$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6A04/30D77996C9AE11F0BA222745C4F9AE02/QVaOgAk79NEF6TJNX4ISRTGsQT8.mft File: QVaOgAk79NEF6TJNX4ISRTGsQT8.mft (raw, json) Hash identifier: YKvizFGPNSkVLvhpCzH0rEnf9dDSqL6A8g2PwMClpOg= Subject key identifier: 88:56:CC:26:A9:96:34:E4:37:4B:25:BB:65:7F:FB:33:56:71:9B:89 Authority key identifier: 41:56:8E:80:09:3B:F4:D1:05:E9:32:4D:5F:82:12:45:31:AC:41:3F Certificate issuer: /CN=A91B6A04/serialNumber=41568E80093BF4D105E9324D5F82124531AC413F Certificate serial: 4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVaOgAk79NEF6TJNX4ISRTGsQT8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6A04/30D77996C9AE11F0BA222745C4F9AE02/QVaOgAk79NEF6TJNX4ISRTGsQT8.mft Manifest number: 49 Signing time: Sun 05 Apr 2026 07:42:45 +0000 Manifest this update: Sun 05 Apr 2026 07:42:44 +0000 Manifest next update: Sun 12 Apr 2026 07:42:44 +0000 Files and hashes: 1: QVaOgAk79NEF6TJNX4ISRTGsQT8.crl (hash: n48VsBIVTt6LiZ+Dss9zNnp8TLtcBRVIPO83MAvnv6c=) 2: CC22B2AA26A411F18AD5785BC0833773.roa (hash: ONSQA97L2ArdKzlTZtF0u83bufLlLinNTHkHJvb1UuM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6A04/30D77996C9AE11F0BA222745C4F9AE02/QVaOgAk79NEF6TJNX4ISRTGsQT8.crl rsync://rpki.apnic.net/member_repository/A91B6A04/30D77996C9AE11F0BA222745C4F9AE02/QVaOgAk79NEF6TJNX4ISRTGsQT8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVaOgAk79NEF6TJNX4ISRTGsQT8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 07:42:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74 (0x4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6A04, serialNumber=41568E80093BF4D105E9324D5F82124531AC413F Validity Not Before: Apr 5 07:42:44 2026 GMT Not After : Apr 12 07:42:44 2026 GMT Subject: CN=69d21275-58ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f9:61:b9:d2:b1:33:fd:46:ba:75:c5:cb:0e: d7:2d:2b:a2:a0:79:b0:5d:c1:07:df:55:9d:42:a5: e7:b0:33:b8:0b:5a:84:d5:e8:4d:ac:9e:ea:5d:22: 3f:40:37:bc:f3:48:63:0c:e9:4d:7b:9c:75:00:b1: 94:7a:aa:35:ba:9a:30:96:4b:b1:dd:57:da:b5:77: d6:ab:65:9d:49:ce:e7:20:98:77:4a:dc:26:4e:b1: 4e:62:6c:87:d0:8d:0b:bc:93:35:1f:54:c4:3e:11: eb:b7:dc:fc:99:c5:50:19:4a:aa:1c:eb:f7:23:89: 9c:06:02:65:b9:65:07:60:56:9d:b5:4c:4d:39:d8: 95:c7:88:f6:69:fc:cd:2e:50:45:e6:cc:b4:6f:cc: 55:d1:3a:be:30:e3:4b:24:58:b5:02:31:0d:69:8a: 18:76:c1:6d:02:18:2a:78:7b:79:45:37:a7:4d:bc: 17:d8:86:7b:ab:5f:46:54:45:72:e0:d3:75:5a:5e: 51:6a:38:d2:5c:5d:02:21:07:08:de:3f:b0:1f:8b: 94:8e:31:f8:0b:a2:6e:3a:e4:c9:80:88:ba:95:5b: 30:42:f2:d2:55:ba:d3:e1:09:3d:64:18:ce:49:18: 32:73:0c:ec:cf:b0:65:ac:eb:c7:e0:a4:b1:56:65: 1f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:56:CC:26:A9:96:34:E4:37:4B:25:BB:65:7F:FB:33:56:71:9B:89 X509v3 Authority Key Identifier: keyid:41:56:8E:80:09:3B:F4:D1:05:E9:32:4D:5F:82:12:45:31:AC:41:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6A04/30D77996C9AE11F0BA222745C4F9AE02/QVaOgAk79NEF6TJNX4ISRTGsQT8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVaOgAk79NEF6TJNX4ISRTGsQT8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6A04/30D77996C9AE11F0BA222745C4F9AE02/QVaOgAk79NEF6TJNX4ISRTGsQT8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:47:7b:0f:72:90:b7:51:64:2a:cf:b1:a1:ff:24:5b:f0:27: 88:bb:ce:35:97:1e:13:5d:99:73:62:eb:1c:94:d8:04:4c:f1: 89:b9:82:9a:3b:9a:67:57:54:d5:64:a7:d8:2e:0e:da:d0:09: dc:a5:04:60:01:7e:d6:2e:8c:40:03:51:f1:aa:41:49:4a:25: 4e:ac:9c:3d:84:67:25:8f:1a:9b:33:ce:f8:9a:f2:ae:ca:4e: f0:e2:14:10:ee:59:61:f7:c4:a1:ed:1f:73:26:5d:d0:a6:71: 00:9e:67:29:2e:e9:5a:f9:e8:bb:67:37:f2:b4:f1:61:6b:aa: c1:d0:60:41:ab:e7:72:5b:37:ac:85:ae:a9:f6:8f:d2:8c:f8: c4:33:39:92:1f:90:de:fc:4d:51:5b:01:d6:91:14:fb:99:2c: c6:0a:e5:00:35:de:7c:57:d5:f6:22:b6:45:25:88:29:b9:d8: e4:4a:28:fe:ea:53:d5:30:e0:d3:97:70:ec:12:d7:2c:e5:61: 8e:de:ed:38:c7:d4:17:f5:f3:25:4d:4e:77:ec:e5:a2:91:12: ec:0b:1c:4e:45:9a:6e:06:1d:d3:1f:91:9a:d5:7e:d2:3a:af: 95:63:b8:af:4b:6d:36:08:af:52:14:7b:41:e0:7a:e7:11:ba: 6d:47:7d:ca -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBSjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NkEwNDExMC8GA1UEBRMoNDE1NjhFODAwOTNCRjREMTA1RTkzMjRENUY4MjEyNDUz MUFDNDEzRjAeFw0yNjA0MDUwNzQyNDRaFw0yNjA0MTIwNzQyNDRaMBgxFjAUBgNV BAMTDTY5ZDIxMjc1LTU4Y2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDI+WG50rEz/Ua6dcXLDtctK6KgebBdwQffVZ1CpeewM7gLWoTV6E2snupdIj9A N7zzSGMM6U17nHUAsZR6qjW6mjCWS7HdV9q1d9arZZ1JzucgmHdK3CZOsU5ibIfQ jQu8kzUfVMQ+Eeu33PyZxVAZSqoc6/cjiZwGAmW5ZQdgVp21TE052JXHiPZp/M0u UEXmzLRvzFXROr4w40skWLUCMQ1pihh2wW0CGCp4e3lFN6dNvBfYhnurX0ZURXLg 03VaXlFqONJcXQIhBwjeP7Afi5SOMfgLom465MmAiLqVWzBC8tJVutPhCT1kGM5J GDJzDOzPsGWs68fgpLFWZR/LAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUiFbMJqmW NOQ3SyW7ZX/7M1Zxm4kwHwYDVR0jBBgwFoAUQVaOgAk79NEF6TJNX4ISRTGsQT8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2QTA0LzMwRDc3OTk2QzlB RTExRjBCQTIyMjc0NUM0RjlBRTAyL1FWYU9nQWs3OU5FRjZUSk5YNElTUlRHc1FU OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUVZhT2dBazc5TkVGNlRKTlg0SVNSVEdzUVQ4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2 QTA0LzMwRDc3OTk2QzlBRTExRjBCQTIyMjc0NUM0RjlBRTAyL1FWYU9nQWs3OU5F RjZUSk5YNElTUlRHc1FUOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAhR3sPcpC3UWQqz7Gh/yRb8CeIu841lx4TXZlzYusclNgETPGJuYKaO5pnV1TV ZKfYLg7a0AncpQRgAX7WLoxAA1HxqkFJSiVOrJw9hGcljxqbM874mvKuyk7w4hQQ 7llh98Sh7R9zJl3QpnEAnmcpLula+ei7ZzfytPFha6rB0GBBq+dyWzesha6p9o/S jPjEMzmSH5De/E1RWwHWkRT7mSzGCuUANd58V9X2IrZFJYgpudjkSij+6lPVMODT l3DsEtcs5WGO3u04x9QX9fMlTU537OWikRLsCxxORZpuBh3TH5Ga1X7SOq+VY7iv S202CK9SFHtB4HrnEbptR33K -----END CERTIFICATE-----Generated at Sun Apr 5 22:24:45 2026 by rpki-client