$ rpki-client -vvf rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft File: Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft (raw, json) Hash identifier: q/SE5pky1eb/1Xf6YlWV26moCZokr7Dbb+aGY1C9khI= Subject key identifier: CC:6D:E4:D7:C7:29:C6:3B:FE:AB:B1:87:16:F7:6E:4D:BB:28:D2:6D Authority key identifier: 43:D2:50:D5:C1:F6:09:ED:17:4D:FF:26:43:01:DB:45:BE:25:B1:B4 Certificate issuer: /CN=A91978DD/serialNumber=43D250D5C1F609ED174DFF264301DB45BE25B1B4 Certificate serial: 17E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft Manifest number: 17D4 Signing time: Sat 18 Apr 2026 16:28:29 +0000 Manifest this update: Sat 18 Apr 2026 16:28:29 +0000 Manifest next update: Sat 25 Apr 2026 16:28:29 +0000 Files and hashes: 1: Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.crl (hash: 8uA/37dYeBK/MQ1B7K7L7BUk93Xcoi94YzbzzZ1x8ig=) 2: 16ABD910E0C111E7BA64DE22C4F9AE02.roa (hash: R19qxLrIh1c+/g96rJpVUSyzG1wIPKCyqhlsnSxYpaw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.crl rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 16:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6112 (0x17e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91978DD, serialNumber=43D250D5C1F609ED174DFF264301DB45BE25B1B4 Validity Not Before: Apr 18 16:28:29 2026 GMT Not After : Apr 25 16:28:29 2026 GMT Subject: CN=69e3b12d-ed43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c0:a8:e5:4f:ce:fa:14:38:e0:ef:00:6f:3b: 19:c9:76:be:c3:ef:ce:32:2b:8b:25:e1:4e:f2:83: 3a:ad:71:f0:05:dc:5a:18:5d:81:4a:05:31:2e:55: 26:bf:3d:03:a2:d0:ef:a0:52:e1:82:8b:27:ae:a7: bb:26:97:f5:09:a0:c4:e3:53:32:d6:b2:d8:fe:62: 6c:b8:e5:41:60:86:7a:6f:05:33:bd:c1:1a:ba:36: f9:d8:77:53:3e:51:d5:08:e4:c9:92:ec:48:2e:da: 3b:d6:d0:2c:87:fa:c0:33:99:24:08:30:8d:58:ed: 10:06:a4:74:0e:0f:11:36:5c:a1:29:3b:69:b2:c6: 3f:6b:4b:a7:37:c8:49:70:62:1e:85:ae:04:b4:77: c7:5f:f4:c7:8d:a3:a0:68:21:f9:c5:f2:be:45:72: 68:1a:ae:82:49:1d:35:77:e2:e4:2d:96:2b:19:cf: 05:9b:e5:a5:8a:f3:83:db:bc:b2:57:67:a8:1e:e4: 0b:e7:7a:25:96:c9:e9:03:29:f3:e2:69:6d:28:68: 94:4a:e6:ae:03:84:c6:59:5e:d8:80:33:c8:93:0c: cd:e7:9c:05:75:e4:5c:c6:0d:7e:41:20:bf:62:a9: d1:28:13:5c:15:f3:09:45:93:28:d2:1c:3c:6f:16: d0:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:6D:E4:D7:C7:29:C6:3B:FE:AB:B1:87:16:F7:6E:4D:BB:28:D2:6D X509v3 Authority Key Identifier: keyid:43:D2:50:D5:C1:F6:09:ED:17:4D:FF:26:43:01:DB:45:BE:25:B1:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:aa:39:81:58:e5:43:ac:27:99:24:8b:62:8d:62:bd:7b:49: 