$ rpki-client -vvf rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.mft File: gqdp3XRsgx9MTbKdamXeCNatle0.mft (raw, json) Hash identifier: GrPTv7ixQ05Z2Ju775FJrvz7tyrPRUGTpSCEIdtak8Q= Subject key identifier: 59:3D:B4:A7:2F:04:13:08:D4:A9:85:83:BB:F0:7C:82:C4:BB:D7:DC Authority key identifier: 82:A7:69:DD:74:6C:83:1F:4C:4D:B2:9D:6A:65:DE:08:D6:AD:95:ED Certificate issuer: /CN=A91921AE/serialNumber=82A769DD746C831F4C4DB29D6A65DE08D6AD95ED Certificate serial: 0120 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqdp3XRsgx9MTbKdamXeCNatle0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.mft Manifest number: 010F Signing time: Fri 17 Apr 2026 05:47:50 +0000 Manifest this update: Fri 17 Apr 2026 05:47:50 +0000 Manifest next update: Fri 24 Apr 2026 05:47:50 +0000 Files and hashes: 1: gqdp3XRsgx9MTbKdamXeCNatle0.crl (hash: 66Wej54POLcHazH3cdImEaKUhaQhYf+7hrw2RhEQ4fY=) 2: DC76F25EBCFD11EFAF51D253C4F9AE02.roa (hash: fKB1wROuPCiOAs2iiH8T0iD/fbxHacro6VdzGc7766Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.crl rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqdp3XRsgx9MTbKdamXeCNatle0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 05:47:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 288 (0x120) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91921AE, serialNumber=82A769DD746C831F4C4DB29D6A65DE08D6AD95ED Validity Not Before: Apr 17 05:47:50 2026 GMT Not After : Apr 24 05:47:50 2026 GMT Subject: CN=69e1c986-6cfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0d:88:d9:61:44:e4:a6:f1:af:05:e6:d5:29: ae:46:1f:eb:48:4e:0c:6e:85:b0:1d:16:88:4b:e8: 3c:54:d4:0f:cb:ab:91:a5:0e:02:33:42:c4:13:38: d8:a1:aa:6f:cb:60:65:1b:54:c8:e4:ee:bf:0f:93: 08:17:31:6c:e9:9f:65:c4:bd:0f:47:57:91:62:ef: f3:42:c9:65:2e:d8:8d:55:d1:1c:f9:6a:19:47:72: d9:6d:27:fd:a1:22:72:66:a5:39:d4:73:37:ff:1b: 77:7d:cc:05:44:8f:0f:07:be:da:4a:2f:d3:4c:45: 8b:68:e1:37:4d:02:38:76:d3:cf:11:a8:45:64:4f: 9f:98:27:fe:a5:da:ea:47:b2:22:97:9a:94:2e:b5: 56:a5:e6:e7:d2:5b:8c:e1:80:fe:30:06:ce:0f:73: 90:0e:29:77:f0:a2:d1:02:56:a0:c8:c4:db:67:df: 16:62:b7:99:a3:f7:fd:6e:fc:c7:ee:8c:58:b8:50: 07:95:25:d6:a0:1f:3a:f1:b3:76:ff:3b:d6:19:13: ee:b0:73:e5:fd:a4:aa:01:cc:1d:c1:12:9b:67:30: 2a:b4:e8:0a:4a:34:ed:81:5d:ed:6f:42:d3:94:70: b7:a6:b2:ef:2c:4d:76:d5:0c:7f:69:0d:fe:33:a4: 8b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:3D:B4:A7:2F:04:13:08:D4:A9:85:83:BB:F0:7C:82:C4:BB:D7:DC X509v3 Authority Key Identifier: keyid:82:A7:69:DD:74:6C:83:1F:4C:4D:B2:9D:6A:65:DE:08:D6:AD:95:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqdp3XRsgx9MTbKdamXeCNatle0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:0c:5e:18:18:20:f8:7a:47:7a:15:15:a9:f7:a5:95:b2:13: f5:d9:fe:3e:ac:44:ab:b3:ab:71:d1:f6:17:1a:bb:7f:4c:e2: 23:1f:22:53:2c:8a:f1:d7:f0:d6:07:74:db:bf:08:54:96:8a: 29:63:21:e5:cc:b6:2f:bc:b9:ff:d4:3a:7d:ca:a1:ec:5e:04: 9b:90:61:32:29:3b:8e:75:49:32:ce:e8:00:39:2e:d5:be:3b: a5:cc:6a:9e:14:1c:c9:4d:30:ec:d2:53:85:f8:88:ed:4b:3f: 58:67:1f:74:5a:1e:56:ce:d3:c0:f3:69:e8:e7:e7:98:3a:99: 7f:3c:3e:86:78:59:06:0c:f9:81:3b:ac:88:74:64:92:f8:52: c4:0f:29:9b:95:e8:38:e3:71:51:f2:3e:3f:3c:87:53:84:63: 51:e5:90:47:df:dc:76:19:84:36:de:4a:c7:6a:03:9c:85:cd: 5a:1f:cb:46:a2:31:65:cc:f6:22:71:1e:c2:c2:a9:1c:19:02: 0b:cc:93:7d:a4:a0:b8:37:19:6e:0d:ca:1b:1a:d7:8a:d9:b6: 04:57:9f:85:74:90:45:45:b2:b3:d6:21:f7:65:74:4a:28:b8: e5:1e:f1:61:07:b6:7d:6f:e3:ba:9f:72:08:41:e3:46:ba:3d: e1:91:5b:70 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTIxQUUxMTAvBgNVBAUTKDgyQTc2OURENzQ2QzgzMUY0QzREQjI5RDZBNjVERTA4 RDZBRDk1RUQwHhcNMjYwNDE3MDU0NzUwWhcNMjYwNDI0MDU0NzUwWjAYMRYwFAYD VQQDEw02OWUxYzk4Ni02Y2ZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzQ2I2WFE5KbxrwXm1SmuRh/rSE4MboWwHRaIS+g8VNQPy6uRpQ4CM0LEEzjY oapvy2BlG1TI5O6/D5MIFzFs6Z9lxL0PR1eRYu/zQsllLtiNVdEc+WoZR3LZbSf9 oSJyZqU51HM3/xt3fcwFRI8PB77aSi/TTEWLaOE3TQI4dtPPEahFZE+fmCf+pdrq R7Iil5qULrVWpebn0luM4YD+MAbOD3OQDil38KLRAlagyMTbZ98WYreZo/f9bvzH 7oxYuFAHlSXWoB868bN2/zvWGRPusHPl/aSqAcwdwRKbZzAqtOgKSjTtgV3tb0LT lHC3prLvLE121Qx/aQ3+M6SL0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFk9tKcv BBMI1KmFg7vwfILEu9fcMB8GA1UdIwQYMBaAFIKnad10bIMfTE2ynWpl3gjWrZXt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjFBRS83NDkxMkIyQ0FD NzMxMUVGQTNDQkQxNEFDNEY5QUUwMi9ncWRwM1hSc2d4OU1UYktkYW1YZUNOYXRs ZTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dxZHAzWFJzZ3g5TVRiS2RhbVhlQ05hdGxlMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MjFBRS83NDkxMkIyQ0FDNzMxMUVGQTNDQkQxNEFDNEY5QUUwMi9ncWRwM1hSc2d4 OU1UYktkYW1YZUNOYXRsZTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADQxeGBgg+HpHehUVqfellbIT9dn+PqxEq7OrcdH2Fxq7f0ziIx8iUyyK8dfw 1gd0278IVJaKKWMh5cy2L7y5/9Q6fcqh7F4Em5BhMik7jnVJMs7oADku1b47pcxq nhQcyU0w7NJThfiI7Us/WGcfdFoeVs7TwPNp6OfnmDqZfzw+hnhZBgz5gTusiHRk kvhSxA8pm5XoOONxUfI+PzyHU4RjUeWQR9/cdhmENt5Kx2oDnIXNWh/LRqIxZcz2 InEewsKpHBkCC8yTfaSguDcZbg3KGxrXitm2BFefhXSQRUWys9Yh92V0Sii45R7x YQe2fW/jup9yCEHjRro94ZFbcA== -----END CERTIFICATE-----Generated at Fri Apr 17 14:34:19 2026 by rpki-client