$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.mft File: QVQG7YC02Sekeai6BCEWri0RoaY.mft (raw, json) Hash identifier: weFiUGENY6rGYvNGmuudMYstYZTKCETRmJBAR7x5ZJo= Subject key identifier: 70:F8:04:E0:71:88:CF:D5:D2:71:A2:28:12:8E:33:6A:F7:B2:4D:F8 Authority key identifier: 41:54:06:ED:80:B4:D9:27:A4:79:A8:BA:04:21:16:AE:2D:11:A1:A6 Certificate issuer: /CN=A91EFBA1/serialNumber=415406ED80B4D927A479A8BA042116AE2D11A1A6 Certificate serial: 1994 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVQG7YC02Sekeai6BCEWri0RoaY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.mft Manifest number: 1954 Signing time: Thu 12 Mar 2026 16:19:30 +0000 Manifest this update: Thu 12 Mar 2026 16:19:30 +0000 Manifest next update: Thu 19 Mar 2026 16:19:30 +0000 Files and hashes: 1: QVQG7YC02Sekeai6BCEWri0RoaY.crl (hash: J1Z2gPV5HG+Zkj8N+Xxh5+zg5JtPu5np3lcpET4sMb0=) 2: 62C9C1CEE03111EEBECE581EC4F9AE02.roa (hash: S3EQx5yzT1EViiEO5X7LEoaWX/wa+Lut/QebUP/xU5w=) 3: 215F871ECF5E11F0872AA04EC4F9AE02.roa (hash: Bha1I51axWyRop8A3u5fRhgKH79agSu0IebDN4kf2vk=) 4: 43E9842C185A11EF9D0C4338C4F9AE02.roa (hash: toEz6erU7+D4rMae1mPWIdqI8DueTUnpGy4FNYrk4Rw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.crl rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVQG7YC02Sekeai6BCEWri0RoaY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Mar 2026 16:19:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6548 (0x1994) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFBA1, serialNumber=415406ED80B4D927A479A8BA042116AE2D11A1A6 Validity Not Before: Mar 12 16:19:30 2026 GMT Not After : Mar 19 16:19:30 2026 GMT Subject: CN=69b2e792-bf0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:1a:9f:f1:62:29:88:54:5f:d3:d7:14:d8:f2: 4c:9d:06:15:11:ea:fb:2b:05:21:d6:ea:8c:d9:65: fd:c5:89:fd:86:5c:ff:59:67:20:b3:34:06:84:f2: 03:07:9d:88:eb:0b:1e:d1:fc:0a:34:95:4f:3a:98: 71:05:d3:d9:28:9a:7c:28:c6:37:70:42:de:9b:e8: 7e:9b:07:fe:ca:12:8f:d1:f4:83:4a:68:53:22:24: 96:b3:1e:95:67:7b:4c:c5:4e:53:0e:d5:10:1f:f7: 21:13:87:de:14:3d:0c:ee:af:44:a9:b9:75:90:e4: 40:a7:fd:64:cd:dd:66:ca:77:5a:bb:4c:48:55:c1: 0a:a8:a8:78:b5:d3:27:73:03:d8:7e:4f:6a:f4:d0: 44:62:1f:8c:79:e3:36:96:94:d6:75:d3:a4:32:11: 93:fa:08:1b:42:f4:4c:ef:74:d3:65:22:78:94:da: 4d:25:95:68:c5:a3:cb:3c:5e:2e:6a:19:42:d7:3a: fa:87:a6:17:73:39:da:9d:48:73:20:57:32:ab:f6: f4:57:68:aa:2d:67:67:b4:8d:95:a7:2a:81:fe:7e: b7:70:da:47:bd:23:9f:dc:59:4c:68:e5:97:71:16: 49:9d:ab:33:bf:54:1b:fc:79:75:1e:9a:41:5a:2f: b5:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:F8:04:E0:71:88:CF:D5:D2:71:A2:28:12:8E:33:6A:F7:B2:4D:F8 