$ rpki-client -vvf rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.mft File: QXbxCRjJsY0t74t8ZvxaOmWCIx4.mft (raw, json) Hash identifier: NV5kdNi2xe5BALrdn6xe1LvzQrXmLXKq4s3K23vdBBc= Subject key identifier: 14:41:ED:A3:32:76:22:96:D0:6C:52:5D:78:0B:D5:7C:CC:53:67:CB Authority key identifier: 41:76:F1:09:18:C9:B1:8D:2D:EF:8B:7C:66:FC:5A:3A:65:82:23:1E Certificate issuer: /CN=A91144AB/serialNumber=4176F10918C9B18D2DEF8B7C66FC5A3A6582231E Certificate serial: 3527 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.mft Manifest number: 3527 Signing time: Sat 04 Apr 2026 14:48:00 +0000 Manifest this update: Sat 04 Apr 2026 14:48:00 +0000 Manifest next update: Sat 11 Apr 2026 14:48:00 +0000 Files and hashes: 1: QXbxCRjJsY0t74t8ZvxaOmWCIx4.crl (hash: Y+3G/PVf939QyU43IeSJ5THcof5FReEngWsJyzx677s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.crl rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 14:47:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13607 (0x3527) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91144AB, serialNumber=4176F10918C9B18D2DEF8B7C66FC5A3A6582231E Validity Not Before: Apr 4 14:48:00 2026 GMT Not After : Apr 11 14:48:00 2026 GMT Subject: CN=69d124a0-736b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e5:43:6c:db:f2:ad:42:90:c5:ec:21:a1:60: a4:06:12:2a:ff:06:10:7d:23:d6:6b:81:e4:aa:20: f6:c4:ac:e3:0a:b5:20:d1:d1:e1:d1:3e:a2:c0:99: d2:be:0d:48:03:22:36:70:71:a8:79:35:bc:dc:58: b4:a8:35:80:70:6d:e2:83:c1:64:15:38:1d:16:1a: a3:7c:1c:aa:7b:61:e8:da:12:91:74:19:ba:0b:db: 7b:7f:09:9c:31:3b:84:c6:c8:dd:b1:0f:45:eb:1e: 4f:6e:9e:f0:0d:64:07:8f:30:a9:2b:8d:cb:fb:d9: fd:a7:7a:2f:99:62:27:6b:f6:03:88:87:7b:66:b6: e6:55:ce:e4:79:45:2b:22:25:d5:71:30:3f:55:a6: 2e:a9:37:a8:01:bc:3d:73:98:a3:6e:3d:1b:23:eb: da:72:70:ff:70:14:79:7f:a7:d6:d0:a5:39:76:3e: 4d:b3:85:bc:97:98:c0:e8:cd:d4:d0:38:bc:e8:d6: e0:21:97:29:12:51:e5:f4:41:8a:e9:39:be:bd:77: 29:8b:b5:5d:19:ad:9f:3b:95:b1:a2:d6:95:2d:dc: cc:db:54:0d:78:ef:1c:6f:e5:c0:f5:8d:18:c2:61: 19:cd:a2:05:2a:64:99:27:12:bf:91:ca:18:41:58: f3:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:41:ED:A3:32:76:22:96:D0:6C:52:5D:78:0B:D5:7C:CC:53:67:CB X509v3 Authority Key Identifier: keyid:41:76:F1:09:18:C9:B1:8D:2D:EF:8B:7C:66:FC:5A:3A:65:82:23:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:14:a1:62:bd:6f:a8:a0:85:f6:54:69:14:94:5d:dc:a1:68: 