$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.mft File: qSFNuZGEmynE8EXDNkcOnYLEjOI.mft (raw, json) Hash identifier: xPWN+SPd+26g6YNVRuQ2mIBYEFWOz45PrpdrbUzpVqQ= Subject key identifier: 69:1E:06:D3:DC:0E:11:A7:87:24:6E:D3:5B:00:15:64:F5:A7:BD:32 Authority key identifier: A9:21:4D:B9:91:84:9B:29:C4:F0:45:C3:36:47:0E:9D:82:C4:8C:E2 Certificate issuer: /CN=A91EB929/serialNumber=A9214DB991849B29C4F045C336470E9D82C48CE2 Certificate serial: 0197 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFNuZGEmynE8EXDNkcOnYLEjOI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.mft Manifest number: 018F Signing time: Sun 05 Apr 2026 03:55:20 +0000 Manifest this update: Sun 05 Apr 2026 03:55:20 +0000 Manifest next update: Sun 12 Apr 2026 03:55:20 +0000 Files and hashes: 1: qSFNuZGEmynE8EXDNkcOnYLEjOI.crl (hash: U3+Ctw7k3Ai1+2NRWjSLje+2ZblQTJrbW5oTuyBUslg=) 2: 70C04006D5EF11EE8279357EC4F9AE02.roa (hash: PAkdiPUOa/hZ21DhoJPT77EObUJ8xzL2z4kBUhn+7Zo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.crl rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFNuZGEmynE8EXDNkcOnYLEjOI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 03:55:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 407 (0x197) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB929, serialNumber=A9214DB991849B29C4F045C336470E9D82C48CE2 Validity Not Before: Apr 5 03:55:20 2026 GMT Not After : Apr 12 03:55:20 2026 GMT Subject: CN=69d1dd28-0f9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ef:b6:28:bc:ff:ec:9a:43:3e:7f:1b:62:a6: 96:59:0b:7f:b2:72:c5:af:31:dc:3a:65:c0:b6:02: 5e:af:e6:a4:c4:d5:2d:43:3c:97:d0:a2:a6:5b:53: 4c:88:04:e2:7e:0b:65:77:2d:b5:7c:cd:33:bb:1a: 08:ba:7c:b9:b9:fa:fe:b6:fb:ff:de:71:d9:d4:9d: bd:89:3a:ec:b5:af:cd:a5:9e:ea:19:95:7c:16:54: 59:3b:15:87:da:d2:98:65:db:e1:33:b9:b4:a6:c2: b3:5b:74:37:b7:ca:83:ac:5e:03:5f:d9:66:49:49: 9e:ec:e8:d4:c0:1e:6b:b4:db:e2:31:c1:18:f2:ae: f8:0b:72:77:e0:46:47:35:85:f8:30:e6:c0:ef:3d: 71:ba:fc:7c:b6:e1:88:29:61:eb:c6:93:6b:a1:4e: e1:b4:2b:f1:42:04:1c:43:d0:46:82:92:61:d1:ad: b9:a7:10:99:23:dd:96:34:6c:60:d0:d5:22:4c:ba: e6:f1:f2:fd:ea:2b:8d:02:00:3f:66:5a:c5:86:49: 8f:4a:92:c5:db:34:fb:39:fa:7a:18:79:19:9b:97: 6c:2f:73:51:7c:55:61:3f:df:08:fd:18:bd:0f:d6: ed:56:2d:56:b7:a8:21:eb:96:61:b4:b2:0e:88:ab: 41:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:1E:06:D3:DC:0E:11:A7:87:24:6E:D3:5B:00:15:64:F5:A7:BD:32 X509v3 Authority Key Identifier: keyid:A9:21:4D:B9:91:84:9B:29:C4:F0:45:C3:36:47:0E:9D:82:C4:8C:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFNuZGEmynE8EXDNkcOnYLEjOI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:05:c1:8b:32:90:a3:5e:5e:78:b5:d0:f2:e7:1e:8a:39:ca: 93:c5:71:d0:48:c4:e3:7a:ae:27:27:ad:a5:d3:26:44:41:3e: 7c:b1:1e:f8:e3:f5:4b:fd:70:01:69:1c:c7:26:6a:e3:5b:4a: c7:d0:cb:17:e2:f1:79:89:fd:96:73:81:02:e5:8a:71:03:1a: 58:58:44:44:cb:5a:72:39:58:94:47:87:ed:d7:0c:06:7c:79: 5e:95:0a:d3:6a:a2:6b:ae:d7:de:51:2e:11:8c:ae:21:4d:e8: 71:f5:52:7a:26:c5:54:fc:8a:52:48:15:f0:bd:ff:ba:41:43: 77:33:5c:66:79:27:d8:87:37:f5:f7:44:fb:f8:7e:d9:1f:dc: a2:c7:ee:b2:a7:27:f8:e0:9f:d8:07:6b:fa:8c:e4:42:c2:81: 0b:83:d9:b4:02:c5:22:c4:75:cb:33:58:1f:87:aa:c3:bc:b8: 6a:d4:cb:ad:6b:ae:c6:92:19:f7:32:91:85:67:46:74:05:fa: 05:a2:57:46:41:43:e8:e1:d5:fa:39:70:da:51:50:db:f0:03: 7f:02:97:64:93:c0:37:7f:f2:f0:2d:12:72:bc:2b:cd:42:2d: 6c:cc:c8:2c:ea:aa:a6:f3:08:5b:60:27:21:d0:ff:5d:95:93: e8:1a:75:fc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI5MjkxMTAvBgNVBAUTKEE5MjE0REI5OTE4NDlCMjlDNEYwNDVDMzM2NDcwRTlE ODJDNDhDRTIwHhcNMjYwNDA1MDM1NTIwWhcNMjYwNDEyMDM1NTIwWjAYMRYwFAYD VQQDEw02OWQxZGQyOC0wZjlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnO+2KLz/7JpDPn8bYqaWWQt/snLFrzHcOmXAtgJer+akxNUtQzyX0KKmW1NM iATifgtldy21fM0zuxoIuny5ufr+tvv/3nHZ1J29iTrsta/NpZ7qGZV8FlRZOxWH 2tKYZdvhM7m0psKzW3Q3t8qDrF4DX9lmSUme7OjUwB5rtNviMcEY8q74C3J34EZH NYX4MObA7z1xuvx8tuGIKWHrxpNroU7htCvxQgQcQ9BGgpJh0a25pxCZI92WNGxg 0NUiTLrm8fL96iuNAgA/ZlrFhkmPSpLF2zT7Ofp6GHkZm5dsL3NRfFVhP98I/Ri9 D9btVi1Wt6gh65ZhtLIOiKtBCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGkeBtPc DhGnhyRu01sAFWT1p70yMB8GA1UdIwQYMBaAFKkhTbmRhJspxPBFwzZHDp2CxIzi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjkyOS9CRUJERUE5OEQ1 RUUxMUVFOUUyMDE3N0RDNEY5QUUwMi9xU0ZOdVpHRW15bkU4RVhETmtjT25ZTEVq T0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FTRk51WkdFbXluRThFWEROa2NPbllMRWpPSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjkyOS9CRUJERUE5OEQ1RUUxMUVFOUUyMDE3N0RDNEY5QUUwMi9xU0ZOdVpHRW15 bkU4RVhETmtjT25ZTEVqT0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhQXBizKQo15eeLXQ8uceijnKk8Vx0EjE43quJyetpdMmREE+fLEe+OP1S/1w AWkcxyZq41tKx9DLF+LxeYn9lnOBAuWKcQMaWFhERMtacjlYlEeH7dcMBnx5XpUK 02qia67X3lEuEYyuIU3ocfVSeibFVPyKUkgV8L3/ukFDdzNcZnkn2Ic39fdE+/h+ 2R/cosfusqcn+OCf2Adr+ozkQsKBC4PZtALFIsR1yzNYH4eqw7y4atTLrWuuxpIZ 9zKRhWdGdAX6BaJXRkFD6OHV+jlw2lFQ2/ADfwKXZJPAN3/y8C0ScrwrzUItbMzI LOqqpvMIW2AnIdD/XZWT6Bp1/A== -----END CERTIFICATE-----Generated at Mon Apr 6 08:49:01 2026 by rpki-client