$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft File: Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft (raw, json) Hash identifier: tk0OYirdgv3he4sxsTdbV9e/iPHSp5ZXTPCTFxz7i8I= Subject key identifier: 4E:B7:32:7E:9D:FB:5C:99:9C:22:F8:9A:81:D5:1B:48:15:4E:2A:D4 Authority key identifier: 42:9E:9B:DD:A2:96:62:00:03:CE:C5:EF:AB:B8:23:D3:03:FE:4F:71 Certificate issuer: /CN=A91BE1BC/serialNumber=429E9BDDA296620003CEC5EFABB823D303FE4F71 Certificate serial: 10E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qp6b3aKWYgADzsXvq7gj0wP-T3E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft Manifest number: 10BF Signing time: Thu 16 Apr 2026 17:16:04 +0000 Manifest this update: Thu 16 Apr 2026 17:16:03 +0000 Manifest next update: Thu 23 Apr 2026 17:16:03 +0000 Files and hashes: 1: Qp6b3aKWYgADzsXvq7gj0wP-T3E.crl (hash: yEbOZevKWcerjP7ry9fbBFtbWLYAigyNHMpDKuk+Bx4=) 2: 8C2FEEE0708811ED95A9DC75C4F9AE02.roa (hash: 1zVW9OK/rYgrfqL/Kah7ClFS1DlkC9pX1ORA7B+nV6E=) 3: 8B7BDC02708811ED95A9DC75C4F9AE02.roa (hash: 4xjOHA2a4uxswPhEHWIZ5kUb1RGsi99QGiMmvVEx05A=) 4: 23E61408678A11F08A94B35AC4F9AE02.roa (hash: hKyxzq+6NvE6xqXSiWJ91EzUH8fvtkfjv6xhpZcoKsw=) 5: 58FDD2EA10C211EA977E7378C4F9AE02.roa (hash: 6nMr9po5FUO/6NYfd0esqHnOLHyHERnqiMq2SWSxTpQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.crl rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qp6b3aKWYgADzsXvq7gj0wP-T3E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 17:16:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4323 (0x10e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE1BC, serialNumber=429E9BDDA296620003CEC5EFABB823D303FE4F71 Validity Not Before: Apr 16 17:16:03 2026 GMT Not After : Apr 23 17:16:03 2026 GMT Subject: CN=69e11954-e754 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:e4:b8:f3:27:0b:57:dc:54:22:09:6a:a9:86: ea:10:fb:54:a3:c5:fd:05:6a:02:73:65:e1:84:23: 3f:9e:06:b4:4d:b0:0f:d8:9f:ae:7b:c8:97:18:47: 14:0b:40:5c:1a:49:4c:0a:c0:08:ba:78:51:2d:0d: 3b:a7:84:eb:4c:bf:f3:9d:00:ac:35:b9:4f:6f:a6: 8c:7b:3d:11:3c:c1:c6:77:ea:ee:29:18:68:cf:ea: 20:86:ea:9b:d6:69:0a:2b:ea:2f:bf:ab:db:66:d9: 88:24:6b:72:91:a1:1e:f5:19:a7:ba:dc:2e:88:d3: 50:e0:a9:3a:b2:46:71:e2:5a:fa:38:07:3f:1f:bc: b0:78:1f:31:34:40:3a:2b:db:7a:87:1f:a1:72:75: 05:bd:57:03:bf:e9:58:e6:ba:92:25:78:9b:02:5f: 2f:17:56:a6:68:a2:fd:5f:2b:d8:9c:27:25:16:5a: fd:3e:22:95:b1:58:b0:b1:25:c8:9e:1a:d4:0f:de: 67:c0:53:f2:8f:dc:d0:04:66:4b:a7:a6:ca:81:1b: 6a:5e:5e:9b:6c:5b:89:bb:5a:58:d7:19:cd:35:13: d1:2c:a8:ea:c8:7e:f6:38:98:3b:2c:f4:98:42:64: 3f:9f:85:04:b9:e1:35:27:f6:11:64:fa:fe:a3:f1: 00:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:B7:32:7E:9D:FB:5C:99:9C:22:F8:9A:81:D5:1B:48:15:4E:2A:D4 