$ rpki-client -vvf rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft File: qE54NmnC-ZeE80T80yP8-ZHMQPs.mft (raw, json) Hash identifier: kJcwTV5h9oCrswBOL/dgAWqN9RHUjZYP93N98kVfHdo= Subject key identifier: FC:18:B0:FC:AA:CF:47:77:8A:8D:24:15:6F:98:C9:C5:E6:FD:85:7C Authority key identifier: A8:4E:78:36:69:C2:F9:97:84:F3:44:FC:D3:23:FC:F9:91:CC:40:FB Certificate issuer: /CN=A91604AC/serialNumber=A84E783669C2F99784F344FCD323FCF991CC40FB Certificate serial: 02AE Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft Manifest number: 02A1 Signing time: Mon 20 Apr 2026 21:53:14 +0000 Manifest this update: Mon 20 Apr 2026 21:53:13 +0000 Manifest next update: Mon 27 Apr 2026 21:53:13 +0000 Files and hashes: 1: qE54NmnC-ZeE80T80yP8-ZHMQPs.crl (hash: 22XjMxQmVOoqvel8qbbPvcDxQdbEQFDxiS9F3xwcZCQ=) 2: 11DD43BA80E411ED993FD824C4F9AE02.roa (hash: bd3gIZCv+az2HMEE1qH5nDncSnV/ovCr0VoqmgKdXrM=) 3: 348854286B8F11ED9B07DD15C4F9AE02.roa (hash: eNAYougzbuaZdGltWBPETvzcwoF3xnsDkRlib322zSY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.crl rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Apr 2026 21:53:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 686 (0x2ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91604AC, serialNumber=A84E783669C2F99784F344FCD323FCF991CC40FB Validity Not Before: Apr 20 21:53:13 2026 GMT Not After : Apr 27 21:53:13 2026 GMT Subject: CN=69e6a04a-3aac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:db:4a:5a:a8:ac:32:93:df:54:a8:14:2d:53: fd:c1:1c:6f:9c:2f:22:43:8f:32:0d:53:4a:70:37: 9c:a5:bb:01:bb:bf:8a:c6:40:a1:f1:c9:93:dd:c5: dc:d7:ee:ee:9c:64:f9:d9:82:6b:a9:9f:68:dd:7e: 90:d8:3e:e5:02:52:61:b0:50:85:a0:01:85:67:c7: 24:59:cd:f5:9c:5e:7d:45:66:5f:1a:d6:75:f4:42: a2:ba:a7:cd:55:51:38:6c:ba:d9:ab:08:c1:1e:c6: e8:d8:e2:6a:ad:e1:2f:52:af:eb:16:4c:2a:2a:8f: 83:26:b7:f8:f4:c3:91:97:35:a3:30:67:39:37:92: ec:a0:82:ee:bf:b4:1d:67:43:22:5d:9e:da:8f:3a: 96:37:b5:13:ac:ec:c3:f6:f4:98:95:62:1d:0d:59: 50:14:26:c6:07:8d:46:f1:f3:bc:84:c0:2e:a6:3f: 0c:93:78:55:fd:90:73:61:a7:81:9f:f3:53:92:1f: d1:e7:27:11:09:d8:c2:fd:f5:40:d5:ff:de:3d:d6: 91:a3:3f:ac:31:24:71:cb:3e:91:c8:69:63:a5:92: bc:7e:e7:ab:01:de:dd:eb:fb:9a:b9:2e:62:85:24: c2:85:34:49:29:4c:c7:ad:4e:9c:86:45:8a:22:48: ae:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:18:B0:FC:AA:CF:47:77:8A:8D:24:15:6F:98:C9:C5:E6:FD:85:7C X509v3 Authority Key Identifier: keyid:A8:4E:78:36:69:C2:F9:97:84:F3:44:FC:D3:23:FC:F9:91:CC:40:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:ed:94:eb:ed:d2:d9:bb:69:10:88:a3:67:20:ee:95:d1:a9: 71:36:7e:42:74:1f:49:7d:f5:f1:c1:c6:50:3f:74:ca:56:9d: 05:14:b5:51:42:5f:18:2e:51:70:4e:b1:b0:37:8d:a2:70:6e: 80:0c:4c:9f:94:1c:af:03:3d:db:b8:c7:d6:68:ca:b4:98:82: bc:0c:2f:ec:78:14:be:97:e8:84:62:e1:3f:97:c5:29:c9:e8: 86:5c:ec:76:02:78:9c:3a:54:69:74:40:e4:9b:43:6e:a9:58: 81:b3:4a:bb:cf:be:20:b0:d1:8f:97:40:2b:2b:2e:ea:30:1b: 4c:da:f4:44:f5:64:75:d7:47:1d:9c:ee:2b:9f:bb:cd:4a:14: 09:b7:5b:36:98:8e:b3:96:9b:45:2d:cc:99:e3:8d:3f:0f:38: 8e:ed:1f:e6:78:a4:f4:05:b9:84:30:db:3b:11:52:4f:06:4d: 9d:10:fa:d1:87:47:6f:76:e2:8b:d9:a9:85:3a:5e:66:41:7d: 06:55:3f:8e:3c:29:25:3f:50:3f:99:c2:ea:51:62:d8:a7:1d: fa:aa:f4:1a:9f:79:12:9f:d6:7b:ad:9d:ad:cb:25:f1:ed:13: c7:81:13:3d:d0:98:92:e0:88:d4:d5:b3:63:bb:b3:fc:d5:e9: 35:12:c5:d5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAq4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA0QUMxMTAvBgNVBAUTKEE4NEU3ODM2NjlDMkY5OTc4NEYzNDRGQ0QzMjNGQ0Y5 OTFDQzQwRkIwHhcNMjYwNDIwMjE1MzEzWhcNMjYwNDI3MjE1MzEzWjAYMRYwFAYD VQQDEw02OWU2YTA0YS0zYWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjNtKWqisMpPfVKgULVP9wRxvnC8iQ48yDVNKcDecpbsBu7+KxkCh8cmT3cXc 1+7unGT52YJrqZ9o3X6Q2D7lAlJhsFCFoAGFZ8ckWc31nF59RWZfGtZ19EKiuqfN VVE4bLrZqwjBHsbo2OJqreEvUq/rFkwqKo+DJrf49MORlzWjMGc5N5LsoILuv7Qd Z0MiXZ7ajzqWN7UTrOzD9vSYlWIdDVlQFCbGB41G8fO8hMAupj8Mk3hV/ZBzYaeB n/NTkh/R5ycRCdjC/fVA1f/ePdaRoz+sMSRxyz6RyGljpZK8fuerAd7d6/uauS5i hSTChTRJKUzHrU6chkWKIkiubQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPwYsPyq z0d3io0kFW+YycXm/YV8MB8GA1UdIwQYMBaAFKhOeDZpwvmXhPNE/NMj/PmRzED7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDRBQy8zNEJFQzVGNDQ0 NEMxMUVEQkRBOTEyN0NDNEY5QUUwMi9xRTU0Tm1uQy1aZUU4MFQ4MHlQOC1aSE1R UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3FFNTRObW5DLVplRTgwVDgweVA4LVpITVFQcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDRBQy8zNEJFQzVGNDQ0NEMxMUVEQkRBOTEyN0NDNEY5QUUwMi9xRTU0Tm1uQy1a ZUU4MFQ4MHlQOC1aSE1RUHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAju2U6+3S2btpEIijZyDuldGpcTZ+QnQfSX318cHGUD90yladBRS1UUJfGC5R cE6xsDeNonBugAxMn5QcrwM927jH1mjKtJiCvAwv7HgUvpfohGLhP5fFKcnohlzs dgJ4nDpUaXRA5JtDbqlYgbNKu8++ILDRj5dAKysu6jAbTNr0RPVkdddHHZzuK5+7 zUoUCbdbNpiOs5abRS3MmeONPw84ju0f5nik9AW5hDDbOxFSTwZNnRD60YdHb3bi i9mphTpeZkF9BlU/jjwpJT9QP5nC6lFi2Kcd+qr0Gp95Ep/We62drcsl8e0Tx4ET PdCYkuCI1NWzY7uz/NXpNRLF1Q== -----END CERTIFICATE-----Generated at Wed Apr 22 00:08:30 2026 by rpki-client