$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.mft File: qX6qTW8VW40nxAro4yfZulLDS0I.mft (raw, json) Hash identifier: d+gxSYrUTJ6v1rfLNO7zlvcPuqzegeWeESKZApKaIOQ= Subject key identifier: 33:1E:74:71:59:3B:96:4D:5E:96:3D:95:73:5D:0E:6F:85:AE:F5:62 Authority key identifier: A9:7E:AA:4D:6F:15:5B:8D:27:C4:0A:E8:E3:27:D9:BA:52:C3:4B:42 Certificate issuer: /CN=A91EB4AF/serialNumber=A97EAA4D6F155B8D27C40AE8E327D9BA52C34B42 Certificate serial: 03E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qX6qTW8VW40nxAro4yfZulLDS0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.mft Manifest number: 03C0 Signing time: Wed 13 May 2026 00:50:05 +0000 Manifest this update: Wed 13 May 2026 00:50:05 +0000 Manifest next update: Wed 20 May 2026 00:50:05 +0000 Files and hashes: 1: qX6qTW8VW40nxAro4yfZulLDS0I.crl (hash: +JKRSfu0z+PmzRANrb8GjKJ4yCBAfY9Y1qWsMOyNrXI=) 2: DCE70C6EF9B911ED8314C10EC4F9AE02.roa (hash: lkd89MpvF6HjrZnQ7+Am4kQJDo7BJMWf79Z8hJQl200=) 3: 595774341B6211F0B9733473C4F9AE02.roa (hash: FsghJjQsuRRGpnhop47UMyZjNIpI+E4uxqKOZi0XVJ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.crl rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qX6qTW8VW40nxAro4yfZulLDS0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 00:50:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 993 (0x3e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB4AF, serialNumber=A97EAA4D6F155B8D27C40AE8E327D9BA52C34B42 Validity Not Before: May 13 00:50:05 2026 GMT Not After : May 20 00:50:05 2026 GMT Subject: CN=6a03cabd-4fcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:de:97:79:70:7d:ba:c2:1c:a8:58:90:36:3e: b6:5a:05:b1:a8:ea:aa:15:a7:0a:3a:4a:18:b2:54: 97:b6:2c:1f:af:26:05:fd:9e:64:84:e9:51:b3:f5: fc:ce:af:4d:d3:69:31:ed:31:0e:01:1d:ef:40:cb: 8c:4a:a5:a2:0d:ca:ab:b5:d9:73:a6:21:d4:44:fe: 63:a3:d3:b2:0f:20:01:27:d1:82:9f:fd:3a:8d:f0: e5:a3:a8:20:0e:11:be:4b:a8:1d:91:bc:28:62:77: aa:e0:9d:77:fd:f7:a2:15:09:8b:f8:d0:a2:ef:73: d5:80:55:a4:03:64:36:2f:8e:d7:cf:b2:44:3d:4e: c2:ec:5c:57:b5:d6:ac:1d:ad:83:f1:41:04:4a:09: f0:fb:a0:5d:6b:ea:42:4d:26:ea:e0:87:d9:f0:95: 7d:3d:af:c7:09:75:97:ad:d7:a2:2c:e7:d9:89:a1: 6f:3a:1d:28:2b:3c:b3:07:71:7c:e8:79:d0:14:60: 01:6a:6d:3e:6b:e7:ac:32:ab:1e:df:d7:e9:cc:16: 20:75:ee:19:f4:83:e1:16:d9:89:d4:4e:fc:c3:00: 5b:5c:b0:08:ad:fe:8e:4b:5d:1a:1b:b1:a7:4e:ec: fc:77:22:62:bb:7b:be:a5:3a:3d:f4:3e:09:4e:48: 90:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:1E:74:71:59:3B:96:4D:5E:96:3D:95:73:5D:0E:6F:85:AE:F5:62 X509v3 Authority Key Identifier: keyid:A9:7E:AA:4D:6F:15:5B:8D:27:C4:0A:E8:E3:27:D9:BA:52:C3:4B:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qX6qTW8VW40nxAro4yfZulLDS0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:66:51:08:30:f1:5d:76:55:7f:19:02:f3:2d:3e:fd:bc:80: 6b:9a:ea:1a:17:fd:c7:05:76:f6:dc:e8:af:da:2a:00:ee:3a: bc:6b:3f:2a:7b:a3:a1:1c:80:58:f8:f6:2f:3a:82:6e:1f:de: e5:ab:e7:7a:8d:69:b6:4d:3f:13:24:3e:67:1a:2d:f5:a3:8a: 47:a6:5b:2f:34:ef:d9:5c:65:ed:ab:58:8a:de:f0:55:ef:7a: 5f:1b:dd:10:5f:2e:8d:ea:0d:ea:07:a4:cc:39:23:7c:a9:c6: fc:bb:96:f4:de:bf:14:bf:95:f7:3a:17:a7:7a:fb:3a:91:be: 6d:8e:0b:0f:b4:11:b5:3b:08:de:5b:eb:3b:ac:ad:2e:09:dc: 15:6b:7a:9d:c4:51:fc:19:0f:2d:ad:63:2a:8a:0c:77:16:c4: 83:75:c0:7b:e8:43:eb:b6:11:94:e5:d1:77:33:f2:f1:a9:c2: 6c:b2:3e:67:00:96:ad:9b:b7:43:ca:39:30:49:58:a9:19:6d: 5d:60:94:fd:13:20:e2:0f:16:d0:8b:48:89:20:64:45:a0:f6: c3:81:60:fd:62:7e:03:68:4f:bd:b3:40:b6:ea:f1:27:7f:4b: cb:c5:68:10:4b:76:6c:ac:57:42:c8:82:5a:23:1e:46:ef:cc: f9:e5:82:31 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA+EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI0QUYxMTAvBgNVBAUTKEE5N0VBQTRENkYxNTVCOEQyN0M0MEFFOEUzMjdEOUJB NTJDMzRCNDIwHhcNMjYwNTEzMDA1MDA1WhcNMjYwNTIwMDA1MDA1WjAYMRYwFAYD VQQDEw02YTAzY2FiZC00ZmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1d6XeXB9usIcqFiQNj62WgWxqOqqFacKOkoYslSXtiwfryYF/Z5khOlRs/X8 zq9N02kx7TEOAR3vQMuMSqWiDcqrtdlzpiHURP5jo9OyDyABJ9GCn/06jfDlo6gg DhG+S6gdkbwoYneq4J13/feiFQmL+NCi73PVgFWkA2Q2L47Xz7JEPU7C7FxXtdas Ha2D8UEESgnw+6Bda+pCTSbq4IfZ8JV9Pa/HCXWXrdeiLOfZiaFvOh0oKzyzB3F8 6HnQFGABam0+a+esMqse39fpzBYgde4Z9IPhFtmJ1E78wwBbXLAIrf6OS10aG7Gn Tuz8dyJiu3u+pTo99D4JTkiQRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDMedHFZ O5ZNXpY9lXNdDm+FrvViMB8GA1UdIwQYMBaAFKl+qk1vFVuNJ8QK6OMn2bpSw0tC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjRBRi9DQzdCMjU1QURD QTkxMUVDOTRFM0UwMjlDNEY5QUUwMi9xWDZxVFc4Vlc0MG54QXJvNHlmWnVsTERT MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FYNnFUVzhWVzQwbnhBcm80eWZadWxMRFMwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjRBRi9DQzdCMjU1QURDQTkxMUVDOTRFM0UwMjlDNEY5QUUwMi9xWDZxVFc4Vlc0 MG54QXJvNHlmWnVsTERTMEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbmZRCDDxXXZVfxkC8y0+/byAa5rqGhf9xwV29tzor9oqAO46vGs/KnujoRyA WPj2LzqCbh/e5avneo1ptk0/EyQ+Zxot9aOKR6ZbLzTv2Vxl7atYit7wVe96Xxvd EF8ujeoN6gekzDkjfKnG/LuW9N6/FL+V9zoXp3r7OpG+bY4LD7QRtTsI3lvrO6yt LgncFWt6ncRR/BkPLa1jKooMdxbEg3XAe+hD67YRlOXRdzPy8anCbLI+ZwCWrZu3 Q8o5MElYqRltXWCU/RMg4g8W0ItIiSBkRaD2w4Fg/WJ+A2hPvbNAturxJ39Ly8Vo EEt2bKxXQsiCWiMeRu/M+eWCMQ== -----END CERTIFICATE-----Generated at Wed May 13 05:20:29 2026 by rpki-client