$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB492/2C0B32D8093611F0A2842D57C4F9AE02/QOS9Nq4VB3_lmYXRNw1dZGcKiNk.mft File: QOS9Nq4VB3_lmYXRNw1dZGcKiNk.mft (raw, json) Hash identifier: Jbiv3vD+93e3RTbhvTNzaWdUjb15J6C9IFUmUL6iJ3w= Subject key identifier: 71:4B:0C:03:C7:EC:CD:37:B6:6E:E5:7F:FF:A3:44:7C:C5:15:29:0D Authority key identifier: 40:E4:BD:36:AE:15:07:7F:E5:99:85:D1:37:0D:5D:64:67:0A:88:D9 Certificate issuer: /CN=A91BB492/serialNumber=40E4BD36AE15077FE59985D1370D5D64670A88D9 Certificate serial: C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOS9Nq4VB3_lmYXRNw1dZGcKiNk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB492/2C0B32D8093611F0A2842D57C4F9AE02/QOS9Nq4VB3_lmYXRNw1dZGcKiNk.mft Manifest number: C4 Signing time: Sun 05 Apr 2026 06:19:28 +0000 Manifest this update: Sun 05 Apr 2026 06:19:28 +0000 Manifest next update: Sun 12 Apr 2026 06:19:28 +0000 Files and hashes: 1: QOS9Nq4VB3_lmYXRNw1dZGcKiNk.crl (hash: gOcidV8FwD3FandldrpJbTAV82cfvGK98FU8jPc8wBM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB492/2C0B32D8093611F0A2842D57C4F9AE02/QOS9Nq4VB3_lmYXRNw1dZGcKiNk.crl rsync://rpki.apnic.net/member_repository/A91BB492/2C0B32D8093611F0A2842D57C4F9AE02/QOS9Nq4VB3_lmYXRNw1dZGcKiNk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOS9Nq4VB3_lmYXRNw1dZGcKiNk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 06:19:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 196 (0xc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB492, serialNumber=40E4BD36AE15077FE59985D1370D5D64670A88D9 Validity Not Before: Apr 5 06:19:28 2026 GMT Not After : Apr 12 06:19:28 2026 GMT Subject: CN=69d1fef0-c9a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:11:34:0b:d8:5a:a5:6f:a9:6f:dc:75:e5:83: ee:7b:d0:fa:dc:d4:a9:12:10:eb:25:4b:83:49:33: 4a:90:ae:96:5f:11:aa:c1:2b:de:35:a8:b6:bd:a7: e2:f2:af:4e:3d:72:83:e2:d4:ed:ca:d9:21:30:98: f8:79:93:7e:d4:ff:b9:cf:f9:27:d0:77:62:f1:15: 0d:c2:aa:f8:c5:27:5d:66:f0:21:98:fd:72:94:35: 49:35:f8:f6:f4:a1:11:7a:d2:18:f2:a0:9e:78:8d: 11:ea:98:7f:f9:68:83:1e:ec:fa:7e:03:89:04:90: 71:84:96:73:3a:98:b4:57:b5:4f:17:c1:3a:85:91: 7a:28:79:b9:50:d8:f8:73:a4:03:9f:c1:8a:14:f1: b0:a6:34:80:94:f8:36:27:83:0e:14:cb:d7:20:fb: 21:68:ca:e1:d1:dc:02:49:26:d4:de:93:4c:24:fe: 10:74:33:85:99:df:95:7c:7f:5d:4c:4b:bd:7c:0d: 90:36:b3:94:2a:2c:e1:ea:f6:c8:34:51:74:f2:5d: c3:c4:9f:d9:94:5c:da:a3:10:37:18:c5:e7:b8:f4: df:4d:5c:55:d3:a8:73:10:86:6b:da:af:c7:88:4b: c9:e7:09:07:db:4b:19:95:4f:dc:16:f8:13:f9:a0: 2a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:4B:0C:03:C7:EC:CD:37:B6:6E:E5:7F:FF:A3:44:7C:C5:15:29:0D X509v3 Authority Key Identifier: keyid:40:E4:BD:36:AE:15:07:7F:E5:99:85:D1:37:0D:5D:64:67:0A:88:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB492/2C0B32D8093611F0A2842D57C4F9AE02/QOS9Nq4VB3_lmYXRNw1dZGcKiNk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOS9Nq4VB3_lmYXRNw1dZGcKiNk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB492/2C0B32D8093611F0A2842D57C4F9AE02/QOS9Nq4VB3_lmYXRNw1dZGcKiNk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:fd:f3:e2:25:47:e0:25:df:d1:39:3a:ce:1b:01:f1:4c:b7: 72:85:75:68:c2:3e:e3:98:97:99:9b:8f:12:a5:fd:60:8f:f5: aa:de:8c:90:8d:9a:b9:e7:a9:44:b1:53:6b:33:29:28:f2:0c: 1c:c3:61:13:84:3a:41:bf:13:78:3d:60:ca:58:41:c6:60:b4: df:f8:96:92:16:b5:97:b1:29:49:b4:b4:f0:a5:5b:c6:74:43: 3a:77:f6:82:58:6d:33:12:7e:15:fe:94:81:ef:b8:56:57:a6: d8:6e:c0:07:49:f8:9b:ad:ef:f3:81:ef:52:78:80:8e:1b:58: 83:4f:eb:33:98:b4:4c:ce:12:f0:29:a4:d0:ce:f5:0e:15:f3: 58:44:86:73:d1:99:ba:70:25:b7:01:85:84:5e:86:60:07:5d: 65:ee:da:f1:97:b6:55:42:b1:cb:f5:ab:f1:d6:df:3a:f0:ae: 65:6f:24:6d:7c:f6:df:77:78:cc:6d:2e:8f:62:98:b8:e0:bb: b1:ee:f7:45:42:b0:d3:93:ec:8b:c0:9a:6c:57:cb:0d:5f:b8: 83:90:6a:23:d8:b9:7a:86:18:37:b0:e7:ab:64:2e:0e:dd:b3: 08:24:ae:e2:2a:ad:a0:77:8c:58:60:c6:c8:cf:08:9b:4d:98: 5d:bc:86:74 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI0OTIxMTAvBgNVBAUTKDQwRTRCRDM2QUUxNTA3N0ZFNTk5ODVEMTM3MEQ1RDY0 NjcwQTg4RDkwHhcNMjYwNDA1MDYxOTI4WhcNMjYwNDEyMDYxOTI4WjAYMRYwFAYD VQQDEw02OWQxZmVmMC1jOWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmRE0C9hapW+pb9x15YPue9D63NSpEhDrJUuDSTNKkK6WXxGqwSveNai2vafi 8q9OPXKD4tTtytkhMJj4eZN+1P+5z/kn0Hdi8RUNwqr4xSddZvAhmP1ylDVJNfj2 9KERetIY8qCeeI0R6ph/+WiDHuz6fgOJBJBxhJZzOpi0V7VPF8E6hZF6KHm5UNj4 c6QDn8GKFPGwpjSAlPg2J4MOFMvXIPshaMrh0dwCSSbU3pNMJP4QdDOFmd+VfH9d TEu9fA2QNrOUKizh6vbINFF08l3DxJ/ZlFzaoxA3GMXnuPTfTVxV06hzEIZr2q/H iEvJ5wkH20sZlU/cFvgT+aAqTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHFLDAPH 7M03tm7lf/+jRHzFFSkNMB8GA1UdIwQYMBaAFEDkvTauFQd/5ZmF0TcNXWRnCojZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjQ5Mi8yQzBCMzJEODA5 MzYxMUYwQTI4NDJENTdDNEY5QUUwMi9RT1M5TnE0VkIzX2xtWVhSTncxZFpHY0tp TmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FPUzlOcTRWQjNfbG1ZWFJOdzFkWkdjS2lOay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjQ5Mi8yQzBCMzJEODA5MzYxMUYwQTI4NDJENTdDNEY5QUUwMi9RT1M5TnE0VkIz X2xtWVhSTncxZFpHY0tpTmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwP3z4iVH4CXf0Tk6zhsB8Uy3coV1aMI+45iXmZuPEqX9YI/1qt6MkI2aueep RLFTazMpKPIMHMNhE4Q6Qb8TeD1gylhBxmC03/iWkha1l7EpSbS08KVbxnRDOnf2 glhtMxJ+Ff6Uge+4Vlem2G7AB0n4m63v84HvUniAjhtYg0/rM5i0TM4S8Cmk0M71 DhXzWESGc9GZunAltwGFhF6GYAddZe7a8Ze2VUKxy/Wr8dbfOvCuZW8kbXz233d4 zG0uj2KYuOC7se73RUKw05Psi8CabFfLDV+4g5BqI9i5eoYYN7Dnq2QuDt2zCCSu 4iqtoHeMWGDGyM8Im02YXbyGdA== -----END CERTIFICATE-----Generated at Sun Apr 5 20:57:59 2026 by rpki-client