$ rpki-client -vvf rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.mft File: QeXcIVUGn_MX5e44x1t4icIhl-M.mft (raw, json) Hash identifier: wf2c+FBogILDV5+74its+jkH6sydf62jDqqqa2vgPRU= Subject key identifier: 25:D4:9B:6E:2A:B9:FA:37:5A:20:73:F9:BD:0D:A3:69:12:BE:67:C7 Authority key identifier: 41:E5:DC:21:55:06:9F:F3:17:E5:EE:38:C7:5B:78:89:C2:21:97:E3 Certificate issuer: /CN=A91B72D9/serialNumber=41E5DC2155069FF317E5EE38C75B7889C22197E3 Certificate serial: 04E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeXcIVUGn_MX5e44x1t4icIhl-M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.mft Manifest number: 04CE Signing time: Sat 04 Apr 2026 23:41:20 +0000 Manifest this update: Sat 04 Apr 2026 23:41:20 +0000 Manifest next update: Sat 11 Apr 2026 23:41:20 +0000 Files and hashes: 1: QeXcIVUGn_MX5e44x1t4icIhl-M.crl (hash: nH/VDbFyG9spF5FIup/87xBuFRaLdPWjdD9cj4nP6cA=) 2: 4FD9C050F53411EFBF7FCA34C4F9AE02.roa (hash: 4j2H8uU7/aRuPDnI28o6Sv8nL9kjvWfBPDjQZsso1iI=) 3: 43E6BE1AF53411EF9DE3BD34C4F9AE02.roa (hash: 0Bo2hHPRP76nejRj/EVVT9FzU9vQs0YDaVNN7sh0ZdQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.crl rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeXcIVUGn_MX5e44x1t4icIhl-M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 23:41:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1256 (0x4e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B72D9, serialNumber=41E5DC2155069FF317E5EE38C75B7889C22197E3 Validity Not Before: Apr 4 23:41:20 2026 GMT Not After : Apr 11 23:41:20 2026 GMT Subject: CN=69d1a1a0-e2ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a7:2f:be:f6:11:96:b7:be:f6:61:b2:94:14: e0:33:ab:a9:a6:60:1d:a2:42:60:fb:58:4b:0f:ea: 34:f9:b3:e6:f5:f8:5a:c6:e1:7e:f3:24:32:e9:87: e8:9f:8e:b7:56:95:20:c4:9e:f1:32:14:fd:9f:b7: ce:60:4e:11:aa:d4:25:5e:20:5f:63:91:4a:5d:74: 78:61:a4:57:e0:87:88:27:f1:81:5f:d9:78:95:18: e9:2e:5a:c1:eb:1d:0b:5c:e0:09:fb:59:16:86:7b: 41:37:14:bd:96:c6:61:0f:eb:53:d7:b1:f5:91:a2: 18:97:07:27:59:3b:11:72:5f:6a:e6:6f:26:f4:48: b4:99:a4:05:6a:11:40:73:92:c3:b6:76:06:e0:79: fc:f2:c0:6b:40:20:e4:46:ab:6b:79:ae:f2:d6:26: dc:09:ca:ad:8b:bb:e1:56:89:7e:aa:bf:37:46:c6: 51:0b:d8:10:f4:4a:51:d9:99:88:0c:cd:5e:07:27: b7:6c:fe:a9:ec:94:f9:c8:15:bf:3b:1a:b9:b7:63: bf:38:17:d4:99:69:97:0a:ae:42:d5:43:2d:67:fa: 09:31:80:0a:4f:c8:f3:e2:b7:0e:37:e1:08:07:5e: 89:80:3f:54:cc:6e:c9:70:7e:7a:d4:d7:d8:13:a1: 6b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:D4:9B:6E:2A:B9:FA:37:5A:20:73:F9:BD:0D:A3:69:12:BE:67:C7 X509v3 Authority Key Identifier: keyid:41:E5:DC:21:55:06:9F:F3:17:E5:EE:38:C7:5B:78:89:C2:21:97:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeXcIVUGn_MX5e44x1t4icIhl-M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:73:1b:83:21:98:47:f3:32:1d:2d:c4:1f:ec:f8:b1:04:84: 7b:e4:52:ec:dc:b9:dd:9a:cd:c3:d3:eb:b1:75:ac:cd:3e:2f: 5d:1e:32:f7:c2:b9:5d:f3:d1:ce:f4:42:c9:98:da:68:57:5d: 01:a7:56:64:ac:63:84:e4:1d:d6:d6:ad:4e:a9:77:04:9e:e7: 7c:0c:05:91:9d:8b:3f:74:f8:6a:18:1c:6a:11:23:bd:e3:06: 83:28:05:c7:0f:10:f9:cb:1c:f7:ee:f3:d0:40:d7:8d:5d:81: 02:52:ce:8d:b2:9b:a7:21:41:13:94:a4:c5:b1:6c:07:e8:a4: c8:3e:8f:1d:68:db:8d:9a:bf:32:35:fe:da:b7:37:21:ec:6b: 83:31:d3:db:ec:f4:bf:36:5f:a6:53:b6:04:58:ea:6e:86:97: dd:94:20:56:61:c7:d0:14:3e:15:4a:ea:3f:fc:8d:24:5f:53: 35:34:09:c2:ed:9d:e5:45:a7:4c:7d:5d:2f:33:fd:c8:23:a5: b2:7a:17:d2:9a:1b:c6:07:78:3a:50:78:1e:b2:3d:69:67:9f: 99:c7:d5:68:5b:0b:5c:95:9d:9f:73:1e:c0:ce:5b:fc:8b:12: cd:3d:1e:23:3c:ff:a9:e1:5a:49:39:07:2c:e6:53:f1:87:86: 41:b6:d5:58 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjcyRDkxMTAvBgNVBAUTKDQxRTVEQzIxNTUwNjlGRjMxN0U1RUUzOEM3NUI3ODg5 QzIyMTk3RTMwHhcNMjYwNDA0MjM0MTIwWhcNMjYwNDExMjM0MTIwWjAYMRYwFAYD VQQDEw02OWQxYTFhMC1lMmVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp6cvvvYRlre+9mGylBTgM6uppmAdokJg+1hLD+o0+bPm9fhaxuF+8yQy6Yfo n463VpUgxJ7xMhT9n7fOYE4RqtQlXiBfY5FKXXR4YaRX4IeIJ/GBX9l4lRjpLlrB 6x0LXOAJ+1kWhntBNxS9lsZhD+tT17H1kaIYlwcnWTsRcl9q5m8m9Ei0maQFahFA c5LDtnYG4Hn88sBrQCDkRqtrea7y1ibcCcqti7vhVol+qr83RsZRC9gQ9EpR2ZmI DM1eBye3bP6p7JT5yBW/Oxq5t2O/OBfUmWmXCq5C1UMtZ/oJMYAKT8jz4rcON+EI B16JgD9UzG7JcH561NfYE6FrtwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCXUm24q ufo3WiBz+b0No2kSvmfHMB8GA1UdIwQYMBaAFEHl3CFVBp/zF+XuOMdbeInCIZfj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzJEOS9BQTIzRkE5NjY5 NzExMUVDQjYyNTkzMENDNEY5QUUwMi9RZVhjSVZVR25fTVg1ZTQ0eDF0NGljSWhs LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FlWGNJVlVHbl9NWDVlNDR4MXQ0aWNJaGwtTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzJEOS9BQTIzRkE5NjY5NzExMUVDQjYyNTkzMENDNEY5QUUwMi9RZVhjSVZVR25f TVg1ZTQ0eDF0NGljSWhsLU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAenMbgyGYR/MyHS3EH+z4sQSEe+RS7Ny53ZrNw9PrsXWszT4vXR4y98K5XfPR zvRCyZjaaFddAadWZKxjhOQd1tatTql3BJ7nfAwFkZ2LP3T4ahgcahEjveMGgygF xw8Q+csc9+7z0EDXjV2BAlLOjbKbpyFBE5SkxbFsB+ikyD6PHWjbjZq/MjX+2rc3 IexrgzHT2+z0vzZfplO2BFjqboaX3ZQgVmHH0BQ+FUrqP/yNJF9TNTQJwu2d5UWn TH1dLzP9yCOlsnoX0pobxgd4OlB4HrI9aWefmcfVaFsLXJWdn3MewM5b/IsSzT0e Izz/qeFaSTkHLOZT8YeGQbbVWA== -----END CERTIFICATE-----Generated at Sun Apr 5 19:44:10 2026 by rpki-client