$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.mft File: QOlPucJEwgzdpE57Dop6cZqXdA8.mft (raw, json) Hash identifier: cNGGMW4rJ87HZAbw19gFVz6ofHT9XUdZHALArrLviMY= Subject key identifier: BA:C5:E5:A4:A5:26:95:70:2A:BD:F1:35:C7:8D:0D:5B:7A:81:D1:76 Authority key identifier: 40:E9:4F:B9:C2:44:C2:0C:DD:A4:4E:7B:0E:8A:7A:71:9A:97:74:0F Certificate issuer: /CN=A91BA2AB/serialNumber=40E94FB9C244C20CDDA44E7B0E8A7A719A97740F Certificate serial: 021C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlPucJEwgzdpE57Dop6cZqXdA8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.mft Manifest number: 0218 Signing time: Fri 17 Apr 2026 03:35:07 +0000 Manifest this update: Fri 17 Apr 2026 03:35:07 +0000 Manifest next update: Fri 24 Apr 2026 03:35:07 +0000 Files and hashes: 1: QOlPucJEwgzdpE57Dop6cZqXdA8.crl (hash: tHwPY2qLQo7CiCsgqYxT9cHCgWh8Xlua2HFlUaRxeto=) 2: 7A8706087CA011EF8491607DC4F9AE02.roa (hash: NEAODUTKeBNCWNog3dkgj4g38ALv10sbj1oaLjD2vUI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.crl rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlPucJEwgzdpE57Dop6cZqXdA8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 03:35:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 540 (0x21c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA2AB, serialNumber=40E94FB9C244C20CDDA44E7B0E8A7A719A97740F Validity Not Before: Apr 17 03:35:07 2026 GMT Not After : Apr 24 03:35:07 2026 GMT Subject: CN=69e1aa6b-0e02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:47:94:84:e1:96:3c:8c:8a:87:62:b8:ea:64: ef:f4:78:d4:8c:40:3a:59:cc:6a:b4:d2:9c:e9:9b: 63:d5:ac:ac:77:e0:58:97:a4:34:0d:83:a5:f9:e4: 95:04:15:44:44:05:80:77:be:6d:01:40:3e:d1:fa: d2:04:b4:75:bf:fa:fe:95:53:73:45:c1:eb:88:14: 25:eb:1a:da:92:f7:88:45:c4:89:2e:d8:94:97:4f: 3c:2a:ed:73:f3:a3:26:8d:a1:12:b6:d9:42:c2:bf: 69:b7:e9:08:61:20:46:65:41:64:1a:76:4f:78:28: 85:6a:e0:44:a6:1f:be:8e:14:80:9f:5d:25:d5:75: f2:db:40:fa:93:9a:1c:19:2f:53:6f:29:ce:52:bc: 0a:11:de:22:d2:cb:c8:a2:4e:58:83:5f:76:2d:bc: 6a:bd:b4:10:13:53:33:83:89:19:98:94:ab:2e:c8: f6:14:85:2a:22:95:c4:01:89:37:da:be:d0:e3:27: a0:74:a2:96:2f:1e:5a:f6:f2:a2:b4:72:4c:90:24: bc:79:e3:aa:bd:70:48:8a:9c:2a:22:57:cc:fc:e3: df:b2:ab:a3:35:fa:6e:05:bf:8b:6f:93:cf:e2:78: 20:ca:ea:08:56:8f:0c:ab:4b:ec:5f:79:7b:7f:bb: f8:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:C5:E5:A4:A5:26:95:70:2A:BD:F1:35:C7:8D:0D:5B:7A:81:D1:76 X509v3 Authority Key Identifier: keyid:40:E9:4F:B9:C2:44:C2:0C:DD:A4:4E:7B:0E:8A:7A:71:9A:97:74:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlPucJEwgzdpE57Dop6cZqXdA8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:91:cf:81:72:19:70:ce:2f:56:44:36:b8:95:df:90:a8:09: 63:63:23:46:cc:82:fb:a4:52:fe:10:c3:db:65:35:ad:45:97: 41:39:64:c9:cc:3c:24:eb:34:65:f1:4d:69:5c:3b:05:67:84: 90:c4:6c:4d:6a:71:78:da:d6:69:19:1c:08:48:0b:28:a1:b8: 73:3e:2b:de:8d:3a:d9:b2:63:40:cd:20:c5:d4:40:3a:35:d7: ae:5f:96:cf:15:83:12:89:f9:a7:ce:54:f6:45:bc:b3:37:82: a6:fd:1b:ab:89:13:59:a8:6e:7d:6e:65:fc:17:86:c1:65:cb: ae:08:46:0c:3e:1b:41:b9:e4:d5:85:73:92:60:b2:d4:87:30: c0:e3:d6:99:09:5c:26:62:26:3d:19:24:1e:5a:1d:a8:3f:6f: 22:e7:6f:44:e7:d9:64:ac:77:a3:6c:36:67:3b:5b:6f:d9:63: 6f:eb:7f:cd:55:74:c6:a8:e8:61:d5:3a:1b:1b:f0:21:f2:c8: fe:2b:a8:79:13:a9:de:62:ab:77:70:92:c8:d4:eb:a0:a3:de: 85:26:74:db:cc:97:04:0a:4a:f8:be:a3:f5:e7:d1:bb:b6:6c: f9:b9:83:9e:a3:c9:07:31:cc:cd:2b:df:90:55:cc:4b:4d:ee: e0:75:c8:ef -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkEyQUIxMTAvBgNVBAUTKDQwRTk0RkI5QzI0NEMyMENEREE0NEU3QjBFOEE3QTcx OUE5Nzc0MEYwHhcNMjYwNDE3MDMzNTA3WhcNMjYwNDI0MDMzNTA3WjAYMRYwFAYD VQQDEw02OWUxYWE2Yi0wZTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6UeUhOGWPIyKh2K46mTv9HjUjEA6WcxqtNKc6Ztj1aysd+BYl6Q0DYOl+eSV BBVERAWAd75tAUA+0frSBLR1v/r+lVNzRcHriBQl6xrakveIRcSJLtiUl088Ku1z 86MmjaESttlCwr9pt+kIYSBGZUFkGnZPeCiFauBEph++jhSAn10l1XXy20D6k5oc GS9TbynOUrwKEd4i0svIok5Yg192LbxqvbQQE1Mzg4kZmJSrLsj2FIUqIpXEAYk3 2r7Q4yegdKKWLx5a9vKitHJMkCS8eeOqvXBIipwqIlfM/OPfsqujNfpuBb+Lb5PP 4nggyuoIVo8Mq0vsX3l7f7v4kwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLrF5aSl JpVwKr3xNceNDVt6gdF2MB8GA1UdIwQYMBaAFEDpT7nCRMIM3aROew6KenGal3QP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTJBQi8xMTFFNTVFMDA5 N0UxMUVFQUU3RjM1MUZDNEY5QUUwMi9RT2xQdWNKRXdnemRwRTU3RG9wNmNacVhk QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FPbFB1Y0pFd2d6ZHBFNTdEb3A2Y1pxWGRBOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTJBQi8xMTFFNTVFMDA5N0UxMUVFQUU3RjM1MUZDNEY5QUUwMi9RT2xQdWNKRXdn emRwRTU3RG9wNmNacVhkQTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAX5HPgXIZcM4vVkQ2uJXfkKgJY2MjRsyC+6RS/hDD22U1rUWXQTlkycw8JOs0 ZfFNaVw7BWeEkMRsTWpxeNrWaRkcCEgLKKG4cz4r3o062bJjQM0gxdRAOjXXrl+W zxWDEon5p85U9kW8szeCpv0bq4kTWahufW5l/BeGwWXLrghGDD4bQbnk1YVzkmCy 1IcwwOPWmQlcJmImPRkkHlodqD9vIudvROfZZKx3o2w2Zztbb9ljb+t/zVV0xqjo YdU6GxvwIfLI/iuoeROp3mKrd3CSyNTroKPehSZ028yXBApK+L6j9efRu7Zs+bmD nqPJBzHMzSvfkFXMS03u4HXI7w== -----END CERTIFICATE-----Generated at Fri Apr 17 12:54:22 2026 by rpki-client