$ rpki-client -vvf rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft File: QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft (raw, json) Hash identifier: oEJC3TYQqvhE7TpBOUL3Ljvfklc33G6Iu0NPRprgISA= Subject key identifier: 4E:71:0D:22:32:2B:6B:C8:AB:C0:DC:E8:0F:18:F0:12:7B:63:05:E5 Authority key identifier: 42:B7:49:E1:EC:DB:E0:30:74:7F:8C:B5:74:7F:2D:73:A5:E4:24:54 Certificate issuer: /CN=A915D6C2/serialNumber=42B749E1ECDBE030747F8CB5747F2D73A5E42454 Certificate serial: 0512 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft Manifest number: 0501 Signing time: Thu 16 Apr 2026 23:36:37 +0000 Manifest this update: Thu 16 Apr 2026 23:36:37 +0000 Manifest next update: Thu 23 Apr 2026 23:36:37 +0000 Files and hashes: 1: QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.crl (hash: f4erMESsQxht8BTpCjRZQtpta+xYuIiLOoTX0LFY/rw=) 2: 58A4A3E2B73A11ED8A2A8964C4F9AE02.roa (hash: yq/8yNnq6a4ASHoRBlMWzxoMD3auQ65vuNtbtSiVuBA=) 3: 5808B946B73A11ED8A2A8964C4F9AE02.roa (hash: l82fYq1x4u49vmBmNnG130HVCjkEDSzOMLfbwYG7C8U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.crl rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 23:36:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1298 (0x512) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D6C2, serialNumber=42B749E1ECDBE030747F8CB5747F2D73A5E42454 Validity Not Before: Apr 16 23:36:37 2026 GMT Not After : Apr 23 23:36:37 2026 GMT Subject: CN=69e17285-5974 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:e4:0c:21:56:92:89:e2:d2:3e:56:af:27:ab: f2:85:d4:ac:f7:59:da:b7:6e:c3:d2:60:9b:d3:79: 2d:05:29:5c:0b:3f:23:cb:4c:b9:76:25:d5:e2:0e: 37:79:58:a2:e8:95:9e:91:89:44:24:fa:30:15:a6: cb:cc:e1:03:46:d8:b2:c6:f8:2e:97:5d:1e:f0:85: b7:82:ea:cb:1d:ca:f6:ad:40:30:c0:31:9f:c2:79: 37:61:94:61:08:b4:0a:58:99:e0:61:64:60:f1:d0: 8d:d1:c0:c0:71:b4:fb:ce:fc:ce:ff:eb:57:f3:f6: d6:da:4e:36:28:9c:4b:0d:11:ac:ec:c0:98:0b:14: 43:4a:9f:ce:76:08:97:79:2b:16:80:d7:a8:39:ff: 11:91:db:a5:f0:a7:f9:d2:b4:c4:39:60:45:47:e0: 15:28:bb:40:4c:cb:e8:6f:5d:94:9c:a5:35:f8:0f: 2f:ca:83:e6:db:79:86:6f:7e:7e:04:b9:7f:c3:f3: f9:ce:05:26:f9:f3:55:fb:a5:f4:16:94:9a:91:42: 91:ce:58:62:4f:bb:41:fb:30:ca:04:dd:f9:6f:95: 77:a7:1d:5b:d8:49:ca:42:77:8d:f6:09:d0:4d:6f: 7d:f5:d6:d4:fb:8b:f7:db:1a:09:af:ef:63:8e:93: 1c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:71:0D:22:32:2B:6B:C8:AB:C0:DC:E8:0F:18:F0:12:7B:63:05:E5 X509v3 Authority Key Identifier: keyid:42:B7:49:E1:EC:DB:E0:30:74:7F:8C:B5:74:7F:2D:73:A5:E4:24:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:07:bc:97:1f:c8:77:4b:93:65:bd:e6:06:72:f3:8f:c6:39: a3:fa:47:97:bf:63:d1:d1:9b:0a:aa:81:02:3b:bb:16:f7:46: c6:7a:ab:73:75:f6:f3:a0:62:19:54:a2:b4:51:53:ac:7d:db: 97:48:81:53:1c:9d:ef:68:b6:7e:b7:ee:e6:a0:13:5c:29:2f: da:ad:20:3c:fc:e0:bf:76:03:20:4d:2c:be:7f:82:db:d4:3d: 77:5b:55:82:25:22:4b:df:a1:41:7d:e0:b2:30:20:f2:c3:a4: 7c:51:65:d2:84:b4:7d:c3:e4:6b:54:30:88:26:7e:0f:54:9a: 2f:4a:b3:65:68:69:63:34:41:d6:e4:69:ea:05:3e:64:36:d5: 72:2f:9e:c6:1f:bb:78:7b:4c:18:e1:b4:14:ee:2a:9d:d1:75: ad:8d:6c:32:9a:82:1d:5a:46:1f:cf:e1:e8:dc:d4:3f:4b:fe: 8c:1a:e8:40:e6:c4:05:a1:94:42:b5:5e:99:50:2e:81:f2:e6: 39:a2:82:ad:77:9f:87:d7:f6:31:29:0d:b8:e0:40:8e:b2:4a: d1:c2:9c:ae:2a:46:80:49:89:3a:b7:58:5e:db:ab:b8:e4:dc: a9:85:e0:64:d6:d3:21:76:34:7f:e2:b2:70:dd:b8:bc:81:a8: 8a:1c:cb:fd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBRIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ2QzIxMTAvBgNVBAUTKDQyQjc0OUUxRUNEQkUwMzA3NDdGOENCNTc0N0YyRDcz QTVFNDI0NTQwHhcNMjYwNDE2MjMzNjM3WhcNMjYwNDIzMjMzNjM3WjAYMRYwFAYD VQQDEw02OWUxNzI4NS01OTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8eQMIVaSieLSPlavJ6vyhdSs91nat27D0mCb03ktBSlcCz8jy0y5diXV4g43 eVii6JWekYlEJPowFabLzOEDRtiyxvgul10e8IW3gurLHcr2rUAwwDGfwnk3YZRh CLQKWJngYWRg8dCN0cDAcbT7zvzO/+tX8/bW2k42KJxLDRGs7MCYCxRDSp/OdgiX eSsWgNeoOf8Rkdul8Kf50rTEOWBFR+AVKLtATMvob12UnKU1+A8vyoPm23mGb35+ BLl/w/P5zgUm+fNV+6X0FpSakUKRzlhiT7tB+zDKBN35b5V3px1b2EnKQneN9gnQ TW999dbU+4v32xoJr+9jjpMc8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE5xDSIy K2vIq8Dc6A8Y8BJ7YwXlMB8GA1UdIwQYMBaAFEK3SeHs2+AwdH+MtXR/LXOl5CRU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDZDMi9GOUM0NkZBQzUz QTIxMUVDOUQ1RTYxNURDNEY5QUUwMi9RcmRKNGV6YjREQjBmNHkxZEg4dGM2WGtK RlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FyZEo0ZXpiNERCMGY0eTFkSDh0YzZYa0pGUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDZDMi9GOUM0NkZBQzUzQTIxMUVDOUQ1RTYxNURDNEY5QUUwMi9RcmRKNGV6YjRE QjBmNHkxZEg4dGM2WGtKRlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdge8lx/Id0uTZb3mBnLzj8Y5o/pHl79j0dGbCqqBAju7FvdGxnqrc3X286Bi GVSitFFTrH3bl0iBUxyd72i2frfu5qATXCkv2q0gPPzgv3YDIE0svn+C29Q9d1tV giUiS9+hQX3gsjAg8sOkfFFl0oS0fcPka1QwiCZ+D1SaL0qzZWhpYzRB1uRp6gU+ ZDbVci+exh+7eHtMGOG0FO4qndF1rY1sMpqCHVpGH8/h6NzUP0v+jBroQObEBaGU QrVemVAugfLmOaKCrXefh9f2MSkNuOBAjrJK0cKcripGgEmJOrdYXturuOTcqYXg ZNbTIXY0f+KycN24vIGoihzL/Q== -----END CERTIFICATE-----Generated at Fri Apr 17 05:31:06 2026 by rpki-client