$ rpki-client -vvf rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.mft File: 0QwglvtdswSr0vmfRaKUiCktNyE.mft (raw, json) Hash identifier: jZjP6iWrBfYrCr8jpzx/v1tY1dhJ34y0v5dJObAV9rY= Subject key identifier: 3F:1B:E2:60:FE:86:BF:C4:84:CC:8D:41:5E:76:99:0F:A1:CB:6E:F8 Authority key identifier: D1:0C:20:96:FB:5D:B3:04:AB:D2:F9:9F:45:A2:94:88:29:2D:37:21 Certificate issuer: /CN=A91C68AD/serialNumber=D10C2096FB5DB304ABD2F99F45A29488292D3721 Certificate serial: 0132 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0QwglvtdswSr0vmfRaKUiCktNyE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.mft Manifest number: 0122 Signing time: Fri 17 Apr 2026 05:25:53 +0000 Manifest this update: Fri 17 Apr 2026 05:25:52 +0000 Manifest next update: Fri 24 Apr 2026 05:25:52 +0000 Files and hashes: 1: 0QwglvtdswSr0vmfRaKUiCktNyE.crl (hash: hY33D/AIX6orrmGQE5qXCSJyxCJa3/TRZ3S6+hkxVkU=) 2: 1D9F5104C99B11F092A1C310C4F9AE02.roa (hash: ZvIqaTrMx4lREhhOll5OEYiWwpf2XdBASEHvDBRAKLs=) 3: 1E0CBABEC99B11F0BD75C310C4F9AE02.roa (hash: XT1f5iHkb8m++28/fpiYZLplpEUsgc7c8BPU0gRXDvg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.crl rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0QwglvtdswSr0vmfRaKUiCktNyE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 05:25:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 306 (0x132) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C68AD, serialNumber=D10C2096FB5DB304ABD2F99F45A29488292D3721 Validity Not Before: Apr 17 05:25:52 2026 GMT Not After : Apr 24 05:25:52 2026 GMT Subject: CN=69e1c461-bc68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b5:f2:2f:2a:f6:94:d2:70:76:9b:30:10:28: ef:eb:5f:80:cf:1f:78:80:7f:ca:98:0e:1f:8b:97: af:b1:4a:c4:f1:3a:07:44:fd:9a:8c:a8:e5:52:0c: 4e:fb:7f:11:3c:d9:4e:1a:66:1b:0f:bd:56:c8:3a: f0:6f:0e:8a:fb:99:d9:c4:2e:dc:4c:65:0c:0b:5f: ae:0e:df:cc:26:76:a0:09:21:3b:39:e6:10:c0:ed: f6:38:59:ae:2a:28:05:64:81:05:00:27:2e:1d:33: de:88:c5:3e:36:ef:77:d2:68:2e:ef:1b:0b:13:41: a4:22:dc:2a:86:f2:ef:b2:ed:9a:83:5b:b4:b5:d7: bc:8f:55:ef:3e:19:ef:38:7f:92:06:33:83:24:8c: 1a:1f:81:db:18:9f:bb:a3:6b:7b:ea:1b:27:0d:f4: 8f:d3:a8:63:d6:4c:5b:c9:ca:e5:83:07:dc:9a:34: d2:49:c5:a5:ce:dc:2f:29:8b:ae:29:40:f8:25:8a: c5:04:8b:cd:0d:7f:e8:d1:ba:53:d7:33:5c:08:ad: 73:6f:4f:78:e8:79:b0:8e:27:1d:0f:d4:78:e8:cd: 1d:a6:db:bb:7e:f8:f8:ce:9b:85:62:63:70:ce:5b: 06:26:94:d7:a8:ea:50:bc:01:75:04:cc:50:ac:8c: 02:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:1B:E2:60:FE:86:BF:C4:84:CC:8D:41:5E:76:99:0F:A1:CB:6E:F8 X509v3 Authority Key Identifier: keyid:D1:0C:20:96:FB:5D:B3:04:AB:D2:F9:9F:45:A2:94:88:29:2D:37:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0QwglvtdswSr0vmfRaKUiCktNyE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:2c:99:d6:74:ee:d7:6e:a5:4b:9d:97:b8:71:d0:7e:45:98: 87:5c:ca:f9:5f:7f:71:00:b9:05:cc:f8:d1:e7:26:58:1a:f8: 44:34:2a:79:c8:b7:f6:ed:4e:a9:4e:bd:8f:15:f1:d4:56:e4: 84:5e:bb:05:78:fd:a6:13:d7:d0:10:9b:16:9a:15:2a:c7:c2: a5:dc:99:97:5e:38:58:3b:e0:8b:f0:ba:b9:1e:77:6f:1b:58: 29:04:f1:6f:56:ea:07:a7:6e:6e:dc:98:60:b0:1c:11:ea:09: f5:22:03:d9:cc:ca:6d:aa:82:f0:02:c5:a0:34:8c:4b:d9:8e: 2c:27:83:22:e5:be:67:2c:7f:a0:5b:0d:d5:30:48:64:c9:7e: a9:60:31:c7:d9:a7:aa:b9:4f:b3:d0:98:b8:ff:f1:af:c3:c9: 10:1e:18:9b:71:b2:06:3a:78:c9:2f:83:0a:8b:f2:2b:cc:93: c0:90:9f:c4:7a:25:c9:b1:bb:66:33:a0:61:de:ca:ab:07:c5: c5:d2:0f:01:aa:7d:b2:bc:32:eb:1f:05:f6:5b:82:ac:50:69: 5b:86:ed:7e:67:5f:4e:be:18:85:42:b9:d1:4a:17:e2:b0:d9: f4:f9:c2:3e:4d:38:17:c0:ee:93:10:f7:44:fd:7c:0b:3d:3e: a3:90:07:3f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY4QUQxMTAvBgNVBAUTKEQxMEMyMDk2RkI1REIzMDRBQkQyRjk5RjQ1QTI5NDg4 MjkyRDM3MjEwHhcNMjYwNDE3MDUyNTUyWhcNMjYwNDI0MDUyNTUyWjAYMRYwFAYD VQQDEw02OWUxYzQ2MS1iYzY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyLXyLyr2lNJwdpswECjv61+Azx94gH/KmA4fi5evsUrE8ToHRP2ajKjlUgxO +38RPNlOGmYbD71WyDrwbw6K+5nZxC7cTGUMC1+uDt/MJnagCSE7OeYQwO32OFmu KigFZIEFACcuHTPeiMU+Nu930mgu7xsLE0GkItwqhvLvsu2ag1u0tde8j1XvPhnv OH+SBjODJIwaH4HbGJ+7o2t76hsnDfSP06hj1kxbycrlgwfcmjTSScWlztwvKYuu KUD4JYrFBIvNDX/o0bpT1zNcCK1zb0946HmwjicdD9R46M0dptu7fvj4zpuFYmNw zlsGJpTXqOpQvAF1BMxQrIwCjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD8b4mD+ hr/EhMyNQV52mQ+hy274MB8GA1UdIwQYMBaAFNEMIJb7XbMEq9L5n0WilIgpLTch MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjhBRC9ERUJBMjM4MDg2 QTAxMUVGQjM2RTMwMEVDNEY5QUUwMi8wUXdnbHZ0ZHN3U3Iwdm1mUmFLVWlDa3RO eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBRd2dsdnRkc3dTcjB2bWZSYUtVaUNrdE55RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjhBRC9ERUJBMjM4MDg2QTAxMUVGQjM2RTMwMEVDNEY5QUUwMi8wUXdnbHZ0ZHN3 U3Iwdm1mUmFLVWlDa3ROeUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANSyZ1nTu126lS52XuHHQfkWYh1zK+V9/cQC5Bcz40ecmWBr4RDQqeci39u1O qU69jxXx1FbkhF67BXj9phPX0BCbFpoVKsfCpdyZl144WDvgi/C6uR53bxtYKQTx b1bqB6dubtyYYLAcEeoJ9SID2czKbaqC8ALFoDSMS9mOLCeDIuW+Zyx/oFsN1TBI ZMl+qWAxx9mnqrlPs9CYuP/xr8PJEB4Ym3GyBjp4yS+DCovyK8yTwJCfxHolybG7 ZjOgYd7KqwfFxdIPAap9srwy6x8F9luCrFBpW4btfmdfTr4YhUK50UoX4rDZ9PnC Pk04F8DukxD3RP18Cz0+o5AHPw== -----END CERTIFICATE-----Generated at Fri Apr 17 19:57:43 2026 by rpki-client