$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft File: q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft (raw, json) Hash identifier: HEDgV+x3vFqmy80y/HYS499vOChfhIrOUrrItZYvQok= Subject key identifier: 64:F2:2C:0A:46:F8:F6:EC:77:88:76:B2:39:41:96:D6:83:20:6B:93 Authority key identifier: AB:67:E8:2F:C8:6A:AC:A8:2A:CF:F8:DC:36:45:CD:71:61:01:3F:76 Certificate issuer: /CN=A91D1E4C/serialNumber=AB67E82FC86AACA82ACFF8DC3645CD7161013F76 Certificate serial: 03A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft Manifest number: 0C3C Signing time: Sat 04 Apr 2026 20:14:03 +0000 Manifest this update: Sat 04 Apr 2026 20:14:02 +0000 Manifest next update: Sat 11 Apr 2026 20:14:02 +0000 Files and hashes: 1: q2foL8hqrKgqz_jcNkXNcWEBP3Y.crl (hash: cdpoMB4MCn08oich0SE7wWm+qG6MSny6//2sMCh9ik0=) 2: FC358296CFA011EDA4AC5B18C4F9AE02.roa (hash: XL/ZcgALP761TCI8hEan3K78GIrb6EiGTeA4Vn2wUJI=) 3: 2AD1C746940111F0B07D7068C4F9AE02.roa (hash: AIsLYj1Q0Ri7p3sC6uZCzxYzj0O4+4SA75lfHau1SqU=) 4: 3DD8C628940111F09204AF71C4F9AE02.roa (hash: rKjGeR3bW3KsKLNlokaXVqhFpQOnZispIcGW123rOaY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.crl rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 20:14:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 928 (0x3a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1E4C, serialNumber=AB67E82FC86AACA82ACFF8DC3645CD7161013F76 Validity Not Before: Apr 4 20:14:02 2026 GMT Not After : Apr 11 20:14:02 2026 GMT Subject: CN=69d1710b-7ed1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:79:86:0c:f6:73:61:40:ba:b2:64:1a:47:1a: 12:1e:f1:65:d2:a3:ae:35:dc:ab:61:6b:4d:79:cf: 86:b1:2d:61:15:ce:65:09:11:3c:c8:cc:88:1c:d5: ff:d1:ac:b1:1f:83:62:10:39:b6:c0:43:00:44:3c: f4:31:b0:a1:19:91:ba:6a:93:0e:f8:cb:85:90:41: 4a:c2:6b:b8:e6:c7:13:b7:c7:eb:97:81:b9:e2:61: 1f:c3:90:35:53:d5:f7:ac:a5:24:cf:01:01:ad:72: fb:a7:46:90:1d:10:a9:e1:fb:5d:37:42:f6:93:52: 7c:1e:0b:e7:dd:f0:b2:04:35:4f:b7:65:6e:e3:d4: d3:2b:8d:19:6a:37:a4:e0:50:11:7d:2e:e5:88:d0: 91:52:f7:8b:d2:9a:8f:00:a2:2e:0d:40:63:f8:23: bf:48:7d:bd:87:80:68:cc:e6:1a:1c:a5:1f:c3:ff: fa:22:13:29:bd:93:e7:f6:ba:0c:14:81:6e:19:e9: 9f:ce:94:22:8e:8a:84:b5:20:ff:fd:19:cb:44:d4: 3c:6d:28:eb:41:1c:ba:a1:2d:71:0d:23:7d:29:be: d9:d4:6c:8c:cd:51:6f:04:e7:79:36:84:9f:d6:98: 1f:10:59:74:7d:84:30:6d:6a:89:75:ee:64:c7:94: 72:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:F2:2C:0A:46:F8:F6:EC:77:88:76:B2:39:41:96:D6:83:20:6B:93 X509v3 Authority Key Identifier: keyid:AB:67:E8:2F:C8:6A:AC:A8:2A:CF:F8:DC:36:45:CD:71:61:01:3F:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:b4:a9:e6:fb:db:5c:d1:6b:09:6a:58:e8:6a:05:ea:39:73: d3:a1:8c:c2:6c:28:d4:40:93:d2:8b:0a:e5:90:64:1a:48:f4: e6:c4:6a:34:3e:33:ef:26:5a:25:05:4f:0b:49:8a:3a:9a:b6: b2:17:05:92:d0:a6:2a:5f:02:2b:89:a5:f7:8e:f3:04:f7:6c: ce:48:ed:51:e8:c3:91:ff:f9:e2:dc:db:89:a3:3b:6f:66:6a: d5:72:ca:64:21:27:25:60:76:39:a9:2f:c3:c5:03:0b:1e:de: b7:f0:ab:21:54:77:61:cd:25:02:60:18:b8:9c:56:92:93:8b: 61:8a:99:f9:de:46:d5:30:60:81:b2:2e:a1:f5:4a:89:09:e9: d5:77:5d:d1:d3:a0:de:91:d2:fb:2e:94:dd:97:f7:fd:6c:57: 06:cb:1c:c6:d0:96:d0:4e:c1:3d:95:c2:3a:94:b4:6b:5a:fb: e5:35:d0:05:2c:90:e7:d0:76:b5:1c:d9:e5:0e:7d:63:da:93: 77:d8:ae:c4:81:8f:35:4a:b2:db:e9:6a:79:52:f0:bb:24:75: 6d:21:d1:0c:fc:6b:d0:38:71:ad:84:89:d6:3a:b5:6f:87:67: f5:af:78:d0:50:66:6b:82:fe:61:96:fd:26:18:40:97:a4:9f: 85:7c:3f:7c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA6AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFFNEMxMTAvBgNVBAUTKEFCNjdFODJGQzg2QUFDQTgyQUNGRjhEQzM2NDVDRDcx NjEwMTNGNzYwHhcNMjYwNDA0MjAxNDAyWhcNMjYwNDExMjAxNDAyWjAYMRYwFAYD VQQDEw02OWQxNzEwYi03ZWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0HmGDPZzYUC6smQaRxoSHvFl0qOuNdyrYWtNec+GsS1hFc5lCRE8yMyIHNX/ 0ayxH4NiEDm2wEMARDz0MbChGZG6apMO+MuFkEFKwmu45scTt8frl4G54mEfw5A1 U9X3rKUkzwEBrXL7p0aQHRCp4ftdN0L2k1J8Hgvn3fCyBDVPt2Vu49TTK40Zajek 4FARfS7liNCRUveL0pqPAKIuDUBj+CO/SH29h4BozOYaHKUfw//6IhMpvZPn9roM FIFuGemfzpQijoqEtSD//RnLRNQ8bSjrQRy6oS1xDSN9Kb7Z1GyMzVFvBOd5NoSf 1pgfEFl0fYQwbWqJde5kx5RyaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGTyLApG +Pbsd4h2sjlBltaDIGuTMB8GA1UdIwQYMBaAFKtn6C/IaqyoKs/43DZFzXFhAT92 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUU0Qy83REFEQTU2Q0Q5 NEQxMUVBQTYwNEFDNTNDNEY5QUUwMi9xMmZvTDhocXJLZ3F6X2pjTmtYTmNXRUJQ M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3EyZm9MOGhxcktncXpfamNOa1hOY1dFQlAzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUU0Qy83REFEQTU2Q0Q5NEQxMUVBQTYwNEFDNTNDNEY5QUUwMi9xMmZvTDhocXJL Z3F6X2pjTmtYTmNXRUJQM1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARLSp5vvbXNFrCWpY6GoF6jlz06GMwmwo1ECT0osK5ZBkGkj05sRqND4z7yZa JQVPC0mKOpq2shcFktCmKl8CK4ml947zBPdszkjtUejDkf/54tzbiaM7b2Zq1XLK ZCEnJWB2Oakvw8UDCx7et/CrIVR3Yc0lAmAYuJxWkpOLYYqZ+d5G1TBggbIuofVK iQnp1Xdd0dOg3pHS+y6U3Zf3/WxXBsscxtCW0E7BPZXCOpS0a1r75TXQBSyQ59B2 tRzZ5Q59Y9qTd9iuxIGPNUqy2+lqeVLwuyR1bSHRDPxr0DhxrYSJ1jq1b4dn9a94 0FBma4L+YZb9JhhAl6SfhXw/fA== -----END CERTIFICATE-----Generated at Mon Apr 6 08:54:14 2026 by rpki-client