$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft File: QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft (raw, json) Hash identifier: mO2BNC3cRpbUR71KQF1lAQIJxl4Ji/xREV8rpLUp8AQ= Subject key identifier: 7D:EA:4F:0D:E7:D6:97:CF:5A:1F:87:E4:17:A8:35:D8:39:43:80:6A Authority key identifier: 41:2A:8D:17:DF:90:7A:78:37:65:01:2A:83:B7:8B:7C:B1:CA:25:12 Certificate issuer: /CN=A91D8BB1/serialNumber=412A8D17DF907A783765012A83B78B7CB1CA2512 Certificate serial: 91 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft Manifest number: 91 Signing time: Tue 03 Mar 2026 07:07:00 +0000 Manifest this update: Tue 03 Mar 2026 07:07:00 +0000 Manifest next update: Tue 10 Mar 2026 07:07:00 +0000 Files and hashes: 1: QSqNF9-Qeng3ZQEqg7eLfLHKJRI.crl (hash: 1fi+aab1sJbnRt0+ljJqkK7AA5mEAEzO8cvql6YwR0E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.crl rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 07:06:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 145 (0x91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8BB1, serialNumber=412A8D17DF907A783765012A83B78B7CB1CA2512 Validity Not Before: Mar 3 07:07:00 2026 GMT Not After : Mar 10 07:07:00 2026 GMT Subject: CN=69a68894-1e6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:39:18:e1:a2:6d:d9:6d:42:9f:5e:dd:cf:80: 8c:f9:ef:22:ac:ea:9a:26:32:21:a9:ac:68:db:c2: 2c:36:28:61:4b:95:31:48:6d:45:88:88:6b:83:30: ea:5d:31:33:67:45:e2:2e:26:82:d9:97:da:c3:02: af:d1:8e:08:d2:9c:29:76:a2:dc:48:7e:f2:e5:00: e4:ee:75:5f:cd:f7:aa:f9:93:5b:ef:6a:fe:b5:7d: df:62:a9:1e:80:66:64:e2:44:77:27:1c:69:c8:b8: 6a:1f:b2:33:86:aa:cb:79:d1:49:7b:6e:31:83:d9: 29:5e:0f:ee:6d:0f:6e:b9:02:c8:13:b8:58:d4:ac: b1:68:22:34:fb:36:2c:63:49:11:66:39:6a:9b:86: 06:c6:9d:12:8f:85:f1:6c:1e:7a:8d:f2:8b:f8:b1: be:58:23:d8:42:a5:ae:e6:7b:7f:a2:80:70:1e:b0: aa:69:6d:1f:3f:79:6c:de:56:f8:49:19:f7:c1:1c: 5e:97:78:e3:ae:82:c1:40:74:ba:9a:97:5b:0e:1c: 1c:3d:fb:7e:ff:b6:94:f2:82:e0:fb:6c:ff:3e:d1: bf:f2:4e:f3:8c:71:48:70:ff:2a:da:30:1b:71:c4: 88:06:07:b8:50:e9:15:cf:fa:f0:5d:0f:92:c8:da: 97:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:EA:4F:0D:E7:D6:97:CF:5A:1F:87:E4:17:A8:35:D8:39:43:80:6A X509v3 Authority Key Identifier: keyid:41:2A:8D:17:DF:90:7A:78:37:65:01:2A:83:B7:8B:7C:B1:CA:25:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:43:c5:57:bc:9d:14:a2:ab:cc:15:11:29:f5:be:0d:fb:97: ec:81:19:5f:d2:5d:74:f1:60:76:fe:1a:24:a0:d0:91:40:3f: 37:c0:e5:26:94:f5:90:e2:2c:58:b4:ec:a9:0f:33:6f:00:2c: 0c:22:96:1f:8f:e4:cc:af:5f:ed:27:7b:e1:aa:b4:c4:48:03: c9:2c:74:50:1f:3d:b3:b9:a5:5a:73:7d:8b:80:4a:a1:09:4b: 6c:12:41:5e:be:ad:52:ef:1d:3f:9e:6f:f7:d9:89:32:39:fb: a2:f5:b0:62:5d:74:c0:f0:fa:f4:c7:a7:f9:c6:f1:5b:23:18: 4a:2d:bb:8d:dd:8d:98:c9:64:72:ec:f8:63:0c:27:76:77:e5: 5f:f2:4f:4e:89:1d:75:63:85:ae:3b:af:40:d3:0a:d6:a6:8e: 55:b3:e9:43:a1:36:9d:44:c9:38:fb:4d:15:e2:f6:97:73:b2: 23:28:f8:a2:1e:f8:b3:53:a2:b2:69:0a:9c:e4:c0:7d:bc:48: 57:ee:7e:d4:b5:23:49:1c:87:60:14:e2:c7:4d:6c:96:b5:bb: d1:a0:97:11:fc:ce:01:e2:c7:61:b3:df:2e:bc:35:95:db:12: 03:ee:3f:79:45:7a:3f:36:46:38:7f:78:cb:ed:65:cc:5a:ed: 1a:14:6f:00 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhCQjExMTAvBgNVBAUTKDQxMkE4RDE3REY5MDdBNzgzNzY1MDEyQTgzQjc4QjdD QjFDQTI1MTIwHhcNMjYwMzAzMDcwNzAwWhcNMjYwMzEwMDcwNzAwWjAYMRYwFAYD VQQDEw02OWE2ODg5NC0xZTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtDkY4aJt2W1Cn17dz4CM+e8irOqaJjIhqaxo28IsNihhS5UxSG1FiIhrgzDq XTEzZ0XiLiaC2ZfawwKv0Y4I0pwpdqLcSH7y5QDk7nVfzfeq+ZNb72r+tX3fYqke gGZk4kR3JxxpyLhqH7IzhqrLedFJe24xg9kpXg/ubQ9uuQLIE7hY1KyxaCI0+zYs Y0kRZjlqm4YGxp0Sj4XxbB56jfKL+LG+WCPYQqWu5nt/ooBwHrCqaW0fP3ls3lb4 SRn3wRxel3jjroLBQHS6mpdbDhwcPft+/7aU8oLg+2z/PtG/8k7zjHFIcP8q2jAb ccSIBge4UOkVz/rwXQ+SyNqXvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH3qTw3n 1pfPWh+H5BeoNdg5Q4BqMB8GA1UdIwQYMBaAFEEqjRffkHp4N2UBKoO3i3yxyiUS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEJCMS81MUY5RjYxNDNE MjUxMUYwODBDNDg5NTVDNEY5QUUwMi9RU3FORjktUWVuZzNaUUVxZzdlTGZMSEtK UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FTcU5GOS1RZW5nM1pRRXFnN2VMZkxIS0pSSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OEJCMS81MUY5RjYxNDNEMjUxMUYwODBDNDg5NTVDNEY5QUUwMi9RU3FORjktUWVu ZzNaUUVxZzdlTGZMSEtKUkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAO0PFV7ydFKKrzBURKfW+DfuX7IEZX9JddPFgdv4aJKDQkUA/N8DlJpT1kOIs WLTsqQ8zbwAsDCKWH4/kzK9f7Sd74aq0xEgDySx0UB89s7mlWnN9i4BKoQlLbBJB Xr6tUu8dP55v99mJMjn7ovWwYl10wPD69Men+cbxWyMYSi27jd2NmMlkcuz4Ywwn dnflX/JPTokddWOFrjuvQNMK1qaOVbPpQ6E2nUTJOPtNFeL2l3OyIyj4oh74s1Oi smkKnOTAfbxIV+5+1LUjSRyHYBTix01slrW70aCXEfzOAeLHYbPfLrw1ldsSA+4/ eUV6PzZGOH94y+1lzFrtGhRvAA== -----END CERTIFICATE-----Generated at Wed Mar 4 08:29:01 2026 by rpki-client