$ rpki-client -vvf rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft File: QOWCY5crniQUK6qbWvoFNIGjcZ4.mft (raw, json) Hash identifier: tS/sbgqr8mC+WhDEWO+mW82dbJbZtiFfZ0holSEQpNQ= Subject key identifier: 35:7C:FA:4C:D7:30:D7:EF:DC:EE:8F:40:2B:19:B3:C0:F0:01:BF:C7 Authority key identifier: 40:E5:82:63:97:2B:9E:24:14:2B:AA:9B:5A:FA:05:34:81:A3:71:9E Certificate issuer: /CN=A91C31A2/serialNumber=40E58263972B9E24142BAA9B5AFA053481A3719E Certificate serial: 02F8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft Manifest number: 02DC Signing time: Fri 17 Apr 2026 01:20:34 +0000 Manifest this update: Fri 17 Apr 2026 01:20:34 +0000 Manifest next update: Fri 24 Apr 2026 01:20:34 +0000 Files and hashes: 1: QOWCY5crniQUK6qbWvoFNIGjcZ4.crl (hash: QAM0kZqCPHXCDNcm20cBjGCXfHjvb4n4vJoTZlJzqSQ=) 2: 94855EA0357711EDB81B8A34C4F9AE02.roa (hash: WEQNjKUUarvWFek2QKEOk5VWDSS6XlisXMiNSu5mDsg=) 3: 4F9ACB7461F511F0A6467D40C4F9AE02.roa (hash: Kp6nhlIWiSEv3o8kjtdJQRQ6WBFrZkqBEq1j7bnbEso=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.crl rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 760 (0x2f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C31A2, serialNumber=40E58263972B9E24142BAA9B5AFA053481A3719E Validity Not Before: Apr 17 01:20:34 2026 GMT Not After : Apr 24 01:20:34 2026 GMT Subject: CN=69e18ae2-fd3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:54:29:89:3f:65:c7:c2:40:b4:66:09:27:3d: 3e:19:64:d9:6d:93:c3:05:eb:28:f9:e7:b2:32:fa: eb:d4:1b:7b:d1:64:45:23:60:08:82:07:ac:97:c0: 80:6a:53:a6:42:ca:7b:b2:86:10:9c:ff:ec:ac:e3: 11:be:38:4c:92:c1:c5:f4:02:a7:d0:cd:5b:f4:d9: 74:18:b5:e7:c6:3e:a9:84:a3:88:93:22:8a:93:fa: 1a:25:4d:9d:f3:24:d7:a4:fb:60:0c:12:1c:83:82: 42:b3:60:8c:17:29:84:1f:0b:db:35:71:ce:4d:0e: 98:eb:6a:30:bb:12:fe:c9:1c:30:50:f8:1d:67:4e: 62:f0:9f:22:0c:38:e3:0d:7d:93:e1:97:b3:f8:a8: 3d:bb:9d:30:83:f5:6e:b5:55:f6:49:7e:09:69:fb: 2c:21:19:f1:c8:18:64:df:68:e1:6b:12:ad:c8:0f: 75:2b:6d:27:d0:94:66:d9:f1:40:14:0d:b7:e3:05: 72:7d:12:32:6e:b2:24:a6:31:65:ef:0f:d0:dc:b7: b1:2b:94:fa:fb:cd:8a:4c:13:8a:a0:c9:b1:fa:34: 07:69:4f:3f:3d:c3:53:f0:20:76:8f:39:90:d5:42: b7:bc:83:f1:f9:6e:4c:f6:d1:04:a5:d3:e3:d1:34: 13:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:7C:FA:4C:D7:30:D7:EF:DC:EE:8F:40:2B:19:B3:C0:F0:01:BF:C7 X509v3 Authority Key Identifier: keyid:40:E5:82:63:97:2B:9E:24:14:2B:AA:9B:5A:FA:05:34:81:A3:71:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:bd:5f:66:a9:94:8e:96:2e:80:31:90:bf:66:2d:0c:98:c7: 