$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.mft File: qJfATeEvCm9Zwa0VCfCyCfpUOLM.mft (raw, json) Hash identifier: UCdmWV3XiyG3eaER9oXlQY/m/O9r84Bs4zWKyMQXvos= Subject key identifier: AF:29:F3:03:B0:63:A8:85:86:C3:6A:91:76:9C:BC:61:6B:D0:82:10 Authority key identifier: A8:97:C0:4D:E1:2F:0A:6F:59:C1:AD:15:09:F0:B2:09:FA:54:38:B3 Certificate issuer: /CN=A91E7363/serialNumber=A897C04DE12F0A6F59C1AD1509F0B209FA5438B3 Certificate serial: 35BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.mft Manifest number: 356D Signing time: Tue 12 May 2026 14:25:34 +0000 Manifest this update: Tue 12 May 2026 14:25:33 +0000 Manifest next update: Tue 19 May 2026 14:25:33 +0000 Files and hashes: 1: qJfATeEvCm9Zwa0VCfCyCfpUOLM.crl (hash: 5sj3hvA+57VWt4JMVJ+QjXz9mIeAwgnv5fgQ8MKZDaE=) 2: BFA88D804D1C11F188E4BE42BA833773.roa (hash: YCFpeeIr/vbO2TD3e07I0DTanmKqXZQAgSCgifQzEN0=) 3: 0D0AE5040AE711E89D0C5071C4F9AE02.roa (hash: 0BiJ0HOA6qUFHN5xA8AuCJXROkGBYs9uD+TpXugIdmM=) 4: 2CDDCAB868AC11EDAA6C8F2AC4F9AE02.roa (hash: u9kZzqte8G5R67x31+sR3q0YHM2V76JLvdvpfY5M4UA=) 5: 3F0948F82D1011ECB745DB85C4F9AE02.roa (hash: kdT+sm008k7EJlVFHgyPf3s8RNvidHK++rJzxUn0e/U=) 6: 76482C624D1D11F184B3C654BA833773.roa (hash: 6lj2oNrXjkLAzkWc5123P9ksxaTq6OfdM3N50cMX7M4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.crl rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 14:25:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13754 (0x35ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7363, serialNumber=A897C04DE12F0A6F59C1AD1509F0B209FA5438B3 Validity Not Before: May 12 14:25:33 2026 GMT Not After : May 19 14:25:33 2026 GMT Subject: CN=6a03385e-da35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:02:51:91:20:11:ec:65:ef:9b:18:32:c9:1f: 39:ab:40:86:68:34:84:35:19:b3:b1:0c:52:50:98: a0:b5:2b:4e:80:62:23:56:e8:1e:ac:16:54:22:c9: 61:ce:1e:0d:49:1b:8b:29:5c:1d:e9:eb:67:9b:74: 01:54:56:e5:9d:ad:ea:a0:d4:ea:a3:2c:ca:f4:49: 0c:04:4d:e0:9f:06:07:c9:87:aa:5f:97:1e:70:0f: d5:85:9a:18:a1:d0:ef:04:50:fb:11:e4:c0:21:79: a8:ff:ba:30:e4:08:89:96:f5:37:8e:99:10:42:56: 2e:b5:b6:d5:73:8a:2c:fc:b3:af:5b:0a:88:81:08: 47:0b:e4:9c:03:a0:5a:51:20:c4:87:52:0d:f6:a4: 97:a6:81:8f:47:aa:a7:93:d0:88:3e:4f:9d:fa:19: 17:1c:3c:61:7c:60:cb:62:d0:44:2f:af:7d:4b:74: ae:ba:72:61:1c:3b:5c:d6:36:3e:0c:fd:92:47:33: 7f:d8:33:e2:83:fb:f9:83:68:95:25:68:e4:5d:4a: 3a:bc:b4:24:09:e5:f4:c1:66:cb:d7:f3:86:3e:14: 8f:60:43:b9:31:30:d6:c9:81:58:32:8b:fe:c0:7c: c0:e2:8d:2e:f5:81:dc:5b:ea:a2:64:3c:88:e6:71: d7:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:29:F3:03:B0:63:A8:85:86:C3:6A:91:76:9C:BC:61:6B:D0:82:10 