$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFA9E/8F122802D59E11F082F64F17C4F9AE02/QwTKMwBGEXJNpcM1jPO2gGHKSoo.mft File: QwTKMwBGEXJNpcM1jPO2gGHKSoo.mft (raw, json) Hash identifier: 1mu0e8juxfdvILW7E6PwOhAyu33lTYWUNCel2y+1elQ= Subject key identifier: 9D:20:90:B8:06:5E:E6:95:A5:E5:86:B7:02:65:78:66:5D:1C:3C:9A Authority key identifier: 43:04:CA:33:00:46:11:72:4D:A5:C3:35:8C:F3:B6:80:61:CA:4A:8A Certificate issuer: /CN=A91FFA9E/serialNumber=4304CA33004611724DA5C3358CF3B68061CA4A8A Certificate serial: 40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QwTKMwBGEXJNpcM1jPO2gGHKSoo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FFA9E/8F122802D59E11F082F64F17C4F9AE02/QwTKMwBGEXJNpcM1jPO2gGHKSoo.mft Manifest number: 40 Signing time: Sun 05 Apr 2026 07:49:00 +0000 Manifest this update: Sun 05 Apr 2026 07:48:59 +0000 Manifest next update: Sun 12 Apr 2026 07:48:59 +0000 Files and hashes: 1: QwTKMwBGEXJNpcM1jPO2gGHKSoo.crl (hash: 8eYm6/sRY8x1tUvuHLghE8kiiiZRUoJzxtusn9l9DGk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FFA9E/8F122802D59E11F082F64F17C4F9AE02/QwTKMwBGEXJNpcM1jPO2gGHKSoo.crl rsync://rpki.apnic.net/member_repository/A91FFA9E/8F122802D59E11F082F64F17C4F9AE02/QwTKMwBGEXJNpcM1jPO2gGHKSoo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QwTKMwBGEXJNpcM1jPO2gGHKSoo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 07:48:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFA9E, serialNumber=4304CA33004611724DA5C3358CF3B68061CA4A8A Validity Not Before: Apr 5 07:48:59 2026 GMT Not After : Apr 12 07:48:59 2026 GMT Subject: CN=69d213ec-382c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ab:53:05:77:0f:cd:21:e3:c5:a7:28:3a:08: 23:87:5f:3d:1b:47:54:98:9b:93:96:1d:3f:6f:b5: a9:2f:2d:9b:22:84:a0:8b:d4:31:b1:7b:7d:cc:d6: 92:79:8e:c0:52:f4:dd:cb:23:57:2a:22:f0:57:eb: 69:53:6b:32:21:bf:e9:8a:d9:ab:75:be:e4:58:68: 09:9d:53:e1:9a:09:27:47:05:c7:ee:2a:85:a7:24: 71:e6:cd:17:0e:e7:0c:28:2b:2f:02:2c:07:d8:47: 55:92:92:d4:b2:8b:04:36:5f:ba:93:8f:f7:02:7b: 22:e2:f6:c3:d9:de:e9:f2:4d:ac:b8:d3:af:1b:5c: 50:87:35:d8:a5:b8:55:99:65:31:84:4e:bd:1c:7e: 57:04:30:dd:ba:29:44:a5:cc:96:f1:36:e0:3a:ff: 92:69:c6:4d:9a:7a:bd:f8:14:76:2a:4e:8a:73:af: fd:e2:76:45:82:95:65:f3:2f:69:54:b6:d4:d7:0d: 6b:5e:b0:91:0f:a6:98:98:34:57:54:e2:e6:d1:1f: bc:0d:92:10:a2:a3:46:1a:31:29:e7:35:33:0a:3c: fc:c5:97:08:16:40:ce:f4:5c:85:32:2a:d0:92:89: b1:7c:79:87:c4:0d:a8:57:75:00:25:93:dc:d0:8f: eb:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:20:90:B8:06:5E:E6:95:A5:E5:86:B7:02:65:78:66:5D:1C:3C:9A X509v3 Authority Key Identifier: keyid:43:04:CA:33:00:46:11:72:4D:A5:C3:35:8C:F3:B6:80:61:CA:4A:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FFA9E/8F122802D59E11F082F64F17C4F9AE02/QwTKMwBGEXJNpcM1jPO2gGHKSoo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QwTKMwBGEXJNpcM1jPO2gGHKSoo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFA9E/8F122802D59E11F082F64F17C4F9AE02/QwTKMwBGEXJNpcM1jPO2gGHKSoo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:22:bf:06:aa:4b:37:cc:e7:d5:93:81:b5:0b:b7:2d:80:1c: 69:34:c6:9d:c3:f8:12:4c:3b:4e:8e:2e:9b:15:0c:48:71:61: b4:2b:ef:25:35:fc:8c:22:89:a6:c0:81:82:fb:15:54:04:bc: a0:b1:3f:17:68:65:88:81:5d:fc:f9:d2:26:d6:12:88:80:99: a4:3f:05:00:ff:7f:6d:6e:a6:0f:c3:d1:05:06:0a:e7:2e:6b: 52:f0:2e:b0:95:23:4c:a1:8e:c8:20:43:86:37:d9:44:8f:ff: 59:96:de:b1:c3:5e:e1:f0:20:38:d1:bd:b7:a9:92:2e:17:a1: b6:1a:e7:88:78:28:a1:d2:60:4c:bf:79:1f:49:94:21:c8:55: 8c:ed:9c:d2:d7:48:30:8a:6e:92:dd:ef:c1:b3:6c:ac:23:4c: a7:02:5e:f0:26:c1:2f:45:64:97:45:62:2e:cd:a6:ed:5c:fd: c9:b6:18:2d:58:55:7d:5d:bf:73:76:f0:cc:10:0f:d1:ca:ca: d4:49:7b:db:ce:b3:87:18:c6:51:05:3c:7b:77:4f:25:34:f7: 05:cd:d2:55:90:70:b8:48:4f:31:4d:9f:ee:05:66:ca:96:7c: 4e:77:95:bd:4f:ec:f3:e7:8e:07:b1:03:de:1c:59:24:55:8f: 54:73:cb:62 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RkE5RTExMC8GA1UEBRMoNDMwNENBMzMwMDQ2MTE3MjREQTVDMzM1OENGM0I2ODA2 MUNBNEE4QTAeFw0yNjA0MDUwNzQ4NTlaFw0yNjA0MTIwNzQ4NTlaMBgxFjAUBgNV BAMTDTY5ZDIxM2VjLTM4MmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCuq1MFdw/NIePFpyg6CCOHXz0bR1SYm5OWHT9vtakvLZsihKCL1DGxe33M1pJ5 jsBS9N3LI1cqIvBX62lTazIhv+mK2at1vuRYaAmdU+GaCSdHBcfuKoWnJHHmzRcO 5wwoKy8CLAfYR1WSktSyiwQ2X7qTj/cCeyLi9sPZ3unyTay4068bXFCHNdiluFWZ ZTGETr0cflcEMN26KUSlzJbxNuA6/5Jpxk2aer34FHYqTopzr/3idkWClWXzL2lU ttTXDWtesJEPppiYNFdU4ubRH7wNkhCio0YaMSnnNTMKPPzFlwgWQM70XIUyKtCS ibF8eYfEDahXdQAlk9zQj+vXAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUnSCQuAZe 5pWl5Ya3AmV4Zl0cPJowHwYDVR0jBBgwFoAUQwTKMwBGEXJNpcM1jPO2gGHKSoow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZGQTlFLzhGMTIyODAyRDU5 RTExRjA4MkY2NEYxN0M0RjlBRTAyL1F3VEtNd0JHRVhKTnBjTTFqUE8yZ0dIS1Nv by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUXdUS013QkdFWEpOcGNNMWpQTzJnR0hLU29vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZG QTlFLzhGMTIyODAyRDU5RTExRjA4MkY2NEYxN0M0RjlBRTAyL1F3VEtNd0JHRVhK TnBjTTFqUE8yZ0dIS1Nvby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBTIr8Gqks3zOfVk4G1C7ctgBxpNMadw/gSTDtOji6bFQxIcWG0K+8lNfyMIomm wIGC+xVUBLygsT8XaGWIgV38+dIm1hKIgJmkPwUA/39tbqYPw9EFBgrnLmtS8C6w lSNMoY7IIEOGN9lEj/9Zlt6xw17h8CA40b23qZIuF6G2GueIeCih0mBMv3kfSZQh yFWM7ZzS10gwim6S3e/Bs2ysI0ynAl7wJsEvRWSXRWIuzabtXP3JthgtWFV9Xb9z dvDMEA/RysrUSXvbzrOHGMZRBTx7d08lNPcFzdJVkHC4SE8xTZ/uBWbKlnxOd5W9 T+zz544HsQPeHFkkVY9Uc8ti -----END CERTIFICATE-----Generated at Mon Apr 6 08:29:13 2026 by rpki-client