$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft File: QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft (raw, json) Hash identifier: cjfPZlkO6c2poVgj2VvHcmzBvZXs+DVSE30LJDpVCRI= Subject key identifier: 0C:C0:12:A8:09:5B:C1:47:4B:1F:83:CF:4D:C3:75:B5:96:CD:82:11 Authority key identifier: 42:67:CF:5D:03:00:4A:8F:EF:DF:21:39:5D:0F:E8:24:54:8B:13:C1 Certificate issuer: /CN=A91FCEB1/serialNumber=4267CF5D03004A8FEFDF21395D0FE824548B13C1 Certificate serial: 213F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmfPXQMASo_v3yE5XQ_oJFSLE8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft Manifest number: 28F7 Signing time: Tue 12 May 2026 15:55:53 +0000 Manifest this update: Tue 12 May 2026 15:55:53 +0000 Manifest next update: Tue 19 May 2026 15:55:53 +0000 Files and hashes: 1: QmfPXQMASo_v3yE5XQ_oJFSLE8E.crl (hash: d/Nn+qxke1xcxhU0M/R2IF32Skbdqi2EF2zfICDw5gg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.crl rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmfPXQMASo_v3yE5XQ_oJFSLE8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 15:55:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8511 (0x213f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCEB1, serialNumber=4267CF5D03004A8FEFDF21395D0FE824548B13C1 Validity Not Before: May 12 15:55:53 2026 GMT Not After : May 19 15:55:53 2026 GMT Subject: CN=6a034d89-ca7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:32:ab:d8:7b:f4:4e:84:c7:13:23:47:5d:d0: f8:a4:96:df:0e:f9:25:6b:d6:f0:fe:0b:50:56:3c: 69:69:68:45:33:e9:8b:28:b0:8e:93:39:6f:99:b8: e9:40:73:9a:a5:50:16:a4:46:53:68:d4:30:80:0e: 09:b1:74:ee:3a:cb:eb:c2:43:3c:c7:f3:3b:9d:21: c1:48:6e:e8:62:fd:76:bc:2d:ff:84:36:0c:5f:bf: c5:bd:94:2e:16:7b:de:32:18:1a:94:15:b3:f5:24: 91:ca:80:0d:f8:f3:9f:76:91:97:47:bc:5c:99:dc: 46:89:36:f5:51:60:9b:e6:87:73:08:31:56:42:a8: 1e:92:ea:19:2b:84:0f:4d:72:f0:ed:97:bf:57:11: 66:3f:f4:8b:3e:5a:c0:8f:04:03:e3:48:c8:83:22: ed:38:04:eb:2f:11:67:32:5c:bd:f2:34:a1:e7:85: 47:5f:fc:4e:d5:9b:2d:2f:64:1c:f7:59:d4:b4:1b: 73:a3:8a:81:22:3f:da:4c:29:e2:3a:df:83:ec:cd: 91:c8:c0:86:3f:0a:ef:49:dd:3f:3e:6a:73:36:cc: 4d:74:fd:21:06:78:a4:9e:ed:d3:50:7f:ff:37:5a: 77:74:9c:b9:62:1a:2d:10:3a:fa:38:43:17:98:ac: ff:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:C0:12:A8:09:5B:C1:47:4B:1F:83:CF:4D:C3:75:B5:96:CD:82:11 X509v3 Authority Key Identifier: keyid:42:67:CF:5D:03:00:4A:8F:EF:DF:21:39:5D:0F:E8:24:54:8B:13:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmfPXQMASo_v3yE5XQ_oJFSLE8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:2c:55:b9:c3:16:9d:8c:e8:95:aa:c2:22:9d:c4:4a:a2:04: d9:6b:06:08:f5:0a:0b:e0:14:85:bb:c3:cd:45:94:94:31:6f: 85:ec:81:4b:42:07:85:33:53:dc:11:97:0b:e2:93:1b:5c:fe: a1:5d:9e:6b:65:59:3f:3a:2c:56:e5:a1:5d:76:be:98:67:76: 69:43:2e:d4:18:ee:cc:0d:5c:b3:ea:0d:ff:08:b3:19:a3:7f: b4:4f:17:e5:2f:49:d0:82:9e:5b:20:2c:fc:9d:b3:e6:0b:aa: 04:cc:ff:ac:6f:b7:b9:08:4f:b0:cd:6a:95:c2:49:36:c1:95: 14:65:e7:7d:e0:f7:74:c7:91:0f:11:a2:84:e2:09:2d:4f:74: ca:b1:52:99:0a:4f:b0:0c:12:1b:b1:d2:bf:e3:ab:3f:f8:5a: 24:46:5e:14:e9:ce:89:8e:ff:15:f0:97:8b:67:90:a2:98:1c: 1b:b0:07:5b:f1:88:52:45:bc:5f:3f:5d:d1:ad:ee:26:d3:0d: 5f:34:80:46:b8:e5:62:ae:d1:22:18:b9:89:75:b6:69:a7:1d: a5:b6:22:94:a7:4f:f5:52:c1:ba:2b:5a:84:eb:96:e1:03:1a: c9:40:03:4a:80:3b:2d:5d:8a:7c:67:55:ea:1a:26:0c:25:c9: 0e:be:ea:87 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICIT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNFQjExMTAvBgNVBAUTKDQyNjdDRjVEMDMwMDRBOEZFRkRGMjEzOTVEMEZFODI0 NTQ4QjEzQzEwHhcNMjYwNTEyMTU1NTUzWhcNMjYwNTE5MTU1NTUzWjAYMRYwFAYD VQQDEw02YTAzNGQ4OS1jYTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoDKr2Hv0ToTHEyNHXdD4pJbfDvkla9bw/gtQVjxpaWhFM+mLKLCOkzlvmbjp QHOapVAWpEZTaNQwgA4JsXTuOsvrwkM8x/M7nSHBSG7oYv12vC3/hDYMX7/FvZQu FnveMhgalBWz9SSRyoAN+POfdpGXR7xcmdxGiTb1UWCb5odzCDFWQqgekuoZK4QP TXLw7Ze/VxFmP/SLPlrAjwQD40jIgyLtOATrLxFnMly98jSh54VHX/xO1ZstL2Qc 91nUtBtzo4qBIj/aTCniOt+D7M2RyMCGPwrvSd0/PmpzNsxNdP0hBniknu3TUH// N1p3dJy5YhotEDr6OEMXmKz/3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAzAEqgJ W8FHSx+Dz03DdbWWzYIRMB8GA1UdIwQYMBaAFEJnz10DAEqP798hOV0P6CRUixPB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0VCMS9FRkI4NzVDODA4 QzkxMUU2OEM3Nzg4NzhDNEY5QUUwMi9RbWZQWFFNQVNvX3YzeUU1WFFfb0pGU0xF OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FtZlBYUU1BU29fdjN5RTVYUV9vSkZTTEU4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0VCMS9FRkI4NzVDODA4QzkxMUU2OEM3Nzg4NzhDNEY5QUUwMi9RbWZQWFFNQVNv X3YzeUU1WFFfb0pGU0xFOEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYCxVucMWnYzolarCIp3ESqIE2WsGCPUKC+AUhbvDzUWUlDFvheyBS0IHhTNT 3BGXC+KTG1z+oV2ea2VZPzosVuWhXXa+mGd2aUMu1BjuzA1cs+oN/wizGaN/tE8X 5S9J0IKeWyAs/J2z5guqBMz/rG+3uQhPsM1qlcJJNsGVFGXnfeD3dMeRDxGihOIJ LU90yrFSmQpPsAwSG7HSv+OrP/haJEZeFOnOiY7/FfCXi2eQopgcG7AHW/GIUkW8 Xz9d0a3uJtMNXzSARrjlYq7RIhi5iXW2aacdpbYilKdP9VLBuitahOuW4QMayUAD SoA7LV2KfGdV6homDCXJDr7qhw== -----END CERTIFICATE-----Generated at Wed May 13 00:53:41 2026 by rpki-client