$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB6E8/32E34DEEAE2B11F098EA2E85C4F9AE02/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.mft File: 1Qh-tx-4EvEAL_iEsvnVbjvdTPI.mft (raw, json) Hash identifier: T1qJIykUQjcTqrKQva3TQ2G8CFb5RuxHVyq+vtSU/fM= Subject key identifier: E6:FF:62:4D:66:37:F9:17:78:32:E8:FB:FA:E4:53:DB:0A:EB:24:9E Authority key identifier: D5:08:7E:B7:1F:B8:12:F1:00:2F:F8:84:B2:F9:D5:6E:3B:DD:4C:F2 Certificate issuer: /CN=A91CB6E8/serialNumber=D5087EB71FB812F1002FF884B2F9D56E3BDD4CF2 Certificate serial: 47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB6E8/32E34DEEAE2B11F098EA2E85C4F9AE02/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.mft Manifest number: 47 Signing time: Sun 01 Mar 2026 09:45:42 +0000 Manifest this update: Sun 01 Mar 2026 09:45:41 +0000 Manifest next update: Sun 08 Mar 2026 09:45:41 +0000 Files and hashes: 1: 1Qh-tx-4EvEAL_iEsvnVbjvdTPI.crl (hash: M+vCWQc5rLedxDv2eMafUIg+Q9xim0oh8BWLjgkFCDk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB6E8/32E34DEEAE2B11F098EA2E85C4F9AE02/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.crl rsync://rpki.apnic.net/member_repository/A91CB6E8/32E34DEEAE2B11F098EA2E85C4F9AE02/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:45:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71 (0x47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB6E8, serialNumber=D5087EB71FB812F1002FF884B2F9D56E3BDD4CF2 Validity Not Before: Mar 1 09:45:41 2026 GMT Not After : Mar 8 09:45:41 2026 GMT Subject: CN=69a40ac6-fabd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b9:a9:2e:49:4f:94:0c:09:a5:1f:35:9e:b4: 05:ee:44:3f:14:43:aa:7c:09:ab:9b:f3:fc:32:e6: b8:83:f7:b2:c6:12:87:86:b4:10:b1:fb:e3:4f:8a: 2f:87:4f:c3:51:70:85:1d:0e:ce:77:df:cd:72:55: bc:c2:08:94:d4:5d:a3:01:89:82:35:22:c4:11:ad: 04:79:ad:65:9c:9a:29:06:6f:4b:43:cd:88:19:c4: 34:89:30:9f:2c:12:4b:b8:b5:2f:e2:a9:52:44:9a: e6:aa:39:5a:ff:8e:88:8b:cc:48:e1:06:2e:a0:66: b1:10:bd:9c:78:9a:af:b9:9c:da:a1:a1:39:e4:d3: c2:c5:22:77:f7:5a:22:30:14:6e:8c:8a:74:fe:1a: a8:a1:56:c2:49:66:93:b0:38:df:9d:19:69:d0:8a: d8:9b:1e:f7:00:a3:03:40:ee:1a:f1:4d:c6:7c:17: 99:6d:cb:56:08:89:37:c5:e0:ec:a3:b7:5c:0e:7a: 7c:86:05:77:a7:e2:b0:2b:37:6d:20:ab:29:1e:95: 26:43:76:e9:cb:46:5f:85:79:81:fe:eb:23:53:23: 4e:0f:ee:57:b8:59:82:df:69:90:47:fe:b9:be:fa: 5f:95:8d:de:d8:54:f2:8a:4f:79:de:fa:ff:4b:0b: e0:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:FF:62:4D:66:37:F9:17:78:32:E8:FB:FA:E4:53:DB:0A:EB:24:9E X509v3 Authority Key Identifier: keyid:D5:08:7E:B7:1F:B8:12:F1:00:2F:F8:84:B2:F9:D5:6E:3B:DD:4C:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB6E8/32E34DEEAE2B11F098EA2E85C4F9AE02/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB6E8/32E34DEEAE2B11F098EA2E85C4F9AE02/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:36:c8:ae:c0:96:76:94:c0:be:6d:92:7f:66:85:a7:88:e2: 93:f9:91:86:e8:d7:1f:43:53:a8:b4:b5:88:c7:f7:2e:fd:17: 99:2c:ae:83:38:29:3c:8d:b9:3f:dd:d4:81:96:00:f7:e4:d4: c5:9a:62:d0:4b:fc:6a:60:95:1c:c5:10:6f:c1:40:c0:89:e1: 3b:66:33:0b:c2:ae:a5:9b:bb:ff:ce:b5:39:ea:86:c4:c8:85: 8b:2e:59:65:cf:e7:86:0d:a7:50:bb:b8:9d:db:4a:4c:30:c7: 49:f2:4b:0c:be:39:2e:f3:ab:1e:b4:58:32:1a:7f:ad:7d:aa: 95:97:95:17:f2:95:23:2c:d6:f4:95:1e:2a:15:44:90:6a:6a: fa:f5:f8:2c:eb:77:f7:03:95:f9:3d:b8:92:2e:58:b4:e2:8e: d8:a0:04:56:ad:11:c1:48:d0:14:f4:81:55:cb:1e:a5:b8:7b: 1b:91:1c:6f:b6:f0:c8:80:df:24:ab:8a:83:48:5c:98:7f:38: 44:c6:c8:37:eb:f1:7c:0e:6d:99:d9:e3:9f:83:06:53:2b:e9: 0a:ca:f0:9f:e9:32:10:45:67:49:f3:ef:55:97:ad:f8:46:26: 5c:7e:5c:4d:6d:93:1a:b9:ef:87:78:e9:83:ea:b9:b6:e4:1c: 25:8c:a0:50 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBRzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QjZFODExMC8GA1UEBRMoRDUwODdFQjcxRkI4MTJGMTAwMkZGODg0QjJGOUQ1NkUz QkRENENGMjAeFw0yNjAzMDEwOTQ1NDFaFw0yNjAzMDgwOTQ1NDFaMBgxFjAUBgNV BAMTDTY5YTQwYWM2LWZhYmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCyuakuSU+UDAmlHzWetAXuRD8UQ6p8Caub8/wy5riD97LGEoeGtBCx++NPii+H T8NRcIUdDs53381yVbzCCJTUXaMBiYI1IsQRrQR5rWWcmikGb0tDzYgZxDSJMJ8s Eku4tS/iqVJEmuaqOVr/joiLzEjhBi6gZrEQvZx4mq+5nNqhoTnk08LFInf3WiIw FG6MinT+GqihVsJJZpOwON+dGWnQitibHvcAowNA7hrxTcZ8F5lty1YIiTfF4Oyj t1wOenyGBXen4rArN20gqykelSZDdunLRl+FeYH+6yNTI04P7le4WYLfaZBH/rm+ +l+Vjd7YVPKKT3ne+v9LC+BLAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU5v9iTWY3 +Rd4Muj7+uRT2wrrJJ4wHwYDVR0jBBgwFoAU1Qh+tx+4EvEAL/iEsvnVbjvdTPIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNCNkU4LzMyRTM0REVFQUUy QjExRjA5OEVBMkU4NUM0RjlBRTAyLzFRaC10eC00RXZFQUxfaUVzdm5WYmp2ZFRQ SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMVFoLXR4LTRFdkVBTF9pRXN2blZianZkVFBJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNC NkU4LzMyRTM0REVFQUUyQjExRjA5OEVBMkU4NUM0RjlBRTAyLzFRaC10eC00RXZF QUxfaUVzdm5WYmp2ZFRQSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQALNsiuwJZ2lMC+bZJ/ZoWniOKT+ZGG6NcfQ1OotLWIx/cu/ReZLK6DOCk8jbk/ 3dSBlgD35NTFmmLQS/xqYJUcxRBvwUDAieE7ZjMLwq6lm7v/zrU56obEyIWLLlll z+eGDadQu7id20pMMMdJ8ksMvjku86setFgyGn+tfaqVl5UX8pUjLNb0lR4qFUSQ amr69fgs63f3A5X5PbiSLli04o7YoARWrRHBSNAU9IFVyx6luHsbkRxvtvDIgN8k q4qDSFyYfzhExsg36/F8Dm2Z2eOfgwZTK+kKyvCf6TIQRWdJ8+9Vl634RiZcflxN bZMaue+HeOmD6rm25BwljKBQ -----END CERTIFICATE-----Generated at Mon Mar 2 07:17:10 2026 by rpki-client