$ rpki-client -vvf rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.mft File: QGBqW10pu_QhZ_posyaGfvkOgm8.mft (raw, json) Hash identifier: BrDqh9K2iNI3pLBz9hIJPuGQDxDYtLTcM84h7LgCg0I= Subject key identifier: B3:1A:44:E4:1D:39:97:2E:05:48:A1:F2:35:C5:33:D0:7C:F9:FC:4C Authority key identifier: 40:60:6A:5B:5D:29:BB:F4:21:67:FA:68:B3:26:86:7E:F9:0E:82:6F Certificate issuer: /CN=A91B872C/serialNumber=40606A5B5D29BBF42167FA68B326867EF90E826F Certificate serial: 08BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGBqW10pu_QhZ_posyaGfvkOgm8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.mft Manifest number: 08AE Signing time: Sat 04 Apr 2026 20:15:58 +0000 Manifest this update: Sat 04 Apr 2026 20:15:57 +0000 Manifest next update: Sat 11 Apr 2026 20:15:57 +0000 Files and hashes: 1: QGBqW10pu_QhZ_posyaGfvkOgm8.crl (hash: uz8DL5r5Uvm4tOCitjpoUhmG5+YAdf7L1APWf5qcawA=) 2: C86D4880DBDE11EAB7E6495DC4F9AE02.roa (hash: tUsv3tNoQWMVfE/GiWVi84l0pY9vapkX9vPKn8R6z3E=) 3: 7B2649225FE211EB9C1A7864C4F9AE02.roa (hash: D61mhla4ZKX7DfgoplRcuCG35MYNou9878EVBT40r2c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.crl rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGBqW10pu_QhZ_posyaGfvkOgm8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 20:15:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2238 (0x8be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B872C, serialNumber=40606A5B5D29BBF42167FA68B326867EF90E826F Validity Not Before: Apr 4 20:15:57 2026 GMT Not After : Apr 11 20:15:57 2026 GMT Subject: CN=69d1717e-53f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:f7:63:f9:e0:60:12:8a:3f:d1:0a:79:dc:09: d9:da:d4:fb:58:d9:48:5b:c7:7f:46:f4:f6:bd:68: 2c:da:cf:87:b4:e9:5e:4d:17:1d:6b:58:c0:a7:f3: e3:fd:c8:5a:c4:5f:73:c3:ff:87:21:3e:b4:4a:0c: 05:fa:9f:31:5a:99:36:f7:dc:fc:a2:7d:40:d7:f0: ce:41:d2:78:9b:ef:98:c6:86:d2:9a:55:de:49:3e: 17:40:83:0e:11:70:f2:9c:74:1d:4a:96:0e:4c:45: 32:db:38:df:7a:93:11:22:8b:7a:4c:f0:25:5b:6e: 2d:53:95:07:ce:a4:3e:c6:a1:ab:e5:ca:af:60:10: 1c:0b:8e:3b:b3:b3:8c:9f:a5:7f:0a:38:8d:6f:d5: 39:7a:a9:55:39:ff:03:9c:77:46:74:b4:8a:f5:ef: a3:ab:77:ce:03:03:82:88:4b:aa:d3:e3:22:3e:7c: e3:55:09:3b:bf:3f:8d:08:e3:6f:ff:27:23:86:b8: 06:70:4c:1e:03:27:c3:4d:db:77:19:ab:b4:3a:c6: f6:80:03:52:c5:64:f3:10:5a:2b:79:d8:b8:3b:db: 5a:22:7a:15:eb:d9:87:ba:16:e6:ce:b2:fe:cf:0c: 25:83:44:26:d0:5a:4b:b3:35:d2:a1:f8:88:ea:a6: 9c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:1A:44:E4:1D:39:97:2E:05:48:A1:F2:35:C5:33:D0:7C:F9:FC:4C X509v3 Authority Key Identifier: keyid:40:60:6A:5B:5D:29:BB:F4:21:67:FA:68:B3:26:86:7E:F9:0E:82:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGBqW10pu_QhZ_posyaGfvkOgm8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:32:6a:96:6c:6f:cf:32:f5:68:54:d7:74:b6:f6:60:a5:17: a1:c6:0e:1b:14:37:c5:4c:f5:24:73:a8:0d:2e:8e:f2:4e:83: 5b:79:aa:fe:cc:99:ee:68:a4:54:8b:94:d5:f5:ed:2f:be:a0: 2c:94:4b:57:b6:2d:de:a2:83:71:5d:9b:70:ea:9b:f5:66:d0: 69:be:c1:16:5e:06:28:95:bf:9b:08:ed:fa:bc:0f:eb:ff:c4: 3c:4a:1f:70:79:32:77:6b:e6:64:3b:3f:38:c7:c9:9f:a5:f5: 0d:63:3f:9e:ae:55:2e:67:16:64:b0:aa:89:a1:37:3d:77:f3: 89:60:9b:7b:ee:6d:1f:b5:30:13:08:37:7f:36:b3:3d:0a:14: 3e:49:54:10:41:63:e4:71:d2:1b:49:1a:00:c8:ca:17:62:ff: c8:05:0e:84:ec:ed:3a:f2:9f:cb:cf:9c:a6:c6:c5:39:6f:26: 28:73:54:98:ae:7b:69:55:49:03:39:c9:3e:c9:84:52:a4:c8: 8f:e7:e3:0d:13:5b:69:98:9f:70:09:0a:e0:5e:8a:c5:7a:2c: 80:89:6d:8e:b7:85:3e:3a:5b:56:e9:5f:20:27:25:9a:92:14: 7d:72:9f:d9:61:b9:13:90:ed:23:f5:6f:47:7f:06:77:68:c9: b4:7f:75:98 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjg3MkMxMTAvBgNVBAUTKDQwNjA2QTVCNUQyOUJCRjQyMTY3RkE2OEIzMjY4NjdF RjkwRTgyNkYwHhcNMjYwNDA0MjAxNTU3WhcNMjYwNDExMjAxNTU3WjAYMRYwFAYD VQQDEw02OWQxNzE3ZS01M2YzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7/dj+eBgEoo/0Qp53AnZ2tT7WNlIW8d/RvT2vWgs2s+HtOleTRcda1jAp/Pj /chaxF9zw/+HIT60SgwF+p8xWpk299z8on1A1/DOQdJ4m++YxobSmlXeST4XQIMO EXDynHQdSpYOTEUy2zjfepMRIot6TPAlW24tU5UHzqQ+xqGr5cqvYBAcC447s7OM n6V/CjiNb9U5eqlVOf8DnHdGdLSK9e+jq3fOAwOCiEuq0+MiPnzjVQk7vz+NCONv /ycjhrgGcEweAyfDTdt3Gau0Osb2gANSxWTzEForedi4O9taInoV69mHuhbmzrL+ zwwlg0Qm0FpLszXSofiI6qac6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLMaROQd OZcuBUih8jXFM9B8+fxMMB8GA1UdIwQYMBaAFEBgaltdKbv0IWf6aLMmhn75DoJv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODcyQy9GMjBFNTU5NkRC REMxMUVBOTNGRjdENDRDNEY5QUUwMi9RR0JxVzEwcHVfUWhaX3Bvc3lhR2Z2a09n bTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FHQnFXMTBwdV9RaFpfcG9zeWFHZnZrT2dtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODcyQy9GMjBFNTU5NkRCREMxMUVBOTNGRjdENDRDNEY5QUUwMi9RR0JxVzEwcHVf UWhaX3Bvc3lhR2Z2a09nbTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcTJqlmxvzzL1aFTXdLb2YKUXocYOGxQ3xUz1JHOoDS6O8k6DW3mq/syZ7mik VIuU1fXtL76gLJRLV7Yt3qKDcV2bcOqb9WbQab7BFl4GKJW/mwjt+rwP6//EPEof cHkyd2vmZDs/OMfJn6X1DWM/nq5VLmcWZLCqiaE3PXfziWCbe+5tH7UwEwg3fzaz PQoUPklUEEFj5HHSG0kaAMjKF2L/yAUOhOztOvKfy8+cpsbFOW8mKHNUmK57aVVJ AznJPsmEUqTIj+fjDRNbaZifcAkK4F6KxXosgIltjreFPjpbVulfICclmpIUfXKf 2WG5E5DtI/VvR38Gd2jJtH91mA== -----END CERTIFICATE-----Generated at Mon Apr 6 08:42:27 2026 by rpki-client