$ rpki-client -vvf rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.mft File: qpCd6zVb4xTwVTIZQw0JrOLY53E.mft (raw, json) Hash identifier: AljEC2nyhYPwj4hxpT1XApLPwvMfHoPYmtkd1+wIhbI= Subject key identifier: D3:88:DE:E3:60:C3:01:E5:DC:15:E5:1D:35:90:AC:24:D8:8C:6F:2C Authority key identifier: AA:90:9D:EB:35:5B:E3:14:F0:55:32:19:43:0D:09:AC:E2:D8:E7:71 Certificate issuer: /CN=A9188F72/serialNumber=AA909DEB355BE314F0553219430D09ACE2D8E771 Certificate serial: D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpCd6zVb4xTwVTIZQw0JrOLY53E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.mft Manifest number: CA Signing time: Wed 15 Apr 2026 06:29:25 +0000 Manifest this update: Wed 15 Apr 2026 06:29:24 +0000 Manifest next update: Wed 22 Apr 2026 06:29:24 +0000 Files and hashes: 1: qpCd6zVb4xTwVTIZQw0JrOLY53E.crl (hash: WAgCvLoO7NNjQSxZYF6jxHfCD5PRXLpxFo4t9Cn7NtM=) 2: DC02E120A82511F0919E5F6EC4F9AE02.roa (hash: nFFjss0HOe9zjxoy2QI4KkvK/22dVhrCtwgvb/muMK4=) 3: CDD9D46EA82511F0A1B4386EC4F9AE02.roa (hash: /fZtQO9WFWt4xEmvAMiAEgk560qzFG36sx+TD4RIiz4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.crl rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpCd6zVb4xTwVTIZQw0JrOLY53E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 06:29:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 211 (0xd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188F72, serialNumber=AA909DEB355BE314F0553219430D09ACE2D8E771 Validity Not Before: Apr 15 06:29:24 2026 GMT Not After : Apr 22 06:29:24 2026 GMT Subject: CN=69df3045-2114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:73:ea:4d:00:ea:f1:84:69:78:82:d0:9b:f4: 57:7f:16:d6:a9:76:27:62:3f:c2:9b:e0:d9:81:3a: 5d:0c:05:e8:d6:b2:7e:88:6a:3d:5b:8e:44:7b:1f: 05:32:8e:c6:ad:8d:af:b3:70:ca:7f:e4:69:94:dd: 91:6a:43:3b:c4:42:ed:12:1e:74:1c:c4:8a:ac:e6: 48:36:85:3d:c4:25:29:68:1b:cd:aa:44:0b:de:99: 8d:2b:8c:8a:14:25:fd:a9:71:ec:dd:c8:f0:54:5f: eb:9f:b3:0b:8c:d5:c6:40:61:4c:67:6e:38:6d:c8: 68:75:52:20:9c:be:bf:b9:18:b3:0e:bb:35:b1:9e: fb:cf:74:70:99:f4:84:a1:7d:a8:8f:05:bb:aa:a3: 1f:fe:5b:bc:45:fd:d9:a1:3c:ee:af:60:9a:aa:37: e4:73:83:f6:a8:cc:c3:9d:d2:57:95:56:a8:9e:e1: 89:46:6a:af:a4:ae:d7:5e:9e:b1:17:e8:dc:85:12: 40:b7:af:e0:b1:af:48:16:fe:15:6c:15:0a:78:07: 32:87:cf:4e:23:9d:bf:ea:10:0e:25:f0:e0:5e:34: 86:13:16:d2:02:7c:9f:c1:d7:73:89:e6:1a:58:20: c4:13:e4:0f:15:a4:f8:df:21:52:fb:b9:02:54:b7: ab:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:88:DE:E3:60:C3:01:E5:DC:15:E5:1D:35:90:AC:24:D8:8C:6F:2C X509v3 Authority Key Identifier: keyid:AA:90:9D:EB:35:5B:E3:14:F0:55:32:19:43:0D:09:AC:E2:D8:E7:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpCd6zVb4xTwVTIZQw0JrOLY53E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:c5:0f:83:ae:bc:fe:6d:5d:f1:f7:b1:41:72:aa:35:8d:37: 4c:fb:87:eb:ed:1b:6d:2b:e9:dd:3f:2b:c0:17:63:3d:fc:68: 1b:be:7d:54:b1:f5:b0:18:f3:21:62:39:71:fe:44:4e:33:43: ae:66:bb:22:14:27:cb:52:10:e5:4b:7a:c2:e7:85:af:75:81: 6e:ed:c0:88:da:e2:5f:d1:6c:9d:cf:00:c7:31:76:02:d1:42: cb:20:a3:02:b8:a6:6c:22:3a:f1:87:51:f8:d1:20:26:ea:fe: 73:ec:d7:05:11:89:ec:34:d0:b8:20:43:00:cd:41:46:76:51: f0:eb:33:76:60:5e:6b:fd:cd:21:54:3f:4b:34:9c:69:40:3d: 2c:4b:42:b3:5b:da:fa:1d:c5:0c:8d:9d:a2:d6:57:d1:a6:af: 82:20:bc:9d:69:be:3d:57:a7:91:e3:c0:e4:df:1b:ee:ca:e7: d7:3e:15:e4:3a:2d:ff:65:da:d4:e1:a0:f4:2d:99:03:38:97: f9:1b:0c:a0:a5:5a:f8:96:17:b4:c5:e4:8c:5a:a5:3f:24:02: a1:ce:27:c3:8b:c6:fd:4e:30:3b:cb:7a:3c:f1:73:f3:48:f2: ef:4d:ea:62:94:1b:be:06:cf:fc:99:3b:5d:3b:cf:8f:51:74: 77:e2:0f:98 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhGNzIxMTAvBgNVBAUTKEFBOTA5REVCMzU1QkUzMTRGMDU1MzIxOTQzMEQwOUFD RTJEOEU3NzEwHhcNMjYwNDE1MDYyOTI0WhcNMjYwNDIyMDYyOTI0WjAYMRYwFAYD VQQDEw02OWRmMzA0NS0yMTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApXPqTQDq8YRpeILQm/RXfxbWqXYnYj/Cm+DZgTpdDAXo1rJ+iGo9W45Eex8F Mo7GrY2vs3DKf+RplN2RakM7xELtEh50HMSKrOZINoU9xCUpaBvNqkQL3pmNK4yK FCX9qXHs3cjwVF/rn7MLjNXGQGFMZ244bchodVIgnL6/uRizDrs1sZ77z3RwmfSE oX2ojwW7qqMf/lu8Rf3ZoTzur2Caqjfkc4P2qMzDndJXlVaonuGJRmqvpK7XXp6x F+jchRJAt6/gsa9IFv4VbBUKeAcyh89OI52/6hAOJfDgXjSGExbSAnyfwddzieYa WCDEE+QPFaT43yFS+7kCVLerXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNOI3uNg wwHl3BXlHTWQrCTYjG8sMB8GA1UdIwQYMBaAFKqQnes1W+MU8FUyGUMNCazi2Odx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEY3Mi9DQUFGMEQ0QzBF MkMxMUYwOEYxRDY5ODFDNEY5QUUwMi9xcENkNnpWYjR4VHdWVElaUXcwSnJPTFk1 M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FwQ2Q2elZiNHhUd1ZUSVpRdzBKck9MWTUzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OEY3Mi9DQUFGMEQ0QzBFMkMxMUYwOEYxRDY5ODFDNEY5QUUwMi9xcENkNnpWYjR4 VHdWVElaUXcwSnJPTFk1M0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkMUPg668/m1d8fexQXKqNY03TPuH6+0bbSvp3T8rwBdjPfxoG759VLH1sBjz IWI5cf5ETjNDrma7IhQny1IQ5Ut6wueFr3WBbu3AiNriX9Fsnc8AxzF2AtFCyyCj ArimbCI68YdR+NEgJur+c+zXBRGJ7DTQuCBDAM1BRnZR8OszdmBea/3NIVQ/SzSc aUA9LEtCs1va+h3FDI2dotZX0aavgiC8nWm+PVenkePA5N8b7srn1z4V5Dot/2Xa 1OGg9C2ZAziX+RsMoKVa+JYXtMXkjFqlPyQCoc4nw4vG/U4wO8t6PPFz80jy703q YpQbvgbP/Jk7XTvPj1F0d+IPmA== -----END CERTIFICATE-----Generated at Fri Apr 17 08:09:15 2026 by rpki-client