$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft File: qrDiti9jQ4lXMMBUiOf8TibFGmw.mft (raw, json) Hash identifier: KUZ8+2S35FubxykYJl/mH8j4SRtJ9i0MqygRfhiHWwU= Subject key identifier: DB:DE:78:E2:F9:96:5C:BF:AE:E1:A9:AE:8E:FA:2A:7C:2A:EB:90:9B Authority key identifier: AA:B0:E2:B6:2F:63:43:89:57:30:C0:54:88:E7:FC:4E:26:C5:1A:6C Certificate issuer: /CN=A91DCAE8/serialNumber=AAB0E2B62F6343895730C05488E7FC4E26C51A6C Certificate serial: 35A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft Manifest number: 3569 Signing time: Sat 04 Apr 2026 14:45:23 +0000 Manifest this update: Sat 04 Apr 2026 14:45:22 +0000 Manifest next update: Sat 11 Apr 2026 14:45:22 +0000 Files and hashes: 1: qrDiti9jQ4lXMMBUiOf8TibFGmw.crl (hash: gK8uXbrIeMDXjynp5nKf3LdYHfZwBobfPDfXdPkHsHw=) 2: 2D89110A9A5311EE9CB13140C4F9AE02.roa (hash: lYpkRD/vPCqBa7Vd4N6W0BGqOH9jxtp9EJocrqn7xs0=) 3: 006CE5442FBA11ECA05BB46EC4F9AE02.roa (hash: gGlyAExoFEUqT98bADKmBZWyQcG57UwG1nHtGghueEI=) 4: 56F533B4A63011EEA6054D52C4F9AE02.roa (hash: 0iMCnY3705MLKSQeDX6iv1qsWDcFTiwdaLS+CFP3lvY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.crl rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 14:45:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13732 (0x35a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCAE8, serialNumber=AAB0E2B62F6343895730C05488E7FC4E26C51A6C Validity Not Before: Apr 4 14:45:22 2026 GMT Not After : Apr 11 14:45:22 2026 GMT Subject: CN=69d12402-dc13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:be:f7:44:bc:d5:63:ab:74:4e:ee:b6:fe:df: 85:89:45:c6:27:96:38:92:50:66:79:94:13:56:59: 8a:2c:0c:29:cd:e5:97:21:8a:11:d3:9d:6e:a3:41: ca:65:fd:18:03:c2:fa:8c:c0:83:57:0d:a0:10:e9: ee:fc:37:97:82:e8:8c:d6:fc:d0:78:aa:83:8c:1f: 0a:60:b4:91:89:4c:e9:af:ed:fa:75:4b:3b:ab:a0: 94:cb:7a:8f:0c:58:9e:9f:31:e9:2c:2f:15:c8:5e: e1:80:4a:a8:11:04:0a:d5:87:35:e8:68:5a:a0:17: b6:f1:23:27:d3:1b:10:87:d7:e3:dc:c2:28:a0:d2: b2:01:81:a2:92:d9:6b:66:7a:c8:b3:5c:4f:87:54: 6c:ee:eb:3e:01:9e:35:66:e0:1d:ec:3f:19:71:06: ec:73:8c:c8:7d:5a:dc:b8:cc:77:8e:20:b7:db:3e: 56:2e:ef:1b:72:9e:c4:59:82:b4:26:97:31:f4:17: 04:31:1d:ce:44:88:10:23:e3:ea:4f:93:a7:36:5c: 1d:06:86:73:0a:82:fd:82:aa:86:ac:9f:0a:82:64: d9:a7:38:43:d3:ca:d8:87:e0:57:67:09:9e:3b:5f: df:fa:59:d7:b8:e2:85:43:b0:5b:97:54:11:6b:23: 62:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:DE:78:E2:F9:96:5C:BF:AE:E1:A9:AE:8E:FA:2A:7C:2A:EB:90:9B X509v3 Authority Key Identifier: