$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.mft File: q1PZkoECuRnbfFRlyN1f8mZ0Q7M.mft (raw, json) Hash identifier: Bql9SZGY+TIdG7pZWSSw2E0RxhGjuU7gUELDEJ3wSLQ= Subject key identifier: 51:17:8A:AE:85:11:AB:99:D5:54:C7:45:C1:FE:10:14:4F:7D:FA:AB Authority key identifier: AB:53:D9:92:81:02:B9:19:DB:7C:54:65:C8:DD:5F:F2:66:74:43:B3 Certificate issuer: /CN=A91C7E5B/serialNumber=AB53D9928102B919DB7C5465C8DD5FF2667443B3 Certificate serial: B7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.mft Manifest number: AD Signing time: Sun 05 Apr 2026 06:41:04 +0000 Manifest this update: Sun 05 Apr 2026 06:41:04 +0000 Manifest next update: Sun 12 Apr 2026 06:41:04 +0000 Files and hashes: 1: q1PZkoECuRnbfFRlyN1f8mZ0Q7M.crl (hash: SwVftzwEjzg3YJ4b19SJilIVXxR+HJO7zn4mpvWGTRI=) 2: 1FC17CE2EB2D11F0971959663D6F56BC.roa (hash: w/3re6+mcHn3z7mWQlt9gMEkLcEqozWFLvA0qzfndLw=) 3: C3DCFE54EB2911F0BD7173483B6F56BC.roa (hash: GRUkISuSjrdPycV7YoKPvCtNvhdJEKU1KQQr0iDkDpg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.crl rsync://rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 06:41:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 183 (0xb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7E5B, serialNumber=AB53D9928102B919DB7C5465C8DD5FF2667443B3 Validity Not Before: Apr 5 06:41:04 2026 GMT Not After : Apr 12 06:41:04 2026 GMT Subject: CN=69d20400-4c67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:6f:42:04:4b:a3:a7:65:55:a2:bc:c0:f2:94: 99:d2:2f:de:b2:00:a0:b0:2c:95:47:38:bc:50:e8: 57:c9:b4:d7:ef:e4:19:22:dd:f5:13:ab:66:4d:28: 5f:3d:e9:2f:bf:9f:ca:e0:9f:29:e1:9b:56:ca:88: e3:69:d2:9e:97:dc:16:ce:db:f6:37:29:33:1c:f3: af:d2:4d:e8:70:c8:a6:d5:c8:e4:8f:f3:59:a5:df: 73:5b:05:d9:7b:b4:b0:b6:e1:5d:9e:13:3b:10:0f: ee:78:6b:a2:58:a4:45:49:a7:39:e6:a0:e9:a5:c3: e5:d2:02:4b:63:f8:c6:dc:4a:d8:b8:68:2f:21:fc: f4:e0:91:e3:89:bb:43:ce:7b:16:70:56:4e:93:8d: 8a:2c:27:10:f6:d5:cf:f3:c3:81:82:f8:61:49:60: 24:38:af:ac:af:6b:56:89:1a:5e:8e:35:41:63:c8: 5c:38:85:03:42:ad:47:5b:88:23:3a:dc:ba:f4:62: 81:6a:74:43:4b:ce:31:bb:1d:98:71:d8:7e:f6:0c: 78:18:da:d0:64:a8:19:f2:50:ad:e7:fc:72:3e:95: a8:7f:f8:48:50:86:01:91:a6:65:2a:ef:79:3e:6e: 96:6a:cf:be:e0:80:04:7a:31:ee:e7:4f:bf:c9:16: f0:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:17:8A:AE:85:11:AB:99:D5:54:C7:45:C1:FE:10:14:4F:7D:FA:AB X509v3 Authority Key Identifier: keyid:AB:53:D9:92:81:02:B9:19:DB:7C:54:65:C8:DD:5F:F2:66:74:43:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:60:6f:9a:d7:3d:39:06:63:47:f1:e2:d5:de:c8:24:ce:53: 