$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.mft File: QxsKSDX89paz7NM1klqOE2EM0Tc.mft (raw, json) Hash identifier: dFYe8qTyYukdasU1Er1fN9DDQdpJTsWAoDTl8iElH7k= Subject key identifier: 45:91:95:EE:E5:32:91:34:FA:AA:5E:44:53:00:8A:F8:CF:4E:5A:FF Authority key identifier: 43:1B:0A:48:35:FC:F6:96:B3:EC:D3:35:92:5A:8E:13:61:0C:D1:37 Certificate issuer: /CN=A91BE89F/serialNumber=431B0A4835FCF696B3ECD335925A8E13610CD137 Certificate serial: 0137 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QxsKSDX89paz7NM1klqOE2EM0Tc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.mft Manifest number: 0132 Signing time: Fri 17 Apr 2026 05:14:57 +0000 Manifest this update: Fri 17 Apr 2026 05:14:57 +0000 Manifest next update: Fri 24 Apr 2026 05:14:57 +0000 Files and hashes: 1: QxsKSDX89paz7NM1klqOE2EM0Tc.crl (hash: +7F6Vxf8HuxHKN0JgnPEbyAk2O8r9qvMpl3rCmMg9gA=) 2: 49ADB44C6DCC11EF8BE2A566C4F9AE02.roa (hash: /4+lF6tlUt2UR6b5tRfzTFnRtlIHVlDaWV39Y4Dm8cI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.crl rsync://rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QxsKSDX89paz7NM1klqOE2EM0Tc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 05:14:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 311 (0x137) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE89F, serialNumber=431B0A4835FCF696B3ECD335925A8E13610CD137 Validity Not Before: Apr 17 05:14:57 2026 GMT Not After : Apr 24 05:14:57 2026 GMT Subject: CN=69e1c1d1-6a37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7a:4f:b7:0b:74:0c:50:f8:d3:76:79:b8:70: 07:d9:25:9d:6d:cb:54:89:32:2d:4b:3c:03:29:46: d4:e0:6d:d8:fd:2b:f4:ae:ea:7b:eb:b3:ec:53:45: a9:90:2d:c9:00:00:89:87:7a:d1:21:6b:ec:f9:26: d7:5e:4e:75:9a:af:88:96:6a:8b:a4:44:c3:ec:e6: 59:98:20:0a:94:c0:81:1e:55:c4:e7:15:c7:1a:63: d4:01:c4:9f:7d:b1:fe:19:f2:76:36:fa:49:15:80: d3:ed:58:5b:53:a2:c5:34:55:12:57:19:78:4b:00: 25:53:f9:b5:75:c0:87:76:53:28:9d:ad:6d:9b:bc: bc:a5:5b:1b:ca:ab:5b:a0:56:51:74:37:7c:9f:4a: 44:f5:89:7c:e5:be:64:af:d4:ee:e4:ac:e5:43:17: 49:8b:7d:e2:c1:8e:6a:9c:83:e4:b8:9f:e4:6a:fd: 59:53:b6:3b:dd:3b:6d:91:df:cb:7e:37:f3:56:ff: 33:0a:1d:09:b6:c4:bf:a1:5c:98:0a:f1:af:3e:5e: 85:9c:c1:c3:0b:11:3f:53:4f:16:d4:7e:25:8e:f4: da:25:4a:24:9a:1e:56:4f:a5:a6:ff:ca:e2:d4:a8: e0:60:3f:2b:56:47:11:11:d8:9d:8b:dc:59:30:d5: 5b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:91:95:EE:E5:32:91:34:FA:AA:5E:44:53:00:8A:F8:CF:4E:5A:FF X509v3 Authority Key Identifier: keyid:43:1B:0A:48:35:FC:F6:96:B3:EC:D3:35:92:5A:8E:13:61:0C:D1:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QxsKSDX89paz7NM1klqOE2EM0Tc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:bf:47:f0:77:01:0e:0b:76:5b:a0:22:30:ea:83:53:3d:72: 2e:f7:da:76:29:77:d3:cb:c4:d4:f7:48:cf:64:ee:c3:97:14: f1:16:a7:f9:85:bb:06:af:db:88:8a:62:b2:66:3c:f4:90:a9: 2e:6f:c5:44:fb:d7:68:9a:3a:a0:2c:df:a6:04:8f:8c:91:b5: f2:06:86:29:8d:ef:cc:a0:47:b7:cb:a2:5a:8e:df:f4:e8:89: 14:71:d4:0a:76:dc:99:15:d0:bc:02:62:c8:72:3e:5e:c6:21: 80:43:39:dd:63:6a:a8:80:69:ba:3f:9b:45:6a:09:f5:bf:ba: 3f:0b:08:fa:2e:9a:04:e2:d6:62:b7:04:79:29:5a:6d:03:21: 14:85:e6:87:29:41:0a:7d:71:11:94:e6:14:51:e0:28:f1:a8: 52:68:9c:90:6c:52:57:ab:5a:b5:d4:71:48:7b:bd:84:5c:ee: 4b:d2:51:bf:65:54:41:87:a3:96:d8:37:31:cd:17:46:0f:8e: 92:ef:f5:6d:aa:75:7e:80:4e:ce:fa:5e:74:1e:cd:54:59:4b: 2f:cf:1a:8e:fd:ae:b4:2b:cd:e5:04:67:dd:2d:c1:3f:c5:56: 30:fd:8a:7f:0e:95:d7:d0:7b:ee:5d:85:f5:e1:4e:d5:d9:92: 8f:a6:0a:5e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkU4OUYxMTAvBgNVBAUTKDQzMUIwQTQ4MzVGQ0Y2OTZCM0VDRDMzNTkyNUE4RTEz NjEwQ0QxMzcwHhcNMjYwNDE3MDUxNDU3WhcNMjYwNDI0MDUxNDU3WjAYMRYwFAYD VQQDEw02OWUxYzFkMS02YTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuHpPtwt0DFD403Z5uHAH2SWdbctUiTItSzwDKUbU4G3Y/Sv0rup767PsU0Wp kC3JAACJh3rRIWvs+SbXXk51mq+IlmqLpETD7OZZmCAKlMCBHlXE5xXHGmPUAcSf fbH+GfJ2NvpJFYDT7VhbU6LFNFUSVxl4SwAlU/m1dcCHdlMona1tm7y8pVsbyqtb oFZRdDd8n0pE9Yl85b5kr9Tu5KzlQxdJi33iwY5qnIPkuJ/kav1ZU7Y73Tttkd/L fjfzVv8zCh0JtsS/oVyYCvGvPl6FnMHDCxE/U08W1H4ljvTaJUokmh5WT6Wm/8ri 1KjgYD8rVkcREdidi9xZMNVbgQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEWRle7l MpE0+qpeRFMAivjPTlr/MB8GA1UdIwQYMBaAFEMbCkg1/PaWs+zTNZJajhNhDNE3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTg5Ri9BRkZEMjE3MDZE Q0IxMUVGOUIzOUI4NjVDNEY5QUUwMi9ReHNLU0RYODlwYXo3Tk0xa2xxT0UyRU0w VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1F4c0tTRFg4OXBhejdOTTFrbHFPRTJFTTBUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTg5Ri9BRkZEMjE3MDZEQ0IxMUVGOUIzOUI4NjVDNEY5QUUwMi9ReHNLU0RYODlw YXo3Tk0xa2xxT0UyRU0wVGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAh79H8HcBDgt2W6AiMOqDUz1yLvfadil308vE1PdIz2Tuw5cU8Ran+YW7Bq/b iIpismY89JCpLm/FRPvXaJo6oCzfpgSPjJG18gaGKY3vzKBHt8uiWo7f9OiJFHHU CnbcmRXQvAJiyHI+XsYhgEM53WNqqIBpuj+bRWoJ9b+6PwsI+i6aBOLWYrcEeSla bQMhFIXmhylBCn1xEZTmFFHgKPGoUmickGxSV6tatdRxSHu9hFzuS9JRv2VUQYej ltg3Mc0XRg+Oku/1bap1foBOzvpedB7NVFlLL88ajv2utCvN5QRn3S3BP8VWMP2K fw6V19B77l2F9eFO1dmSj6YKXg== -----END CERTIFICATE-----Generated at Fri Apr 17 19:57:54 2026 by rpki-client