$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8A55/5FC658260BC911EE9C6F185EC4F9AE02/QyiNyelBKGI4XB6D3TeGNYMyDRg.mft File: QyiNyelBKGI4XB6D3TeGNYMyDRg.mft (raw, json) Hash identifier: i0CwZzTVbiMpaiWM1sUV7H7pnHNB1QToSzRQWiY7+Y0= Subject key identifier: 4A:38:51:0A:FE:9B:CC:7F:1F:9E:4B:BD:2B:03:CD:9D:0B:E9:2D:B8 Authority key identifier: 43:28:8D:C9:E9:41:28:62:38:5C:1E:83:DD:37:86:35:83:32:0D:18 Certificate issuer: /CN=A91D8A55/serialNumber=43288DC9E9412862385C1E83DD37863583320D18 Certificate serial: 0219 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QyiNyelBKGI4XB6D3TeGNYMyDRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8A55/5FC658260BC911EE9C6F185EC4F9AE02/QyiNyelBKGI4XB6D3TeGNYMyDRg.mft Manifest number: 0212 Signing time: Sun 05 Apr 2026 02:30:25 +0000 Manifest this update: Sun 05 Apr 2026 02:30:25 +0000 Manifest next update: Sun 12 Apr 2026 02:30:25 +0000 Files and hashes: 1: QyiNyelBKGI4XB6D3TeGNYMyDRg.crl (hash: uDOrYlEbtGdnuBYqHjhX/K10CT2Rv3CHicyXnhezr9A=) 2: D1596F0E0BCF11EE8FB8EE16C4F9AE02.roa (hash: Ig1Z+CeptiyE3XhLnjUeeZBH7sjFodnB6lczhxW6Yfc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8A55/5FC658260BC911EE9C6F185EC4F9AE02/QyiNyelBKGI4XB6D3TeGNYMyDRg.crl rsync://rpki.apnic.net/member_repository/A91D8A55/5FC658260BC911EE9C6F185EC4F9AE02/QyiNyelBKGI4XB6D3TeGNYMyDRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QyiNyelBKGI4XB6D3TeGNYMyDRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 02:30:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 537 (0x219) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8A55, serialNumber=43288DC9E9412862385C1E83DD37863583320D18 Validity Not Before: Apr 5 02:30:25 2026 GMT Not After : Apr 12 02:30:25 2026 GMT Subject: CN=69d1c941-fa27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:55:71:1e:24:b8:2c:48:09:27:e9:56:85:dd: 7d:a5:a8:ca:cb:43:16:38:3c:6e:40:fb:b5:bb:5d: 4e:c8:b5:ec:2c:fb:fc:a7:ab:6a:20:2b:74:d3:dc: a3:c0:51:54:8a:6e:b0:fd:2c:cd:2b:ba:4c:5b:11: af:50:63:a1:b9:b2:31:9c:86:f0:85:c7:10:61:ea: c9:f8:ec:b8:93:7b:1d:06:37:23:89:fd:fa:72:5c: 56:3e:2a:29:53:69:eb:8d:98:6a:22:53:c9:7e:03: 83:28:11:04:cd:23:3b:04:42:47:0f:e9:dc:a1:b4: 20:13:33:37:94:2b:33:dd:86:66:da:7b:8e:95:03: 27:dd:6a:7e:4c:a4:69:0e:11:d3:e7:0b:4e:6f:48: 8a:e4:5e:ec:c4:18:a0:99:bf:c2:50:21:e4:97:b7: ea:61:09:b7:b3:b6:61:f2:35:5c:31:e4:ea:dd:58: 06:11:6d:50:41:b7:f6:b4:82:60:d0:22:d9:5e:f1: d2:92:bc:21:5c:b2:a0:00:07:c2:aa:22:94:99:fc: 49:80:16:cb:3a:0b:5e:e6:37:2b:f1:7a:0c:4f:0f: c4:ef:b3:e6:6c:71:95:c5:4a:55:1e:55:e0:6b:5b: b8:41:76:3a:0f:9c:99:64:d9:81:d3:2c:07:49:f6: 2b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:38:51:0A:FE:9B:CC:7F:1F:9E:4B:BD:2B:03:CD:9D:0B:E9:2D:B8 X509v3 Authority Key Identifier: keyid:43:28:8D:C9:E9:41:28:62:38:5C:1E:83:DD:37:86:35:83:32:0D:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8A55/5FC658260BC911EE9C6F185EC4F9AE02/QyiNyelBKGI4XB6D3TeGNYMyDRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QyiNyelBKGI4XB6D3TeGNYMyDRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8A55/5FC658260BC911EE9C6F185EC4F9AE02/QyiNyelBKGI4XB6D3TeGNYMyDRg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:e4:b6:82:62:7c:23:9b:28:bf:f8:6e:38:48:b7:c8:ce:41: a5:b5:b3:f1:75:45:9c:c2:8b:79:e8:d8:b9:f4:ac:98:77:58: 74:5a:80:3f:a2:ae:10:b2:9b:3c:0c:d9:a2:7f:ab:57:24:65: 65:a9:7d:57:df:8e:a0:fd:4c:c2:39:65:32:21:62:9b:29:86: 85:d7:19:5e:9a:cc:1b:42:20:97:9f:26:c7:6b:20:59:67:c9: 03:2b:87:93:07:6d:01:0a:56:50:e2:8a:28:d6:d1:39:1d:1d: 1f:94:6a:a7:36:e3:21:bc:a3:a0:dc:4c:0d:64:38:06:6e:58: 26:87:89:40:84:fe:bb:78:7f:73:bf:28:f6:41:75:f3:d3:8b: 56:d0:a2:25:3d:67:bc:2a:c7:35:ff:48:3f:7b:e9:45:ef:07: 29:e4:3b:35:2d:d9:18:24:93:7d:a8:7b:ae:05:b8:84:90:4b: b6:c6:82:cf:6e:90:19:4e:37:66:45:22:57:37:4d:7e:cd:ee: 09:ce:7d:cf:c9:de:b5:8f:5c:fb:62:cf:cf:18:36:22:8c:a7: 8f:29:0a:78:40:f8:19:53:c2:70:57:b1:77:5c:6f:a9:99:31: 0a:71:d3:04:3e:70:ca:9b:95:96:06:b5:97:90:53:75:43:0f: f8:fe:b6:9b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhBNTUxMTAvBgNVBAUTKDQzMjg4REM5RTk0MTI4NjIzODVDMUU4M0REMzc4NjM1 ODMzMjBEMTgwHhcNMjYwNDA1MDIzMDI1WhcNMjYwNDEyMDIzMDI1WjAYMRYwFAYD VQQDEw02OWQxYzk0MS1mYTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx1VxHiS4LEgJJ+lWhd19pajKy0MWODxuQPu1u11OyLXsLPv8p6tqICt009yj wFFUim6w/SzNK7pMWxGvUGOhubIxnIbwhccQYerJ+Oy4k3sdBjcjif36clxWPiop U2nrjZhqIlPJfgODKBEEzSM7BEJHD+ncobQgEzM3lCsz3YZm2nuOlQMn3Wp+TKRp DhHT5wtOb0iK5F7sxBigmb/CUCHkl7fqYQm3s7Zh8jVcMeTq3VgGEW1QQbf2tIJg 0CLZXvHSkrwhXLKgAAfCqiKUmfxJgBbLOgte5jcr8XoMTw/E77PmbHGVxUpVHlXg a1u4QXY6D5yZZNmB0ywHSfYrfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEo4UQr+ m8x/H55LvSsDzZ0L6S24MB8GA1UdIwQYMBaAFEMojcnpQShiOFweg903hjWDMg0Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEE1NS81RkM2NTgyNjBC QzkxMUVFOUM2RjE4NUVDNEY5QUUwMi9ReWlOeWVsQktHSTRYQjZEM1RlR05ZTXlE UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1F5aU55ZWxCS0dJNFhCNkQzVGVHTllNeURSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OEE1NS81RkM2NTgyNjBCQzkxMUVFOUM2RjE4NUVDNEY5QUUwMi9ReWlOeWVsQktH STRYQjZEM1RlR05ZTXlEUmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfeS2gmJ8I5sov/huOEi3yM5BpbWz8XVFnMKLeejYufSsmHdYdFqAP6KuELKb PAzZon+rVyRlZal9V9+OoP1MwjllMiFimymGhdcZXprMG0Igl58mx2sgWWfJAyuH kwdtAQpWUOKKKNbROR0dH5RqpzbjIbyjoNxMDWQ4Bm5YJoeJQIT+u3h/c78o9kF1 89OLVtCiJT1nvCrHNf9IP3vpRe8HKeQ7NS3ZGCSTfah7rgW4hJBLtsaCz26QGU43 ZkUiVzdNfs3uCc59z8netY9c+2LPzxg2IoynjykKeED4GVPCcFexd1xvqZkxCnHT BD5wypuVlga1l5BTdUMP+P62mw== -----END CERTIFICATE-----Generated at Mon Apr 6 08:38:10 2026 by rpki-client