$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft File: qriBuCFHwwNrgPxnWTTcLkbOD38.mft (raw, json) Hash identifier: wqziwiJHXiez0K0O+qg46WyR88PN3s998XxLNZ9IXag= Subject key identifier: 6C:27:82:4D:3C:FF:46:96:84:30:1A:78:91:1D:1C:82:50:B1:D1:BA Authority key identifier: AA:B8:81:B8:21:47:C3:03:6B:80:FC:67:59:34:DC:2E:46:CE:0F:7F Certificate issuer: /CN=A91F4EDE/serialNumber=AAB881B82147C3036B80FC675934DC2E46CE0F7F Certificate serial: 06BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft Manifest number: 0688 Signing time: Tue 12 May 2026 22:38:00 +0000 Manifest this update: Tue 12 May 2026 22:38:00 +0000 Manifest next update: Tue 19 May 2026 22:38:00 +0000 Files and hashes: 1: qriBuCFHwwNrgPxnWTTcLkbOD38.crl (hash: hPf2nN3qr4AE1VAjRx060x6JHJxgM4kZzaG1DgcLwaw=) 2: 8C4BB9AED9DB11EF9AE05220C4F9AE02.roa (hash: CN1S5iBG91fG5Dyt4QhTqMPNL4CwNQilfba/5yYIoFo=) 3: 7E859EFEE60411EF89467057C4F9AE02.roa (hash: DBTQzmV3HyHHyoJ4NWJ949FIY35oLUF9Ca78F0C+fRE=) 4: 5A9BFC3ABE7C11EB8BC25C1CC4F9AE02.roa (hash: NTWzneRsI6xBoZcMBa/cRNUEBFQFqDaPLGuJ4Y8AzAY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.crl rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 22:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1726 (0x6be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4EDE, serialNumber=AAB881B82147C3036B80FC675934DC2E46CE0F7F Validity Not Before: May 12 22:38:00 2026 GMT Not After : May 19 22:38:00 2026 GMT Subject: CN=6a03abc8-33b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e1:7b:08:49:57:23:47:8c:d2:22:f6:cd:17: 56:85:64:62:52:4c:2d:e6:b2:b0:59:66:b2:78:b8: b8:45:c1:4f:92:98:09:17:84:69:9a:83:80:57:e9: 9b:c3:75:3b:32:8f:42:be:32:5e:0b:4a:d8:c5:55: 39:b1:ec:87:f6:81:c1:51:b6:66:c2:53:31:8a:df: f2:01:84:e0:26:ec:ce:ab:d8:7f:0c:96:86:8f:25: ab:a4:fe:6a:2a:aa:36:1c:ee:8e:27:82:e3:de:f6: 47:f4:c0:79:c7:9e:09:b4:e8:7a:1d:c6:2d:22:7f: b3:20:d6:f7:c9:13:7d:ef:5a:6d:a5:36:18:96:7a: 9a:5f:bb:18:48:25:ea:37:17:ba:27:23:6e:7b:9e: 65:f5:7a:61:42:a0:91:8d:fc:93:10:5e:af:38:6e: 1e:f6:62:20:d9:14:6f:de:11:e5:c7:5d:3f:83:15: b5:73:00:e2:fb:de:17:68:e7:14:76:ca:86:b9:4f: 77:d9:47:13:a3:97:d9:9b:3f:86:fd:6c:64:cc:78: 15:d0:e4:e9:31:da:f1:01:54:7d:15:90:37:4b:ab: 2c:05:b0:ff:e5:c2:b8:12:e5:9e:2f:b7:68:b2:00: 7b:be:7a:03:e8:96:bf:81:20:0f:c2:ea:eb:43:96: a9:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:27:82:4D:3C:FF:46:96:84:30:1A:78:91:1D:1C:82:50:B1:D1:BA X509v3 Authority Key Identifier: keyid:AA:B8:81:B8:21:47:C3:03:6B:80:FC:67:59:34:DC:2E:46:CE:0F:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:08:94:8d:7b:c5:bc:13:be:53:f1:db:09:a0:bb:74:53:2c: fa:00:3b:ca:d9:fe:e7:f4:d9:f1:38:2f:4f:6c:a5:cd:b0:c8: 88:93:5e:ed:ee:37:9b:63:17:b5:8c:44:e4:b6:1d:21:46:d9: 2a:9c:44:67:73:d3:15:0c:0b:26:62:25:b6:20:3c:a2:a3:bd: 6f:07:06:f7:6c:fb:42:9b:bf:d3:0a:e8:c4:4e:c8:41:b9:dc: 97:b6:04:0c:1b:d3:2f:b0:b7:79:63:de:72:ff:f5:68:2b:ea: aa:a3:cc:9d:28:5c:82:3a:c2:d0:ad:4f:bc:82:ce:e7:bd:ec: d5:f3:1d:17:ea:d2:d1:9b:7e:c0:e1:55:0e:97:d0:e3:74:ac: 4a:e7:93:bc:1e:51:e8:7e:a8:94:cd:32:47:7f:7c:eb:93:0d: 17:4c:f8:98:99:b4:fb:e9:92:59:f2:9c:4f:78:b3:d8:c3:22: 02:8c:71:c0:e7:39:0a:63:fd:ea:dd:90:32:a5:90:52:89:fc: 9d:80:5a:e8:64:bb:ba:09:c7:e4:fc:cf:6d:73:5f:c5:91:a8: 70:6d:2e:5a:f5:87:9e:48:07:10:f4:cd:bd:0e:44:9a:89:d1: 6a:ee:71:32:38:f8:ea:71:58:1a:17:7b:93:63:30:a6:e8:2c: 1e:c4:88:ba -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBr4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRFREUxMTAvBgNVBAUTKEFBQjg4MUI4MjE0N0MzMDM2QjgwRkM2NzU5MzREQzJF NDZDRTBGN0YwHhcNMjYwNTEyMjIzODAwWhcNMjYwNTE5MjIzODAwWjAYMRYwFAYD VQQDEw02YTAzYWJjOC0zM2IyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAneF7CElXI0eM0iL2zRdWhWRiUkwt5rKwWWayeLi4RcFPkpgJF4RpmoOAV+mb w3U7Mo9CvjJeC0rYxVU5seyH9oHBUbZmwlMxit/yAYTgJuzOq9h/DJaGjyWrpP5q Kqo2HO6OJ4Lj3vZH9MB5x54JtOh6HcYtIn+zINb3yRN971ptpTYYlnqaX7sYSCXq Nxe6JyNue55l9XphQqCRjfyTEF6vOG4e9mIg2RRv3hHlx10/gxW1cwDi+94XaOcU dsqGuU932UcTo5fZmz+G/WxkzHgV0OTpMdrxAVR9FZA3S6ssBbD/5cK4EuWeL7do sgB7vnoD6Ja/gSAPwurrQ5apVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGwngk08 /0aWhDAaeJEdHIJQsdG6MB8GA1UdIwQYMBaAFKq4gbghR8MDa4D8Z1k03C5Gzg9/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEVERS8yQ0IwMzI1OEJF NzkxMUVCOTUxMThCMTlDNEY5QUUwMi9xcmlCdUNGSHd3TnJnUHhuV1RUY0xrYk9E MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FyaUJ1Q0ZId3dOcmdQeG5XVFRjTGtiT0QzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEVERS8yQ0IwMzI1OEJFNzkxMUVCOTUxMThCMTlDNEY5QUUwMi9xcmlCdUNGSHd3 TnJnUHhuV1RUY0xrYk9EMzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcQiUjXvFvBO+U/HbCaC7dFMs+gA7ytn+5/TZ8TgvT2ylzbDIiJNe7e43m2MX tYxE5LYdIUbZKpxEZ3PTFQwLJmIltiA8oqO9bwcG92z7Qpu/0wroxE7IQbncl7YE DBvTL7C3eWPecv/1aCvqqqPMnShcgjrC0K1PvILO573s1fMdF+rS0Zt+wOFVDpfQ 43SsSueTvB5R6H6olM0yR39865MNF0z4mJm0++mSWfKcT3iz2MMiAoxxwOc5CmP9 6t2QMqWQUon8nYBa6GS7ugnH5PzPbXNfxZGocG0uWvWHnkgHEPTNvQ5EmonRau5x Mjj46nFYGhd7k2MwpugsHsSIug== -----END CERTIFICATE-----Generated at Wed May 13 10:41:28 2026 by rpki-client