$ rpki-client -vvf rpki.apnic.net/member_repository/A911CC94/22404ABE1C5311F19D0BE5DD083D8C67/Q03xGF63GUxktwjMLSVjSCTiTh4.mft File: Q03xGF63GUxktwjMLSVjSCTiTh4.mft (raw, json) Hash identifier: KM8V7vtOSE02egOemwG57UM/cpX51xxnGKicDlC6avQ= Subject key identifier: 08:97:22:E7:79:8B:07:72:CD:73:D7:C0:01:B9:A8:11:7E:C5:DB:F0 Authority key identifier: 43:4D:F1:18:5E:B7:19:4C:64:B7:08:CC:2D:25:63:48:24:E2:4E:1E Certificate issuer: /CN=A911CC94/serialNumber=434DF1185EB7194C64B708CC2D25634824E24E1E Certificate serial: 19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q03xGF63GUxktwjMLSVjSCTiTh4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CC94/22404ABE1C5311F19D0BE5DD083D8C67/Q03xGF63GUxktwjMLSVjSCTiTh4.mft Manifest number: 17 Signing time: Fri 17 Apr 2026 08:42:03 +0000 Manifest this update: Fri 17 Apr 2026 08:42:02 +0000 Manifest next update: Fri 24 Apr 2026 08:42:02 +0000 Files and hashes: 1: Q03xGF63GUxktwjMLSVjSCTiTh4.crl (hash: VQfd6veKzCHea4u+7vpRv0MW1Kk6eNzHdrhuR3EUIME=) 2: DB87563A1C5711F1811E0EC90A3D8C67.roa (hash: Uot0wKL2V+rres779GpUT7rmL47pZ4/zXDcozOfp2iU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CC94/22404ABE1C5311F19D0BE5DD083D8C67/Q03xGF63GUxktwjMLSVjSCTiTh4.crl rsync://rpki.apnic.net/member_repository/A911CC94/22404ABE1C5311F19D0BE5DD083D8C67/Q03xGF63GUxktwjMLSVjSCTiTh4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q03xGF63GUxktwjMLSVjSCTiTh4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 08:42:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CC94, serialNumber=434DF1185EB7194C64B708CC2D25634824E24E1E Validity Not Before: Apr 17 08:42:02 2026 GMT Not After : Apr 24 08:42:02 2026 GMT Subject: CN=69e1f25a-fa93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:24:77:09:f7:4d:87:3e:9a:2e:ab:20:03:58: 48:a6:ba:a4:4c:02:6e:89:c8:82:2e:9f:05:70:7c: b1:c5:e6:74:d7:53:48:22:43:ab:40:8d:f0:85:73: 13:a3:35:b2:c9:79:eb:77:c9:b9:fc:9e:84:e5:9b: 65:d2:f4:d9:9c:33:e1:5e:d6:49:b2:15:5e:09:32: f7:54:45:3b:db:98:e9:17:5f:21:1d:14:43:39:31: cb:a9:3c:d7:c6:84:03:b3:26:8e:a3:50:f7:b6:f2: 62:34:8c:92:3d:7a:2c:31:37:dd:59:03:76:5c:5b: 85:eb:9c:fc:a9:28:1f:7f:05:d8:90:f1:e2:0c:fe: 85:72:1a:84:f1:e7:8c:85:69:97:de:e3:a6:39:eb: 60:c4:32:d1:9b:af:20:40:24:57:6c:e4:ad:9e:15: 17:23:b6:e9:ec:24:9b:9f:00:1b:3e:a5:a5:fb:78: 07:c0:f1:a6:2a:f7:f5:4e:21:45:21:9e:1d:bc:89: 90:08:7b:c0:5c:10:0b:fc:dc:af:03:92:58:0c:1d: 80:14:8e:b6:c2:d7:79:6f:8e:0e:7b:99:82:80:e2: 84:0d:ea:52:25:2b:1a:1a:46:8f:61:20:f7:83:7a: b0:6a:09:c0:82:bf:bd:e8:b4:ad:40:5e:2f:52:f6: 56:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:97:22:E7:79:8B:07:72:CD:73:D7:C0:01:B9:A8:11:7E:C5:DB:F0 X509v3 Authority Key Identifier: keyid:43:4D:F1:18:5E:B7:19:4C:64:B7:08:CC:2D:25:63:48:24:E2:4E:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CC94/22404ABE1C5311F19D0BE5DD083D8C67/Q03xGF63GUxktwjMLSVjSCTiTh4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q03xGF63GUxktwjMLSVjSCTiTh4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CC94/22404ABE1C5311F19D0BE5DD083D8C67/Q03xGF63GUxktwjMLSVjSCTiTh4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:91:b2:1e:e3:52:81:8b:f1:9f:06:da:ca:24:94:c2:c8:c8: 9c:a8:87:32:92:6c:ad:35:b4:32:9c:7f:7a:7d:e2:37:05:17: 08:51:69:99:26:a0:82:fe:70:cc:2a:b0:7a:1e:5f:d0:43:56: df:41:90:91:3e:4f:f5:1a:07:c9:2d:e9:3e:4e:b7:c3:8e:65: 1e:25:95:c5:f2:03:79:e7:f2:eb:c9:fd:84:b1:9b:ed:fc:6b: ff:bb:a1:41:3a:91:5c:59:cc:f0:1f:6e:74:36:bc:f7:aa:a1: dd:8d:2c:b7:69:9a:64:19:84:56:0f:99:21:89:9a:2d:ad:16: e1:f5:30:7e:ce:6c:65:c8:53:cf:6e:ee:cc:cb:05:4f:8c:be: 20:81:d6:2c:26:74:1d:16:7a:3c:9e:75:a5:d4:dd:6a:19:81: a2:2a:14:4f:6e:01:eb:fd:06:be:f6:bc:34:13:c6:9d:05:b5: 95:29:2e:a4:3b:95:03:07:91:0b:e3:4c:23:af:1f:da:20:6f: cf:79:f6:94:c0:78:d2:f5:58:61:40:e2:d5:c9:4f:a2:3b:29: 49:b1:35:59:7e:76:9d:33:30:57:0d:6e:2d:cf:76:0d:17:8e: b0:bb:93:bd:d6:11:79:1a:9f:2b:25:42:58:ec:de:76:33:e0: a9:59:c8:47 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx Q0M5NDExMC8GA1UEBRMoNDM0REYxMTg1RUI3MTk0QzY0QjcwOENDMkQyNTYzNDgy NEUyNEUxRTAeFw0yNjA0MTcwODQyMDJaFw0yNjA0MjQwODQyMDJaMBgxFjAUBgNV BAMTDTY5ZTFmMjVhLWZhOTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVJHcJ902HPpouqyADWEimuqRMAm6JyIIunwVwfLHF5nTXU0giQ6tAjfCFcxOj NbLJeet3ybn8noTlm2XS9NmcM+Fe1kmyFV4JMvdURTvbmOkXXyEdFEM5McupPNfG hAOzJo6jUPe28mI0jJI9eiwxN91ZA3ZcW4XrnPypKB9/BdiQ8eIM/oVyGoTx54yF aZfe46Y562DEMtGbryBAJFds5K2eFRcjtunsJJufABs+paX7eAfA8aYq9/VOIUUh nh28iZAIe8BcEAv83K8DklgMHYAUjrbC13lvjg57mYKA4oQN6lIlKxoaRo9hIPeD erBqCcCCv73otK1AXi9S9lZ3AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUCJci53mL B3LNc9fAAbmoEX7F2/AwHwYDVR0jBBgwFoAUQ03xGF63GUxktwjMLSVjSCTiTh4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFDQzk0LzIyNDA0QUJFMUM1 MzExRjE5RDBCRTVERDA4M0Q4QzY3L1EwM3hHRjYzR1V4a3R3ak1MU1ZqU0NUaVRo NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUTAzeEdGNjNHVXhrdHdqTUxTVmpTQ1RpVGg0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFD Qzk0LzIyNDA0QUJFMUM1MzExRjE5RDBCRTVERDA4M0Q4QzY3L1EwM3hHRjYzR1V4 a3R3ak1MU1ZqU0NUaVRoNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAbkbIe41KBi/GfBtrKJJTCyMicqIcykmytNbQynH96feI3BRcIUWmZJqCC/nDM KrB6Hl/QQ1bfQZCRPk/1GgfJLek+TrfDjmUeJZXF8gN55/Lryf2EsZvt/Gv/u6FB OpFcWczwH250Nrz3qqHdjSy3aZpkGYRWD5khiZotrRbh9TB+zmxlyFPPbu7MywVP jL4ggdYsJnQdFno8nnWl1N1qGYGiKhRPbgHr/Qa+9rw0E8adBbWVKS6kO5UDB5EL 40wjrx/aIG/PefaUwHjS9VhhQOLVyU+iOylJsTVZfnadMzBXDW4tz3YNF46wu5O9 1hF5Gp8rJUJY7N52M+CpWchH -----END CERTIFICATE-----Generated at Fri Apr 17 18:21:59 2026 by rpki-client