X509v3 Authority Key Identifier: keyid:41:54:06:ED:80:B4:D9:27:A4:79:A8:BA:04:21:16:AE:2D:11:A1:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVQG7YC02Sekeai6BCEWri0RoaY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:ec:09:2b:2e:87:d2:69:af:34:b6:8f:39:6f:f6:d8:13:4a: 0b:aa:b3:c9:9b:b7:46:4b:cf:c5:e1:69:45:9b:d9:79:d2:23: 48:e5:e3:6f:45:70:cb:bd:a3:84:da:4d:53:25:a2:cb:d8:77: 3c:d9:12:c7:51:2d:54:90:0c:52:e5:e8:e3:2f:c2:21:36:f9: 83:34:25:5d:b3:9b:cf:32:43:8f:45:19:7e:03:0c:57:19:f1: 64:3e:82:5d:7c:4c:53:6e:16:d4:f7:76:e9:aa:65:fd:69:a2: d6:f4:47:08:0e:6e:46:08:76:0c:8e:91:12:d7:b3:4b:2b:8f: f8:dc:ed:8f:2a:c3:83:42:8e:97:83:41:6a:91:4d:86:05:e6: 9b:e3:82:c7:21:e2:e4:2d:73:15:1b:ca:7b:60:a4:b9:fb:8c: 25:32:25:99:1a:a4:95:0a:69:2d:0c:2a:88:14:15:d1:21:80: 49:c5:a2:ff:4b:05:bf:f3:96:d3:1b:26:7c:1a:58:04:0e:e7: f4:0d:82:c4:ad:07:5a:45:eb:f2:8e:5b:45:ab:d1:7e:0e:b0: e1:03:ae:f8:a7:db:7f:41:2d:80:ea:fd:3c:ca:cd:8a:c4:2f: 5e:93:2d:f5:37:63:e4:f5:66:59:bb:3e:81:ee:f7:a6:71:19: f3:25:1b:f5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZCQTExMTAvBgNVBAUTKDQxNTQwNkVEODBCNEQ5MjdBNDc5QThCQTA0MjExNkFF MkQxMUExQTYwHhcNMjYwMzEyMTYxOTMwWhcNMjYwMzE5MTYxOTMwWjAYMRYwFAYD VQQDEw02OWIyZTc5Mi1iZjBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5hqf8WIpiFRf09cU2PJMnQYVEer7KwUh1uqM2WX9xYn9hlz/WWcgszQGhPID B52I6wse0fwKNJVPOphxBdPZKJp8KMY3cELem+h+mwf+yhKP0fSDSmhTIiSWsx6V Z3tMxU5TDtUQH/chE4feFD0M7q9Eqbl1kORAp/1kzd1myndau0xIVcEKqKh4tdMn cwPYfk9q9NBEYh+MeeM2lpTWddOkMhGT+ggbQvRM73TTZSJ4lNpNJZVoxaPLPF4u ahlC1zr6h6YXcznanUhzIFcyq/b0V2iqLWdntI2VpyqB/n63cNpHvSOf3FlMaOWX cRZJnaszv1Qb/Hl1HppBWi+1SwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHD4BOBx iM/V0nGiKBKOM2r3sk34MB8GA1UdIwQYMBaAFEFUBu2AtNknpHmougQhFq4tEaGm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkJBMS8yQUQ1MUY0Qzk5 MDMxMUU3QTVFOTVDNkZDNEY5QUUwMi9RVlFHN1lDMDJTZWtlYWk2QkNFV3JpMFJv YVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FWUUc3WUMwMlNla2VhaTZCQ0VXcmkwUm9hWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RkJBMS8yQUQ1MUY0Qzk5MDMxMUU3QTVFOTVDNkZDNEY5QUUwMi9RVlFHN1lDMDJT ZWtlYWk2QkNFV3JpMFJvYVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAO+wJKy6H0mmvNLaPOW/22BNKC6qzyZu3RkvPxeFpRZvZedIjSOXjb0Vwy72j hNpNUyWiy9h3PNkSx1EtVJAMUuXo4y/CITb5gzQlXbObzzJDj0UZfgMMVxnxZD6C XXxMU24W1Pd26apl/Wmi1vRHCA5uRgh2DI6REtezSyuP+NztjyrDg0KOl4NBapFN hgXmm+OCxyHi5C1zFRvKe2CkufuMJTIlmRqklQppLQwqiBQV0SGAScWi/0sFv/OW 0xsmfBpYBA7n9A2CxK0HWkXr8o5bRavRfg6w4QOu+Kfbf0EtgOr9PMrNisQvXpMt 9Tdj5PVmWbs+ge73pnEZ8yUb9Q== -----END CERTIFICATE-----Generated at Fri Mar 13 14:53:41 2026 by rpki-client