08:ed:34:2e:a5:32:51:6f:4c:fb:10:17:c4:ec:70:f3:7c:86: de:0a:ce:75:4a:ea:ff:2a:90:fd:89:22:60:4d:f1:c0:46:eb: e2:2a:9b:dc:ac:5d:b4:21:0c:99:cc:cd:b3:73:f1:77:19:2c: 64:56:ac:8b:39:9e:48:10:a7:30:5a:b1:74:2b:fd:8a:02:bd: 1a:43:c9:78:27:1b:0d:8b:81:34:3f:01:e7:31:58:76:26:8e: 31:d8:b8:fb:01:34:dc:c1:ce:61:c2:b5:54:bf:fe:3c:c8:c5: a2:0b:4e:e0:e1:c7:61:0b:3f:cd:f4:d6:d2:10:ed:1a:fc:e2: 5e:e8:1a:16:6a:52:a0:60:9d:7b:0d:2b:31:89:b4:70:6a:8a: 98:09:e7:84:0a:30:95:6b:6d:15:e8:41:00:77:08:8c:b2:2c: cd:a1:02:cc:20:fe:62:0f:49:dd:5c:ab:da:2b:a4:a5:31:8e: ef:0c:b4:26:c0:50:f7:89:91:d8:06:c2:ce:e1:e1:38:72:e7: 3f:9e:81:11:6a:53:95:6a:f3:44:d1:c5:72:4a:06:e1:d5:f0: 57:4c:f3:35:43:78:09:4e:0a:f3:48:7f:7b:2a:59:ac:51:c0: 6d:de:f5:47 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAvgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzMxQTIxMTAvBgNVBAUTKDQwRTU4MjYzOTcyQjlFMjQxNDJCQUE5QjVBRkEwNTM0 ODFBMzcxOUUwHhcNMjYwNDE3MDEyMDM0WhcNMjYwNDI0MDEyMDM0WjAYMRYwFAYD VQQDEw02OWUxOGFlMi1mZDNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhlQpiT9lx8JAtGYJJz0+GWTZbZPDBeso+eeyMvrr1Bt70WRFI2AIggesl8CA alOmQsp7soYQnP/srOMRvjhMksHF9AKn0M1b9Nl0GLXnxj6phKOIkyKKk/oaJU2d 8yTXpPtgDBIcg4JCs2CMFymEHwvbNXHOTQ6Y62owuxL+yRwwUPgdZ05i8J8iDDjj DX2T4Zez+Kg9u50wg/VutVX2SX4JafssIRnxyBhk32jhaxKtyA91K20n0JRm2fFA FA234wVyfRIybrIkpjFl7w/Q3LexK5T6+82KTBOKoMmx+jQHaU8/PcNT8CB2jzmQ 1UK3vIPx+W5M9tEEpdPj0TQT/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDV8+kzX MNfv3O6PQCsZs8DwAb/HMB8GA1UdIwQYMBaAFEDlgmOXK54kFCuqm1r6BTSBo3Ge MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzFBMi9ENDc2RUQ3NjM1 NzIxMUVEQUU5Nzc4MzlDNEY5QUUwMi9RT1dDWTVjcm5pUVVLNnFiV3ZvRk5JR2pj WjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FPV0NZNWNybmlRVUs2cWJXdm9GTklHamNaNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzFBMi9ENDc2RUQ3NjM1NzIxMUVEQUU5Nzc4MzlDNEY5QUUwMi9RT1dDWTVjcm5p UVVLNnFiV3ZvRk5JR2pjWjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAu71fZqmUjpYugDGQv2YtDJjHCO00LqUyUW9M+xAXxOxw83yG3grOdUrq/yqQ /YkiYE3xwEbr4iqb3KxdtCEMmczNs3PxdxksZFasizmeSBCnMFqxdCv9igK9GkPJ eCcbDYuBND8B5zFYdiaOMdi4+wE03MHOYcK1VL/+PMjFogtO4OHHYQs/zfTW0hDt GvziXugaFmpSoGCdew0rMYm0cGqKmAnnhAowlWttFehBAHcIjLIszaECzCD+Yg9J 3Vyr2iukpTGO7wy0JsBQ94mR2AbCzuHhOHLnP56BEWpTlWrzRNHFckoG4dXwV0zz NUN4CU4K80h/eypZrFHAbd71Rw== -----END CERTIFICATE-----Generated at Fri Apr 17 11:34:02 2026 by rpki-client