$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft File: rQWVkiI-gWrFPEM7llhG950wUjQ.mft (raw, json) Hash identifier: tJRExOuR7UGR2UmScw4NgYMhiB1e6+fMb5x8crOeoFY= Subject key identifier: 5D:C3:E9:96:ED:FB:76:0B:1E:7E:C7:A6:39:62:0B:E9:14:1C:44:DE Authority key identifier: AD:05:95:92:22:3E:81:6A:C5:3C:43:3B:96:58:46:F7:9D:30:52:34 Certificate issuer: /CN=A91BAEDC/serialNumber=AD059592223E816AC53C433B965846F79D305234 Certificate serial: 1C41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft Manifest number: 1C24 Signing time: Wed 08 Apr 2026 16:10:16 +0000 Manifest this update: Wed 08 Apr 2026 16:10:16 +0000 Manifest next update: Wed 15 Apr 2026 16:10:16 +0000 Files and hashes: 1: rQWVkiI-gWrFPEM7llhG950wUjQ.crl (hash: tECNICPuSkWYJROwSU3TTefxPfKvuCm9QdnMfRahB1A=) 2: C98708BE477711EBB4044E31C4F9AE02.roa (hash: Bq4dDyNuryVKgCHn3kt6G7S6oGEDro1j46GJUBDoNaA=) 3: C85D0F7E477711EBB4044E31C4F9AE02.roa (hash: fQDDLLVpB7tlhKbTchUr+f8pc87eehWOolUlYcKucho=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.crl rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Apr 2026 16:10:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7233 (0x1c41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAEDC, serialNumber=AD059592223E816AC53C433B965846F79D305234 Validity Not Before: Apr 8 16:10:16 2026 GMT Not After : Apr 15 16:10:16 2026 GMT Subject: CN=69d67de8-c5b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:cc:3f:19:82:2b:95:22:ff:78:ad:d8:76:dc: 15:0d:c5:d0:1f:a6:d5:15:a7:83:6d:4f:49:95:ce: 17:41:e3:5e:0b:70:ef:74:1a:27:c6:7b:ca:f4:07: b4:39:08:de:f9:dc:56:67:33:6e:44:e9:33:b5:a2: ee:11:18:b3:fb:a7:f8:18:1f:3a:93:67:6a:f6:29: 70:fd:af:7d:ab:b2:b6:2e:ff:d9:e6:3b:26:d0:9e: 4e:c8:ec:77:5f:7b:17:48:8b:b1:40:7b:d7:84:54: bc:be:b9:c5:22:e8:d8:89:a7:24:7a:94:81:06:4d: 8e:35:b2:4a:f0:08:6a:76:83:8c:9b:86:c7:6e:2a: 58:91:5f:b3:ee:c5:03:aa:a7:7f:82:b5:46:23:ac: f7:f5:e4:9d:27:bd:7f:30:48:1a:d1:be:e7:ff:6c: c7:13:56:0d:d1:5d:80:02:45:8c:e2:db:d7:50:d8: 6a:c3:a7:17:be:fc:bf:dd:08:a1:88:ed:e0:b0:56: 8f:4d:8a:17:68:8a:6f:72:18:9d:be:3e:4b:a4:c6: ac:e0:a8:a4:7a:38:7d:0d:b4:f4:fa:4e:fd:d6:8a: 14:3c:71:dd:b5:f4:83:59:91:08:6d:2a:df:8e:67: 78:d0:5c:68:9a:71:41:2f:09:92:6c:61:da:68:56: c7:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:C3:E9:96:ED:FB:76:0B:1E:7E:C7:A6:39:62:0B:E9:14:1C:44:DE X509v3 Authority Key Identifier: keyid:AD:05:95:92:22:3E:81:6A:C5:3C:43:3B:96:58:46:F7:9D:30:52:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:98:30:f1:00:5f:74:63:e8:a3:06:57:d6:07:db:24:6d:6c: 