$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB6E8/32E34DEEAE2B11F098EA2E85C4F9AE02/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.mft File: 1Qh-tx-4EvEAL_iEsvnVbjvdTPI.mft (raw, json) Hash identifier: 31y9GDmf95eCo7XT6+amaPg6yar+zudLE6S60paMUzM= Subject key identifier: FB:EC:8C:A4:38:82:AB:7A:D2:54:3D:A3:B9:40:39:46:84:E7:5A:78 Authority key identifier: D5:08:7E:B7:1F:B8:12:F1:00:2F:F8:84:B2:F9:D5:6E:3B:DD:4C:F2 Certificate issuer: /CN=A91CB6E8/serialNumber=D5087EB71FB812F1002FF884B2F9D56E3BDD4CF2 Certificate serial: 59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB6E8/32E34DEEAE2B11F098EA2E85C4F9AE02/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.mft Manifest number: 59 Signing time: Sun 05 Apr 2026 07:27:27 +0000 Manifest this update: Sun 05 Apr 2026 07:27:26 +0000 Manifest next update: Sun 12 Apr 2026 07:27:26 +0000 Files and hashes: 1: 1Qh-tx-4EvEAL_iEsvnVbjvdTPI.crl (hash: GYrwIa/fEhpgAV7fjdmmNujhibaoFKY+duLYD1vy0vk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB6E8/32E34DEEAE2B11F098EA2E85C4F9AE02/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.crl rsync://rpki.apnic.net/member_repository/A91CB6E8/32E34DEEAE2B11F098EA2E85C4F9AE02/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 07:27:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 89 (0x59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB6E8, serialNumber=D5087EB71FB812F1002FF884B2F9D56E3BDD4CF2 Validity Not Before: Apr 5 07:27:26 2026 GMT Not After : Apr 12 07:27:26 2026 GMT Subject: CN=69d20edf-5b20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:55:5f:17:36:98:36:23:1c:c8:d4:75:78:cd: 84:40:28:5f:1c:36:51:f5:72:5c:d0:d3:a0:1d:64: c6:e9:87:b3:0f:a0:ab:98:a7:1b:c4:50:17:aa:43: 36:4b:97:34:c4:1d:c1:ee:13:93:8d:a0:50:51:3c: 99:c1:3d:48:c8:d6:0a:46:9d:46:47:66:a4:a3:b4: 79:43:55:75:9e:da:fa:96:5c:78:6d:de:d8:96:4d: d4:96:dc:08:8c:ff:6a:4a:f7:20:3a:7c:63:ed:5b: 9e:01:d6:26:7b:54:36:9b:99:57:e6:a0:1a:0c:d9: 71:66:dc:68:28:f9:a2:26:ec:78:70:7d:59:55:85: 1b:70:9d:75:10:ae:bb:ec:66:85:27:29:45:e2:95: c5:1c:a1:b1:78:3c:1d:5a:4e:a4:c5:ee:ef:ab:8c: 7a:1e:50:bc:ef:84:8d:9b:62:26:3f:95:56:20:8c: a0:a4:71:45:23:f3:0c:e7:a0:e4:f8:d3:78:c9:b3: fb:c1:ed:c3:95:c5:f8:6e:b1:cd:fd:64:70:67:61: 63:10:d2:8a:de:05:77:42:74:74:6a:b3:e3:9f:9d: 1a:84:00:76:7d:a1:6e:38:44:22:b2:7f:79:30:83: 3f:82:81:d4:ca:8b:c0:3d:8c:73:15:34:4d:39:19: b4:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:EC:8C:A4:38:82:AB:7A:D2:54:3D:A3:B9:40:39:46:84:E7:5A:78 X509v3 Authority Key Identifier: keyid:D5:08:7E:B7:1F:B8:12:F1:00:2F:F8:84:B2:F9:D5:6E:3B:DD:4C:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB6E8/32E34DEEAE2B11F098EA2E85C4F9AE02/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB6E8/32E34DEEAE2B11F098EA2E85C4F9AE02/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:68:44:d8:90:eb:f8:c8:b1:94:42:f2:06:b0:71:0f:30:69: 69:50:4c:24:33:7a:4c:c0:2d:f7:cd:4f:d4:21:76:e8:dd:60: db:2c:62:e3:30:a7:ef:99:05:cd:21:3a:98:a3:94:ef:96:1b: 92:2e:cb:71:54:6b:a4:2e:f8:4b:2c:42:09:f8:bd:de:b2:9b: c5:8d:5a:15:96:09:39:13:96:80:0f:3d:9c:2c:71:16:8f:64: 4d:6d:e0:ae:e3:8a:3e:a0:20:c5:32:1c:7a:ff:b9:64:8f:63: 46:4a:b8:18:40:0e:d1:b2:87:a1:e7:c6:64:65:3a:cb:9d:35: a8:b4:0c:81:81:38:f2:cd:d2:cb:c2:f6:06:a6:8d:0b:c6:a9: 3a:98:92:d3:53:37:03:3c:ae:22:c9:c0:de:9a:33:56:17:b1: f9:35:52:a2:b5:0e:9a:f3:45:c9:41:cd:95:86:74:fd:94:1a: dc:b0:f4:ff:53:f6:e5:fd:5a:80:5c:85:15:00:d9:22:46:49: 7e:73:99:5c:4b:f7:49:20:93:38:0f:ed:e5:b5:f8:b2:20:15: 03:ba:e3:d7:fc:97:5e:3d:77:32:62:a1:2d:de:b5:01:02:2e: 9d:bc:50:59:dd:06:19:64:51:6e:2e:21:97:d8:a2:05:36:07: 5f:f1:bc:64 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBWTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QjZFODExMC8GA1UEBRMoRDUwODdFQjcxRkI4MTJGMTAwMkZGODg0QjJGOUQ1NkUz QkRENENGMjAeFw0yNjA0MDUwNzI3MjZaFw0yNjA0MTIwNzI3MjZaMBgxFjAUBgNV BAMTDTY5ZDIwZWRmLTViMjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCcVV8XNpg2IxzI1HV4zYRAKF8cNlH1clzQ06AdZMbph7MPoKuYpxvEUBeqQzZL lzTEHcHuE5ONoFBRPJnBPUjI1gpGnUZHZqSjtHlDVXWe2vqWXHht3tiWTdSW3AiM /2pK9yA6fGPtW54B1iZ7VDabmVfmoBoM2XFm3Ggo+aIm7HhwfVlVhRtwnXUQrrvs ZoUnKUXilcUcobF4PB1aTqTF7u+rjHoeULzvhI2bYiY/lVYgjKCkcUUj8wznoOT4 03jJs/vB7cOVxfhusc39ZHBnYWMQ0oreBXdCdHRqs+OfnRqEAHZ9oW44RCKyf3kw gz+CgdTKi8A9jHMVNE05GbRhAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU++yMpDiC q3rSVD2juUA5RoTnWngwHwYDVR0jBBgwFoAU1Qh+tx+4EvEAL/iEsvnVbjvdTPIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNCNkU4LzMyRTM0REVFQUUy QjExRjA5OEVBMkU4NUM0RjlBRTAyLzFRaC10eC00RXZFQUxfaUVzdm5WYmp2ZFRQ SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMVFoLXR4LTRFdkVBTF9pRXN2blZianZkVFBJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNC NkU4LzMyRTM0REVFQUUyQjExRjA5OEVBMkU4NUM0RjlBRTAyLzFRaC10eC00RXZF QUxfaUVzdm5WYmp2ZFRQSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA8aETYkOv4yLGUQvIGsHEPMGlpUEwkM3pMwC33zU/UIXbo3WDbLGLjMKfvmQXN ITqYo5TvlhuSLstxVGukLvhLLEIJ+L3espvFjVoVlgk5E5aADz2cLHEWj2RNbeCu 44o+oCDFMhx6/7lkj2NGSrgYQA7Rsoeh58ZkZTrLnTWotAyBgTjyzdLLwvYGpo0L xqk6mJLTUzcDPK4iycDemjNWF7H5NVKitQ6a80XJQc2VhnT9lBrcsPT/U/bl/VqA XIUVANkiRkl+c5lcS/dJIJM4D+3ltfiyIBUDuuPX/JdePXcyYqEt3rUBAi6dvFBZ 3QYZZFFuLiGX2KIFNgdf8bxk -----END CERTIFICATE-----Generated at Mon Apr 6 10:11:09 2026 by rpki-client