65:b5:22:f7:ad:aa:38:37:36:ec:e8:98:80:10:34:63:55:ad: 33:97:57:8d:69:f7:39:1a:bd:93:66:ae:7e:59:db:15:49:6b: f8:51:8f:c4:aa:fe:d6:d1:e3:d7:b1:e7:f6:de:ac:81:d8:a3: 6b:fd:61:b4:57:7a:d2:29:2f:61:6d:e8:e7:97:3b:da:2d:e8: d8:7c:a6:b7:b0:69:1e:94:c1:aa:af:9f:9d:e6:43:56:9c:c9: 1c:7d:02:97:11:74:74:84:b1:8d:70:d0:62:b1:5a:c6:d5:c8: 25:19:7a:dd:a1:c4:52:fa:57:4c:ed:d5:e7:0c:a6:d1:99:2f: 88:9e:4e:0b:c6:2b:5c:23:40:71:8c:ba:f6:fa:21:cf:bd:1d: fc:8c:50:d8:3f:e3:2d:91:96:12:8d:ae:f6:c9:22:b6:02:e1: 14:28:7d:55:15:63:00:d3:36:63:e9:8a:90:32:6c:cc:40:7e: 85:20:b0:ee:f9:ba:77:07:cf:72:ee:4d:90:bd:81:1d:b2:f9: 6e:41:fe:85:d2:f9:b8:86:b4:94:46:0a:38:4d:3b:e8:56:d6: 6a:a5:ff:0f:65:1d:9b:98:bc:b8:ff:1a:a4:e2:47:53:c0:a9: b3:44:d6:6e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICALcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdFNUIxMTAvBgNVBAUTKEFCNTNEOTkyODEwMkI5MTlEQjdDNTQ2NUM4REQ1RkYy NjY3NDQzQjMwHhcNMjYwNDA1MDY0MTA0WhcNMjYwNDEyMDY0MTA0WjAYMRYwFAYD VQQDEw02OWQyMDQwMC00YzY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApm9CBEujp2VVorzA8pSZ0i/esgCgsCyVRzi8UOhXybTX7+QZIt31E6tmTShf Pekvv5/K4J8p4ZtWyojjadKel9wWztv2NykzHPOv0k3ocMim1cjkj/NZpd9zWwXZ e7SwtuFdnhM7EA/ueGuiWKRFSac55qDppcPl0gJLY/jG3ErYuGgvIfz04JHjibtD znsWcFZOk42KLCcQ9tXP88OBgvhhSWAkOK+sr2tWiRpejjVBY8hcOIUDQq1HW4gj Oty69GKBanRDS84xux2Ycdh+9gx4GNrQZKgZ8lCt5/xyPpWof/hIUIYBkaZlKu95 Pm6Was++4IAEejHu50+/yRbweQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFEXiq6F EauZ1VTHRcH+EBRPffqrMB8GA1UdIwQYMBaAFKtT2ZKBArkZ23xUZcjdX/JmdEOz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0U1Qi9EODRFN0JGMjND NkUxMUYwOUQ3NkEyNERDNEY5QUUwMi9xMVBaa29FQ3VSbmJmRlJseU4xZjhtWjBR N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ExUFprb0VDdVJuYmZGUmx5TjFmOG1aMFE3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0U1Qi9EODRFN0JGMjNDNkUxMUYwOUQ3NkEyNERDNEY5QUUwMi9xMVBaa29FQ3VS bmJmRlJseU4xZjhtWjBRN00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAU2Bvmtc9OQZjR/Hi1d7IJM5TZbUi962qODc27OiYgBA0Y1WtM5dXjWn3ORq9 k2auflnbFUlr+FGPxKr+1tHj17Hn9t6sgdija/1htFd60ikvYW3o55c72i3o2Hym t7BpHpTBqq+fneZDVpzJHH0ClxF0dISxjXDQYrFaxtXIJRl63aHEUvpXTO3V5wym 0ZkviJ5OC8YrXCNAcYy69vohz70d/IxQ2D/jLZGWEo2u9skitgLhFCh9VRVjANM2 Y+mKkDJszEB+hSCw7vm6dwfPcu5NkL2BHbL5bkH+hdL5uIa0lEYKOE076FbWaqX/ D2Udm5i8uP8apOJHU8Cps0TWbg== -----END CERTIFICATE-----Generated at Mon Apr 6 13:39:33 2026 by rpki-client