$ rpki-client -vvf rpki.apnic.net/member_repository/A917C09A/B2966D9EEAD711F0B9CBFBE6646F56BC/Qe0RfxoN1CRX1JR491zcsoZTpx8.mft File: Qe0RfxoN1CRX1JR491zcsoZTpx8.mft (raw, json) Hash identifier: /i1CIhzQfHe5dGENlPiotGcKm9CtF5BUgo581sfuQNo= Subject key identifier: 60:D5:2C:14:A6:BA:55:0A:5E:94:95:9F:3E:8A:88:AA:4D:F4:27:5B Authority key identifier: 41:ED:11:7F:1A:0D:D4:24:57:D4:94:78:F7:5C:DC:B2:86:53:A7:1F Certificate issuer: /CN=A917C09A/serialNumber=41ED117F1A0DD42457D49478F75CDCB28653A71F Certificate serial: 3D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qe0RfxoN1CRX1JR491zcsoZTpx8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C09A/B2966D9EEAD711F0B9CBFBE6646F56BC/Qe0RfxoN1CRX1JR491zcsoZTpx8.mft Manifest number: 3A Signing time: Fri 17 Apr 2026 08:15:21 +0000 Manifest this update: Fri 17 Apr 2026 08:15:20 +0000 Manifest next update: Fri 24 Apr 2026 08:15:20 +0000 Files and hashes: 1: Qe0RfxoN1CRX1JR491zcsoZTpx8.crl (hash: neXhZiLAisTXI+gk6aGj0Z/flWUYVRjeL++NaYUaycE=) 2: BBB1B36C387911F18844C9F1B7833773.roa (hash: sySn8z7CtimAbBeWbFVeZLj6Bb/UV3HDRIyOYd+GVX0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C09A/B2966D9EEAD711F0B9CBFBE6646F56BC/Qe0RfxoN1CRX1JR491zcsoZTpx8.crl rsync://rpki.apnic.net/member_repository/A917C09A/B2966D9EEAD711F0B9CBFBE6646F56BC/Qe0RfxoN1CRX1JR491zcsoZTpx8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qe0RfxoN1CRX1JR491zcsoZTpx8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C09A, serialNumber=41ED117F1A0DD42457D49478F75CDCB28653A71F Validity Not Before: Apr 17 08:15:20 2026 GMT Not After : Apr 24 08:15:20 2026 GMT Subject: CN=69e1ec19-5da7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e1:98:b6:a6:8f:c6:48:3e:2f:79:76:f3:cf: 72:25:47:c5:c9:bf:e1:22:c3:24:56:b8:3f:8c:16: e3:b6:a6:3c:1a:69:f6:b9:d2:3b:69:eb:fe:77:54: 5b:8f:58:b3:71:39:c7:9f:07:33:54:85:2b:1e:4d: a6:be:a2:4e:ef:f6:8c:55:ff:1f:77:ff:6b:56:d6: 11:f7:54:49:a2:14:80:55:b2:2a:de:d7:7b:23:b5: b8:2f:df:2b:84:f7:dd:f1:ac:24:0e:18:f5:e5:42: 20:6b:8c:2e:a9:d9:d5:eb:16:1f:ab:4e:bc:22:a7: 06:de:a8:03:fc:da:d9:91:29:98:60:a2:75:d7:06: bd:6e:9b:5b:2f:cc:ec:f6:10:70:e5:00:b7:e7:43: fd:a5:9a:e1:f6:58:f5:b0:89:c5:65:3b:ca:b3:4d: bf:73:45:ff:4f:ff:af:eb:29:87:1a:eb:73:33:07: 4d:a1:b5:42:79:a1:f1:c4:76:31:6e:3a:aa:b9:f7: 6c:8a:71:7b:51:42:36:d7:97:10:04:3f:a4:a3:d1: 06:62:d9:fb:db:d7:d0:4a:a8:7e:70:9e:36:f0:24: 24:15:1e:a8:7d:85:66:5e:31:34:c7:ba:c5:79:dc: c4:03:f4:55:3f:40:b6:8a:53:68:d3:23:2f:56:fe: 04:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:D5:2C:14:A6:BA:55:0A:5E:94:95:9F:3E:8A:88:AA:4D:F4:27:5B X509v3 Authority Key Identifier: keyid:41:ED:11:7F:1A:0D:D4:24:57:D4:94:78:F7:5C:DC:B2:86:53:A7:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C09A/B2966D9EEAD711F0B9CBFBE6646F56BC/Qe0RfxoN1CRX1JR491zcsoZTpx8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qe0RfxoN1CRX1JR491zcsoZTpx8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C09A/B2966D9EEAD711F0B9CBFBE6646F56BC/Qe0RfxoN1CRX1JR491zcsoZTpx8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:ca:2e:48:21:84:6b:11:99:9c:d7:55:79:62:66:3e:31:b8: cf:b7:a5:33:3a:a5:d9:13:fb:46:2e:e6:a6:10:ef:9b:b8:cd: af:2e:b1:3d:2b:24:8a:31:db:ab:aa:57:4d:ad:b6:77:d3:82: ad:76:c9:12:a7:7e:19:46:72:28:c9:77:19:7a:53:7b:9a:93: ba:3d:a7:a6:4e:8d:f9:9e:0a:1e:d3:cf:19:8e:1e:65:33:c1: 3a:1e:71:95:47:df:3a:6f:73:d2:40:44:9a:76:1b:cb:66:76: e3:b2:c3:54:8e:39:94:b1:4f:87:0e:78:f3:67:9f:fa:55:52: 52:bd:79:b2:53:5c:ab:0e:45:74:98:8c:c0:93:85:8e:d6:4c: b6:37:20:e6:03:b0:c5:a4:f8:45:06:28:6e:a9:68:72:f4:80: 66:4c:2a:78:29:83:db:dc:2d:84:ad:98:08:50:8e:4f:d1:1b: 96:89:d1:bc:5c:f5:4f:97:ba:42:f5:cb:27:75:7d:2c:d4:0e: b3:80:ff:7f:13:9b:b9:a6:b7:a5:32:1b:c8:f8:97:92:71:71: 6a:f8:ed:1b:49:38:21:32:c1:3c:89:7f:f1:5b:ae:2b:d6:04: b8:6d:81:af:27:54:82:15:80:89:54:f7:da:11:df:72:d6:02: 87:47:d9:4a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QzA5QTExMC8GA1UEBRMoNDFFRDExN0YxQTBERDQyNDU3RDQ5NDc4Rjc1Q0RDQjI4 NjUzQTcxRjAeFw0yNjA0MTcwODE1MjBaFw0yNjA0MjQwODE1MjBaMBgxFjAUBgNV BAMTDTY5ZTFlYzE5LTVkYTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCl4Zi2po/GSD4veXbzz3IlR8XJv+EiwyRWuD+MFuO2pjwaafa50jtp6/53VFuP WLNxOcefBzNUhSseTaa+ok7v9oxV/x93/2tW1hH3VEmiFIBVsire13sjtbgv3yuE 993xrCQOGPXlQiBrjC6p2dXrFh+rTrwipwbeqAP82tmRKZhgonXXBr1um1svzOz2 EHDlALfnQ/2lmuH2WPWwicVlO8qzTb9zRf9P/6/rKYca63MzB02htUJ5ofHEdjFu Oqq592yKcXtRQjbXlxAEP6Sj0QZi2fvb19BKqH5wnjbwJCQVHqh9hWZeMTTHusV5 3MQD9FU/QLaKU2jTIy9W/gQpAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUYNUsFKa6 VQpelJWfPoqIqk30J1swHwYDVR0jBBgwFoAUQe0RfxoN1CRX1JR491zcsoZTpx8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdDMDlBL0IyOTY2RDlFRUFE NzExRjBCOUNCRkJFNjY0NkY1NkJDL1FlMFJmeG9OMUNSWDFKUjQ5MXpjc29aVHB4 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUWUwUmZ4b04xQ1JYMUpSNDkxemNzb1pUcHg4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdD MDlBL0IyOTY2RDlFRUFENzExRjBCOUNCRkJFNjY0NkY1NkJDL1FlMFJmeG9OMUNS WDFKUjQ5MXpjc29aVHB4OC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAzyi5IIYRrEZmc11V5YmY+MbjPt6UzOqXZE/tGLuamEO+buM2vLrE9KySKMdur qldNrbZ304KtdskSp34ZRnIoyXcZelN7mpO6PaemTo35ngoe088Zjh5lM8E6HnGV R986b3PSQESadhvLZnbjssNUjjmUsU+HDnjzZ5/6VVJSvXmyU1yrDkV0mIzAk4WO 1ky2NyDmA7DFpPhFBihuqWhy9IBmTCp4KYPb3C2ErZgIUI5P0RuWidG8XPVPl7pC 9csndX0s1A6zgP9/E5u5prelMhvI+JeScXFq+O0bSTghMsE8iX/xW64r1gS4bYGv J1SCFYCJVPfaEd9y1gKHR9lK -----END CERTIFICATE-----Generated at Fri Apr 17 12:03:28 2026 by rpki-client