$ rpki-client -vvf rpki.apnic.net/member_repository/A9172989/EFFDD714D6D511F0B06384B581D3641D/q2nHQCVImv1hdH_5M1sUfiC7JdQ.mft File: q2nHQCVImv1hdH_5M1sUfiC7JdQ.mft (raw, json) Hash identifier: mlhWFiWrQC4MCzGsxMNGDgmNenwnZprwZovnVFM4Rko= Subject key identifier: 15:D3:9F:06:72:83:45:02:2C:2B:BC:91:68:B6:69:0D:E3:82:D5:C2 Authority key identifier: AB:69:C7:40:25:48:9A:FD:61:74:7F:F9:33:5B:14:7E:20:BB:25:D4 Certificate issuer: /CN=A9172989/serialNumber=AB69C74025489AFD61747FF9335B147E20BB25D4 Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2nHQCVImv1hdH_5M1sUfiC7JdQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172989/EFFDD714D6D511F0B06384B581D3641D/q2nHQCVImv1hdH_5M1sUfiC7JdQ.mft Manifest number: 3E Signing time: Sun 05 Apr 2026 07:49:54 +0000 Manifest this update: Sun 05 Apr 2026 07:49:54 +0000 Manifest next update: Sun 12 Apr 2026 07:49:54 +0000 Files and hashes: 1: q2nHQCVImv1hdH_5M1sUfiC7JdQ.crl (hash: May7QAI/BL8l3gk3V3GJ5pnPiljDS7F368VPwxI04x4=) 2: 3CBCF5BED6D911F0B064CD5C85D3641D.roa (hash: IXLvInf2Y0MEbEfDAQVICvkTqoIWfV2KIzIJmKaveIA=) 3: 0FB60AEED6D711F085B1D0E884D3641D.roa (hash: zu2J1LZYT0w/3iHjLznZWECGOhdsg6myGC2fCgr+ku8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172989/EFFDD714D6D511F0B06384B581D3641D/q2nHQCVImv1hdH_5M1sUfiC7JdQ.crl rsync://rpki.apnic.net/member_repository/A9172989/EFFDD714D6D511F0B06384B581D3641D/q2nHQCVImv1hdH_5M1sUfiC7JdQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2nHQCVImv1hdH_5M1sUfiC7JdQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 07:49:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172989, serialNumber=AB69C74025489AFD61747FF9335B147E20BB25D4 Validity Not Before: Apr 5 07:49:54 2026 GMT Not After : Apr 12 07:49:54 2026 GMT Subject: CN=69d21422-3c58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:84:c6:85:97:96:c2:cf:2e:e0:cd:bc:00:fc: 69:71:f6:cc:5d:74:34:4b:55:d5:14:49:df:31:c4: 2f:15:f2:af:c7:f3:f3:35:b5:da:a2:5d:99:6a:e2: 0f:ba:c7:13:ae:f8:51:84:d8:c1:da:a6:dd:30:c8: af:6b:db:a7:f6:39:32:d0:66:b2:7f:df:39:b7:e8: 12:95:79:22:13:eb:fa:34:2a:f5:9e:0c:3e:ee:0d: 50:b5:b3:12:26:36:6c:07:53:f3:b0:40:f7:13:12: 59:56:8b:3b:d9:5d:31:75:a3:07:b5:25:88:c7:f0: 19:6f:e6:c9:2d:d6:a2:5b:37:17:f1:fd:97:e9:ec: dc:91:fb:f1:11:94:1d:e4:71:bf:d6:89:07:f6:ab: af:24:17:f9:9c:b1:b7:91:c6:fb:b7:76:f3:f5:bc: 66:6b:79:1c:06:63:e5:25:8d:39:b9:46:8d:36:9b: c8:80:cc:3a:7b:64:82:c3:51:49:b4:e5:67:a6:c5: d1:a0:9c:37:e1:93:19:1b:a3:56:eb:7a:b4:0f:82: bf:14:79:00:32:d6:7b:2b:01:60:9a:f7:3c:b1:bb: bc:e0:88:50:c1:8c:c8:3a:c3:fd:68:e0:54:88:e3: f1:4e:fa:dc:4d:5c:0e:67:06:97:d0:69:99:38:a0: 98:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:D3:9F:06:72:83:45:02:2C:2B:BC:91:68:B6:69:0D:E3:82:D5:C2 X509v3 Authority Key Identifier: keyid:AB:69:C7:40:25:48:9A:FD:61:74:7F:F9:33:5B:14:7E:20:BB:25:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172989/EFFDD714D6D511F0B06384B581D3641D/q2nHQCVImv1hdH_5M1sUfiC7JdQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2nHQCVImv1hdH_5M1sUfiC7JdQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172989/EFFDD714D6D511F0B06384B581D3641D/q2nHQCVImv1hdH_5M1sUfiC7JdQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:b2:a0:93:2a:0b:96:dd:bc:6f:c1:cb:e9:e0:bf:67:2c:73: e4:5b:ff:4e:d0:ba:11:0a:7d:f4:c6:54:86:3b:81:d8:66:69: ae:d8:70:22:22:96:61:fc:88:b2:1b:7e:df:56:df:cb:8e:c3: 5e:aa:41:5a:6f:85:a3:a6:b1:0f:5b:4e:c4:99:d5:c3:63:2f: b9:8c:dd:81:66:b0:61:3f:79:7d:c7:44:6b:07:37:df:34:1a: 90:9e:e6:60:25:71:0e:a5:15:9d:73:21:69:a5:6c:8c:22:d8: 09:b0:19:04:53:04:c8:3e:54:cf:5b:08:30:06:89:b3:49:bb: 0f:fb:b7:ac:44:ea:0c:83:c4:ef:d6:9a:b1:db:ad:6b:16:a9: 64:c9:6c:6e:64:78:96:b7:05:d5:64:af:2a:d5:81:55:f1:64: c0:ea:03:e1:e8:bb:71:95:82:c2:6a:10:d2:1f:37:39:29:0a: ed:ac:0e:d6:20:fd:cf:1f:0f:16:4e:a1:de:55:7f:1f:bb:65: 62:06:7e:e5:cc:67:27:4c:8c:48:73:ea:eb:48:85:40:0b:06: 3e:67:78:6e:7a:d0:6a:b1:4b:d7:b3:2c:e7:38:f1:09:4f:dc: 72:e3:d5:70:df:f4:76:3c:ec:90:07:8d:03:fd:6e:9d:75:c9: 08:ae:92:20 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 Mjk4OTExMC8GA1UEBRMoQUI2OUM3NDAyNTQ4OUFGRDYxNzQ3RkY5MzM1QjE0N0Uy MEJCMjVENDAeFw0yNjA0MDUwNzQ5NTRaFw0yNjA0MTIwNzQ5NTRaMBgxFjAUBgNV BAMTDTY5ZDIxNDIyLTNjNTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCYhMaFl5bCzy7gzbwA/Glx9sxddDRLVdUUSd8xxC8V8q/H8/M1tdqiXZlq4g+6 xxOu+FGE2MHapt0wyK9r26f2OTLQZrJ/3zm36BKVeSIT6/o0KvWeDD7uDVC1sxIm NmwHU/OwQPcTEllWizvZXTF1owe1JYjH8Blv5skt1qJbNxfx/Zfp7NyR+/ERlB3k cb/WiQf2q68kF/mcsbeRxvu3dvP1vGZreRwGY+UljTm5Ro02m8iAzDp7ZILDUUm0 5WemxdGgnDfhkxkbo1brerQPgr8UeQAy1nsrAWCa9zyxu7zgiFDBjMg6w/1o4FSI 4/FO+txNXA5nBpfQaZk4oJh7AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUFdOfBnKD RQIsK7yRaLZpDeOC1cIwHwYDVR0jBBgwFoAUq2nHQCVImv1hdH/5M1sUfiC7JdQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcyOTg5L0VGRkRENzE0RDZE NTExRjBCMDYzODRCNTgxRDM2NDFEL3EybkhRQ1ZJbXYxaGRIXzVNMXNVZmlDN0pk US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcTJuSFFDVkltdjFoZEhfNU0xc1VmaUM3SmRRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcy OTg5L0VGRkRENzE0RDZENTExRjBCMDYzODRCNTgxRDM2NDFEL3EybkhRQ1ZJbXYx aGRIXzVNMXNVZmlDN0pkUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB8sqCTKguW3bxvwcvp4L9nLHPkW/9O0LoRCn30xlSGO4HYZmmu2HAiIpZh/Iiy G37fVt/LjsNeqkFab4WjprEPW07EmdXDYy+5jN2BZrBhP3l9x0RrBzffNBqQnuZg JXEOpRWdcyFppWyMItgJsBkEUwTIPlTPWwgwBomzSbsP+7esROoMg8Tv1pqx261r FqlkyWxuZHiWtwXVZK8q1YFV8WTA6gPh6LtxlYLCahDSHzc5KQrtrA7WIP3PHw8W TqHeVX8fu2ViBn7lzGcnTIxIc+rrSIVACwY+Z3huetBqsUvXsyznOPEJT9xy49Vw 3/R2POyQB40D/W6ddckIrpIg -----END CERTIFICATE-----Generated at Mon Apr 6 09:53:51 2026 by rpki-client