X509v3 Authority Key Identifier: keyid:A8:97:C0:4D:E1:2F:0A:6F:59:C1:AD:15:09:F0:B2:09:FA:54:38:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:75:b1:a5:74:c2:4b:aa:8c:b5:39:ae:49:ad:3a:78:65:1a: 53:6e:60:b4:07:ad:2a:fd:ce:e8:12:ef:50:13:65:78:de:93: 25:e1:3d:b3:01:e9:58:cf:a0:4e:44:2f:68:b8:78:c5:d3:22: 53:4e:d5:65:25:b6:b0:55:79:71:c8:72:5c:53:dd:0b:49:a3: ab:9b:3b:e7:21:cd:da:7f:4e:5f:60:ac:28:2a:0b:ea:9b:e4: 2f:88:7c:c4:16:4a:ba:28:4c:c1:32:ea:cd:00:c7:75:4c:1c: b6:dd:68:c9:b2:52:4c:45:d6:5c:12:19:fb:4a:9a:32:43:0c: 5b:ef:96:ff:f4:46:17:64:e8:8f:80:e5:04:c2:ac:17:c5:0b: 3f:1f:a8:d4:06:bb:d7:58:a8:f2:7d:77:8e:94:17:20:8f:aa: da:80:88:1d:4c:dc:e3:2e:d5:f6:9c:f6:a8:98:cd:24:7d:8f: f9:58:ab:7e:fc:e4:92:17:b1:41:ef:99:9c:20:a7:2c:72:7d: a9:37:bb:a4:2a:a8:2e:66:27:4b:24:c8:1d:ef:24:29:5e:f5: de:7e:7d:2c:f7:2f:73:e9:c3:a9:85:19:ce:27:7b:80:a8:92: d8:86:30:7e:2c:67:f6:d3:db:d5:b8:8b:cf:bd:2a:a9:1e:56: 54:5c:20:e9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTczNjMxMTAvBgNVBAUTKEE4OTdDMDRERTEyRjBBNkY1OUMxQUQxNTA5RjBCMjA5 RkE1NDM4QjMwHhcNMjYwNTEyMTQyNTMzWhcNMjYwNTE5MTQyNTMzWjAYMRYwFAYD VQQDEw02YTAzMzg1ZS1kYTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuAJRkSAR7GXvmxgyyR85q0CGaDSENRmzsQxSUJigtStOgGIjVugerBZUIslh zh4NSRuLKVwd6etnm3QBVFblna3qoNTqoyzK9EkMBE3gnwYHyYeqX5cecA/VhZoY odDvBFD7EeTAIXmo/7ow5AiJlvU3jpkQQlYutbbVc4os/LOvWwqIgQhHC+ScA6Ba USDEh1IN9qSXpoGPR6qnk9CIPk+d+hkXHDxhfGDLYtBEL699S3SuunJhHDtc1jY+ DP2SRzN/2DPig/v5g2iVJWjkXUo6vLQkCeX0wWbL1/OGPhSPYEO5MTDWyYFYMov+ wHzA4o0u9YHcW+qiZDyI5nHXTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK8p8wOw Y6iFhsNqkXacvGFr0IIQMB8GA1UdIwQYMBaAFKiXwE3hLwpvWcGtFQnwsgn6VDiz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzM2My9GRjhCNEI2QzFE ODQxMUUyOENEMzNEREIwOEIwMkNEMi9xSmZBVGVFdkNtOVp3YTBWQ2ZDeUNmcFVP TE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FKZkFUZUV2Q205WndhMFZDZkN5Q2ZwVU9MTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzM2My9GRjhCNEI2QzFEODQxMUUyOENEMzNEREIwOEIwMkNEMi9xSmZBVGVFdkNt OVp3YTBWQ2ZDeUNmcFVPTE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAf3WxpXTCS6qMtTmuSa06eGUaU25gtAetKv3O6BLvUBNleN6TJeE9swHpWM+g TkQvaLh4xdMiU07VZSW2sFV5cchyXFPdC0mjq5s75yHN2n9OX2CsKCoL6pvkL4h8 xBZKuihMwTLqzQDHdUwctt1oybJSTEXWXBIZ+0qaMkMMW++W//RGF2Toj4DlBMKs F8ULPx+o1Aa711io8n13jpQXII+q2oCIHUzc4y7V9pz2qJjNJH2P+Virfvzkkhex Qe+ZnCCnLHJ9qTe7pCqoLmYnSyTIHe8kKV713n59LPcvc+nDqYUZzid7gKiS2IYw fixn9tPb1biLz70qqR5WVFwg6Q== -----END CERTIFICATE-----Generated at Tue May 12 22:44:58 2026 by rpki-client