$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft File: QRzJhRGOMuB6FVTV6boLTNKKSu8.mft (raw, json) Hash identifier: tcc5u0wkoBsvYiaNIngauUgPgQkkHkf2QK/wpRuKsaQ= Subject key identifier: 2C:78:00:81:8C:69:FD:11:66:56:81:B6:FD:1A:F0:83:B5:60:E5:A5 Authority key identifier: 41:1C:C9:85:11:8E:32:E0:7A:15:54:D5:E9:BA:0B:4C:D2:8A:4A:EF Certificate issuer: /CN=A91BEE0F/serialNumber=411CC985118E32E07A1554D5E9BA0B4CD28A4AEF Certificate serial: 025C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRzJhRGOMuB6FVTV6boLTNKKSu8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft Manifest number: 025C Signing time: Fri 17 Apr 2026 01:58:10 +0000 Manifest this update: Fri 17 Apr 2026 01:58:09 +0000 Manifest next update: Fri 24 Apr 2026 01:58:09 +0000 Files and hashes: 1: QRzJhRGOMuB6FVTV6boLTNKKSu8.crl (hash: gO7V8GmJ7W0Y4heevTKOZh2pv9d308Bu/HDQavQXKus=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.crl rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRzJhRGOMuB6FVTV6boLTNKKSu8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:58:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 604 (0x25c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEE0F, serialNumber=411CC985118E32E07A1554D5E9BA0B4CD28A4AEF Validity Not Before: Apr 17 01:58:09 2026 GMT Not After : Apr 24 01:58:09 2026 GMT Subject: CN=69e193b1-eb65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:4b:37:f7:69:f9:42:da:6e:0d:ca:34:bf:26: 54:36:ee:60:80:13:90:99:6c:56:7a:df:2d:63:02: 63:b5:70:78:33:d7:3c:51:00:6f:84:85:dd:2e:c5: df:84:b7:be:fb:d5:6d:36:0c:55:ef:ee:e0:7b:5b: 0d:fe:d8:52:10:d0:9d:43:b1:e3:f6:9d:80:45:8c: d2:50:e8:d1:8a:78:91:60:9f:f5:ef:58:23:60:1f: 84:54:cb:b1:31:2b:32:b0:46:23:d7:16:3a:ca:57: 59:02:3b:08:31:03:e3:0d:8e:f7:ba:77:12:bd:a4: 47:36:29:7a:f4:41:e8:ad:83:5e:3c:48:da:b5:14: 89:98:2b:d1:fe:16:01:89:ce:97:7a:9a:c0:78:c8: a5:4b:51:0f:9e:33:37:97:ab:d1:3e:75:fe:3b:03: 66:a4:ef:f3:6c:35:ad:3f:e3:d1:6f:8d:ee:a1:f7: bd:98:14:09:db:4f:4b:26:fd:8d:52:bb:46:3f:2c: 3e:fa:cf:75:65:0f:9b:46:28:bc:7b:30:b8:c2:eb: 68:9d:bb:07:ec:cf:d0:15:17:c2:34:23:57:41:8b: bd:2b:eb:e8:9d:d3:c5:54:f8:c5:c8:60:50:d2:f1: 30:bc:e4:83:f7:4f:1f:da:1f:41:73:ce:24:8a:11: 08:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:78:00:81:8C:69:FD:11:66:56:81:B6:FD:1A:F0:83:B5:60:E5:A5 X509v3 Authority Key Identifier: keyid:41:1C:C9:85:11:8E:32:E0:7A:15:54:D5:E9:BA:0B:4C:D2:8A:4A:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRzJhRGOMuB6FVTV6boLTNKKSu8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:a0:2c:03:05:b3:a7:66:6c:26:11:43:05:20:f7:2f:55:64: 95:6e:39:68:73:b4:79:d2:c9:e4:ba:eb:ec:2f:95:58:5c:d3: 78:12:b5:8f:65:da:67:84:5f:ee:9d:e6:fc:4a:66:99:87:b0: 0a:27:cb:dd:a6:90:65:43:99:00:74:78:5a:1a:29:d7:ba:a4: b8:2b:e0:b4:e0:f7:76:eb:69:ef:3c:c6:e1:3e:cd:69:63:c3: 20:0e:ac:77:26:c1:f2:55:dd:65:d2:a6:87:d0:36:95:4b:e9: 90:2c:cb:a2:83:49:d4:ff:cb:9e:f3:00:07:c7:83:2d:a9:bb: 16:f7:e0:d5:40:8f:fc:a1:e2:d6:36:61:ab:12:fb:87:ee:c2: 12:e8:e7:c4:8d:ba:3d:9a:04:ac:4c:85:9a:5f:b4:b4:95:6b: 55:c3:1f:32:df:76:2b:c9:c1:0c:92:82:7f:cd:59:8a:a3:7a: a6:e7:ef:81:0a:47:6a:32:4b:f4:5d:91:57:30:ab:e1:9d:40: d6:1e:2f:c9:66:5f:03:fd:7f:c5:d0:0e:55:16:74:1e:c2:b1: fd:53:3c:65:48:7a:78:be:c9:38:b2:b1:70:6b:5d:d7:b8:94: 99:9b:d0:50:49:69:a1:be:98:47:08:7f:ed:f2:ad:82:df:88: 70:52:f3:c7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkVFMEYxMTAvBgNVBAUTKDQxMUNDOTg1MTE4RTMyRTA3QTE1NTRENUU5QkEwQjRD RDI4QTRBRUYwHhcNMjYwNDE3MDE1ODA5WhcNMjYwNDI0MDE1ODA5WjAYMRYwFAYD VQQDEw02OWUxOTNiMS1lYjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ks392n5QtpuDco0vyZUNu5ggBOQmWxWet8tYwJjtXB4M9c8UQBvhIXdLsXf hLe++9VtNgxV7+7ge1sN/thSENCdQ7Hj9p2ARYzSUOjRiniRYJ/171gjYB+EVMux MSsysEYj1xY6yldZAjsIMQPjDY73uncSvaRHNil69EHorYNePEjatRSJmCvR/hYB ic6XeprAeMilS1EPnjM3l6vRPnX+OwNmpO/zbDWtP+PRb43uofe9mBQJ209LJv2N UrtGPyw++s91ZQ+bRii8ezC4wutonbsH7M/QFRfCNCNXQYu9K+vondPFVPjFyGBQ 0vEwvOSD908f2h9Bc84kihEI6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCx4AIGM af0RZlaBtv0a8IO1YOWlMB8GA1UdIwQYMBaAFEEcyYURjjLgehVU1em6C0zSikrv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUUwRi81RTExMTQ4RTlC QTkxMUVEQTMzRUVDNkJDNEY5QUUwMi9RUnpKaFJHT011QjZGVlRWNmJvTFROS0tT dTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FSekpoUkdPTXVCNkZWVFY2Ym9MVE5LS1N1OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RUUwRi81RTExMTQ4RTlCQTkxMUVEQTMzRUVDNkJDNEY5QUUwMi9RUnpKaFJHT011 QjZGVlRWNmJvTFROS0tTdTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASaAsAwWzp2ZsJhFDBSD3L1VklW45aHO0edLJ5Lrr7C+VWFzTeBK1j2XaZ4Rf 7p3m/EpmmYewCifL3aaQZUOZAHR4Whop17qkuCvgtOD3dutp7zzG4T7NaWPDIA6s dybB8lXdZdKmh9A2lUvpkCzLooNJ1P/LnvMAB8eDLam7Fvfg1UCP/KHi1jZhqxL7 h+7CEujnxI26PZoErEyFml+0tJVrVcMfMt92K8nBDJKCf81ZiqN6pufvgQpHajJL 9F2RVzCr4Z1A1h4vyWZfA/1/xdAOVRZ0HsKx/VM8ZUh6eL7JOLKxcGtd17iUmZvQ UElpob6YRwh/7fKtgt+IcFLzxw== -----END CERTIFICATE-----Generated at Fri Apr 17 12:41:11 2026 by rpki-client