$ rpki-client -vvf rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.mft File: QL0p_yZodz0y7qDscGYCir7gy54.mft (raw, json) Hash identifier: SmKP0fukLDRSlgjuNqwD5EQ+IyalUkb7LCQ5bro7/3M= Subject key identifier: E7:93:3F:A7:B4:CB:66:B7:A0:A9:BC:5E:8F:33:98:D8:2B:3E:96:52 Authority key identifier: 40:BD:29:FF:26:68:77:3D:32:EE:A0:EC:70:66:02:8A:BE:E0:CB:9E Certificate issuer: /CN=A91840A8/serialNumber=40BD29FF2668773D32EEA0EC7066028ABEE0CB9E Certificate serial: 06B8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QL0p_yZodz0y7qDscGYCir7gy54.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.mft Manifest number: 06B8 Signing time: Sat 18 Apr 2026 22:15:36 +0000 Manifest this update: Sat 18 Apr 2026 22:15:35 +0000 Manifest next update: Sat 25 Apr 2026 22:15:35 +0000 Files and hashes: 1: QL0p_yZodz0y7qDscGYCir7gy54.crl (hash: kqEdmcg4EWUbaRvFOC4w+jFTJekhVv8aF3/Wmk3whq4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.crl rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QL0p_yZodz0y7qDscGYCir7gy54.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 22:15:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1720 (0x6b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91840A8, serialNumber=40BD29FF2668773D32EEA0EC7066028ABEE0CB9E Validity Not Before: Apr 18 22:15:35 2026 GMT Not After : Apr 25 22:15:35 2026 GMT Subject: CN=69e40288-5da2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f7:61:b3:e0:4f:27:6f:8d:5d:2e:af:c7:f9: 73:23:e8:29:3b:cc:0b:31:33:19:60:67:dc:8d:53: 9e:e6:5f:72:66:d8:f8:c6:ee:40:80:33:68:6c:5a: 71:00:d5:6b:3b:d5:be:08:3d:99:a1:0c:91:a8:fc: 3a:8c:26:26:4e:dc:e6:0c:a6:f6:6b:21:0d:a0:f6: 5f:b2:e1:a3:11:01:29:ee:a6:ca:8e:8a:63:a4:25: 04:8e:cd:52:f9:41:60:25:bd:d5:70:57:20:fd:4e: 4a:c0:f8:f4:3c:b8:ba:28:77:a2:31:5e:f5:29:5a: 0d:1a:a1:c5:ac:f8:c4:b2:17:18:00:3e:5e:29:1d: 7a:e9:53:86:91:01:ab:6c:77:34:12:62:8a:59:87: 10:f8:75:79:ec:d7:d8:cc:fb:c6:36:3f:9d:93:21: 6d:b9:88:8e:42:82:5a:70:98:53:b7:8c:ec:65:83: 87:47:9c:44:46:55:ad:8f:6e:07:7b:dc:d4:49:97: df:30:7d:f1:81:e6:95:97:bf:4b:3b:d2:76:fb:c7: 09:6d:d6:5b:83:9f:35:cf:05:9d:68:58:21:bf:24: c3:05:9a:b3:fa:a6:d1:d5:fb:66:35:47:bc:35:41: 24:7d:cd:b4:c7:09:44:8c:ec:89:2f:76:23:34:18: 2e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:93:3F:A7:B4:CB:66:B7:A0:A9:BC:5E:8F:33:98:D8:2B:3E:96:52 X509v3 Authority Key Identifier: keyid:40:BD:29:FF:26:68:77:3D:32:EE:A0:EC:70:66:02:8A:BE:E0:CB:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QL0p_yZodz0y7qDscGYCir7gy54.