$ rpki-client -vvf rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.mft File: QL0lotYDGHPlXfzdrTpI97z4jIs.mft (raw, json) Hash identifier: 7I9xCql069CMgmwFIfHHXj/DGZuMNMSvnOfBbkVjJdY= Subject key identifier: 95:45:13:07:79:6E:E0:ED:3D:8C:8E:2E:1F:49:5A:76:91:DF:64:B1 Authority key identifier: 40:BD:25:A2:D6:03:18:73:E5:5D:FC:DD:AD:3A:48:F7:BC:F8:8C:8B Certificate issuer: /CN=A9194A58/serialNumber=40BD25A2D6031873E55DFCDDAD3A48F7BCF88C8B Certificate serial: 18EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QL0lotYDGHPlXfzdrTpI97z4jIs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.mft Manifest number: 18DC Signing time: Thu 16 Apr 2026 16:24:27 +0000 Manifest this update: Thu 16 Apr 2026 16:24:26 +0000 Manifest next update: Thu 23 Apr 2026 16:24:26 +0000 Files and hashes: 1: QL0lotYDGHPlXfzdrTpI97z4jIs.crl (hash: VhBDGzcsAhlbCT0T4+pQsGRdNJWeN7Rzd2XB0Mi5L3Q=) 2: 42D0E9A4AFD911E7B8A7E96CC4F9AE02.roa (hash: abf25FbH719hRhMiSj4RTqIJD+/I5r3H2hRBfJwMFgQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.crl rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QL0lotYDGHPlXfzdrTpI97z4jIs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 16:24:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6378 (0x18ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194A58, serialNumber=40BD25A2D6031873E55DFCDDAD3A48F7BCF88C8B Validity Not Before: Apr 16 16:24:26 2026 GMT Not After : Apr 23 16:24:26 2026 GMT Subject: CN=69e10d3b-d624 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:34:51:a2:74:ab:e8:02:78:6c:ba:f6:bc:fa: a6:cc:c6:d5:f9:10:60:db:58:51:da:e0:95:d9:83: 24:dc:7b:d0:41:d0:6c:58:93:a1:bb:ac:e2:31:93: 33:6f:8e:a6:e6:b8:41:47:16:f6:1d:ba:93:8b:f4: 61:10:d3:91:79:d7:a6:d8:01:97:36:62:e4:94:60: 31:2b:09:a9:82:6d:1e:08:45:af:49:40:41:1e:a3: 94:79:47:98:c3:2a:eb:96:68:e5:bd:cb:0d:42:ca: 71:71:a3:6f:c8:2f:5f:ec:bd:44:a3:6c:33:da:90: c0:db:83:24:7a:d9:b7:8d:8f:65:13:0e:e8:07:cc: 0d:f0:70:78:0c:c4:ee:a0:2e:08:ba:0a:50:02:56: f8:26:1b:6d:12:60:5e:bc:e3:07:fc:60:b9:23:9d: 54:56:d6:e3:6e:5d:f5:12:e2:18:36:1f:c2:fa:ee: 30:d1:fb:4a:c7:85:fb:e3:2a:90:8d:43:8e:ee:5e: 04:e9:6c:7e:3c:69:dd:d5:22:82:a0:14:e3:ff:52: be:d4:09:a7:4e:e9:9a:33:a1:63:10:6b:18:e2:f1: 18:fd:75:81:f4:ce:df:6e:d2:28:fa:4a:bb:df:f7: 00:79:3f:15:b9:a4:a1:3e:2a:ba:b8:09:77:9c:39: 76:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:45:13:07:79:6E:E0:ED:3D:8C:8E:2E:1F:49:5A:76:91:DF:64:B1 X509v3 Authority Key Identifier: keyid:40:BD:25:A2:D6:03:18:73:E5:5D:FC:DD:AD:3A:48:F7:BC:F8:8C:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QL0lotYDGHPlXfzdrTpI97z4jIs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:3a:82:3b:e2:fe:6c:2c:4c:70:ed:d8:a0:35:8d:f9:10:4d: bb:1b:e3:44:f6:a2:9a:fa:6c:f3:b2:a4:0d:9d:df:b8:5d:f5: 7e:6d:21:d7:27:e1:28:1e:e6:4c:f3:0c:7e:fb:57:3e:67:58: 82:67:05:7b:9a:d3:e3:df:62:6c:54:db:bb:9c:ee:f9:fd:dd: 9f:e7:c9:d5:bb:4f:b3:48:dc:8f:2d:7c:98:2a:99:92:5e:44: c3:a8:84:ad:cc:cc:3f:34:cc:18:ef:88:43:c1:56:de:d3:5f: 62:99:58:75:c9:52:8e:02:9e:59:b3:a6:ed:a2:1a:75:2f:ed: 2b:00:bb:e7:5b:a6:14:a2:cd:00:3a:bd:61:48:ac:c5:78:44: eb:9d:4f:a3:91:0c:b9:6c:0b:82:79:a4:40:62:93:2f:07:58: 44:e2:87:3f:03:27:e6:30:a4:f5:ee:25:16:11:7e:84:de:bb: 77:ce:b2:26:a5:77:1f:a3:54:2e:06:93:b0:07:98:02:00:15: bb:67:78:e7:8e:b4:44:09:8f:ff:f9:fd:8a:46:78:0c:95:31: 42:c3:28:67:c3:93:97:1b:e2:16:f0:10:13:aa:a7:38:40:62: e9:59:55:69:8d:ff:be:7e:f6:8f:5d:ee:c2:07:c6:d8:f7:c4: ba:f2:7e:43 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRBNTgxMTAvBgNVBAUTKDQwQkQyNUEyRDYwMzE4NzNFNTVERkNEREFEM0E0OEY3 QkNGODhDOEIwHhcNMjYwNDE2MTYyNDI2WhcNMjYwNDIzMTYyNDI2WjAYMRYwFAYD VQQDEw02OWUxMGQzYi1kNjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlzRRonSr6AJ4bLr2vPqmzMbV+RBg21hR2uCV2YMk3HvQQdBsWJOhu6ziMZMz b46m5rhBRxb2HbqTi/RhENORedem2AGXNmLklGAxKwmpgm0eCEWvSUBBHqOUeUeY wyrrlmjlvcsNQspxcaNvyC9f7L1Eo2wz2pDA24Mketm3jY9lEw7oB8wN8HB4DMTu oC4IugpQAlb4JhttEmBevOMH/GC5I51UVtbjbl31EuIYNh/C+u4w0ftKx4X74yqQ jUOO7l4E6Wx+PGnd1SKCoBTj/1K+1AmnTumaM6FjEGsY4vEY/XWB9M7fbtIo+kq7 3/cAeT8VuaShPiq6uAl3nDl2BwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJVFEwd5 buDtPYyOLh9JWnaR32SxMB8GA1UdIwQYMBaAFEC9JaLWAxhz5V383a06SPe8+IyL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEE1OC80RUFDRTQ5MEFF NDMxMUU3ODgxQzY0MTZDNEY5QUUwMi9RTDBsb3RZREdIUGxYZnpkclRwSTk3ejRq SXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FMMGxvdFlER0hQbFhmemRyVHBJOTd6NGpJcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEE1OC80RUFDRTQ5MEFFNDMxMUU3ODgxQzY0MTZDNEY5QUUwMi9RTDBsb3RZREdI UGxYZnpkclRwSTk3ejRqSXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJDqCO+L+bCxMcO3YoDWN+RBNuxvjRPaimvps87KkDZ3fuF31fm0h1yfhKB7m TPMMfvtXPmdYgmcFe5rT499ibFTbu5zu+f3dn+fJ1btPs0jcjy18mCqZkl5Ew6iE rczMPzTMGO+IQ8FW3tNfYplYdclSjgKeWbOm7aIadS/tKwC751umFKLNADq9YUis xXhE651Po5EMuWwLgnmkQGKTLwdYROKHPwMn5jCk9e4lFhF+hN67d86yJqV3H6NU LgaTsAeYAgAVu2d45460RAmP//n9ikZ4DJUxQsMoZ8OTlxviFvAQE6qnOEBi6VlV aY3/vn72j13uwgfG2PfEuvJ+Qw== -----END CERTIFICATE-----Generated at Fri Apr 17 11:19:15 2026 by rpki-client