: 63:f7:c8:16 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MDRFMTExMC8GA1UEBRMoMzEwOEYyRDc4QTkwMEJFOTczOTM3OEY4MThBNUE5NjFD QTUxMkM0QjAeFw0yNjA1MTMwODQyMjRaFw0yNjA1MjAwODQyMjRaMBgxFjAUBgNV BAMTDTZhMDQzOTcxLWQwMDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4QrtoBKcPho5XZmZt0P0Yg5MQLV0HJ7o/RNiJlTE2mqHChDDPzuQkfvBkLa1+ aR28ezAsLTdjetGJS60KN4GPy+uZUpbnqrZNSKKNPqfRdKWNHmOduPjuqmFGRS1P KZVubidlVWFmRYnOS+fphp1CT057GqIgpXwM6Al7Od077n/WdhrkMEsMVfZqAwRV LfgxexTbaXhSl5Q4hn020UXx8UFNv14QGn5ecgAGoD4T/KmH8x9HZqlfXJlOWHh2 qUji2nQwNTkev+8h1hhSzZG/KgtpiAXzN2Ey0EVorzbpssdyaJawu1V/OgtyxZ6a 2hWVCDZdLSrktkjjbs0IGtsBAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUqCHVtNRi hKWw81Fqlm4ckrl0QxswHwYDVR0jBBgwFoAUMQjy14qQC+lzk3j4GKWpYcpRLEsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUwNEUxLzFDNDhEOEU4RkQ5 RTExRjBCRkM5NjI3MTVGNkY1NkJDL01RankxNHFRQy1semszajRHS1dwWWNwUkxF cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTVFqeTE0cVFDLWx6azNqNEdLV3BZY3BSTEVzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUw NEUxLzFDNDhEOEU4RkQ5RTExRjBCRkM5NjI3MTVGNkY1NkJDL01RankxNHFRQy1s emszajRHS1dwWWNwUkxFcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBRTuuWHuzj5205n+h7p7Nf5CY+aRRYhFwQ6UzaJCOZjq2vUObV7tI56skDarY2 6eXyXgd1eWGTA6j5LCpDVfyw97/wam1Y1YR2OuYst/u5s1pl35av9bc50c+0tPUl uPbWRv1oG+zymCcqXln1uBQGtirpf4KrafM3bSAdu1v8fl8wTvEvi5ag/09BBDPG RgjBpE4/tWy7hi4qr4D1TLXlBWTJUOGhhWnub+AJ1OGq/QkGkqOVMYhmhWNrUh2y /fiMGEdg/tKYclijEiwJyaMtSb29a5gF97Y+4hXWlfZ7VWPVS/luaKmLUFrSzM3V yjiTX4fJ0mSwbbuCHSJj98gW -----END CERTIFICATE-----Generated at Wed May 13 14:05:09 2026 by rpki-client