$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB6E8/32E34DEEAE2B11F098EA2E85C4F9AE02/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.mft File: 1Qh-tx-4EvEAL_iEsvnVbjvdTPI.mft (raw, json) Hash identifier: Ag+pzx/fkWXz+5PaDEPrnRQt7HHUJuK977I8WD6MWEc= Subject key identifier: A4:FD:44:5E:A5:15:B7:FB:48:BA:09:6F:2B:79:01:7A:CE:A1:A3:4C Authority key identifier: D5:08:7E:B7:1F:B8:12:F1:00:2F:F8:84:B2:F9:D5:6E:3B:DD:4C:F2 Certificate issuer: /CN=A91CB6E8/serialNumber=D5087EB71FB812F1002FF884B2F9D56E3BDD4CF2 Certificate serial: 5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB6E8/32E34DEEAE2B11F098EA2E85C4F9AE02/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.mft Manifest number: 5F Signing time: Fri 17 Apr 2026 07:44:20 +0000 Manifest this update: Fri 17 Apr 2026 07:44:20 +0000 Manifest next update: Fri 24 Apr 2026 07:44:20 +0000 Files and hashes: 1: 1Qh-tx-4EvEAL_iEsvnVbjvdTPI.crl (hash: 2MWihyVaVU3qVdCf/7AGci/u5m9acHmraCep/V3szkQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB6E8/32E34DEEAE2B11F098EA2E85C4F9AE02/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.crl rsync://rpki.apnic.net/member_repository/A91CB6E8/32E34DEEAE2B11F098EA2E85C4F9AE02/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 07:44:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95 (0x5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB6E8, serialNumber=D5087EB71FB812F1002FF884B2F9D56E3BDD4CF2 Validity Not Before: Apr 17 07:44:20 2026 GMT Not After : Apr 24 07:44:20 2026 GMT Subject: CN=69e1e4d4-fecc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:8c:31:40:05:f1:13:ae:54:f4:5b:f5:3a:97: 19:ab:c4:e3:5c:32:30:6c:63:be:9f:a9:d8:89:56: 62:a6:e9:fa:77:b8:ab:a3:41:29:c6:10:d0:7e:ad: 05:a7:e6:40:8b:e8:bc:b8:c7:af:76:e8:5e:1a:2f: 01:f3:12:81:ee:67:48:75:4f:6a:61:9c:2a:27:cd: cc:03:dd:c5:d9:a5:61:ac:13:b0:f2:c3:96:00:35: fb:16:1b:43:66:2d:3b:07:4f:95:95:c6:68:90:aa: f9:95:35:3e:15:a0:71:45:0e:d0:ed:70:81:14:97: d0:06:a8:66:d7:99:ae:f6:54:f4:75:04:9f:f2:23: 49:39:7d:60:9c:ca:dc:6d:9e:a5:5c:8f:15:48:67: 14:0e:4e:0d:a4:48:72:64:13:67:e5:87:74:67:fb: 36:16:f2:ea:cd:02:e4:bc:26:c6:d5:78:32:57:c9: 6f:2d:6d:bc:83:38:04:84:26:19:f3:40:70:42:5c: 91:cc:aa:46:1b:bd:8c:af:e6:64:d8:27:83:45:ed: 3e:8d:39:e6:e2:8e:2a:04:8d:67:ae:f4:59:b1:e6: 4c:bd:b2:2a:46:38:46:60:60:52:38:7e:aa:81:f0: b1:fa:76:d4:03:45:1b:05:d4:4b:a0:40:b9:64:a3: a5:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:FD:44:5E:A5:15:B7:FB:48:BA:09:6F:2B:79:01:7A:CE:A1:A3:4C X509v3 Authority Key Identifier: keyid:D5:08:7E:B7:1F:B8:12:F1:00:2F:F8:84:B2:F9:D5:6E:3B:DD:4C:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB6E8/32E34DEEAE2B11F098EA2E85C4F9AE02/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB6E8/32E34DEEAE2B11F098EA2E85C4F9AE02/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:27:a0:03:68:33:6a:bd:48:11:0a:d0:fa:4d:ec:39:c5:56: 8d:ba:9d:3b:cd:7f:e0:92:d3:6a:f5:9d:9b:fd:1a:e7:4b:2e: e6:e4:1a:d2:10:ef:63:88:61:95:bf:54:dd:7f:aa:b3:40:bc: 88:ca:fc:29:c1:e4:5b:46:e3:a3:a5:44:8b:08:34:58:9c:ba: 68:e2:b5:29:ba:d7:2a:1c:8e:71:bd:22:2e:99:d3:ed:08:10: b9:c9:93:4c:60:bc:e9:65:d8:ae:f3:75:91:6c:48:9e:44:d1: e9:d3:ee:25:39:ce:71:3b:5b:37:e9:9e:71:5f:da:19:ab:c2: 4a:c7:f0:21:75:5b:33:c2:49:13:4c:31:9b:3f:79:3a:23:fb: a6:8b:eb:93:73:51:58:eb:bb:c8:55:b7:3c:7d:44:6e:4c:4e: 40:0c:32:36:7d:57:5e:ff:c2:90:4c:3c:c0:8a:92:ee:63:8f: bd:be:ed:bb:b9:b7:76:01:dd:5e:4f:49:d0:c4:2e:2d:09:94: b9:4d:ec:13:e4:75:f9:64:bb:bf:d3:ff:3e:6f:bf:63:6f:ef: d4:3f:a8:6f:e4:09:13:8c:36:cc:7f:23:c4:ef:b9:db:05:ba: b0:cc:36:51:ce:b0:e9:b9:35:d9:80:5f:04:4d:72:91:06:b5: 62:99:8e:a9 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QjZFODExMC8GA1UEBRMoRDUwODdFQjcxRkI4MTJGMTAwMkZGODg0QjJGOUQ1NkUz QkRENENGMjAeFw0yNjA0MTcwNzQ0MjBaFw0yNjA0MjQwNzQ0MjBaMBgxFjAUBgNV BAMTDTY5ZTFlNGQ0LWZlY2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCAjDFABfETrlT0W/U6lxmrxONcMjBsY76fqdiJVmKm6fp3uKujQSnGENB+rQWn 5kCL6Ly4x6926F4aLwHzEoHuZ0h1T2phnConzcwD3cXZpWGsE7Dyw5YANfsWG0Nm LTsHT5WVxmiQqvmVNT4VoHFFDtDtcIEUl9AGqGbXma72VPR1BJ/yI0k5fWCcytxt nqVcjxVIZxQOTg2kSHJkE2flh3Rn+zYW8urNAuS8JsbVeDJXyW8tbbyDOASEJhnz QHBCXJHMqkYbvYyv5mTYJ4NF7T6NOebijioEjWeu9Fmx5ky9sipGOEZgYFI4fqqB 8LH6dtQDRRsF1EugQLlko6XBAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUpP1EXqUV t/tIuglvK3kBes6ho0wwHwYDVR0jBBgwFoAU1Qh+tx+4EvEAL/iEsvnVbjvdTPIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNCNkU4LzMyRTM0REVFQUUy QjExRjA5OEVBMkU4NUM0RjlBRTAyLzFRaC10eC00RXZFQUxfaUVzdm5WYmp2ZFRQ SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMVFoLXR4LTRFdkVBTF9pRXN2blZianZkVFBJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNC NkU4LzMyRTM0REVFQUUyQjExRjA5OEVBMkU4NUM0RjlBRTAyLzFRaC10eC00RXZF QUxfaUVzdm5WYmp2ZFRQSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCSJ6ADaDNqvUgRCtD6Tew5xVaNup07zX/gktNq9Z2b/RrnSy7m5BrSEO9jiGGV v1Tdf6qzQLyIyvwpweRbRuOjpUSLCDRYnLpo4rUputcqHI5xvSIumdPtCBC5yZNM YLzpZdiu83WRbEieRNHp0+4lOc5xO1s36Z5xX9oZq8JKx/AhdVszwkkTTDGbP3k6 I/umi+uTc1FY67vIVbc8fURuTE5ADDI2fVde/8KQTDzAipLuY4+9vu27ubd2Ad1e T0nQxC4tCZS5TewT5HX5ZLu/0/8+b79jb+/UP6hv5AkTjDbMfyPE77nbBbqwzDZR zrDpuTXZgF8ETXKRBrVimY6p -----END CERTIFICATE-----Generated at Fri Apr 17 19:38:22 2026 by rpki-client