1f:51:e3:a3:7e:84:86:0c:24:23:d6:40:2b:86:d9:a6:3b:67: 96:aa:e7:13:f7:fb:56:4b:8a:ac:f8:e9:b4:91:ee:3c:a7:55: bb:d6:b3:35:24:c3:e8:24:2a:5c:f9:cd:ab:f7:9c:3d:c8:0d: 86:7f:3b:8f:77:67:5f:36:eb:08:c6:d8:0b:86:9c:50:e2:e4: fa:ff:db:e4:dd:e3:fa:e0:0d:39:c5:ab:b4:ff:1e:3d:f4:a7: fe:c8:e8:51:de:07:b0:e9:4e:4d:5d:78:5d:13:51:a0:97:5c: a2:ba:2e:95:ea:b7:8d:f1:34:a1:69:7f:9f:b6:e2:47:7c:6c: e8:fd:34:b9:09:17:3e:79:26:94:56:5e:3c:5a:e9:a7:cb:46: ae:e8:df:9e:25:90:ed:66:62:38:14:d6:31:41:fd:c9:12:80: f2:69:ec:8d:63:66:e8:51:25:11:82:8d:d1:b4:30:0c:93:0b: d8:d8:80:dc:36:a1:fa:2f:6d:42:3d:94:6f:56:da:7a:df:f4: a7:71:ff:93:54:88:86:cd:7f:c7:71:82:4e:af:d1:c7:a5:8f: 34:e6:0b:55:ae:f3:ff:6b:8b:52:a9:e4:e2:2e:e8:43:89:ef: 0a:44:ef:89 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICF+AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTc4REQxMTAvBgNVBAUTKDQzRDI1MEQ1QzFGNjA5RUQxNzRERkYyNjQzMDFEQjQ1 QkUyNUIxQjQwHhcNMjYwNDE4MTYyODI5WhcNMjYwNDI1MTYyODI5WjAYMRYwFAYD VQQDEw02OWUzYjEyZC1lZDQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3sCo5U/O+hQ44O8AbzsZyXa+w+/OMiuLJeFO8oM6rXHwBdxaGF2BSgUxLlUm vz0DotDvoFLhgosnrqe7Jpf1CaDE41My1rLY/mJsuOVBYIZ6bwUzvcEaujb52HdT PlHVCOTJkuxILto71tAsh/rAM5kkCDCNWO0QBqR0Dg8RNlyhKTtpssY/a0unN8hJ cGIeha4EtHfHX/THjaOgaCH5xfK+RXJoGq6CSR01d+LkLZYrGc8Fm+WlivOD27yy V2eoHuQL53ollsnpAynz4mltKGiUSuauA4TGWV7YgDPIkwzN55wFdeRcxg1+QSC/ YqnRKBNcFfMJRZMo0hw8bxbQOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMxt5NfH KcY7/quxhxb3bk27KNJtMB8GA1UdIwQYMBaAFEPSUNXB9gntF03/JkMB20W+JbG0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzhERC9DQzE4RDlENEUw QjYxMUU3OTlBMkI2ODJDNEY5QUUwMi9ROUpRMWNIMkNlMFhUZjhtUXdIYlJiNGxz YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1E5SlExY0gyQ2UwWFRmOG1Rd0hiUmI0bHNiUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzhERC9DQzE4RDlENEUwQjYxMUU3OTlBMkI2ODJDNEY5QUUwMi9ROUpRMWNIMkNl MFhUZjhtUXdIYlJiNGxzYlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAL6o5gVjlQ6wnmSSLYo1ivXtJH1Hjo36EhgwkI9ZAK4bZpjtnlqrnE/f7VkuK rPjptJHuPKdVu9azNSTD6CQqXPnNq/ecPcgNhn87j3dnXzbrCMbYC4acUOLk+v/b 5N3j+uANOcWrtP8ePfSn/sjoUd4HsOlOTV14XRNRoJdcorouleq3jfE0oWl/n7bi R3xs6P00uQkXPnkmlFZePFrpp8tGrujfniWQ7WZiOBTWMUH9yRKA8mnsjWNm6FEl EYKN0bQwDJML2NiA3Dah+i9tQj2Ub1baet/0p3H/k1SIhs1/x3GCTq/Rx6WPNOYL Va7z/2uLUqnk4i7oQ4nvCkTviQ== -----END CERTIFICATE-----Generated at Sun Apr 19 08:56:40 2026 by rpki-client