$ rpki-client -vvf rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/Q3_zTue8cFDJyEiGqpTOjPUMJPk.mft File: Q3_zTue8cFDJyEiGqpTOjPUMJPk.mft (raw, json) Hash identifier: fcqdS/Kjhvash9U/EQtQslnvXZfXXLme/i5eDZHal68= Subject key identifier: 7A:CC:DC:8D:D2:A9:FD:97:B0:FF:88:69:A7:C8:95:B6:9C:F2:33:04 Authority key identifier: 43:7F:F3:4E:E7:BC:70:50:C9:C8:48:86:AA:94:CE:8C:F5:0C:24:F9 Certificate issuer: /CN=A91580A1/serialNumber=437FF34EE7BC7050C9C84886AA94CE8CF50C24F9 Certificate serial: 08C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q3_zTue8cFDJyEiGqpTOjPUMJPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/Q3_zTue8cFDJyEiGqpTOjPUMJPk.mft Manifest number: 1490 Signing time: Sat 18 Apr 2026 18:46:07 +0000 Manifest this update: Sat 18 Apr 2026 18:46:07 +0000 Manifest next update: Sat 25 Apr 2026 18:46:07 +0000 Files and hashes: 1: Q3_zTue8cFDJyEiGqpTOjPUMJPk.crl (hash: eUl9DKg61Ry42Vj1R8G/1E83Urlyi34rRtuzcqIEwH8=) 2: B65A4FACE18C11ECB1697F55C4F9AE02.roa (hash: 7SjiEMKEii5J7AK6KpNBCAsdIWuvfwniTFwyHMu1gHw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/Q3_zTue8cFDJyEiGqpTOjPUMJPk.crl rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/Q3_zTue8cFDJyEiGqpTOjPUMJPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q3_zTue8cFDJyEiGqpTOjPUMJPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 18:46:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2241 (0x8c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91580A1, serialNumber=437FF34EE7BC7050C9C84886AA94CE8CF50C24F9 Validity Not Before: Apr 18 18:46:07 2026 GMT Not After : Apr 25 18:46:07 2026 GMT Subject: CN=69e3d16f-f4fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ad:09:78:e7:92:d9:e3:01:91:71:b9:d3:45: 42:eb:ce:1f:f0:de:7f:71:e2:29:67:3c:c8:37:d0: 30:78:ec:e2:47:f9:45:81:50:97:5c:7f:f1:ff:dc: 6a:75:a5:93:9e:04:49:f8:d5:0b:f3:68:ac:d9:e1: ac:67:28:63:c1:5b:0c:86:f1:5d:91:22:7e:ba:48: 21:40:a9:50:09:4b:7d:4f:e7:78:81:c5:e2:0a:93: b3:39:0f:54:45:2a:64:7f:09:dd:2e:44:95:66:85: cd:6e:24:40:f9:bf:0d:30:27:b5:29:e2:8c:9e:3a: f1:d1:b6:b8:be:b8:87:55:be:e7:b5:c7:3b:76:89: eb:03:20:41:d8:7d:78:f2:47:5d:d8:e1:4e:12:3b: 3a:be:fa:4d:0f:aa:e7:1b:28:60:f0:fe:c4:5f:80: 32:19:ac:58:e1:d7:32:19:86:b5:90:14:b5:3a:87: 37:e7:9d:7f:8d:07:90:f0:de:b1:bc:d9:31:9e:8d: e3:a5:5f:31:34:62:b1:0a:0e:57:ba:22:a1:f7:db: c7:eb:4c:45:eb:fa:8e:63:d2:0e:02:e6:d0:ac:df: cc:24:03:3e:ad:fd:f0:0e:72:cc:fb:8d:ec:ae:c3: 3f:f0:29:74:7b:00:86:0f:9e:c5:96:b5:cd:8b:78: 63:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:CC:DC:8D:D2:A9:FD:97:B0:FF:88:69:A7:C8:95:B6:9C:F2:33:04 X509v3 Authority Key Identifier: keyid:43:7F:F3:4E:E7:BC:70:50:C9:C8:48:86:AA:94:CE:8C:F5:0C:24:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/Q3_zTue8cFDJyEiGqpTOjPUMJPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q3_zTue8cFDJyEiGqpTOjPUMJPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/Q3_zTue8cFDJyEiGqpTOjPUMJPk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:c2:66:a2:24:62:0c:18:bc:2a:76:57:6d:c4:fa:1d:41:0c: 04:85:02:cb:0e:a6:d1:ca:93:9a:20:56:4f:4b:ac:79:ad:2a: f0:47:75:57:b1:c1:50:78:e9:b4:d3:20:c2:40:f0:29:70:bd: a4:18:ea:31:a7:a6:f7:3b:dc:98:f4:7c:a8:95:75:68:dd:6b: 01:71:41:96:67:2c:db:11:61:59:34:6f:d9:b1:da:7c:de:00: 89:ba:1f:47:16:89:38:e3:79:74:ee:fb:ff:80:60:7e:e3:5c: d6:72:eb:d5:19:ce:41:68:5e:ef:9c:e5:63:b6:d4:66:05:71: 75:fd:07:5e:4f:d8:db:d9:e8:1c:e3:14:0d:ad:c3:d9:60:4c: 1b:5e:d5:4d:10:2c:0d:7f:0b:12:58:e6:19:3d:69:23:0c:39: 01:50:90:8b:31:c1:af:14:1a:ea:aa:ad:d0:33:18:98:b0:e6: 10:0c:02:61:13:23:e1:b6:0c:a8:eb:e7:49:6a:8d:b8:8b:d4: 17:e3:ff:1d:ec:36:21:b2:33:5c:db:7f:a4:4d:38:ec:fc:5e: 29:2c:4a:01:f5:5e:00:bf:bc:5e:db:c9:ee:42:05:89:0e:a4: dc:5c:d1:7e:af:95:67:31:4b:a2:cb:55:a2:1e:20:a4:a7:7a: 38:de:c2:ab -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgwQTExMTAvBgNVBAUTKDQzN0ZGMzRFRTdCQzcwNTBDOUM4NDg4NkFBOTRDRThD RjUwQzI0RjkwHhcNMjYwNDE4MTg0NjA3WhcNMjYwNDI1MTg0NjA3WjAYMRYwFAYD VQQDEw02OWUzZDE2Zi1mNGZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAua0JeOeS2eMBkXG500VC684f8N5/ceIpZzzIN9AweOziR/lFgVCXXH/x/9xq daWTngRJ+NUL82is2eGsZyhjwVsMhvFdkSJ+ukghQKlQCUt9T+d4gcXiCpOzOQ9U RSpkfwndLkSVZoXNbiRA+b8NMCe1KeKMnjrx0ba4vriHVb7ntcc7donrAyBB2H14 8kdd2OFOEjs6vvpND6rnGyhg8P7EX4AyGaxY4dcyGYa1kBS1Ooc3551/jQeQ8N6x vNkxno3jpV8xNGKxCg5XuiKh99vH60xF6/qOY9IOAubQrN/MJAM+rf3wDnLM+43s rsM/8Cl0ewCGD57FlrXNi3hjuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHrM3I3S qf2XsP+IaafIlbac8jMEMB8GA1UdIwQYMBaAFEN/807nvHBQychIhqqUzoz1DCT5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODBBMS85MjU2MEE2QTM3 NEQxMUVBQTBBM0JFNTVDNEY5QUUwMi9RM196VHVlOGNGREp5RWlHcXBUT2pQVU1K UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1EzX3pUdWU4Y0ZESnlFaUdxcFRPalBVTUpQay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODBBMS85MjU2MEE2QTM3NEQxMUVBQTBBM0JFNTVDNEY5QUUwMi9RM196VHVlOGNG REp5RWlHcXBUT2pQVU1KUGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKsJmoiRiDBi8KnZXbcT6HUEMBIUCyw6m0cqTmiBWT0usea0q8Ed1V7HBUHjp tNMgwkDwKXC9pBjqMaem9zvcmPR8qJV1aN1rAXFBlmcs2xFhWTRv2bHafN4Aibof RxaJOON5dO77/4BgfuNc1nLr1RnOQWhe75zlY7bUZgVxdf0HXk/Y29noHOMUDa3D 2WBMG17VTRAsDX8LEljmGT1pIww5AVCQizHBrxQa6qqt0DMYmLDmEAwCYRMj4bYM qOvnSWqNuIvUF+P/Hew2IbIzXNt/pE047PxeKSxKAfVeAL+8XtvJ7kIFiQ6k3FzR fq+VZzFLostVoh4gpKd6ON7Cqw== -----END CERTIFICATE-----Generated at Sun Apr 19 10:23:44 2026 by rpki-client