$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft File: sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft (raw, json) Hash identifier: EerHNoVlou68jSqtW//0cl7DY+uUQwZpee02DYoJ+i0= Subject key identifier: FE:A5:3B:EC:03:3F:95:8F:70:77:A2:C7:7B:9C:2D:A5:1C:2E:36:0F Authority key identifier: B2:A2:5D:DE:1A:9E:C9:1B:59:98:6A:53:2F:78:83:54:36:18:32:48 Certificate issuer: /CN=A91BC966/serialNumber=B2A25DDE1A9EC91B59986A532F78835436183248 Certificate serial: 0CCE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqJd3hqeyRtZmGpTL3iDVDYYMkg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft Manifest number: 0C99 Signing time: Sat 04 Apr 2026 18:27:59 +0000 Manifest this update: Sat 04 Apr 2026 18:27:59 +0000 Manifest next update: Sat 11 Apr 2026 18:27:59 +0000 Files and hashes: 1: sqJd3hqeyRtZmGpTL3iDVDYYMkg.crl (hash: 4itutKz510kkaA+NzKVMnoG1gJqOY5R0Bv3TEaiciXI=) 2: 5DA849821C1211EA819EA46EC4F9AE02.roa (hash: eCHx5TEwPytpGbIBlZulCq7A1nRaBvbKK495Pm+3Ngg=) 3: A6A53FA2D67E11EEAA2CA218C4F9AE02.roa (hash: BRmPmtc5QBOF2VogbiXT+Z/yISNL/WKoFANPMdmFsXw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.crl rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqJd3hqeyRtZmGpTL3iDVDYYMkg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 18:27:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3278 (0xcce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC966, serialNumber=B2A25DDE1A9EC91B59986A532F78835436183248 Validity Not Before: Apr 4 18:27:59 2026 GMT Not After : Apr 11 18:27:59 2026 GMT Subject: CN=69d1582f-3ba8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:33:e2:52:28:81:53:7e:ad:b4:1a:05:a3:53: 4a:df:43:98:d2:f4:70:14:d5:92:83:5f:cd:49:8e: 2e:55:34:49:d1:92:29:33:7c:ef:9c:35:31:8f:31: 81:9f:20:c5:54:be:3d:82:20:48:ce:2e:52:da:98: d7:80:97:df:2c:cc:b6:fc:67:ef:35:b4:a9:c7:9a: 77:a4:19:15:5d:70:17:8e:cb:9d:e6:28:01:e0:8c: 58:35:a5:2f:cc:59:d2:3f:35:02:76:95:7e:27:f0: 5a:90:30:3f:17:a3:2d:84:38:da:c6:df:dc:f5:9e: 02:f4:6d:48:13:91:07:26:6c:e9:6f:54:f0:71:0c: 84:b1:64:0e:f0:60:9d:6c:c6:6d:02:79:15:1e:b3: e1:7f:ee:28:c6:2a:e8:a6:91:db:b0:f4:fb:04:ff: e2:f5:92:07:2b:c4:19:cc:9d:0b:2b:4b:31:ae:e0: 31:44:a0:41:8c:87:15:7b:6b:a8:ee:34:eb:a0:e2: 6f:78:34:34:87:a3:b2:2e:2b:df:af:9b:18:9b:32: e8:93:0e:20:8b:12:b9:20:d4:3d:69:ea:95:77:64: df:46:08:76:24:bd:4c:bc:60:bd:75:fe:50:0d:70: 1e:b9:5e:86:d2:c7:97:80:19:8f:3f:a2:df:2b:43: 17:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:A5:3B:EC:03:3F:95:8F:70:77:A2:C7:7B:9C:2D:A5:1C:2E:36:0F X509v3 Authority Key Identifier: keyid:B2:A2:5D:DE:1A:9E:C9:1B:59:98:6A:53:2F:78:83:54:36:18:32:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqJd3hqeyRtZmGpTL3iDVDYYMkg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:87:f9:0f:8c:83:a7:06:bc:4e:da:1a:05:8d:09:8e:6c:7e: 71:7e:5d:89:a3:c4:bf:c2:86:db:e1:1b:99:ac:e1:2b:06:e9: 1b:c9:0d:de:25:31:2b:8b:b9:b4:ed:da:8f:be:63:09:36:bc: 40:c3:08:88:c1:d6:f2:1e:e3:a1:7e:df:57:d9:40:00:d2:26: c5:6c:b2:a3:1d:bc:35:ad:dc:07:13:3e:4c:43:da:df:e0:64: 92:d5:bc:a5:da:82:ab:fc:0e:a7:81:59:49:9d:b7:93:a7:84: d1:1b:9b:17:4e:74:fe:22:b8:c6:2b:4e:b8:4f:36:0f:fe:18: 3c:06:55:66:32:86:25:e9:df:82:0b:20:0c:27:a5:38:6e:33: d9:bf:2f:24:69:18:82:d9:52:bd:9b:ce:be:ae:0e:83:0c:5c: 71:57:ed:f5:39:cc:7b:ec:52:f3:ff:28:b3:e7:40:e8:6a:73: e7:65:03:f8:26:81:e9:96:25:09:9d:4d:e8:71:07:00:f1:15: 84:95:a6:a6:71:86:19:89:e9:06:83:8d:61:2f:ef:a6:a2:66: c2:1f:83:be:6f:b2:01:55:64:0d:2e:aa:5b:04:d9:8a:da:b5: 52:57:ba:4d:d1:97:56:84:2c:3d:59:0c:77:ec:dc:b3:83:60: aa:40:6d:e6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM5NjYxMTAvBgNVBAUTKEIyQTI1RERFMUE5RUM5MUI1OTk4NkE1MzJGNzg4MzU0 MzYxODMyNDgwHhcNMjYwNDA0MTgyNzU5WhcNMjYwNDExMTgyNzU5WjAYMRYwFAYD VQQDEw02OWQxNTgyZi0zYmE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuzPiUiiBU36ttBoFo1NK30OY0vRwFNWSg1/NSY4uVTRJ0ZIpM3zvnDUxjzGB nyDFVL49giBIzi5S2pjXgJffLMy2/GfvNbSpx5p3pBkVXXAXjsud5igB4IxYNaUv zFnSPzUCdpV+J/BakDA/F6MthDjaxt/c9Z4C9G1IE5EHJmzpb1TwcQyEsWQO8GCd bMZtAnkVHrPhf+4oxiroppHbsPT7BP/i9ZIHK8QZzJ0LK0sxruAxRKBBjIcVe2uo 7jTroOJveDQ0h6OyLivfr5sYmzLokw4gixK5INQ9aeqVd2TfRgh2JL1MvGC9df5Q DXAeuV6G0seXgBmPP6LfK0MXxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP6lO+wD P5WPcHeix3ucLaUcLjYPMB8GA1UdIwQYMBaAFLKiXd4anskbWZhqUy94g1Q2GDJI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzk2Ni9BMTk1MkJBMjFD MTExMUVBQjZDM0M3NkRDNEY5QUUwMi9zcUpkM2hxZXlSdFptR3BUTDNpRFZEWVlN a2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NxSmQzaHFleVJ0Wm1HcFRMM2lEVkRZWU1rZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Qzk2Ni9BMTk1MkJBMjFDMTExMUVBQjZDM0M3NkRDNEY5QUUwMi9zcUpkM2hxZXlS dFptR3BUTDNpRFZEWVlNa2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZof5D4yDpwa8TtoaBY0Jjmx+cX5diaPEv8KG2+EbmazhKwbpG8kN3iUxK4u5 tO3aj75jCTa8QMMIiMHW8h7joX7fV9lAANImxWyyox28Na3cBxM+TEPa3+BkktW8 pdqCq/wOp4FZSZ23k6eE0RubF050/iK4xitOuE82D/4YPAZVZjKGJenfggsgDCel OG4z2b8vJGkYgtlSvZvOvq4OgwxccVft9TnMe+xS8/8os+dA6Gpz52UD+CaB6ZYl CZ1N6HEHAPEVhJWmpnGGGYnpBoONYS/vpqJmwh+Dvm+yAVVkDS6qWwTZitq1Ule6 TdGXVoQsPVkMd+zcs4NgqkBt5g== -----END CERTIFICATE-----Generated at Sun Apr 5 19:58:49 2026 by rpki-client