$ rpki-client -vvf rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.mft File: qsOf2WPeFzHQ2j1BQeSh5GnphSM.mft (raw, json) Hash identifier: EyDU/rPJ3v1EJvBC6IRrTo+Cdca3fN1HkU2G3PjGEe0= Subject key identifier: 8C:7D:E3:41:73:80:4A:76:E1:FC:75:36:2A:68:1E:24:A9:2C:4E:F0 Authority key identifier: AA:C3:9F:D9:63:DE:17:31:D0:DA:3D:41:41:E4:A1:E4:69:E9:85:23 Certificate issuer: /CN=A91430D6/serialNumber=AAC39FD963DE1731D0DA3D4141E4A1E469E98523 Certificate serial: 93 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qsOf2WPeFzHQ2j1BQeSh5GnphSM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.mft Manifest number: 8E Signing time: Sun 05 Apr 2026 06:56:24 +0000 Manifest this update: Sun 05 Apr 2026 06:56:23 +0000 Manifest next update: Sun 12 Apr 2026 06:56:23 +0000 Files and hashes: 1: qsOf2WPeFzHQ2j1BQeSh5GnphSM.crl (hash: rs/JVZrB0VU8bnK9JoR/9nWR+EHjiG8SjFZLxeOaK4o=) 2: 85B52606F44311F089BA68A95F6F56BC.roa (hash: Ex29dRzH8LkzDGimmK0Vm7ywjUej+dvGo6cnaEEBQnY=) 3: 4DB1CEBCF44311F08E818BA85F6F56BC.roa (hash: 28TOJyzIUoQ+gHS12Ia30yDze1P2PrrZaNrtbhDyvQI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.crl rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qsOf2WPeFzHQ2j1BQeSh5GnphSM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 06:56:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 147 (0x93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91430D6, serialNumber=AAC39FD963DE1731D0DA3D4141E4A1E469E98523 Validity Not Before: Apr 5 06:56:23 2026 GMT Not After : Apr 12 06:56:23 2026 GMT Subject: CN=69d20798-d044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6e:19:7f:7a:9a:d1:73:aa:21:87:c6:c2:4a: 62:08:f5:c2:ed:52:f5:46:ab:af:ef:47:12:8a:7e: 87:80:9d:db:de:a7:8c:1e:b4:de:17:c7:a8:da:e9: 45:32:f8:fc:c2:bc:53:bc:41:2c:8b:8e:b6:e2:51: bf:d4:be:26:2f:15:44:10:28:c3:ec:f2:72:4f:44: 20:46:d5:99:70:61:e7:2f:f8:99:b9:f5:35:1c:5f: 0b:68:ce:58:48:7e:c8:ad:0a:54:eb:28:c6:2f:d0: fb:85:3d:32:cb:48:c6:ba:e1:f8:33:04:e3:c0:96: 74:5a:13:34:14:86:9b:f3:04:f0:52:4d:60:cf:7a: f6:6e:f3:54:20:9e:01:3f:58:c6:e0:4b:28:03:64: d8:d3:b0:70:30:48:43:f1:f8:a4:9e:0e:ba:d7:73: 91:67:2b:28:a4:58:76:92:47:32:23:73:af:09:70: 0d:de:a0:f6:62:06:a0:85:f1:3f:df:18:3e:36:94: 59:8e:93:3c:a2:88:0f:b3:7b:95:33:24:2d:2b:45: 7f:79:5c:83:45:ec:6f:29:48:e2:cb:aa:42:db:ac: a6:0d:73:9e:18:42:7c:4d:ec:1a:2a:3d:b4:eb:49: bd:9c:33:4a:cf:30:80:8c:8e:3e:93:ef:2c:bc:94: 7b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:7D:E3:41:73:80:4A:76:E1:FC:75:36:2A:68:1E:24:A9:2C:4E:F0 X509v3 Authority Key Identifier: keyid:AA:C3:9F:D9:63:DE:17:31:D0:DA:3D:41:41:E4:A1:E4:69:E9:85:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qsOf2WPeFzHQ2j1BQeSh5GnphSM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:6b:9e:cd:c6:69:34:8c:f0:96:df:66:f6:84:a9:26:77:cb: b3:e9:a3:0a:b1:f8:7a:2c:aa:bc:cf:02:d8:ee:6b:46:03:67: 98:a2:35:b4:34:e2:ef:c1:24:20:8e:f5:6b:e6:5a:d6:5e:7e: 5e:a1:04:2b:c0:e8:9e:8f:f3:a2:61:90:e0:ef:ab:4a:73:41: 51:6c:72:1a:78:1c:a9:01:88:e7:b5:33:20:43:96:33:18:5e: b9:fc:d4:60:bc:ae:ec:f6:32:e5:a6:7f:61:d6:6a:a5:1b:fc: e3:b2:5f:51:57:ba:45:a0:f6:6f:72:57:83:54:f2:d4:8b:b9: 3e:84:5c:41:e1:bd:a7:6e:b7:a0:a0:73:62:0b:b8:86:d4:05: f2:ec:a3:4e:56:ea:a1:5e:ef:09:25:18:eb:a5:6b:3e:c9:e1: d7:a4:18:0f:d4:88:41:59:be:f4:f9:9c:26:49:cd:9b:fb:59: 68:9f:62:9d:f1:fc:3a:77:14:37:a5:e9:16:f0:e9:dc:1c:2a: 35:f4:30:45:f5:36:78:73:6e:12:60:08:6d:39:3e:11:5a:d0: 30:e2:57:ec:5e:42:06:43:22:97:77:6d:1d:10:bb:02:4b:c8: 02:0a:f3:9f:79:13:22:e6:6c:df:ca:40:74:39:27:13:ce:2d: 7b:c3:32:c7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDMwRDYxMTAvBgNVBAUTKEFBQzM5RkQ5NjNERTE3MzFEMERBM0Q0MTQxRTRBMUU0 NjlFOTg1MjMwHhcNMjYwNDA1MDY1NjIzWhcNMjYwNDEyMDY1NjIzWjAYMRYwFAYD VQQDEw02OWQyMDc5OC1kMDQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv24Zf3qa0XOqIYfGwkpiCPXC7VL1Rquv70cSin6HgJ3b3qeMHrTeF8eo2ulF Mvj8wrxTvEEsi4624lG/1L4mLxVEECjD7PJyT0QgRtWZcGHnL/iZufU1HF8LaM5Y SH7IrQpU6yjGL9D7hT0yy0jGuuH4MwTjwJZ0WhM0FIab8wTwUk1gz3r2bvNUIJ4B P1jG4EsoA2TY07BwMEhD8fikng6613ORZysopFh2kkcyI3OvCXAN3qD2YgaghfE/ 3xg+NpRZjpM8oogPs3uVMyQtK0V/eVyDRexvKUjiy6pC26ymDXOeGEJ8TewaKj20 60m9nDNKzzCAjI4+k+8svJR7SwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIx940Fz gEp24fx1NipoHiSpLE7wMB8GA1UdIwQYMBaAFKrDn9lj3hcx0No9QUHkoeRp6YUj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzBENi8xN0YwNkEyNDVG RTAxMUYwQjJGRDhGNTdDNEY5QUUwMi9xc09mMldQZUZ6SFEyajFCUWVTaDVHbnBo U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3FzT2YyV1BlRnpIUTJqMUJRZVNoNUducGhTTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzBENi8xN0YwNkEyNDVGRTAxMUYwQjJGRDhGNTdDNEY5QUUwMi9xc09mMldQZUZ6 SFEyajFCUWVTaDVHbnBoU00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAzGuezcZpNIzwlt9m9oSpJnfLs+mjCrH4eiyqvM8C2O5rRgNnmKI1tDTi78Ek II71a+Za1l5+XqEEK8Dono/zomGQ4O+rSnNBUWxyGngcqQGI57UzIEOWMxheufzU YLyu7PYy5aZ/YdZqpRv847JfUVe6RaD2b3JXg1Ty1Iu5PoRcQeG9p263oKBzYgu4 htQF8uyjTlbqoV7vCSUY66VrPsnh16QYD9SIQVm+9PmcJknNm/tZaJ9infH8OncU N6XpFvDp3BwqNfQwRfU2eHNuEmAIbTk+EVrQMOJX7F5CBkMil3dtHRC7AkvIAgrz n3kTIuZs38pAdDknE84te8Myxw== -----END CERTIFICATE-----Generated at Mon Apr 6 13:56:54 2026 by rpki-client