$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft File: sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft (raw, json) Hash identifier: PASLIJY9QBOgHHL1/vW/zPNc+A09o/ZbDahqO9Llxik= Subject key identifier: 6E:9A:71:71:09:FE:66:CF:28:B0:03:7A:78:8D:48:B9:19:8F:59:71 Authority key identifier: B2:A2:5D:DE:1A:9E:C9:1B:59:98:6A:53:2F:78:83:54:36:18:32:48 Certificate issuer: /CN=A91BC966/serialNumber=B2A25DDE1A9EC91B59986A532F78835436183248 Certificate serial: 0CD4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqJd3hqeyRtZmGpTL3iDVDYYMkg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft Manifest number: 0C9F Signing time: Thu 16 Apr 2026 18:32:24 +0000 Manifest this update: Thu 16 Apr 2026 18:32:23 +0000 Manifest next update: Thu 23 Apr 2026 18:32:23 +0000 Files and hashes: 1: sqJd3hqeyRtZmGpTL3iDVDYYMkg.crl (hash: MvTTsDqfAcjxuXNHSipMLp2CAY8FA/9wKYee/ptaapM=) 2: A6A53FA2D67E11EEAA2CA218C4F9AE02.roa (hash: BRmPmtc5QBOF2VogbiXT+Z/yISNL/WKoFANPMdmFsXw=) 3: 5DA849821C1211EA819EA46EC4F9AE02.roa (hash: eCHx5TEwPytpGbIBlZulCq7A1nRaBvbKK495Pm+3Ngg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.crl rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqJd3hqeyRtZmGpTL3iDVDYYMkg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 18:32:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3284 (0xcd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC966, serialNumber=B2A25DDE1A9EC91B59986A532F78835436183248 Validity Not Before: Apr 16 18:32:23 2026 GMT Not After : Apr 23 18:32:23 2026 GMT Subject: CN=69e12b38-ed99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3f:25:87:89:02:6c:2e:02:5c:04:6f:9f:35: 8f:59:e9:8f:23:d9:66:c1:13:45:0f:45:e1:bd:34: 44:f7:83:3f:4e:32:bf:3f:ca:d7:7b:f2:2f:fe:bb: 80:95:38:21:70:93:76:ee:dc:ed:e5:61:06:aa:d1: 14:13:f0:55:b4:eb:f8:5a:fd:6a:02:a0:a9:dd:9d: 98:5a:a4:73:98:1b:e0:04:1f:f7:aa:ba:98:71:21: 5d:09:27:80:15:2a:5d:62:03:63:64:6b:65:56:1b: 5d:6c:a7:b4:b2:26:24:eb:0a:d3:f9:4d:7c:63:e3: b9:e3:fe:6c:d4:ec:e0:2c:64:41:4f:23:89:a6:e6: d8:77:a0:f1:98:cb:c5:60:2d:38:be:7b:27:45:68: 85:07:ee:1e:73:bc:83:af:61:3b:75:f2:87:67:27: 7c:fc:aa:43:16:fe:9b:c6:4b:af:e1:80:f2:d8:6c: 1a:65:90:fa:98:7d:04:d6:02:2f:f3:74:ef:80:8e: 31:41:fa:65:05:66:5e:d0:13:ad:74:58:4e:79:b6: fa:c4:4c:0d:97:d4:3b:fc:1b:0d:96:21:d4:b5:f4: e3:ec:bb:f1:f1:41:0d:02:98:6f:ce:11:f3:a9:18: 8d:cd:d0:56:65:1b:b0:ad:ec:7f:20:14:4d:d4:14: 8b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:9A:71:71:09:FE:66:CF:28:B0:03:7A:78:8D:48:B9:19:8F:59:71 X509v3 Authority Key Identifier: keyid:B2:A2:5D:DE:1A:9E:C9:1B:59:98:6A:53:2F:78:83:54:36:18:32:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqJd3hqeyRtZmGpTL3iDVDYYMkg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:3f:da:fc:7c:5c:2d:ab:44:44:39:62:2f:c9:05:a6:20:b3: bd:28:83:7a:7e:04:52:a7:46:cc:be:9c:e6:71:66:56:af:53: f0:76:00:39:75:e4:47:2b:9a:37:7e:26:58:a8:fd:a2:d0:44: c6:33:ca:20:d2:d6:a6:08:f2:e7:9a:c6:28:0a:4c:13:fd:43: 63:b1:60:5b:31:f9:7c:2d:ca:3d:7f:e3:e2:24:93:27:4a:0e: 2f:d1:95:d8:24:49:a7:20:22:1b:67:e2:6c:59:b9:7d:03:4f: 56:a9:ac:fa:37:2b:56:83:76:32:32:60:f9:de:19:93:d9:f7: 85:26:6d:2c:a4:f2:19:2a:68:05:5d:b2:95:c4:47:af:4b:d5: 37:68:ab:90:39:39:2e:58:ee:24:41:0d:68:8a:49:1e:31:c5: a3:7c:3d:ef:9c:a3:e1:b7:d0:20:dc:be:4f:2e:fb:41:76:27: 3d:9c:12:95:5c:5d:15:28:d2:8f:80:53:2a:a6:31:b6:ff:d2: 19:49:3a:44:10:49:b1:f5:fb:65:c2:c9:a4:07:45:08:3b:7d: de:49:89:e9:95:a4:84:d8:df:45:66:a2:3c:b2:84:75:6e:18: 68:b8:80:07:9c:c3:e4:4a:97:10:39:4f:95:9d:75:8c:9d:9f: 3b:42:51:40 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDNQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM5NjYxMTAvBgNVBAUTKEIyQTI1RERFMUE5RUM5MUI1OTk4NkE1MzJGNzg4MzU0 MzYxODMyNDgwHhcNMjYwNDE2MTgzMjIzWhcNMjYwNDIzMTgzMjIzWjAYMRYwFAYD VQQDEw02OWUxMmIzOC1lZDk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvD8lh4kCbC4CXARvnzWPWemPI9lmwRNFD0XhvTRE94M/TjK/P8rXe/Iv/ruA lTghcJN27tzt5WEGqtEUE/BVtOv4Wv1qAqCp3Z2YWqRzmBvgBB/3qrqYcSFdCSeA FSpdYgNjZGtlVhtdbKe0siYk6wrT+U18Y+O54/5s1OzgLGRBTyOJpubYd6DxmMvF YC04vnsnRWiFB+4ec7yDr2E7dfKHZyd8/KpDFv6bxkuv4YDy2GwaZZD6mH0E1gIv 83TvgI4xQfplBWZe0BOtdFhOebb6xEwNl9Q7/BsNliHUtfTj7Lvx8UENAphvzhHz qRiNzdBWZRuwrex/IBRN1BSL+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG6acXEJ /mbPKLADeniNSLkZj1lxMB8GA1UdIwQYMBaAFLKiXd4anskbWZhqUy94g1Q2GDJI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzk2Ni9BMTk1MkJBMjFD MTExMUVBQjZDM0M3NkRDNEY5QUUwMi9zcUpkM2hxZXlSdFptR3BUTDNpRFZEWVlN a2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NxSmQzaHFleVJ0Wm1HcFRMM2lEVkRZWU1rZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Qzk2Ni9BMTk1MkJBMjFDMTExMUVBQjZDM0M3NkRDNEY5QUUwMi9zcUpkM2hxZXlS dFptR3BUTDNpRFZEWVlNa2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYD/a/HxcLatERDliL8kFpiCzvSiDen4EUqdGzL6c5nFmVq9T8HYAOXXkRyua N34mWKj9otBExjPKINLWpgjy55rGKApME/1DY7FgWzH5fC3KPX/j4iSTJ0oOL9GV 2CRJpyAiG2fibFm5fQNPVqms+jcrVoN2MjJg+d4Zk9n3hSZtLKTyGSpoBV2ylcRH r0vVN2irkDk5LljuJEENaIpJHjHFo3w975yj4bfQINy+Ty77QXYnPZwSlVxdFSjS j4BTKqYxtv/SGUk6RBBJsfX7ZcLJpAdFCDt93kmJ6ZWkhNjfRWaiPLKEdW4YaLiA B5zD5EqXEDlPlZ11jJ2fO0JRQA== -----END CERTIFICATE-----Generated at Fri Apr 17 20:14:56 2026 by rpki-client