$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDCF5/5996712CF1E311F0BDEC72B5416F56BC/QwlkOa1FN43F5xIj-HJhJ7EZZe0.mft File: QwlkOa1FN43F5xIj-HJhJ7EZZe0.mft (raw, json) Hash identifier: aFQrTWKMJ15UtY8qfo6Fmq0ApFrBaE0MFCj0zlufiDI= Subject key identifier: 98:4D:29:C2:D6:7F:04:78:A4:FF:6C:21:97:00:04:89:42:2E:64:12 Authority key identifier: 43:09:64:39:AD:45:37:8D:C5:E7:12:23:F8:72:61:27:B1:19:65:ED Certificate issuer: /CN=A91CDCF5/serialNumber=43096439AD45378DC5E71223F8726127B11965ED Certificate serial: 30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QwlkOa1FN43F5xIj-HJhJ7EZZe0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDCF5/5996712CF1E311F0BDEC72B5416F56BC/QwlkOa1FN43F5xIj-HJhJ7EZZe0.mft Manifest number: 2E Signing time: Sun 05 Apr 2026 08:02:38 +0000 Manifest this update: Sun 05 Apr 2026 08:02:38 +0000 Manifest next update: Sun 12 Apr 2026 08:02:38 +0000 Files and hashes: 1: QwlkOa1FN43F5xIj-HJhJ7EZZe0.crl (hash: tXAzgExDtYzjJzuKpxTKAQ2OVy7S0C95mi12mfMwHVY=) 2: D735EAACF1EF11F0A394FA90446F56BC.roa (hash: Ys/2qaSppEBebOfLXvRLlfClHojsR1MQFiAQ4UPY7vM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDCF5/5996712CF1E311F0BDEC72B5416F56BC/QwlkOa1FN43F5xIj-HJhJ7EZZe0.crl rsync://rpki.apnic.net/member_repository/A91CDCF5/5996712CF1E311F0BDEC72B5416F56BC/QwlkOa1FN43F5xIj-HJhJ7EZZe0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QwlkOa1FN43F5xIj-HJhJ7EZZe0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 08:02:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48 (0x30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDCF5, serialNumber=43096439AD45378DC5E71223F8726127B11965ED Validity Not Before: Apr 5 08:02:38 2026 GMT Not After : Apr 12 08:02:38 2026 GMT Subject: CN=69d2171e-c9cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:24:e5:d8:eb:b0:da:c2:67:7c:ab:50:57:47: 8c:56:2a:0a:a7:ae:d6:44:9d:0e:f4:21:04:7f:80: dc:7b:17:84:29:d3:b9:52:28:12:ab:6c:d0:4b:65: 22:d4:cf:66:4f:a3:fe:50:41:79:87:92:3a:b6:b7: 11:64:47:f8:3e:22:72:25:e4:9c:1b:09:87:02:22: 30:ad:2e:08:54:79:27:46:ea:9c:84:6f:f8:49:0c: ab:c6:45:fd:c4:23:a6:f2:a5:69:10:13:7b:bf:c1: 02:1f:ba:00:5e:bf:a4:fb:6b:34:b4:52:00:08:86: fb:fb:02:d0:fc:f4:0d:aa:7d:81:49:8a:18:66:34: c7:b0:85:22:b8:17:8f:51:12:94:cb:28:db:b3:25: fc:7b:73:f5:7a:17:8d:01:66:66:8e:d1:9d:4e:d5: 2c:c5:0d:13:db:5c:88:59:a6:6e:61:eb:55:94:81: b1:ed:63:80:b7:52:2c:59:25:f0:08:7e:f5:7f:6b: a9:b6:a0:61:fc:b8:ed:98:02:60:f4:54:ba:16:b3: df:1f:6c:2b:4f:af:34:67:a0:fd:5d:6e:5b:e0:7b: fd:90:a2:1c:82:b7:57:48:cf:1c:20:7e:ca:20:05: 45:b1:a0:0f:b9:ff:a5:d4:e5:8d:f2:29:f6:85:55: 7b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:4D:29:C2:D6:7F:04:78:A4:FF:6C:21:97:00:04:89:42:2E:64:12 X509v3 Authority Key Identifier: keyid:43:09:64:39:AD:45:37:8D:C5:E7:12:23:F8:72:61:27:B1:19:65:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDCF5/5996712CF1E311F0BDEC72B5416F56BC/QwlkOa1FN43F5xIj-HJhJ7EZZe0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QwlkOa1FN43F5xIj-HJhJ7EZZe0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDCF5/5996712CF1E311F0BDEC72B5416F56BC/QwlkOa1FN43F5xIj-HJhJ7EZZe0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:40:57:72:94:6f:32:f0:28:9d:0f:99:af:7e:99:56:b2:9e: d4:9b:86:94:24:10:0b:eb:d3:d0:42:b2:ad:3f:7e:3c:2a:d8: 06:34:f0:22:eb:cc:3c:d9:8d:18:73:32:42:54:5e:f5:56:61: 75:f3:06:fb:fa:a7:0a:21:0b:34:2c:43:bf:1a:4f:88:6e:43: 4f:21:25:49:07:0a:37:8c:74:01:2e:1f:f9:ac:ea:39:b9:72: 83:93:a5:bf:62:5c:41:6b:c6:fe:1f:6b:74:a1:18:fd:fe:38: da:79:4b:ad:58:7d:03:b8:30:45:b9:63:3c:7a:a3:f5:2d:7e: 39:2c:fb:6f:73:4f:a3:01:b9:d5:6b:19:9e:41:05:0b:58:5f: 0f:b5:41:39:d4:3f:5e:61:ad:ba:cc:de:b5:0c:7b:38:61:3b: 6a:2d:bc:8a:8a:4f:67:fd:46:48:95:b4:b6:98:50:64:7e:ca: ea:86:e8:26:98:22:d7:58:3c:30:26:3f:c0:48:2c:41:34:1b: 95:ef:43:69:36:d4:12:6b:fd:d0:f8:85:fe:ff:19:14:de:d6: 32:d1:a7:72:52:ff:7f:f7:60:6a:af:67:c6:bc:2e:b8:a1:b9: 4b:30:10:a9:ff:61:62:e4:a0:2e:fc:8a:c9:39:c0:4b:a3:27: 02:9d:ea:07 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBMDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RENGNTExMC8GA1UEBRMoNDMwOTY0MzlBRDQ1Mzc4REM1RTcxMjIzRjg3MjYxMjdC MTE5NjVFRDAeFw0yNjA0MDUwODAyMzhaFw0yNjA0MTIwODAyMzhaMBgxFjAUBgNV BAMTDTY5ZDIxNzFlLWM5Y2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1JOXY67Dawmd8q1BXR4xWKgqnrtZEnQ70IQR/gNx7F4Qp07lSKBKrbNBLZSLU z2ZPo/5QQXmHkjq2txFkR/g+InIl5JwbCYcCIjCtLghUeSdG6pyEb/hJDKvGRf3E I6bypWkQE3u/wQIfugBev6T7azS0UgAIhvv7AtD89A2qfYFJihhmNMewhSK4F49R EpTLKNuzJfx7c/V6F40BZmaO0Z1O1SzFDRPbXIhZpm5h61WUgbHtY4C3UixZJfAI fvV/a6m2oGH8uO2YAmD0VLoWs98fbCtPrzRnoP1dblvge/2QohyCt1dIzxwgfsog BUWxoA+5/6XU5Y3yKfaFVXuzAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUmE0pwtZ/ BHik/2whlwAEiUIuZBIwHwYDVR0jBBgwFoAUQwlkOa1FN43F5xIj+HJhJ7EZZe0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNEQ0Y1LzU5OTY3MTJDRjFF MzExRjBCREVDNzJCNTQxNkY1NkJDL1F3bGtPYTFGTjQzRjV4SWotSEpoSjdFWlpl MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUXdsa09hMUZONDNGNXhJai1ISmhKN0VaWmUwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNE Q0Y1LzU5OTY3MTJDRjFFMzExRjBCREVDNzJCNTQxNkY1NkJDL1F3bGtPYTFGTjQz RjV4SWotSEpoSjdFWlplMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBFQFdylG8y8CidD5mvfplWsp7Um4aUJBAL69PQQrKtP348KtgGNPAi68w82Y0Y czJCVF71VmF18wb7+qcKIQs0LEO/Gk+IbkNPISVJBwo3jHQBLh/5rOo5uXKDk6W/ YlxBa8b+H2t0oRj9/jjaeUutWH0DuDBFuWM8eqP1LX45LPtvc0+jAbnVaxmeQQUL WF8PtUE51D9eYa26zN61DHs4YTtqLbyKik9n/UZIlbS2mFBkfsrqhugmmCLXWDww Jj/ASCxBNBuV70NpNtQSa/3Q+IX+/xkU3tYy0adyUv9/92Bqr2fGvC64oblLMBCp /2Fi5KAu/IrJOcBLoycCneoH -----END CERTIFICATE-----Generated at Sun Apr 5 19:43:45 2026 by rpki-client