$ rpki-client -vvf rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft File: rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft (raw, json) Hash identifier: s+5CYgoaziYyMiyR2e2Xfv2j0aLEYvxAIvioqaZm1g4= Subject key identifier: F9:00:3F:96:AF:E6:2B:30:FB:7C:1F:D7:93:D7:06:D9:12:11:7A:43 Authority key identifier: AE:A6:DF:B3:64:A2:B3:B5:92:7F:00:7A:4E:82:4F:32:C4:08:E5:C8 Certificate issuer: /CN=A91A97D0/serialNumber=AEA6DFB364A2B3B5927F007A4E824F32C408E5C8 Certificate serial: 02DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rqbfs2Sis7WSfwB6ToJPMsQI5cg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft Manifest number: 02CB Signing time: Fri 17 Apr 2026 01:18:23 +0000 Manifest this update: Fri 17 Apr 2026 01:18:23 +0000 Manifest next update: Fri 24 Apr 2026 01:18:23 +0000 Files and hashes: 1: rqbfs2Sis7WSfwB6ToJPMsQI5cg.crl (hash: SqfjJl3FAj/tYcwfPLzrJwclY3WZjVqrohBvoHNDilE=) 2: C31A6BFA717D11EE90B95137C4F9AE02.roa (hash: BJ0AXwywDrh3L6h1jOokV2ePgsQC41EcTflOVzlWuFQ=) 3: 28BD1EFC3B4311EDAB5E6382C4F9AE02.roa (hash: x/yz1V4NDuS6R8Q19YYrXkxZ59RztmqTLn+CKfG3QlQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.crl rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rqbfs2Sis7WSfwB6ToJPMsQI5cg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:18:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 733 (0x2dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A97D0, serialNumber=AEA6DFB364A2B3B5927F007A4E824F32C408E5C8 Validity Not Before: Apr 17 01:18:23 2026 GMT Not After : Apr 24 01:18:23 2026 GMT Subject: CN=69e18a5f-f7fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c4:49:06:09:75:02:58:e3:22:32:5b:a9:32: 7b:29:fe:aa:d7:56:8e:a6:c6:f0:72:3c:82:af:02: 6f:8f:a0:02:47:49:4d:10:c5:aa:6d:ca:f1:98:f8: e2:d1:ae:18:1b:fb:c7:cb:56:2f:df:be:b2:f6:c2: ab:a0:cf:98:e8:59:58:b3:75:0f:b2:3e:6f:02:93: dc:a2:32:d3:b7:b0:f3:17:b6:8a:98:f0:8f:86:bf: de:92:8c:ac:c9:44:17:f5:d7:71:40:de:7e:d3:19: 0c:31:b6:26:dd:0a:96:1a:bd:e7:55:c9:48:d6:e6: e9:e8:8f:2b:22:ab:af:d7:d7:bd:57:55:b9:aa:d0: bf:01:14:1d:9e:9f:3a:6f:f4:19:72:f4:6c:a9:9e: 1c:cc:a9:9d:c0:0d:b7:7a:16:0e:77:8a:8d:8e:96: 39:62:c9:53:b3:63:c9:1f:58:68:f1:9a:af:8b:55: c2:88:27:05:03:ab:d0:b4:97:cd:da:fe:c1:be:31: 97:3b:10:92:57:ba:11:fe:b3:be:16:da:34:56:fd: 5b:85:9c:99:3c:d7:bb:d0:06:e5:1d:4c:b8:57:e3: 07:50:9d:da:87:1b:2f:4f:1e:f9:a9:6c:52:34:04: 1e:4a:33:ef:40:10:6b:03:cf:08:3e:b4:f8:c1:65: 74:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:00:3F:96:AF:E6:2B:30:FB:7C:1F:D7:93:D7:06:D9:12:11:7A:43 X509v3 Authority Key Identifier: keyid:AE:A6:DF:B3:64:A2:B3:B5:92:7F:00:7A:4E:82:4F:32:C4:08:E5:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rqbfs2Sis7WSfwB6ToJPMsQI5cg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:7d:8f:af:eb:c1:f6:85:57:95:40:e4:a1:08:01:83:34:32: 69:74:e9:da:b1:17:cc:5d:d8:7e:1b:d9:bb:42:6b:84:21:b5: 7c:ca:0f:3a:67:04:e5:87:58:76:b5:38:d5:57:4c:aa:36:19: 89:43:31:7d:ca:d4:d9:84:d8:13:f2:8c:73:72:c9:c9:61:6d: ad:8b:fb:6d:7a:7e:d2:7d:8b:b4:69:85:88:9d:3a:ad:3f:36: 3a:59:36:1e:f3:47:27:41:1e:7a:7d:39:c5:67:6c:0c:30:4c: 61:43:69:9f:a1:a9:b8:aa:84:52:3f:fb:fa:54:08:ea:97:8b: ce:cb:8c:2c:43:61:9a:eb:f4:d8:1d:2d:ca:68:35:d0:90:93: f2:ec:ee:62:c1:9f:18:d0:3f:e1:76:11:d3:6a:81:77:a1:00: 16:aa:52:04:73:c7:7c:5d:49:b6:4f:e1:48:eb:c8:5c:26:85: 38:87:bd:16:39:30:88:6c:5c:47:47:c7:77:be:47:5a:ff:6f: 2e:32:27:3d:10:2c:43:7b:51:43:42:46:ab:7a:35:ee:e1:1e: 8d:47:57:ff:b2:8c:61:9d:0d:c6:af:66:42:24:dd:01:34:c1: 6b:9d:84:b5:f0:e6:1d:ee:17:c8:96:d3:4d:1f:5d:ed:37:c5: d8:50:b5:a8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAt0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTk3RDAxMTAvBgNVBAUTKEFFQTZERkIzNjRBMkIzQjU5MjdGMDA3QTRFODI0RjMy QzQwOEU1QzgwHhcNMjYwNDE3MDExODIzWhcNMjYwNDI0MDExODIzWjAYMRYwFAYD VQQDEw02OWUxOGE1Zi1mN2ZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjcRJBgl1AljjIjJbqTJ7Kf6q11aOpsbwcjyCrwJvj6ACR0lNEMWqbcrxmPji 0a4YG/vHy1Yv376y9sKroM+Y6FlYs3UPsj5vApPcojLTt7DzF7aKmPCPhr/ekoys yUQX9ddxQN5+0xkMMbYm3QqWGr3nVclI1ubp6I8rIquv19e9V1W5qtC/ARQdnp86 b/QZcvRsqZ4czKmdwA23ehYOd4qNjpY5YslTs2PJH1ho8Zqvi1XCiCcFA6vQtJfN 2v7BvjGXOxCSV7oR/rO+Fto0Vv1bhZyZPNe70AblHUy4V+MHUJ3ahxsvTx75qWxS NAQeSjPvQBBrA88IPrT4wWV0+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPkAP5av 5isw+3wf15PXBtkSEXpDMB8GA1UdIwQYMBaAFK6m37NkorO1kn8Aek6CTzLECOXI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTdEMC9CODlGQTNDNjMw MzIxMUVEOUJEQzBBODNDNEY5QUUwMi9ycWJmczJTaXM3V1Nmd0I2VG9KUE1zUUk1 Y2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JxYmZzMlNpczdXU2Z3QjZUb0pQTXNRSTVjZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTdEMC9CODlGQTNDNjMwMzIxMUVEOUJEQzBBODNDNEY5QUUwMi9ycWJmczJTaXM3 V1Nmd0I2VG9KUE1zUUk1Y2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEn2Pr+vB9oVXlUDkoQgBgzQyaXTp2rEXzF3YfhvZu0JrhCG1fMoPOmcE5YdY drU41VdMqjYZiUMxfcrU2YTYE/KMc3LJyWFtrYv7bXp+0n2LtGmFiJ06rT82Olk2 HvNHJ0Eeen05xWdsDDBMYUNpn6GpuKqEUj/7+lQI6peLzsuMLENhmuv02B0tymg1 0JCT8uzuYsGfGNA/4XYR02qBd6EAFqpSBHPHfF1Jtk/hSOvIXCaFOIe9FjkwiGxc R0fHd75HWv9vLjInPRAsQ3tRQ0JGq3o17uEejUdX/7KMYZ0Nxq9mQiTdATTBa52E tfDmHe4XyJbTTR9d7TfF2FC1qA== -----END CERTIFICATE-----Generated at Fri Apr 17 09:45:06 2026 by rpki-client