$ rpki-client -vvf rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.mft File: cQovxyPTd706pfsnGkrolOV6dFQ.mft (raw, json) Hash identifier: FZmrT5QOMhmaynBGTRKDGFipPcJR/phgx6wvKX0u8Yg= Subject key identifier: D9:9E:0E:EB:EC:A8:A6:7F:7C:72:CE:4F:4E:DB:82:51:04:4A:36:A5 Authority key identifier: 71:0A:2F:C7:23:D3:77:BD:3A:A5:FB:27:1A:4A:E8:94:E5:7A:74:54 Certificate issuer: /CN=A91976E2/serialNumber=710A2FC723D377BD3AA5FB271A4AE894E57A7454 Certificate serial: 0416 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQovxyPTd706pfsnGkrolOV6dFQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.mft Manifest number: 040C Signing time: Tue 31 Mar 2026 00:19:47 +0000 Manifest this update: Tue 31 Mar 2026 00:19:46 +0000 Manifest next update: Tue 07 Apr 2026 00:19:46 +0000 Files and hashes: 1: cQovxyPTd706pfsnGkrolOV6dFQ.crl (hash: ppjBeOYvZM8jIBE7ptH0a0gyr+upfyyr8iYkSPskb3I=) 2: FA3E8D68BA2911F0A4AFE171C4F9AE02.roa (hash: IBw3K5oTaYkP1Lamfe7f4AbVCUVD2an81GV/CK0SpBk=) 3: ADDCA5F4BA2911F0B6E66A71C4F9AE02.roa (hash: yukIsGAb+vTypvuZwx1hx3ziu2U2pui3Ec+csD8aQRc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.crl rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQovxyPTd706pfsnGkrolOV6dFQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 23:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1046 (0x416) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91976E2, serialNumber=710A2FC723D377BD3AA5FB271A4AE894E57A7454 Validity Not Before: Mar 31 00:19:46 2026 GMT Not After : Apr 7 00:19:46 2026 GMT Subject: CN=69cb1323-0bef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:34:43:47:c5:73:cd:95:51:7f:ac:56:ef:1a: b4:9e:3c:aa:ed:3f:be:6d:4d:6a:67:e4:77:c5:93: 9b:1a:43:af:07:07:d2:99:14:3d:56:28:7e:3d:23: 52:4a:ad:01:09:19:79:5d:c4:66:93:b7:7a:15:a4: 7d:aa:c1:47:c0:53:92:86:a4:1d:b2:cd:5d:3e:fa: 3e:d7:8e:1b:ba:e3:47:1d:6a:a8:74:1b:d5:05:11: 0d:7e:60:04:9c:a0:fd:c1:70:8c:52:62:a5:56:ec: d7:23:ed:73:10:39:a0:a3:0e:b0:2b:2d:37:37:00: da:d8:56:a6:dd:1b:30:58:ec:b2:9f:77:03:68:b0: 1a:07:b4:94:c1:8c:27:ee:e0:de:13:5f:b4:f4:be: e5:37:0d:b8:8a:2a:13:e4:62:d1:bf:29:a2:14:bc: 83:9e:0a:09:d4:bb:38:58:02:c7:50:58:33:ec:db: a2:a7:ee:36:9a:6a:07:9f:92:31:67:cf:d4:d9:b1: fd:b3:94:84:d3:b5:78:6c:7f:34:c1:cd:98:de:84: 56:e4:b0:dc:74:46:ea:96:8d:1f:f2:38:ee:f2:0a: 3e:fd:26:46:38:09:47:8b:6b:1d:33:bd:73:15:0f: 9d:af:c8:8d:4b:76:a0:3b:94:69:74:3f:de:4a:94: ac:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:9E:0E:EB:EC:A8:A6:7F:7C:72:CE:4F:4E:DB:82:51:04:4A:36:A5 X509v3 Authority Key Identifier: keyid:71:0A:2F:C7:23:D3:77:BD:3A:A5:FB:27:1A:4A:E8:94:E5:7A:74:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQovxyPTd706pfsnGkrolOV6dFQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:06:3e:86:45:68:d3:4e:62:be:ed:6c:80:70:5e:07:a0:13: d9:62:a7:59:ab:c3:21:83:b8:e4:cd:b9:4e:4d:61:30:96:27: 84:52:a0:20:b7:a8:2e:39:2f:af:94:55:32:08:c6:a2:58:b5: 19:77:d6:0f:ae:c2:ad:0f:ef:1b:78:c6:54:2f:5b:ee:0e:56: 28:7a:5c:51:4a:f5:cf:de:d9:be:ed:26:bf:01:40:e3:d1:06: 39:fc:80:cc:09:13:66:64:b9:07:09:2a:e3:95:9d:14:45:96: 14:33:fc:85:31:ae:0a:40:be:31:2b:9c:fc:5d:0b:2e:56:b0: c2:05:a5:5e:c5:1e:df:87:81:c6:09:70:b1:30:d9:9b:d1:47: 4d:07:7b:78:8c:b4:25:91:02:09:32:c4:17:dc:77:c5:0c:ff: 08:33:de:7c:50:06:3e:93:8a:e5:66:0f:d3:9a:9c:67:1e:10: a3:88:c1:54:46:bc:65:18:17:38:d8:48:5a:1c:85:cd:c6:e6: cf:62:48:0d:29:e7:25:49:b4:64:2c:3c:ba:89:ff:e5:38:fc: f4:77:82:7b:0c:21:79:d3:2e:41:74:a9:f1:0b:56:7f:a2:36: 38:b3:dc:90:4a:6a:81:6a:31:15:da:6a:42:77:9b:6f:71:f1: 94:23:79:9f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBBYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTc2RTIxMTAvBgNVBAUTKDcxMEEyRkM3MjNEMzc3QkQzQUE1RkIyNzFBNEFFODk0 RTU3QTc0NTQwHhcNMjYwMzMxMDAxOTQ2WhcNMjYwNDA3MDAxOTQ2WjAYMRYwFAYD VQQDEw02OWNiMTMyMy0wYmVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvzRDR8VzzZVRf6xW7xq0njyq7T++bU1qZ+R3xZObGkOvBwfSmRQ9Vih+PSNS Sq0BCRl5XcRmk7d6FaR9qsFHwFOShqQdss1dPvo+144buuNHHWqodBvVBRENfmAE nKD9wXCMUmKlVuzXI+1zEDmgow6wKy03NwDa2Fam3RswWOyyn3cDaLAaB7SUwYwn 7uDeE1+09L7lNw24iioT5GLRvymiFLyDngoJ1Ls4WALHUFgz7Nuip+42mmoHn5Ix Z8/U2bH9s5SE07V4bH80wc2Y3oRW5LDcdEbqlo0f8jju8go+/SZGOAlHi2sdM71z FQ+dr8iNS3agO5RpdD/eSpSs7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNmeDuvs qKZ/fHLOT07bglEESjalMB8GA1UdIwQYMBaAFHEKL8cj03e9OqX7JxpK6JTlenRU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzZFMi80N0M0NEFEOEFF ODkxMUVDOEE4RDMzNjhDNEY5QUUwMi9jUW92eHlQVGQ3MDZwZnNuR2tyb2xPVjZk RlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NRb3Z4eVBUZDcwNnBmc25Ha3JvbE9WNmRGUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzZFMi80N0M0NEFEOEFFODkxMUVDOEE4RDMzNjhDNEY5QUUwMi9jUW92eHlQVGQ3 MDZwZnNuR2tyb2xPVjZkRlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlgY+hkVo005ivu1sgHBeB6AT2WKnWavDIYO45M25Tk1hMJYnhFKgILeoLjkv r5RVMgjGoli1GXfWD67CrQ/vG3jGVC9b7g5WKHpcUUr1z97Zvu0mvwFA49EGOfyA zAkTZmS5Bwkq45WdFEWWFDP8hTGuCkC+MSuc/F0LLlawwgWlXsUe34eBxglwsTDZ m9FHTQd7eIy0JZECCTLEF9x3xQz/CDPefFAGPpOK5WYP05qcZx4Qo4jBVEa8ZRgX ONhIWhyFzcbmz2JIDSnnJUm0ZCw8uon/5Tj89HeCewwhedMuQXSp8QtWf6I2OLPc kEpqgWoxFdpqQnebb3HxlCN5nw== -----END CERTIFICATE-----Generated at Tue Mar 31 06:42:55 2026 by rpki-client