X509v3 Authority Key Identifier: keyid:42:9E:9B:DD:A2:96:62:00:03:CE:C5:EF:AB:B8:23:D3:03:FE:4F:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qp6b3aKWYgADzsXvq7gj0wP-T3E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d1:d5:1c:48:f3:39:14:eb:47:87:83:e3:ef:d1:bb:fb:63:57: 90:f4:37:9c:eb:a3:ee:1a:2c:52:28:df:1f:aa:9d:c3:fb:56: 6c:1b:fa:ad:d2:9d:53:4e:63:8f:10:77:32:a7:57:fe:32:82: 14:2f:e5:74:39:44:27:20:45:c6:aa:bc:16:75:0b:0a:14:23: b6:08:62:e7:39:c8:98:a3:5a:f6:c8:99:a0:ac:80:84:d2:02: cf:84:96:a6:97:77:6d:6d:62:33:f7:87:d6:c7:ce:4e:a1:71: 58:95:28:f6:62:e6:be:97:41:02:1b:d4:45:bd:4b:09:d8:ee: f6:e4:ea:8f:b3:b9:75:36:86:c0:c8:b9:57:de:47:5e:cf:82: be:80:4e:92:0b:a0:bb:7a:03:75:81:19:d6:6f:47:3d:d1:f3: 7b:9f:ba:90:44:85:f4:e6:77:d3:69:0f:c7:d8:2f:b9:8f:c1: 52:f0:18:eb:86:4a:d1:d8:53:de:26:dd:45:3d:87:32:4d:e8: 71:c2:2f:2e:2a:63:ec:db:02:99:d5:81:68:e0:5e:b6:0e:37: 51:a3:d6:1a:c1:68:cb:3b:72:03:6c:49:6a:d7:26:6f:32:64: 19:39:08:25:b8:cd:57:6c:e3:a6:e1:d3:49:0b:e3:a8:fc:87: e2:de:06:b1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkUxQkMxMTAvBgNVBAUTKDQyOUU5QkREQTI5NjYyMDAwM0NFQzVFRkFCQjgyM0Qz MDNGRTRGNzEwHhcNMjYwNDE2MTcxNjAzWhcNMjYwNDIzMTcxNjAzWjAYMRYwFAYD VQQDEw02OWUxMTk1NC1lNzU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8OS48ycLV9xUIglqqYbqEPtUo8X9BWoCc2XhhCM/nga0TbAP2J+ue8iXGEcU C0BcGklMCsAIunhRLQ07p4TrTL/znQCsNblPb6aMez0RPMHGd+ruKRhoz+oghuqb 1mkKK+ovv6vbZtmIJGtykaEe9RmnutwuiNNQ4Kk6skZx4lr6OAc/H7yweB8xNEA6 K9t6hx+hcnUFvVcDv+lY5rqSJXibAl8vF1amaKL9XyvYnCclFlr9PiKVsViwsSXI nhrUD95nwFPyj9zQBGZLp6bKgRtqXl6bbFuJu1pY1xnNNRPRLKjqyH72OJg7LPSY QmQ/n4UEueE1J/YRZPr+o/EA9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE63Mn6d +1yZnCL4moHVG0gVTirUMB8GA1UdIwQYMBaAFEKem92ilmIAA87F76u4I9MD/k9x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTFCQy84OTZDNkM0ODQ2 Q0UxMUU5OTI4NTBBM0NDNEY5QUUwMi9RcDZiM2FLV1lnQUR6c1h2cTdnajB3UC1U M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FwNmIzYUtXWWdBRHpzWHZxN2dqMHdQLVQzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTFCQy84OTZDNkM0ODQ2Q0UxMUU5OTI4NTBBM0NDNEY5QUUwMi9RcDZiM2FLV1ln QUR6c1h2cTdnajB3UC1UM0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA0dUcSPM5FOtHh4Pj79G7+2NXkPQ3nOuj7hosUijfH6qdw/tWbBv6rdKdU05j jxB3MqdX/jKCFC/ldDlEJyBFxqq8FnULChQjtghi5znImKNa9siZoKyAhNICz4SW ppd3bW1iM/eH1sfOTqFxWJUo9mLmvpdBAhvURb1LCdju9uTqj7O5dTaGwMi5V95H Xs+CvoBOkgugu3oDdYEZ1m9HPdHze5+6kESF9OZ302kPx9gvuY/BUvAY64ZK0dhT 3ibdRT2HMk3occIvLipj7NsCmdWBaOBetg43UaPWGsFoyztyA2xJatcmbzJkGTkI JbjNV2zjpuHTSQvjqPyH4t4GsQ== -----END CERTIFICATE-----Generated at Fri Apr 17 18:27:53 2026 by rpki-client