$ rpki-client -vvf rpki.apnic.net/member_repository/A9172506/B04908CE6EDE11EFAAC2CB5DC4F9AE02/QrsPPBhH5li75BQYSUzonOjjRIg.mft File: QrsPPBhH5li75BQYSUzonOjjRIg.mft (raw, json) Hash identifier: GBMC/K4hRadCn+olbpoCKEXYPVcBv96wo7WLpoWHJ4M= Subject key identifier: 88:00:7F:EC:E2:7A:0C:22:3E:4A:4D:05:F3:E7:6E:13:13:28:3C:26 Authority key identifier: 42:BB:0F:3C:18:47:E6:58:BB:E4:14:18:49:4C:E8:9C:E8:E3:44:88 Certificate issuer: /CN=A9172506/serialNumber=42BB0F3C1847E658BBE41418494CE89CE8E34488 Certificate serial: 0136 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrsPPBhH5li75BQYSUzonOjjRIg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172506/B04908CE6EDE11EFAAC2CB5DC4F9AE02/QrsPPBhH5li75BQYSUzonOjjRIg.mft Manifest number: 0132 Signing time: Tue 21 Apr 2026 05:19:35 +0000 Manifest this update: Tue 21 Apr 2026 05:19:35 +0000 Manifest next update: Tue 28 Apr 2026 05:19:35 +0000 Files and hashes: 1: QrsPPBhH5li75BQYSUzonOjjRIg.crl (hash: vlAG7m8k3XbzFDDoPXORVjijB0XhlmUDJJcqfdUQ8XI=) 2: DD75C9BC6EDF11EF90C49A5FC4F9AE02.roa (hash: GxPDZkNh8z2WUss9dJUvSPDera09jYCHZ5i3DQqj99E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172506/B04908CE6EDE11EFAAC2CB5DC4F9AE02/QrsPPBhH5li75BQYSUzonOjjRIg.crl rsync://rpki.apnic.net/member_repository/A9172506/B04908CE6EDE11EFAAC2CB5DC4F9AE02/QrsPPBhH5li75BQYSUzonOjjRIg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrsPPBhH5li75BQYSUzonOjjRIg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 05:19:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 310 (0x136) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172506, serialNumber=42BB0F3C1847E658BBE41418494CE89CE8E34488 Validity Not Before: Apr 21 05:19:35 2026 GMT Not After : Apr 28 05:19:35 2026 GMT Subject: CN=69e708e7-32b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2f:c9:f8:df:05:51:14:c2:d8:48:cd:da:30: aa:ec:cf:87:59:6e:8d:32:2a:5d:ea:ca:a9:c8:e6: a7:89:19:c1:48:36:14:9d:d5:2b:87:a1:9b:20:ac: df:20:89:e8:97:7c:a5:b3:10:55:12:b0:6b:63:bb: cc:4f:ec:e1:68:43:46:ef:43:52:d3:b8:1b:31:2c: 16:a0:3c:9a:43:5f:c9:e9:d1:19:1e:d9:df:b5:eb: 50:e4:8a:51:59:f1:07:6d:1e:85:3f:b6:76:91:6a: 60:79:72:80:32:1f:a3:8a:51:e2:95:e0:df:9c:6e: 8e:87:f7:19:3a:7b:60:a2:5a:56:eb:af:f0:b1:27: 4d:03:0c:65:48:a5:8b:d6:df:d2:0e:9a:25:96:09: 13:65:e2:f3:6f:ab:f3:3d:7b:26:f7:13:2c:c7:b0: 64:52:66:de:62:3a:5a:89:94:f0:b5:22:ad:08:55: 77:cf:cf:81:77:82:c8:40:be:cf:30:ea:bc:34:0d: fd:46:2b:1d:0e:80:8b:61:c6:34:e3:c7:70:a3:b6: 09:dd:76:9c:cb:9f:bb:1f:07:88:2c:ed:69:2d:af: e7:e6:73:f2:0f:ac:d3:18:26:70:93:85:e5:41:1f: c1:87:a9:6a:28:5b:56:91:f4:5c:16:e1:82:7d:3d: 54:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:00:7F:EC:E2:7A:0C:22:3E:4A:4D:05:F3:E7:6E:13:13:28:3C:26 X509v3 Authority Key Identifier: keyid:42:BB:0F:3C:18:47:E6:58:BB:E4:14:18:49:4C:E8:9C:E8:E3:44:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172506/B04908CE6EDE11EFAAC2CB5DC4F9AE02/QrsPPBhH5li75BQYSUzonOjjRIg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrsPPBhH5li75BQYSUzonOjjRIg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172506/B04908CE6EDE11EFAAC2CB5DC4F9AE02/QrsPPBhH5li75BQYSUzonOjjRIg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:61:23:14:39:84:9d:88:bf:29:1c:16:00:2b:34:28:96:e3: e3:d1:0d:3b:56:ba:b0:ba:92:f8:a9:9c:d8:5b:de:c6:73:37: 61:da:f9:e7:c9:3b:fe:69:6b:fd:9c:52:6a:2e:68:82:bc:79: d5:45:22:8a:d0:9e:38:94:dd:ba:ea:29:8e:cc:5d:92:45:37: c6:65:e4:b5:ed:63:8a:0d:32:56:e1:34:9a:56:8f:88:02:49: 01:98:75:f0:fd:6d:50:ac:f5:ba:e4:8e:c3:83:ee:f5:5f:c7: fd:84:98:45:69:72:86:82:45:8b:7b:b2:1f:81:90:21:72:75: 31:64:f4:73:b4:7e:1e:b2:46:d8:ff:02:ca:68:c8:cc:1b:ee: c9:90:94:6c:04:5a:94:b9:a3:e7:fa:48:ec:3c:8d:68:e7:c0: d5:95:6b:9c:b3:c5:0b:a0:0f:c2:09:86:0e:95:e5:86:28:5c: 7e:72:71:b4:dc:8b:0d:ec:86:10:a1:e2:be:f3:28:29:1b:5c: 19:71:0c:05:62:48:3a:d4:e4:35:92:17:7a:8e:34:56:91:5e: 32:62:c9:91:66:3d:b7:a2:1f:9c:67:88:c6:5d:97:87:50:fa: 64:8c:4a:3c:09:f9:b4:35:fa:ef:d7:db:ef:07:ef:fa:3a:d1: 10:e4:95:2b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI1MDYxMTAvBgNVBAUTKDQyQkIwRjNDMTg0N0U2NThCQkU0MTQxODQ5NENFODlD RThFMzQ0ODgwHhcNMjYwNDIxMDUxOTM1WhcNMjYwNDI4MDUxOTM1WjAYMRYwFAYD VQQDEw02OWU3MDhlNy0zMmI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArS/J+N8FURTC2EjN2jCq7M+HWW6NMipd6sqpyOaniRnBSDYUndUrh6GbIKzf IInol3ylsxBVErBrY7vMT+zhaENG70NS07gbMSwWoDyaQ1/J6dEZHtnftetQ5IpR WfEHbR6FP7Z2kWpgeXKAMh+jilHileDfnG6Oh/cZOntgolpW66/wsSdNAwxlSKWL 1t/SDpollgkTZeLzb6vzPXsm9xMsx7BkUmbeYjpaiZTwtSKtCFV3z8+Bd4LIQL7P MOq8NA39RisdDoCLYcY048dwo7YJ3Xacy5+7HweILO1pLa/n5nPyD6zTGCZwk4Xl QR/Bh6lqKFtWkfRcFuGCfT1UOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIgAf+zi egwiPkpNBfPnbhMTKDwmMB8GA1UdIwQYMBaAFEK7DzwYR+ZYu+QUGElM6Jzo40SI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjUwNi9CMDQ5MDhDRTZF REUxMUVGQUFDMkNCNURDNEY5QUUwMi9RcnNQUEJoSDVsaTc1QlFZU1V6b25PampS SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Fyc1BQQmhINWxpNzVCUVlTVXpvbk9qalJJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MjUwNi9CMDQ5MDhDRTZFREUxMUVGQUFDMkNCNURDNEY5QUUwMi9RcnNQUEJoSDVs aTc1QlFZU1V6b25PampSSWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADWEjFDmEnYi/KRwWACs0KJbj49ENO1a6sLqS+Kmc2FvexnM3Ydr558k7/mlr /ZxSai5ogrx51UUiitCeOJTduuopjsxdkkU3xmXkte1jig0yVuE0mlaPiAJJAZh1 8P1tUKz1uuSOw4Pu9V/H/YSYRWlyhoJFi3uyH4GQIXJ1MWT0c7R+HrJG2P8CymjI zBvuyZCUbARalLmj5/pI7DyNaOfA1ZVrnLPFC6APwgmGDpXlhihcfnJxtNyLDeyG EKHivvMoKRtcGXEMBWJIOtTkNZIXeo40VpFeMmLJkWY9t6IfnGeIxl2Xh1D6ZIxK PAn5tDX679fb7wfv+jrREOSVKw== -----END CERTIFICATE-----Generated at Wed Apr 22 03:36:14 2026 by rpki-client