$ rpki-client -vvf rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft File: QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft (raw, json) Hash identifier: xkSUteqm1sWi1ROlGM0eO691GgnbZpNObPo79p+xFHI= Subject key identifier: CA:29:36:45:79:23:8B:86:36:DE:09:3A:1E:BC:35:20:AD:23:6D:BB Authority key identifier: 42:B7:49:E1:EC:DB:E0:30:74:7F:8C:B5:74:7F:2D:73:A5:E4:24:54 Certificate issuer: /CN=A915D6C2/serialNumber=42B749E1ECDBE030747F8CB5747F2D73A5E42454 Certificate serial: 0517 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft Manifest number: 0506 Signing time: Sun 26 Apr 2026 23:38:19 +0000 Manifest this update: Sun 26 Apr 2026 23:38:19 +0000 Manifest next update: Sun 03 May 2026 23:38:19 +0000 Files and hashes: 1: QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.crl (hash: DXQjgh57H+IHOS5YKJbMBwTGcbm/YeG6QtSOZsrklXc=) 2: 5808B946B73A11ED8A2A8964C4F9AE02.roa (hash: l82fYq1x4u49vmBmNnG130HVCjkEDSzOMLfbwYG7C8U=) 3: 58A4A3E2B73A11ED8A2A8964C4F9AE02.roa (hash: yq/8yNnq6a4ASHoRBlMWzxoMD3auQ65vuNtbtSiVuBA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.crl rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 23:38:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1303 (0x517) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D6C2, serialNumber=42B749E1ECDBE030747F8CB5747F2D73A5E42454 Validity Not Before: Apr 26 23:38:19 2026 GMT Not After : May 3 23:38:19 2026 GMT Subject: CN=69eea1eb-212b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f1:81:1f:8f:0e:5e:6f:01:a3:61:67:93:58: ed:0d:2d:3a:e2:8b:e1:7d:60:e6:0d:1d:50:50:ae: b4:46:a5:15:31:19:d9:32:6b:3e:91:47:00:8c:df: 99:58:b6:bc:7c:d5:c3:c9:8e:03:71:8d:5d:75:0a: 36:7e:e0:a3:1d:b5:09:69:db:09:b3:5e:50:79:cd: 96:25:9f:5f:48:59:57:31:52:8f:8d:67:5c:b7:b8: 01:84:c4:6c:19:e5:ba:e0:a8:6d:38:ce:04:a6:5f: 9a:7a:03:a7:de:47:ff:1d:ba:72:b9:35:ee:13:fa: 3a:56:53:b5:2b:a9:2c:9f:c4:7a:6a:fb:18:20:f2: df:69:d5:09:c2:08:f4:4e:e1:0b:bf:46:29:07:1b: ac:ec:78:d4:3d:54:b9:cb:0b:c1:90:1b:1a:10:46: 8b:cb:97:11:26:5c:69:4d:4d:42:f5:6b:3a:1e:dd: 86:49:dd:96:54:eb:cd:da:6d:9a:3c:30:93:3a:40: 8e:58:a5:21:f5:fb:1d:da:68:cd:88:90:b3:0c:57: ed:bf:8c:2f:58:e9:21:ee:9c:26:29:05:36:3d:7b: e8:f1:65:75:69:f9:58:f3:c1:92:92:81:5f:ac:0a: b0:c5:ce:9e:b6:2a:5a:db:53:bb:30:89:be:25:a5: 1d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:29:36:45:79:23:8B:86:36:DE:09:3A:1E:BC:35:20:AD:23:6D:BB X509v3 Authority Key Identifier: keyid:42:B7:49:E1:EC:DB:E0:30:74:7F:8C:B5:74:7F:2D:73:A5:E4:24:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:1e:48:f4:e6:bc:4b:40:4e:0d:19:3e:88:b9:e5:a6:32:9f: 49:1c:fc:a9:1b:b4:f5:a8:13:1a:d9:87:e2:f7:27:97:55:5c: 48:06:41:6d:79:5b:14:41:73:b3:87:6a:a7:09:34:ea:0a:e7: cf:8e:1c:35:8b:ea:e5:0a:d0:f4:94:b6:ca:07:00:99:87:c6: 6c:f6:d1:20:d2:d8:ed:af:1f:5e:0d:0c:02:cd:36:63:5e:da: 5c:8e:7b:ae:77:69:ba:fd:37:50:33:d1:4a:e0:71:7d:71:f1: e9:5a:8c:75:ab:5f:52:4c:c1:ac:50:a9:83:7d:06:80:b4:70: d4:ff:9b:5b:f9:2a:e2:e2:0e:90:2c:64:b6:ee:69:b1:50:36: 11:1f:7a:39:24:f5:26:21:fe:07:84:09:07:78:69:5f:d9:6c: 80:f2:fd:78:e2:67:7d:4c:91:20:9c:d5:57:b1:5e:2e:3b:6c: 95:7a:84:4e:5e:8e:f8:f3:7a:e5:de:cd:83:9c:48:f2:61:19: ba:9a:9a:1e:b8:0f:67:bb:7a:50:b0:72:25:e9:3d:cb:84:39: 0b:68:a2:87:2d:0b:ed:a8:fb:f4:bd:6a:5b:a6:8b:4d:72:60: a5:6a:e0:be:bb:7c:49:2f:af:3a:f9:95:e7:ae:2d:63:a0:1d: bc:9e:04:6b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBRcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ2QzIxMTAvBgNVBAUTKDQyQjc0OUUxRUNEQkUwMzA3NDdGOENCNTc0N0YyRDcz QTVFNDI0NTQwHhcNMjYwNDI2MjMzODE5WhcNMjYwNTAzMjMzODE5WjAYMRYwFAYD VQQDEw02OWVlYTFlYi0yMTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlPGBH48OXm8Bo2Fnk1jtDS064ovhfWDmDR1QUK60RqUVMRnZMms+kUcAjN+Z WLa8fNXDyY4DcY1ddQo2fuCjHbUJadsJs15Qec2WJZ9fSFlXMVKPjWdct7gBhMRs GeW64KhtOM4Epl+aegOn3kf/HbpyuTXuE/o6VlO1K6ksn8R6avsYIPLfadUJwgj0 TuELv0YpBxus7HjUPVS5ywvBkBsaEEaLy5cRJlxpTU1C9Ws6Ht2GSd2WVOvN2m2a PDCTOkCOWKUh9fsd2mjNiJCzDFftv4wvWOkh7pwmKQU2PXvo8WV1aflY88GSkoFf rAqwxc6etipa21O7MIm+JaUduwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMopNkV5 I4uGNt4JOh68NSCtI227MB8GA1UdIwQYMBaAFEK3SeHs2+AwdH+MtXR/LXOl5CRU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDZDMi9GOUM0NkZBQzUz QTIxMUVDOUQ1RTYxNURDNEY5QUUwMi9RcmRKNGV6YjREQjBmNHkxZEg4dGM2WGtK RlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FyZEo0ZXpiNERCMGY0eTFkSDh0YzZYa0pGUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDZDMi9GOUM0NkZBQzUzQTIxMUVDOUQ1RTYxNURDNEY5QUUwMi9RcmRKNGV6YjRE QjBmNHkxZEg4dGM2WGtKRlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARR5I9Oa8S0BODRk+iLnlpjKfSRz8qRu09agTGtmH4vcnl1VcSAZBbXlbFEFz s4dqpwk06grnz44cNYvq5QrQ9JS2ygcAmYfGbPbRINLY7a8fXg0MAs02Y17aXI57 rndpuv03UDPRSuBxfXHx6VqMdatfUkzBrFCpg30GgLRw1P+bW/kq4uIOkCxktu5p sVA2ER96OST1JiH+B4QJB3hpX9lsgPL9eOJnfUyRIJzVV7FeLjtslXqETl6O+PN6 5d7Ng5xI8mEZupqaHrgPZ7t6ULByJek9y4Q5C2iihy0L7aj79L1qW6aLTXJgpWrg vrt8SS+vOvmV564tY6AdvJ4Eaw== -----END CERTIFICATE-----Generated at Tue Apr 28 22:16:35 2026 by rpki-client