keyid:AA:B0:E2:B6:2F:63:43:89:57:30:C0:54:88:E7:FC:4E:26:C5:1A:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:a3:f2:30:8e:fe:55:88:ef:f6:50:4d:e0:f6:67:0b:6e:ad: d1:2f:8a:3b:e7:0e:c9:0a:be:ca:ad:72:25:68:23:04:bf:30: 5f:ae:14:0d:e0:19:eb:e7:fd:71:d1:78:f1:6f:30:5f:b6:4d: 24:50:41:7f:da:ac:ee:ce:1f:0c:bb:4b:79:77:dd:0a:b3:3f: 54:1c:6d:a0:92:dd:b0:3b:d9:07:53:67:cf:90:9f:2e:77:c3: 81:4e:78:61:00:85:95:21:8c:64:96:b0:05:b7:86:67:fb:39: 6c:21:85:66:05:44:cb:06:42:7f:1c:46:4a:93:af:81:8d:fe: 26:69:7f:0e:4f:17:61:14:69:8b:e6:70:ce:12:fc:e7:10:26: 08:ed:51:5e:f2:49:70:55:51:0f:b1:5f:56:23:84:a8:a3:3f: 06:2d:28:7a:1c:bf:ae:d1:43:aa:f2:1f:72:8f:11:44:55:eb: 98:6b:a6:52:2f:fa:90:c9:55:56:02:03:8b:ab:17:0d:46:09: f2:32:b3:1f:27:99:6c:92:66:18:c4:bb:df:8a:c0:5b:c6:83: 84:c7:76:14:23:20:f0:24:73:4d:c7:91:85:bf:d1:03:3c:82: ed:45:23:ff:a5:cf:2d:22:c5:93:06:bd:ba:08:95:07:9b:ea: 9f:d1:ab:8e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNaQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENBRTgxMTAvBgNVBAUTKEFBQjBFMkI2MkY2MzQzODk1NzMwQzA1NDg4RTdGQzRF MjZDNTFBNkMwHhcNMjYwNDA0MTQ0NTIyWhcNMjYwNDExMTQ0NTIyWjAYMRYwFAYD VQQDEw02OWQxMjQwMi1kYzEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv773RLzVY6t0Tu62/t+FiUXGJ5Y4klBmeZQTVlmKLAwpzeWXIYoR051uo0HK Zf0YA8L6jMCDVw2gEOnu/DeXguiM1vzQeKqDjB8KYLSRiUzpr+36dUs7q6CUy3qP DFienzHpLC8VyF7hgEqoEQQK1Yc16GhaoBe28SMn0xsQh9fj3MIooNKyAYGiktlr ZnrIs1xPh1Rs7us+AZ41ZuAd7D8ZcQbsc4zIfVrcuMx3jiC32z5WLu8bcp7EWYK0 Jpcx9BcEMR3ORIgQI+PqT5OnNlwdBoZzCoL9gqqGrJ8KgmTZpzhD08rYh+BXZwme O1/f+lnXuOKFQ7Bbl1QRayNi5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNveeOL5 lly/ruGpro76Knwq65CbMB8GA1UdIwQYMBaAFKqw4rYvY0OJVzDAVIjn/E4mxRps MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0FFOC84QjZBREUxNDFE OTMxMUUyOTJDQjIzRjcwOEIwMkNEMi9xckRpdGk5alE0bFhNTUJVaU9mOFRpYkZH bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FyRGl0aTlqUTRsWE1NQlVpT2Y4VGliRkdtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0FFOC84QjZBREUxNDFEOTMxMUUyOTJDQjIzRjcwOEIwMkNEMi9xckRpdGk5alE0 bFhNTUJVaU9mOFRpYkZHbXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnqPyMI7+VYjv9lBN4PZnC26t0S+KO+cOyQq+yq1yJWgjBL8wX64UDeAZ6+f9 cdF48W8wX7ZNJFBBf9qs7s4fDLtLeXfdCrM/VBxtoJLdsDvZB1Nnz5CfLnfDgU54 YQCFlSGMZJawBbeGZ/s5bCGFZgVEywZCfxxGSpOvgY3+Jml/Dk8XYRRpi+ZwzhL8 5xAmCO1RXvJJcFVRD7FfViOEqKM/Bi0oehy/rtFDqvIfco8RRFXrmGumUi/6kMlV VgIDi6sXDUYJ8jKzHyeZbJJmGMS734rAW8aDhMd2FCMg8CRzTceRhb/RAzyC7UUj /6XPLSLFkwa9ugiVB5vqn9Grjg== -----END CERTIFICATE-----Generated at Sun Apr 5 19:58:43 2026 by rpki-client