4e:24:7b:1c:8c:f3:8a:d4:e2:7b:e5:7a:18:ec:fb:9a:8b:14: 12:90:7b:c8:9d:d3:c0:f8:08:d9:40:e8:0d:2a:01:91:ad:2d: 69:1e:6c:69:ff:78:71:44:df:9d:60:0e:2b:25:59:bc:6a:4d: 7a:6c:4f:6b:37:09:be:1f:ba:d6:45:98:0b:7e:c2:c0:0c:93: c7:ba:b1:6a:48:cf:17:ad:2f:24:b8:01:19:18:7e:de:17:b8: 73:fb:04:0b:0c:a1:4f:de:d0:fe:99:b6:3d:b3:51:fd:12:db: 5c:ae:7f:fc:2b:8d:27:2f:04:d8:e8:47:98:c2:f9:45:51:1e: 7a:dc:c1:8a:d3:a1:cb:3d:0d:7b:2f:9d:8e:47:f0:77:f3:4e: d1:8e:0f:66:e7:37:ea:58:f7:8d:b8:35:53:89:86:86:70:5e: 15:f1:e6:db:d3:90:eb:8a:fd:3c:d5:3a:95:06:40:3e:8e:63: 21:dd:c2:6c:2e:72:5d:b1:c6:6d:e8:31:fa:9d:aa:b4:71:61: a1:63:57:a9:52:71:13:5d:85:26:1e:24:52:42:4d:f2:ed:94: 94:43:af:ab:80:8e:a8:85:72:68:25:a1:95:55:44:12:b8:5c: 4d:c9:3b:9e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ0QUIxMTAvBgNVBAUTKDQxNzZGMTA5MThDOUIxOEQyREVGOEI3QzY2RkM1QTNB NjU4MjIzMUUwHhcNMjYwNDA0MTQ0ODAwWhcNMjYwNDExMTQ0ODAwWjAYMRYwFAYD VQQDEw02OWQxMjRhMC03MzZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApOVDbNvyrUKQxewhoWCkBhIq/wYQfSPWa4HkqiD2xKzjCrUg0dHh0T6iwJnS vg1IAyI2cHGoeTW83Fi0qDWAcG3ig8FkFTgdFhqjfByqe2Ho2hKRdBm6C9t7fwmc MTuExsjdsQ9F6x5Pbp7wDWQHjzCpK43L+9n9p3ovmWIna/YDiId7ZrbmVc7keUUr IiXVcTA/VaYuqTeoAbw9c5ijbj0bI+vacnD/cBR5f6fW0KU5dj5Ns4W8l5jA6M3U 0Di86NbgIZcpElHl9EGK6Tm+vXcpi7VdGa2fO5WxotaVLdzM21QNeO8cb+XA9Y0Y wmEZzaIFKmSZJxK/kcoYQVjzaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBRB7aMy diKW0GxSXXgL1XzMU2fLMB8GA1UdIwQYMBaAFEF28QkYybGNLe+LfGb8WjplgiMe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDRBQi81RTBBQTlBMjFE OTUxMUUyQjRFRTMzN0QwOEIwMkNEMi9RWGJ4Q1JqSnNZMHQ3NHQ4WnZ4YU9tV0NJ eDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FYYnhDUmpKc1kwdDc0dDhadnhhT21XQ0l4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDRBQi81RTBBQTlBMjFEOTUxMUUyQjRFRTMzN0QwOEIwMkNEMi9RWGJ4Q1JqSnNZ MHQ3NHQ4WnZ4YU9tV0NJeDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACxShYr1vqKCF9lRpFJRd3KFoTiR7HIzzitTie+V6GOz7mosUEpB7yJ3TwPgI 2UDoDSoBka0taR5saf94cUTfnWAOKyVZvGpNemxPazcJvh+61kWYC37CwAyTx7qx akjPF60vJLgBGRh+3he4c/sECwyhT97Q/pm2PbNR/RLbXK5//CuNJy8E2OhHmML5 RVEeetzBitOhyz0Ney+djkfwd/NO0Y4PZuc36lj3jbg1U4mGhnBeFfHm29OQ64r9 PNU6lQZAPo5jId3CbC5yXbHGbegx+p2qtHFhoWNXqVJxE12FJh4kUkJN8u2UlEOv q4COqIVyaCWhlVVEErhcTck7ng== -----END CERTIFICATE-----Generated at Sun Apr 5 22:24:50 2026 by rpki-client