$ rpki-client -vvf rpki.apnic.net/member_repository/A91988EB/018E1F6CE48B11F083D11E6B446F56BC/Q-rzDCMMbu5uNU3AN3Km7lPVBoU.mft File: Q-rzDCMMbu5uNU3AN3Km7lPVBoU.mft (raw, json) Hash identifier: v2PnzIUS3usalOh3S/wwWpF+hZJRBsZGcZbd2qeElyA= Subject key identifier: DA:87:8D:4D:02:A0:B4:EE:16:3A:FE:E2:ED:D7:43:09:70:E4:C5:D3 Authority key identifier: 43:EA:F3:0C:23:0C:6E:EE:6E:35:4D:C0:37:72:A6:EE:53:D5:06:85 Certificate issuer: /CN=A91988EB/serialNumber=43EAF30C230C6EEE6E354DC03772A6EE53D50685 Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-rzDCMMbu5uNU3AN3Km7lPVBoU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91988EB/018E1F6CE48B11F083D11E6B446F56BC/Q-rzDCMMbu5uNU3AN3Km7lPVBoU.mft Manifest number: 36 Signing time: Sun 05 Apr 2026 07:56:02 +0000 Manifest this update: Sun 05 Apr 2026 07:56:01 +0000 Manifest next update: Sun 12 Apr 2026 07:56:01 +0000 Files and hashes: 1: Q-rzDCMMbu5uNU3AN3Km7lPVBoU.crl (hash: 9aaQsV15fkLywaKrAJqOZPBcvjN/mk6eRFvVoZU4w2w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91988EB/018E1F6CE48B11F083D11E6B446F56BC/Q-rzDCMMbu5uNU3AN3Km7lPVBoU.crl rsync://rpki.apnic.net/member_repository/A91988EB/018E1F6CE48B11F083D11E6B446F56BC/Q-rzDCMMbu5uNU3AN3Km7lPVBoU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-rzDCMMbu5uNU3AN3Km7lPVBoU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 07:56:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91988EB, serialNumber=43EAF30C230C6EEE6E354DC03772A6EE53D50685 Validity Not Before: Apr 5 07:56:01 2026 GMT Not After : Apr 12 07:56:01 2026 GMT Subject: CN=69d21592-48ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:81:ea:11:ee:78:81:18:65:83:c3:07:0f:b2: 69:da:25:50:c6:06:d4:cd:72:47:16:26:bf:bc:8f: 65:65:f2:72:ca:4c:c0:be:a9:c4:69:b3:52:d3:0e: ff:32:01:0d:d2:0f:8a:1f:62:b5:3d:87:a3:69:4d: 50:b6:b3:4d:a9:1e:97:31:cb:f3:63:fb:a1:5a:a7: 6c:a6:cb:db:74:fe:04:f5:e6:c1:d6:31:88:90:aa: 41:d2:d6:c2:a2:0c:dc:5c:d6:c3:f5:31:f7:f8:b5: 43:01:ab:84:54:64:05:bc:05:30:d7:ea:b0:c9:27: 34:78:37:ce:b8:fb:3b:60:7d:b9:77:7e:aa:51:6b: 11:69:bd:e3:75:d7:b2:ac:f4:48:18:55:2c:16:0b: 7a:7e:6d:15:27:62:2f:2a:1c:9e:e2:22:ae:39:b9: e4:a8:1b:e4:91:69:38:a7:f4:5f:bf:70:9b:d7:7a: 8e:30:21:13:ad:c3:bf:2e:83:82:c9:3f:33:6c:f6: 73:a6:ba:b8:43:39:04:67:8c:99:9d:b0:82:5a:ab: 35:93:d9:bd:9e:fb:dd:cb:18:78:6e:ba:7d:88:b0: da:09:e1:7b:33:bb:e0:94:10:dc:6a:a2:90:14:2d: 99:10:a7:3b:86:e0:87:97:13:1c:bd:13:b5:70:68: 7e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:87:8D:4D:02:A0:B4:EE:16:3A:FE:E2:ED:D7:43:09:70:E4:C5:D3 X509v3 Authority Key Identifier: keyid:43:EA:F3:0C:23:0C:6E:EE:6E:35:4D:C0:37:72:A6:EE:53:D5:06:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91988EB/018E1F6CE48B11F083D11E6B446F56BC/Q-rzDCMMbu5uNU3AN3Km7lPVBoU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-rzDCMMbu5uNU3AN3Km7lPVBoU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91988EB/018E1F6CE48B11F083D11E6B446F56BC/Q-rzDCMMbu5uNU3AN3Km7lPVBoU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:70:07:eb:50:de:1b:fd:33:22:49:a0:03:2a:8d:33:80:b4: fd:cb:58:64:e5:b7:8c:ed:f2:4f:90:6c:e9:da:fb:45:65:c4: 63:f9:aa:4b:ed:2e:f4:be:44:69:56:a3:b1:7f:41:b0:53:ad: 19:90:f3:01:15:1f:5f:0c:7c:74:d6:07:ad:5c:86:4c:2c:89: 2f:bf:8d:c4:07:8c:08:27:ae:3c:fb:78:b5:5c:2b:4c:83:aa: bc:4c:29:5d:82:a7:19:07:37:29:25:9a:1a:8c:bc:9b:11:23: 6e:97:9b:a3:c5:0b:a5:97:d4:bd:16:3b:58:e3:4e:c5:00:1c: 4b:f2:8b:78:7d:d2:90:8b:67:d3:6b:cc:72:34:d2:57:9d:a7: 6b:77:82:37:fa:b0:aa:3a:c2:fa:bc:6c:18:6d:2c:7f:26:d4: a8:e1:46:11:da:bc:dc:fc:10:b7:6a:d3:05:73:61:38:01:4a: 75:8b:af:5f:c7:49:87:6a:f0:d8:ca:ae:21:b9:26:6c:52:04: de:31:9a:a0:1c:78:54:10:9d:3c:da:d8:81:b9:7c:18:2e:e4: 5d:19:7d:50:7f:8d:84:7d:ab:14:2a:ae:ae:20:f3:c9:d4:69: 81:04:6f:74:89:51:9c:f8:98:7c:b9:27:06:05:f4:9d:59:0c: a5:be:69:3c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 ODhFQjExMC8GA1UEBRMoNDNFQUYzMEMyMzBDNkVFRTZFMzU0REMwMzc3MkE2RUU1 M0Q1MDY4NTAeFw0yNjA0MDUwNzU2MDFaFw0yNjA0MTIwNzU2MDFaMBgxFjAUBgNV BAMTDTY5ZDIxNTkyLTQ4ZWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3geoR7niBGGWDwwcPsmnaJVDGBtTNckcWJr+8j2Vl8nLKTMC+qcRps1LTDv8y AQ3SD4ofYrU9h6NpTVC2s02pHpcxy/Nj+6Fap2ymy9t0/gT15sHWMYiQqkHS1sKi DNxc1sP1Mff4tUMBq4RUZAW8BTDX6rDJJzR4N864+ztgfbl3fqpRaxFpveN117Ks 9EgYVSwWC3p+bRUnYi8qHJ7iIq45ueSoG+SRaTin9F+/cJvXeo4wIROtw78ug4LJ PzNs9nOmurhDOQRnjJmdsIJaqzWT2b2e+93LGHhuun2IsNoJ4Xszu+CUENxqopAU LZkQpzuG4IeXExy9E7VwaH5pAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU2oeNTQKg tO4WOv7i7ddDCXDkxdMwHwYDVR0jBBgwFoAUQ+rzDCMMbu5uNU3AN3Km7lPVBoUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4OEVCLzAxOEUxRjZDRTQ4 QjExRjA4M0QxMUU2QjQ0NkY1NkJDL1EtcnpEQ01NYnU1dU5VM0FOM0ttN2xQVkJv VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUS1yekRDTU1idTV1TlUzQU4zS203bFBWQm9VLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4 OEVCLzAxOEUxRjZDRTQ4QjExRjA4M0QxMUU2QjQ0NkY1NkJDL1EtcnpEQ01NYnU1 dU5VM0FOM0ttN2xQVkJvVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCucAfrUN4b/TMiSaADKo0zgLT9y1hk5beM7fJPkGzp2vtFZcRj+apL7S70vkRp VqOxf0GwU60ZkPMBFR9fDHx01getXIZMLIkvv43EB4wIJ648+3i1XCtMg6q8TCld gqcZBzcpJZoajLybESNul5ujxQull9S9FjtY407FABxL8ot4fdKQi2fTa8xyNNJX nadrd4I3+rCqOsL6vGwYbSx/JtSo4UYR2rzc/BC3atMFc2E4AUp1i69fx0mHavDY yq4huSZsUgTeMZqgHHhUEJ082tiBuXwYLuRdGX1Qf42EfasUKq6uIPPJ1GmBBG90 iVGc+Jh8uScGBfSdWQylvmk8 -----END CERTIFICATE-----Generated at Mon Apr 6 11:34:55 2026 by rpki-client