$ rpki-client -vvf rpki.apnic.net/member_repository/A91712A8/46500F8C7D6811EBA432176AC4F9AE02/CHQTSbZiijmB94o3MLiYg-PXa8o.mft File: CHQTSbZiijmB94o3MLiYg-PXa8o.mft (raw, json) Hash identifier: i3ZX83h9aZDAx9EFf8OB9Tm7gmab7KnqL1XEixnD1Ms= Subject key identifier: DD:DD:AF:0C:C7:9E:92:64:7D:9A:67:5D:25:B1:8B:5A:EB:F5:5C:C2 Authority key identifier: 08:74:13:49:B6:62:8A:39:81:F7:8A:37:30:B8:98:83:E3:D7:6B:CA Certificate issuer: /CN=A91712A8/serialNumber=08741349B6628A3981F78A3730B89883E3D76BCA Certificate serial: 071D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHQTSbZiijmB94o3MLiYg-PXa8o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91712A8/46500F8C7D6811EBA432176AC4F9AE02/CHQTSbZiijmB94o3MLiYg-PXa8o.mft Manifest number: 0715 Signing time: Thu 16 Apr 2026 21:48:47 +0000 Manifest this update: Thu 16 Apr 2026 21:48:46 +0000 Manifest next update: Thu 23 Apr 2026 21:48:46 +0000 Files and hashes: 1: CHQTSbZiijmB94o3MLiYg-PXa8o.crl (hash: s0/M90FWi0sWWj3dTfEjua67t6Oi7fvcpC5zouMyn5I=) 2: B69DB4D27D6911EBA420FC6AC4F9AE02.roa (hash: Rg5f1AR5kausNOtPTErApCWSrgBHSd9016YNBUMj2Ls=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91712A8/46500F8C7D6811EBA432176AC4F9AE02/CHQTSbZiijmB94o3MLiYg-PXa8o.crl rsync://rpki.apnic.net/member_repository/A91712A8/46500F8C7D6811EBA432176AC4F9AE02/CHQTSbZiijmB94o3MLiYg-PXa8o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHQTSbZiijmB94o3MLiYg-PXa8o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 21:48:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1821 (0x71d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91712A8, serialNumber=08741349B6628A3981F78A3730B89883E3D76BCA Validity Not Before: Apr 16 21:48:46 2026 GMT Not After : Apr 23 21:48:46 2026 GMT Subject: CN=69e1593f-873c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:99:97:02:7c:df:4c:db:99:7e:da:e5:b2:f7: 95:4d:8d:09:ec:a2:b7:46:a2:4f:e3:92:c6:0e:3e: eb:c9:e0:f6:e1:72:29:51:51:35:40:61:b9:b1:04: 13:31:cd:86:c1:f0:5c:9f:1f:ad:ff:78:fa:f4:b1: e5:15:f5:22:3b:42:68:d0:ad:67:28:a5:89:1a:47: 7d:09:65:e1:48:14:7b:45:6f:2f:a4:74:bf:8b:8d: b1:0a:6b:16:bc:35:fd:76:9c:08:96:8f:d4:18:e8: e4:c3:50:c7:79:18:38:35:50:11:8e:cb:c8:eb:a4: a7:fc:86:c6:b6:2b:36:f7:51:08:f4:49:29:e2:54: fd:0c:3c:6e:33:ac:28:53:16:5b:8b:a9:fc:7e:eb: b7:0c:e8:92:3d:ef:09:47:30:d3:89:04:68:ba:bc: 42:a3:cc:d9:50:d2:0d:7f:5e:64:48:73:c9:af:b7: 68:17:84:75:41:40:bc:f4:9c:9d:57:5f:5c:05:ef: 6b:ef:05:3f:77:3b:bd:47:96:bb:ff:11:70:1d:df: 0b:4a:5f:49:bb:21:68:00:1b:ed:1b:e8:ad:01:5c: 7c:7b:18:cb:4b:83:49:ec:b5:e3:07:c2:76:3a:66: da:ed:e8:97:86:27:93:7b:cc:71:f8:01:85:6f:4a: 1f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:DD:AF:0C:C7:9E:92:64:7D:9A:67:5D:25:B1:8B:5A:EB:F5:5C:C2 X509v3 Authority Key Identifier: keyid:08:74:13:49:B6:62:8A:39:81:F7:8A:37:30:B8:98:83:E3:D7:6B:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91712A8/46500F8C7D6811EBA432176AC4F9AE02/CHQTSbZiijmB94o3MLiYg-PXa8o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHQTSbZiijmB94o3MLiYg-PXa8o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91712A8/46500F8C7D6811EBA432176AC4F9AE02/CHQTSbZiijmB94o3MLiYg-PXa8o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e5:1f:60:fd:39:12:d7:7d:7c:41:b9:89:fe:e5:3c:f4:54:d2: 26:38:8d:14:3f:f8:92:f8:50:d7:c4:98:c0:4f:fc:c4:bd:62: d0:76:dd:86:b8:b2:90:a7:eb:54:09:14:43:6d:57:63:62:1f: cc:03:c6:46:2e:f9:c6:7f:30:d4:48:66:79:ec:5d:f1:25:44: bf:2d:a8:de:01:31:41:ff:e1:07:0b:90:5f:5f:c0:b1:92:9f: f4:87:38:7d:07:3b:b1:b8:ed:87:d6:01:f7:bb:dd:3a:10:c1: a6:35:90:83:49:d6:cf:82:11:6d:56:e8:d5:7a:f1:26:a2:ca: cf:8e:8e:f3:a4:a3:03:4f:42:59:b7:b3:3b:5c:de:6b:01:ba: 68:cf:8e:0c:f2:77:93:42:54:c5:0e:35:ce:0b:67:00:e0:7b: c2:2b:ca:dc:e0:1f:a5:cf:bf:53:30:6c:f1:60:f6:c8:54:d0: ba:54:bc:55:6e:a1:b6:d6:98:88:7b:75:b7:98:be:b0:55:7b: ac:69:9e:2a:41:28:45:92:75:cd:f7:e0:2e:d6:50:e2:49:da: c6:b1:1e:0a:9c:47:ee:77:d1:90:21:9e:02:bd:65:3b:d7:9b: f4:96:04:09:63:87:62:2e:a5:0e:f4:2f:fc:fa:16:10:64:f1: 25:48:f5:91 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBx0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzEyQTgxMTAvBgNVBAUTKDA4NzQxMzQ5QjY2MjhBMzk4MUY3OEEzNzMwQjg5ODgz RTNENzZCQ0EwHhcNMjYwNDE2MjE0ODQ2WhcNMjYwNDIzMjE0ODQ2WjAYMRYwFAYD VQQDEw02OWUxNTkzZi04NzNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtZmXAnzfTNuZftrlsveVTY0J7KK3RqJP45LGDj7ryeD24XIpUVE1QGG5sQQT Mc2GwfBcnx+t/3j69LHlFfUiO0Jo0K1nKKWJGkd9CWXhSBR7RW8vpHS/i42xCmsW vDX9dpwIlo/UGOjkw1DHeRg4NVARjsvI66Sn/IbGtis291EI9Ekp4lT9DDxuM6wo UxZbi6n8fuu3DOiSPe8JRzDTiQRourxCo8zZUNINf15kSHPJr7doF4R1QUC89Jyd V19cBe9r7wU/dzu9R5a7/xFwHd8LSl9JuyFoABvtG+itAVx8exjLS4NJ7LXjB8J2 Omba7eiXhieTe8xx+AGFb0ofhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN3drwzH npJkfZpnXSWxi1rr9VzCMB8GA1UdIwQYMBaAFAh0E0m2Yoo5gfeKNzC4mIPj12vK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTJBOC80NjUwMEY4QzdE NjgxMUVCQTQzMjE3NkFDNEY5QUUwMi9DSFFUU2JaaWlqbUI5NG8zTUxpWWctUFhh OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NIUVRTYlppaWptQjk0bzNNTGlZZy1QWGE4by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTJBOC80NjUwMEY4QzdENjgxMUVCQTQzMjE3NkFDNEY5QUUwMi9DSFFUU2JaaWlq bUI5NG8zTUxpWWctUFhhOG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA5R9g/TkS1318QbmJ/uU89FTSJjiNFD/4kvhQ18SYwE/8xL1i0HbdhriykKfr VAkUQ21XY2IfzAPGRi75xn8w1Ehmeexd8SVEvy2o3gExQf/hBwuQX1/AsZKf9Ic4 fQc7sbjth9YB97vdOhDBpjWQg0nWz4IRbVbo1XrxJqLKz46O86SjA09CWbezO1ze awG6aM+ODPJ3k0JUxQ41zgtnAOB7wivK3OAfpc+/UzBs8WD2yFTQulS8VW6httaY iHt1t5i+sFV7rGmeKkEoRZJ1zffgLtZQ4knaxrEeCpxH7nfRkCGeAr1lO9eb9JYE CWOHYi6lDvQv/PoWEGTxJUj1kQ== -----END CERTIFICATE-----Generated at Fri Apr 17 07:35:04 2026 by rpki-client