$ rpki-client -vvf rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.mft File: QgBM9ryh-lZCT17qJPYqkrJc3s8.mft (raw, json) Hash identifier: 7M86aUJ8qNHjm7xhveW+ms4GKzDU/uUuL4pQm0+HICE= Subject key identifier: 2E:6C:0D:13:8C:CE:85:C8:F1:CD:5A:A4:BE:C5:4A:1B:24:D6:AB:4B Authority key identifier: 42:00:4C:F6:BC:A1:FA:56:42:4F:5E:EA:24:F6:2A:92:B2:5C:DE:CF Certificate issuer: /CN=A919960D/serialNumber=42004CF6BCA1FA56424F5EEA24F62A92B25CDECF Certificate serial: 0278 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgBM9ryh-lZCT17qJPYqkrJc3s8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.mft Manifest number: 0270 Signing time: Mon 27 Apr 2026 01:55:36 +0000 Manifest this update: Mon 27 Apr 2026 01:55:35 +0000 Manifest next update: Mon 04 May 2026 01:55:35 +0000 Files and hashes: 1: QgBM9ryh-lZCT17qJPYqkrJc3s8.crl (hash: whV7HXvADii+Y7bUqbf305mua4TeqLJ3l5eBTS9uVL0=) 2: BE9174768DDE11ED97AFDA82C4F9AE02.roa (hash: lWqXr9OCi9y8igTWAmlmDXkw3mBGBTPXv9Xm5W9NawI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.crl rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgBM9ryh-lZCT17qJPYqkrJc3s8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:55:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 632 (0x278) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919960D, serialNumber=42004CF6BCA1FA56424F5EEA24F62A92B25CDECF Validity Not Before: Apr 27 01:55:35 2026 GMT Not After : May 4 01:55:35 2026 GMT Subject: CN=69eec218-ff89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5b:a0:76:43:eb:04:d5:b5:2f:39:ac:0d:59: 55:fd:bf:66:91:46:96:99:39:35:e4:c0:49:e3:b4: d0:b6:eb:9e:59:45:19:7c:8c:8b:7a:6e:67:c2:ac: 1d:d2:a4:ab:44:a3:ab:09:b4:cc:7e:68:04:11:5d: b0:97:db:13:2b:f2:55:b0:5d:bf:8b:2b:19:43:39: 9d:22:2f:34:dc:ea:75:97:1c:ff:8a:1d:d5:3e:95: ba:27:17:a1:84:b4:2c:f7:b3:8f:3a:7d:b5:92:15: 68:e3:44:e6:36:14:c9:66:13:71:2e:33:a3:ce:d1: 2d:46:07:8e:86:9a:81:ac:d6:5c:1b:4b:6b:a0:43: 75:a6:54:45:37:34:2b:91:59:d3:8f:1a:cb:ba:c8: 56:84:2c:4a:ea:38:62:35:04:25:fe:f3:7d:e9:56: fb:90:6f:74:1f:9e:1e:fd:80:a6:9f:e0:8a:e8:a8: 27:d3:05:d4:82:31:20:c7:f1:eb:d6:4b:e2:0f:70: 91:38:13:4d:2c:13:79:20:ec:56:84:47:f9:b6:2c: 52:a4:cb:96:e0:bf:fb:12:9b:df:f7:bc:2e:6b:24: 7a:aa:8b:6a:c9:43:d9:7f:2e:f4:9f:95:76:d2:61: e3:83:89:ec:74:bd:77:03:bf:b7:63:18:20:00:73: 9e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:6C:0D:13:8C:CE:85:C8:F1:CD:5A:A4:BE:C5:4A:1B:24:D6:AB:4B X509v3 Authority Key Identifier: keyid:42:00:4C:F6:BC:A1:FA:56:42:4F:5E:EA:24:F6:2A:92:B2:5C:DE:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgBM9ryh-lZCT17qJPYqkrJc3s8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:ff:9d:a0:4f:81:e6:6b:71:00:10:73:8e:27:12:4f:45:08: 06:20:e5:bb:f2:8b:09:57:99:00:cc:3c:56:c8:17:05:01:fd: b3:6c:27:de:2a:06:c5:d0:12:8a:27:0c:43:a0:6d:68:ca:70: 91:e8:18:05:b6:21:bc:f0:9e:2c:11:59:7c:24:37:ee:5f:9e: eb:4b:4e:32:8b:eb:81:6c:d8:d6:72:e7:fa:0d:a9:96:13:6d: 92:c6:4e:e0:47:d1:f7:95:db:b9:0a:2f:5d:7a:f8:fe:59:68: 31:79:f2:a4:eb:98:db:c8:11:e1:90:bc:84:b5:25:e9:e2:1a: 9c:0a:56:4e:74:b3:c4:b7:4c:cf:8f:3a:f0:db:f1:9a:e5:92: 50:ca:c1:54:6f:e8:90:d3:f2:d0:4c:6e:21:3e:ea:22:5f:73: 4a:18:75:a1:9d:0d:81:78:14:4d:e8:d8:97:56:eb:6b:e4:f0: dc:4d:f9:68:29:03:1e:90:88:d2:15:30:4a:4f:ab:4d:7b:f3: f2:48:f0:6d:cc:74:f0:e0:bd:59:d6:22:17:38:5b:f1:35:d9: 87:d5:12:9f:41:fc:04:ea:7d:a8:3b:62:99:99:5d:21:df:9d: 92:1d:48:a3:04:45:63:8e:5a:c6:e3:ae:ae:c1:1c:6d:0a:b0: 00:4b:94:5f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAngwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk2MEQxMTAvBgNVBAUTKDQyMDA0Q0Y2QkNBMUZBNTY0MjRGNUVFQTI0RjYyQTky QjI1Q0RFQ0YwHhcNMjYwNDI3MDE1NTM1WhcNMjYwNTA0MDE1NTM1WjAYMRYwFAYD VQQDEw02OWVlYzIxOC1mZjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApFugdkPrBNW1LzmsDVlV/b9mkUaWmTk15MBJ47TQtuueWUUZfIyLem5nwqwd 0qSrRKOrCbTMfmgEEV2wl9sTK/JVsF2/iysZQzmdIi803Op1lxz/ih3VPpW6Jxeh hLQs97OPOn21khVo40TmNhTJZhNxLjOjztEtRgeOhpqBrNZcG0troEN1plRFNzQr kVnTjxrLushWhCxK6jhiNQQl/vN96Vb7kG90H54e/YCmn+CK6Kgn0wXUgjEgx/Hr 1kviD3CROBNNLBN5IOxWhEf5tixSpMuW4L/7Epvf97wuayR6qotqyUPZfy70n5V2 0mHjg4nsdL13A7+3YxggAHOeOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC5sDROM zoXI8c1apL7FShsk1qtLMB8GA1UdIwQYMBaAFEIATPa8ofpWQk9e6iT2KpKyXN7P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTYwRC9CRDBCNjRDNjhE REExMUVEODczQTc0ODdDNEY5QUUwMi9RZ0JNOXJ5aC1sWkNUMTdxSlBZcWtySmMz czguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FnQk05cnloLWxaQ1QxN3FKUFlxa3JKYzNzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTYwRC9CRDBCNjRDNjhEREExMUVEODczQTc0ODdDNEY5QUUwMi9RZ0JNOXJ5aC1s WkNUMTdxSlBZcWtySmMzczgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIf+doE+B5mtxABBzjicST0UIBiDlu/KLCVeZAMw8VsgXBQH9s2wn3ioGxdAS iicMQ6BtaMpwkegYBbYhvPCeLBFZfCQ37l+e60tOMovrgWzY1nLn+g2plhNtksZO 4EfR95XbuQovXXr4/lloMXnypOuY28gR4ZC8hLUl6eIanApWTnSzxLdMz4868Nvx muWSUMrBVG/okNPy0ExuIT7qIl9zShh1oZ0NgXgUTejYl1bra+Tw3E35aCkDHpCI 0hUwSk+rTXvz8kjwbcx08OC9WdYiFzhb8TXZh9USn0H8BOp9qDtimZldId+dkh1I owRFY45axuOursEcbQqwAEuUXw== -----END CERTIFICATE-----Generated at Tue Apr 28 08:42:14 2026 by rpki-client