$ rpki-client -vvf rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/QNuuLIMZi8b60lgpmII0VqN3Y6s.mft File: QNuuLIMZi8b60lgpmII0VqN3Y6s.mft (raw, json) Hash identifier: NVjCFc5Ru+QhrdTZC1rkQ5SkG3KY2/B86UyUxPZNNBU= Subject key identifier: 5C:EB:35:E3:A9:AD:01:67:22:FF:2B:D0:C6:F4:52:4A:02:E6:D7:46 Authority key identifier: 40:DB:AE:2C:83:19:8B:C6:FA:D2:58:29:98:82:34:56:A3:77:63:AB Certificate issuer: /CN=A9178C7A/serialNumber=40DBAE2C83198BC6FAD2582998823456A37763AB Certificate serial: 0264 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNuuLIMZi8b60lgpmII0VqN3Y6s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/QNuuLIMZi8b60lgpmII0VqN3Y6s.mft Manifest number: 025E Signing time: Fri 17 Apr 2026 01:58:37 +0000 Manifest this update: Fri 17 Apr 2026 01:58:36 +0000 Manifest next update: Fri 24 Apr 2026 01:58:36 +0000 Files and hashes: 1: QNuuLIMZi8b60lgpmII0VqN3Y6s.crl (hash: 5s5qdBavk/EVp1RWjwkqxMSv5JPbsfTNJVemgZ1zdT0=) 2: 668242F49C4511EDB73A4379C4F9AE02.roa (hash: pfvrI1kQlT/P1ZWjhgTdXeNg4qENFgB1Nnr2MrXGD4Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/QNuuLIMZi8b60lgpmII0VqN3Y6s.crl rsync://rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/QNuuLIMZi8b60lgpmII0VqN3Y6s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNuuLIMZi8b60lgpmII0VqN3Y6s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:58:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 612 (0x264) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178C7A, serialNumber=40DBAE2C83198BC6FAD2582998823456A37763AB Validity Not Before: Apr 17 01:58:36 2026 GMT Not After : Apr 24 01:58:36 2026 GMT Subject: CN=69e193cd-144c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:20:18:29:8f:79:e2:4a:01:d1:57:2f:3b:8d: ed:ad:21:16:5e:a7:8d:e6:fb:de:eb:ba:be:11:4b: 49:68:25:97:56:f4:b2:5a:2c:8d:db:87:f1:87:74: b0:c6:b0:59:4c:d8:2d:27:67:2f:1c:4f:4d:86:33: d8:97:8b:ad:04:18:fc:5c:76:05:5c:79:62:f7:ac: 42:fc:71:8f:e5:76:f2:89:ae:aa:b4:ff:36:e0:2e: 4d:57:ce:49:46:c1:07:9f:ab:5c:20:63:15:4b:d6: 2f:2f:2c:44:2c:b0:55:3e:58:a4:7d:cb:d0:6e:dc: 19:9a:aa:6d:1e:0e:b2:ed:3f:75:50:80:6e:1b:31: c6:ab:a5:02:eb:44:54:36:d0:85:a2:ba:a1:f5:f6: 17:ba:8a:40:84:65:0c:8b:ff:c6:7d:44:cc:04:59: db:d6:8c:56:70:61:97:4b:c1:fe:65:c0:cc:f1:97: 81:98:ea:b2:19:30:a7:7c:e9:77:b3:c0:e0:5b:33: 68:7e:5b:05:49:72:2e:3a:e3:35:f7:4d:13:ac:34: 47:99:56:25:2e:23:85:6f:e7:4f:1e:b4:90:fa:78: 10:25:e6:8f:d0:24:7f:18:99:db:4f:9b:3b:79:f8: 89:6e:7e:06:1e:6b:5a:64:51:9d:90:c6:6a:15:ee: 0b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:EB:35:E3:A9:AD:01:67:22:FF:2B:D0:C6:F4:52:4A:02:E6:D7:46 X509v3 Authority Key Identifier: keyid:40:DB:AE:2C:83:19:8B:C6:FA:D2:58:29:98:82:34:56:A3:77:63:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/QNuuLIMZi8b60lgpmII0VqN3Y6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNuuLIMZi8b60lgpmII0VqN3Y6s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/QNuuLIMZi8b60lgpmII0VqN3Y6s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:90:90:28:b6:05:46:f0:2e:17:b6:ea:3c:46:68:ce:f7:e8: d2:c4:06:ee:e0:1e:24:35:aa:85:a1:58:b7:97:6d:cd:bd:e8: 84:7b:16:d2:88:03:a5:ef:f6:d0:90:c8:8e:19:9a:3e:2d:86: bb:7f:20:53:ab:f6:00:0c:8e:16:96:41:b8:9d:bb:75:e9:0e: 9d:7b:f2:1e:ac:b8:85:36:7f:db:8a:cd:2a:19:dc:dc:bd:18: 1b:8b:ba:9f:94:a4:c0:50:15:83:25:e2:b2:5e:50:74:ed:58: e2:6e:8b:61:d6:61:cb:cc:6f:e3:e9:4b:ec:7f:d0:71:5a:95: 40:fc:c8:f7:45:29:76:e7:00:c4:67:2c:a8:12:cd:77:e7:85: 30:0c:f6:8b:62:49:84:4a:27:e1:7a:68:8d:44:9e:d3:eb:a6: 6d:7b:21:2a:31:e6:84:e5:47:f2:a9:a2:ca:da:f3:f6:f1:82: 21:55:56:35:78:7d:c7:71:c8:9c:f3:ba:90:c3:9b:05:f4:53: 84:94:13:92:58:df:6c:23:55:a1:03:a3:5b:98:1e:a4:b9:83: cb:92:58:2d:01:d2:a2:d1:1f:c0:44:54:bc:a5:67:07:03:9c: ea:8d:6b:47:72:d3:56:02:c8:ee:5a:14:03:7e:16:76:6c:03: 26:ed:b7:74 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAmQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhDN0ExMTAvBgNVBAUTKDQwREJBRTJDODMxOThCQzZGQUQyNTgyOTk4ODIzNDU2 QTM3NzYzQUIwHhcNMjYwNDE3MDE1ODM2WhcNMjYwNDI0MDE1ODM2WjAYMRYwFAYD VQQDEw02OWUxOTNjZC0xNDRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1yAYKY954koB0VcvO43trSEWXqeN5vve67q+EUtJaCWXVvSyWiyN24fxh3Sw xrBZTNgtJ2cvHE9NhjPYl4utBBj8XHYFXHli96xC/HGP5Xbyia6qtP824C5NV85J RsEHn6tcIGMVS9YvLyxELLBVPlikfcvQbtwZmqptHg6y7T91UIBuGzHGq6UC60RU NtCForqh9fYXuopAhGUMi//GfUTMBFnb1oxWcGGXS8H+ZcDM8ZeBmOqyGTCnfOl3 s8DgWzNoflsFSXIuOuM1900TrDRHmVYlLiOFb+dPHrSQ+ngQJeaP0CR/GJnbT5s7 efiJbn4GHmtaZFGdkMZqFe4LNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFzrNeOp rQFnIv8r0Mb0UkoC5tdGMB8GA1UdIwQYMBaAFEDbriyDGYvG+tJYKZiCNFajd2Or MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEM3QS9BQzQ1OTYyRTlD NDAxMUVEOTcwMDg0NzBDNEY5QUUwMi9RTnV1TElNWmk4YjYwbGdwbUlJMFZxTjNZ NnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FOdXVMSU1aaThiNjBsZ3BtSUkwVnFOM1k2cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEM3QS9BQzQ1OTYyRTlDNDAxMUVEOTcwMDg0NzBDNEY5QUUwMi9RTnV1TElNWmk4 YjYwbGdwbUlJMFZxTjNZNnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEZCQKLYFRvAuF7bqPEZozvfo0sQG7uAeJDWqhaFYt5dtzb3ohHsW0ogDpe/2 0JDIjhmaPi2Gu38gU6v2AAyOFpZBuJ27dekOnXvyHqy4hTZ/24rNKhnc3L0YG4u6 n5SkwFAVgyXisl5QdO1Y4m6LYdZhy8xv4+lL7H/QcVqVQPzI90UpducAxGcsqBLN d+eFMAz2i2JJhEon4XpojUSe0+umbXshKjHmhOVH8qmiytrz9vGCIVVWNXh9x3HI nPO6kMObBfRThJQTkljfbCNVoQOjW5gepLmDy5JYLQHSotEfwERUvKVnBwOc6o1r R3LTVgLI7loUA34WdmwDJu23dA== -----END CERTIFICATE-----Generated at Fri Apr 17 10:44:34 2026 by rpki-client