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:03:40:7c:9e:b7:96:96:57:c0:5b:47:1a:91:4a:8f:0c:84: e5:cc:e2:41:92:3c:7e:d2:c8:67:45:7e:b9:04:5a:32:aa:c3: 7e:6b:f4:82:16:fc:41:b9:68:dc:65:25:78:02:27:3c:30:94: 09:65:2b:7c:4b:ad:31:e0:38:7a:59:a8:17:89:04:da:cf:5c: 42:17:ef:b6:0a:3a:2b:18:28:d6:19:2b:6d:82:c1:25:40:c7: a1:5c:3b:60:6b:d0:e4:1b:90:02:95:49:33:42:f6:89:76:b4: 5a:d7:6f:38:87:91:4d:9b:96:fa:98:b0:db:08:47:1f:89:53: 79:83:d6:ff:fd:06:c3:87:4a:6d:16:97:03:3f:25:65:b0:4c: 6e:74:f1:b8:bd:e9:5a:36:82:ed:c2:08:a3:6d:19:24:12:24: 12:6e:3a:a8:0c:d6:1a:13:a8:b4:91:81:73:9f:14:61:b6:73: 9b:f6:08:1f:f7:d2:ed:dc:91:5a:bd:e2:94:d4:c2:12:57:0e: 58:bb:c0:59:0b:2e:9c:2f:ec:84:c6:3d:01:80:33:4e:a6:29: ef:a4:b6:c0:ba:d2:8e:95:2a:de:55:05:26:61:23:f6:73:66: ed:a9:64:82:61:72:5a:83:43:db:eb:6c:58:d2:7e:12:02:42: 3b:60:23:6b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBrgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQwQTgxMTAvBgNVBAUTKDQwQkQyOUZGMjY2ODc3M0QzMkVFQTBFQzcwNjYwMjhB QkVFMENCOUUwHhcNMjYwNDE4MjIxNTM1WhcNMjYwNDI1MjIxNTM1WjAYMRYwFAYD VQQDEw02OWU0MDI4OC01ZGEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt/dhs+BPJ2+NXS6vx/lzI+gpO8wLMTMZYGfcjVOe5l9yZtj4xu5AgDNobFpx ANVrO9W+CD2ZoQyRqPw6jCYmTtzmDKb2ayENoPZfsuGjEQEp7qbKjopjpCUEjs1S +UFgJb3VcFcg/U5KwPj0PLi6KHeiMV71KVoNGqHFrPjEshcYAD5eKR166VOGkQGr bHc0EmKKWYcQ+HV57NfYzPvGNj+dkyFtuYiOQoJacJhTt4zsZYOHR5xERlWtj24H e9zUSZffMH3xgeaVl79LO9J2+8cJbdZbg581zwWdaFghvyTDBZqz+qbR1ftmNUe8 NUEkfc20xwlEjOyJL3YjNBgu3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOeTP6e0 y2a3oKm8Xo8zmNgrPpZSMB8GA1UdIwQYMBaAFEC9Kf8maHc9Mu6g7HBmAoq+4Mue MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDBBOC82NzkwNzczNEEx OTYxMUVCODIwMENGMDlDNEY5QUUwMi9RTDBwX3lab2R6MHk3cURzY0dZQ2lyN2d5 NTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FMMHBfeVpvZHoweTdxRHNjR1lDaXI3Z3k1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDBBOC82NzkwNzczNEExOTYxMUVCODIwMENGMDlDNEY5QUUwMi9RTDBwX3lab2R6 MHk3cURzY0dZQ2lyN2d5NTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApgNAfJ63lpZXwFtHGpFKjwyE5cziQZI8ftLIZ0V+uQRaMqrDfmv0ghb8Qblo 3GUleAInPDCUCWUrfEutMeA4elmoF4kE2s9cQhfvtgo6Kxgo1hkrbYLBJUDHoVw7 YGvQ5BuQApVJM0L2iXa0WtdvOIeRTZuW+piw2whHH4lTeYPW//0Gw4dKbRaXAz8l ZbBMbnTxuL3pWjaC7cIIo20ZJBIkEm46qAzWGhOotJGBc58UYbZzm/YIH/fS7dyR Wr3ilNTCElcOWLvAWQsunC/shMY9AYAzTqYp76S2wLrSjpUq3lUFJmEj9nNm7alk gmFyWoND2+tsWNJ+EgJCO2Ajaw== -----END CERTIFICATE-----Generated at Sun Apr 19 11:39:01 2026 by rpki-client