$ rpki-client -vvf rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft File: qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft (raw, json) Hash identifier: gqdHbzK48lV1WTK2aoAvGlM0AsBftZ/+gsXEQvUwTPM= Subject key identifier: 1C:B4:70:F4:0E:49:9C:89:86:C0:0F:E7:F5:EC:BE:66:0A:47:35:FE Authority key identifier: AB:11:E8:09:F2:BC:66:B0:D1:E6:0B:8A:31:F8:6B:5B:82:E0:0E:39 Certificate issuer: /CN=A9191FA5/serialNumber=AB11E809F2BC66B0D1E60B8A31F86B5B82E00E39 Certificate serial: 3728 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft Manifest number: 3636 Signing time: Thu 16 Apr 2026 14:27:59 +0000 Manifest this update: Thu 16 Apr 2026 14:27:58 +0000 Manifest next update: Thu 23 Apr 2026 14:27:58 +0000 Files and hashes: 1: qxHoCfK8ZrDR5guKMfhrW4LgDjk.crl (hash: 7VzAmR8/oywLmJelxe/7pdANbd06JiBglk0DGk5n0vk=) 2: FF09B6BEC2E511EBBDB1B180C4F9AE02.roa (hash: CAJ81kegdxUmZ0yB+G3EOfDtceEQTggGkdXXt1XoU0I=) 3: FDE510BCC2E511EBBDB1B180C4F9AE02.roa (hash: KeHN4yC8HCgWU7NC7+u9JXzLgmJ0RzLzePi7iCwVwGQ=) 4: B8E7D994D00711EAB66A1255C4F9AE02.roa (hash: AoD1y/nYjPSOUSJHEbMuyBuaFVXXnCMYDMP9nMWhevk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.crl rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 14:27:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14120 (0x3728) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191FA5, serialNumber=AB11E809F2BC66B0D1E60B8A31F86B5B82E00E39 Validity Not Before: Apr 16 14:27:58 2026 GMT Not After : Apr 23 14:27:58 2026 GMT Subject: CN=69e0f1ef-6db8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:39:56:ad:59:73:35:65:72:cc:00:ee:64:20: 69:7b:f1:c5:2d:10:d1:43:56:ae:3f:80:da:22:6c: 5c:37:a2:41:e6:ac:9a:50:0a:2e:da:74:2f:37:ac: 14:f9:eb:82:e9:d3:60:ae:70:79:9e:2d:f6:6f:36: f7:d8:6b:e7:cd:3e:ff:dc:9f:8e:04:bc:d0:fd:7d: b3:4d:d2:97:d2:54:67:63:67:70:85:97:bf:5f:6e: e9:08:da:69:c0:bc:46:a3:7b:3a:79:33:ed:d5:74: 53:cd:87:d3:1d:2f:cf:d0:ae:f9:8b:c5:6b:3f:74: 5e:c9:a7:13:6b:00:e0:1c:63:06:68:23:73:a6:19: 96:c4:7b:02:f3:3f:41:bc:cf:cd:6e:0a:ba:20:e6: 83:eb:ba:f7:77:2c:bd:05:03:78:89:a6:5e:8d:76: 78:61:aa:02:2c:c0:fc:62:50:7c:80:7d:9d:ee:82: 90:5c:4b:35:7b:22:8d:ea:fc:9a:82:b0:90:72:97: 5a:ac:b1:d8:2b:70:da:52:49:e8:4c:e0:04:04:10: 67:98:d3:bf:19:2e:2f:d3:24:48:47:95:a9:8a:27: 81:5e:8f:0c:82:70:7b:e3:10:99:e2:99:95:4c:c0: 48:35:61:e7:b7:80:a6:99:10:d3:c4:85:bc:67:77: 52:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:B4:70:F4:0E:49:9C:89:86:C0:0F:E7:F5:EC:BE:66:0A:47:35:FE X509v3 Authority Key Identifier: keyid:AB:11:E8:09:F2:BC:66:B0:D1:E6:0B:8A:31:F8:6B:5B:82:E0:0E:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:cd:15:a6:5b:c1:c4:b3:37:ed:3c:51:c5:bf:33:18:66:4b: d6:45:da:ff:92:a8:d7:e1:bb:eb:2a:53:c9:77:66:9e:ad:33: 9b:12:e5:64:99:39:af:e1:f2:4e:bf:76:f0:c9:c7:f8:0a:b4: d8:e3:9e:c3:ec:ca:b1:dc:d4:63:51:9d:8f:15:ae:72:86:c2: 28:bd:c5:0e:4a:36:1d:40:63:22:32:30:81:ec:6a:b9:5f:3e: ad:1d:1e:37:10:91:85:6e:1f:5b:5c:6b:cc:09:cd:8c:e7:8f: 07:6c:35:c6:c7:ce:07:fd:09:e6:36:3e:b6:39:54:8a:6f:1f: 64:99:27:41:cb:2e:5e:ea:59:d6:cf:cf:5a:a6:aa:5d:ca:54: 63:f5:4a:2f:97:2c:8f:a3:b5:a5:02:e1:0c:af:0e:7f:e0:49: 01:f4:65:3f:48:60:df:3b:6f:0d:a3:1e:45:dd:a0:46:11:6f: 5c:74:da:bf:d4:05:a2:8e:f3:e3:3d:9e:7a:47:b6:c0:79:6a: 61:3e:ed:00:d1:e9:b9:48:d2:37:dd:43:3d:6c:82:aa:fe:cf: ca:15:cb:51:c2:c7:87:18:a1:34:85:47:c6:45:15:a0:1e:e8: 95:c4:ed:5c:9b:ef:52:f2:e9:d5:08:71:34:f1:79:db:81:7f: 23:cd:27:5f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNygwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFGQTUxMTAvBgNVBAUTKEFCMTFFODA5RjJCQzY2QjBEMUU2MEI4QTMxRjg2QjVC ODJFMDBFMzkwHhcNMjYwNDE2MTQyNzU4WhcNMjYwNDIzMTQyNzU4WjAYMRYwFAYD VQQDEw02OWUwZjFlZi02ZGI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuDlWrVlzNWVyzADuZCBpe/HFLRDRQ1auP4DaImxcN6JB5qyaUAou2nQvN6wU +euC6dNgrnB5ni32bzb32GvnzT7/3J+OBLzQ/X2zTdKX0lRnY2dwhZe/X27pCNpp wLxGo3s6eTPt1XRTzYfTHS/P0K75i8VrP3ReyacTawDgHGMGaCNzphmWxHsC8z9B vM/Nbgq6IOaD67r3dyy9BQN4iaZejXZ4YaoCLMD8YlB8gH2d7oKQXEs1eyKN6vya grCQcpdarLHYK3DaUknoTOAEBBBnmNO/GS4v0yRIR5WpiieBXo8MgnB74xCZ4pmV TMBINWHnt4CmmRDTxIW8Z3dSgQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBy0cPQO SZyJhsAP5/XsvmYKRzX+MB8GA1UdIwQYMBaAFKsR6AnyvGaw0eYLijH4a1uC4A45 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUZBNS8wODA1NkNFNDFE ODcxMUUyOUREM0M2REUwOEIwMkNEMi9xeEhvQ2ZLOFpyRFI1Z3VLTWZoclc0TGdE amsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F4SG9DZks4WnJEUjVndUtNZmhyVzRMZ0Rqay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUZBNS8wODA1NkNFNDFEODcxMUUyOUREM0M2REUwOEIwMkNEMi9xeEhvQ2ZLOFpy RFI1Z3VLTWZoclc0TGdEamsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABc0VplvBxLM37TxRxb8zGGZL1kXa/5Ko1+G76ypTyXdmnq0zmxLlZJk5r+Hy Tr928MnH+Aq02OOew+zKsdzUY1GdjxWucobCKL3FDko2HUBjIjIwgexquV8+rR0e NxCRhW4fW1xrzAnNjOePB2w1xsfOB/0J5jY+tjlUim8fZJknQcsuXupZ1s/PWqaq XcpUY/VKL5csj6O1pQLhDK8Of+BJAfRlP0hg3ztvDaMeRd2gRhFvXHTav9QFoo7z 4z2eeke2wHlqYT7tANHpuUjSN91DPWyCqv7PyhXLUcLHhxihNIVHxkUVoB7olcTt XJvvUvLp1QhxNPF524F/I80nXw== -----END CERTIFICATE-----Generated at Fri Apr 17 05:06:57 2026 by rpki-client