98:6d:17:c1:b7:9a:0e:cc:97:e3:1a:76:d2:d2:ac:7e:5a:50: 71:5d:84:c0:38:1d:73:a6:a2:2a:d3:33:e3:e4:09:f3:ff:f8: f3:f6:a9:d9:39:a2:7e:0a:a8:b7:d8:d6:e8:82:29:c0:27:31: 87:13:ad:e1:c6:b7:9a:3e:3d:ef:fa:91:a3:94:d2:90:82:52: d8:fc:3e:d8:a1:10:d0:0b:a2:f5:a0:6c:04:ff:2d:f3:d1:ce: be:46:f2:cc:f1:12:d9:f4:38:65:dd:02:1f:bd:e4:c9:17:14: cc:1f:1b:f4:71:3a:bd:1c:f9:e9:55:42:5f:d8:41:91:9e:c0: fe:6c:f3:3a:52:33:e5:7a:5a:68:b6:a5:24:47:8d:15:f6:15: ef:f6:22:28:d3:b9:0a:b2:83:ac:5d:d9:27:40:b3:03:0f:fe: 27:5a:da:a2:75:f8:ab:30:34:0b:48:bb:d1:f0:22:e9:e7:12: 4c:a3:ff:e3:b5:dd:53:67:59:3b:3b:d0:8f:d7:46:d3:e1:57: bc:08:99:84:0a:7a:3a:90:a7:18:8f:6e:72:d0:e2:ed:31:3a: f6:4a:91:91:aa:c5:85:d5:ab:cf:e3:c9:2a:ed:f4:52:65:16: 62:ce:63:88 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHEEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFFREMxMTAvBgNVBAUTKEFEMDU5NTkyMjIzRTgxNkFDNTNDNDMzQjk2NTg0NkY3 OUQzMDUyMzQwHhcNMjYwNDA4MTYxMDE2WhcNMjYwNDE1MTYxMDE2WjAYMRYwFAYD VQQDEw02OWQ2N2RlOC1jNWIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlsw/GYIrlSL/eK3YdtwVDcXQH6bVFaeDbU9Jlc4XQeNeC3DvdBonxnvK9Ae0 OQje+dxWZzNuROkztaLuERiz+6f4GB86k2dq9ilw/a99q7K2Lv/Z5jsm0J5OyOx3 X3sXSIuxQHvXhFS8vrnFIujYiackepSBBk2ONbJK8AhqdoOMm4bHbipYkV+z7sUD qqd/grVGI6z39eSdJ71/MEga0b7n/2zHE1YN0V2AAkWM4tvXUNhqw6cXvvy/3Qih iO3gsFaPTYoXaIpvchidvj5LpMas4Kikejh9DbT0+k791ooUPHHdtfSDWZEIbSrf jmd40FxomnFBLwmSbGHaaFbHCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF3D6Zbt +3YLHn7HpjliC+kUHETeMB8GA1UdIwQYMBaAFK0FlZIiPoFqxTxDO5ZYRvedMFI0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUVEQy8yREMxQkFGMjA5 ODUxMUU3QjFGRkMyM0ZDNEY5QUUwMi9yUVdWa2lJLWdXckZQRU03bGxoRzk1MHdV alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JRV1ZraUktZ1dyRlBFTTdsbGhHOTUwd1VqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUVEQy8yREMxQkFGMjA5ODUxMUU3QjFGRkMyM0ZDNEY5QUUwMi9yUVdWa2lJLWdX ckZQRU03bGxoRzk1MHdValEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAopgw8QBfdGPoowZX1gfbJG1smG0XwbeaDsyX4xp20tKsflpQcV2EwDgdc6ai KtMz4+QJ8//48/ap2Tmifgqot9jW6IIpwCcxhxOt4ca3mj497/qRo5TSkIJS2Pw+ 2KEQ0Aui9aBsBP8t89HOvkbyzPES2fQ4Zd0CH73kyRcUzB8b9HE6vRz56VVCX9hB kZ7A/mzzOlIz5XpaaLalJEeNFfYV7/YiKNO5CrKDrF3ZJ0CzAw/+J1raonX4qzA0 C0i70fAi6ecSTKP/47XdU2dZOzvQj9dG0+FXvAiZhAp6OpCnGI9uctDi7TE69kqR karFhdWrz+PJKu30UmUWYs5jiA== -----END CERTIFICATE-----Generated at Thu Apr 9 00:21:54 2026 by rpki-client