$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.mft File: PQVW0ZO8kqIep0f5WMaXqX7F1dY.mft (raw, json) Hash identifier: XyypnnEKHU1DWQIlxubz6y/8Qyfc3tHXp38oYtNs9SY= Subject key identifier: 4F:8F:23:AA:36:A7:3A:FE:98:08:FC:66:AB:E6:4C:66:1F:61:59:98 Authority key identifier: 3D:05:56:D1:93:BC:92:A2:1E:A7:47:F9:58:C6:97:A9:7E:C5:D5:D6 Certificate issuer: /CN=A91E4668/serialNumber=3D0556D193BC92A21EA747F958C697A97EC5D5D6 Certificate serial: 0F39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQVW0ZO8kqIep0f5WMaXqX7F1dY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.mft Manifest number: 0F2A Signing time: Tue 12 May 2026 17:36:33 +0000 Manifest this update: Tue 12 May 2026 17:36:32 +0000 Manifest next update: Tue 19 May 2026 17:36:32 +0000 Files and hashes: 1: PQVW0ZO8kqIep0f5WMaXqX7F1dY.crl (hash: 9L0reXblZRPrhlor9bbIWyNYee+9HFoaaGoaqlxDB6I=) 2: A5B7D874091F11EFA6EDE141C4F9AE02.roa (hash: nwEIy7xPw+1tR+gqF3l6cQwTi+bhxEm67T3G2uPpLSc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.crl rsync://rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQVW0ZO8kqIep0f5WMaXqX7F1dY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 17:36:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3897 (0xf39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4668, serialNumber=3D0556D193BC92A21EA747F958C697A97EC5D5D6 Validity Not Before: May 12 17:36:32 2026 GMT Not After : May 19 17:36:32 2026 GMT Subject: CN=6a036521-959a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b2:b5:56:65:24:19:ea:0b:79:5d:6b:52:30: cb:7c:9a:3b:07:2d:87:aa:25:30:c5:29:51:61:5b: 36:35:87:e4:50:69:34:26:0b:3f:12:a6:89:b9:35: de:88:0b:e4:a4:e5:cc:da:74:61:a6:b5:ef:ff:55: de:ee:b0:a3:34:72:33:6f:68:33:ae:96:a8:4b:12: 1b:c4:27:b9:72:ba:e6:41:b8:21:32:15:dd:0a:a3: 52:62:bf:90:31:d5:f2:6d:d3:7f:a7:fd:cb:12:93: 78:02:aa:b1:b5:96:92:27:b5:5f:53:d5:52:9f:c5: b1:63:10:7b:b8:c4:3a:75:63:63:68:02:76:8f:2f: ed:10:ae:a8:b7:1b:a1:f3:29:e0:72:0e:8a:59:09: 69:93:dd:17:f3:bc:85:d2:cd:4a:25:8e:46:db:67: 11:0c:27:cf:66:15:c0:07:79:3b:39:04:d8:ff:bb: 4b:40:3e:9a:0d:1f:c3:d3:47:c2:4d:4f:01:bd:e5: 6f:52:ea:19:12:40:7a:bd:fc:4e:c6:47:d8:9d:95: 04:52:f8:4d:2b:a1:48:77:4e:bb:d4:ad:e2:82:08: ec:cc:18:ab:81:2b:03:ea:de:dd:a3:ec:eb:f5:04: 6c:ef:2f:c3:6f:5e:84:fe:c7:15:e0:9d:5c:89:b0: b0:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:8F:23:AA:36:A7:3A:FE:98:08:FC:66:AB:E6:4C:66:1F:61:59:98 X509v3 Authority Key Identifier: keyid:3D:05:56:D1:93:BC:92:A2:1E:A7:47:F9:58:C6:97:A9:7E:C5:D5:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQVW0ZO8kqIep0f5WMaXqX7F1dY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:d4:44:ec:26:46:14:92:bc:76:97:c6:ae:56:c7:44:18:dc: 77:71:6c:fe:8e:6b:7a:92:b0:15:ee:ce:fd:4d:cf:e3:88:9f: 82:51:11:83:56:ea:f4:db:38:5f:83:2a:94:97:47:36:7e:fc: 6e:dc:46:c4:94:ff:bd:b4:c9:13:c1:64:2a:c8:ba:26:39:c1: ab:be:db:d9:1e:07:7f:2c:53:9f:aa:61:30:4c:65:e6:e9:3a: 38:d2:a0:10:2e:67:79:af:46:19:29:ce:3c:09:41:a4:0f:0f: 87:b3:73:db:fd:70:5b:47:f0:39:31:65:8c:3d:4d:5d:eb:a4: 9e:4e:7a:b0:75:ef:12:a6:83:e0:ff:50:12:03:b6:21:eb:81: 63:6b:47:bd:a1:51:a5:16:c4:91:8d:32:27:d3:b1:d8:91:84: 2f:ae:29:e7:a7:b5:6c:f9:87:b9:50:0c:93:1a:bf:0f:64:69: b5:9e:8e:ec:c7:ca:c4:a3:3c:94:2d:22:6d:36:8b:3b:90:4a: b3:01:74:52:cc:91:7d:82:12:0f:cd:ca:26:d9:07:de:f4:52: bd:65:9e:2d:05:b6:d7:4a:9d:0d:0d:ba:03:d0:5d:7f:e6:7a: 25:01:d1:25:21:79:9b:26:50:dd:ae:35:7f:33:4c:2b:4c:f1: d0:ae:94:0f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDzkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ2NjgxMTAvBgNVBAUTKDNEMDU1NkQxOTNCQzkyQTIxRUE3NDdGOTU4QzY5N0E5 N0VDNUQ1RDYwHhcNMjYwNTEyMTczNjMyWhcNMjYwNTE5MTczNjMyWjAYMRYwFAYD VQQDEw02YTAzNjUyMS05NTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzbK1VmUkGeoLeV1rUjDLfJo7By2HqiUwxSlRYVs2NYfkUGk0Jgs/EqaJuTXe iAvkpOXM2nRhprXv/1Xe7rCjNHIzb2gzrpaoSxIbxCe5crrmQbghMhXdCqNSYr+Q MdXybdN/p/3LEpN4AqqxtZaSJ7VfU9VSn8WxYxB7uMQ6dWNjaAJ2jy/tEK6otxuh 8yngcg6KWQlpk90X87yF0s1KJY5G22cRDCfPZhXAB3k7OQTY/7tLQD6aDR/D00fC TU8BveVvUuoZEkB6vfxOxkfYnZUEUvhNK6FId0671K3iggjszBirgSsD6t7do+zr 9QRs7y/Db16E/scV4J1cibCwuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE+PI6o2 pzr+mAj8ZqvmTGYfYVmYMB8GA1UdIwQYMBaAFD0FVtGTvJKiHqdH+VjGl6l+xdXW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDY2OC83QzkwMDlBQzk3 RjExMUU5QTJFNTE5ODFDNEY5QUUwMi9QUVZXMFpPOGtxSWVwMGY1V01hWHFYN0Yx ZFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BRVlcwWk84a3FJZXAwZjVXTWFYcVg3RjFkWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDY2OC83QzkwMDlBQzk3RjExMUU5QTJFNTE5ODFDNEY5QUUwMi9QUVZXMFpPOGtx SWVwMGY1V01hWHFYN0YxZFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARdRE7CZGFJK8dpfGrlbHRBjcd3Fs/o5repKwFe7O/U3P44ifglERg1bq9Ns4 X4MqlJdHNn78btxGxJT/vbTJE8FkKsi6JjnBq77b2R4HfyxTn6phMExl5uk6ONKg EC5nea9GGSnOPAlBpA8Ph7Nz2/1wW0fwOTFljD1NXeuknk56sHXvEqaD4P9QEgO2 IeuBY2tHvaFRpRbEkY0yJ9Ox2JGEL64p56e1bPmHuVAMkxq/D2RptZ6O7MfKxKM8 lC0ibTaLO5BKswF0UsyRfYISD83KJtkH3vRSvWWeLQW210qdDQ26A9Bdf+Z6JQHR JSF5myZQ3a41fzNMK0zx0K6UDw== -----END CERTIFICATE-----Generated at Wed May 13 08:21:33 2026 by rpki-client