$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft File: qjXi-Xe1XnL5FjW_fVO861NHmDs.mft (raw, json) Hash identifier: CbzpaMaRUK7sZAgiNUFTPNYp4zGg9MsyLsFni0nwSBQ= Subject key identifier: 96:30:F0:89:4E:57:7C:8D:85:EB:7C:94:31:5C:C8:64:9B:FF:72:4C Authority key identifier: AA:35:E2:F9:77:B5:5E:72:F9:16:35:BF:7D:53:BC:EB:53:47:98:3B Certificate issuer: /CN=A91D2C38/serialNumber=AA35E2F977B55E72F91635BF7D53BCEB5347983B Certificate serial: 0110 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjXi-Xe1XnL5FjW_fVO861NHmDs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft Manifest number: 0108 Signing time: Fri 17 Apr 2026 05:45:57 +0000 Manifest this update: Fri 17 Apr 2026 05:45:57 +0000 Manifest next update: Fri 24 Apr 2026 05:45:57 +0000 Files and hashes: 1: qjXi-Xe1XnL5FjW_fVO861NHmDs.crl (hash: 5hOqamzCjJB41Iy7wYhXRCSOyqo4wiaYOENpp29psYg=) 2: 8D6B6D86A98C11EFAAC0F364C4F9AE02.roa (hash: hAmO+Dq9vGZAILDadtbesaeJmrxEB8UrXmpWc1/KCyg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.crl rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjXi-Xe1XnL5FjW_fVO861NHmDs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 272 (0x110) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2C38, serialNumber=AA35E2F977B55E72F91635BF7D53BCEB5347983B Validity Not Before: Apr 17 05:45:57 2026 GMT Not After : Apr 24 05:45:57 2026 GMT Subject: CN=69e1c915-03a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1b:78:3a:8c:5b:ae:3d:02:9c:1d:87:13:59: 07:cd:6b:8f:69:d4:3d:0a:2f:f1:f5:53:60:7a:85: cb:53:ba:75:85:ef:34:5b:4c:c9:50:14:7d:80:e0: 4e:8a:14:07:e7:8c:33:f3:3d:87:28:25:d6:d7:08: 4c:70:57:a9:72:9d:28:d0:aa:9b:c6:69:31:62:18: 79:6b:06:e5:48:c8:e4:ee:59:6a:b2:7f:cb:b0:85: 34:f6:4a:38:61:5f:b0:e1:3a:0b:26:9c:b4:0f:f7: 13:2b:10:cf:e8:47:a2:49:f5:a4:c4:38:02:60:e3: ec:83:f4:9e:b3:04:07:ce:54:0f:b6:e8:c5:56:01: 2f:fe:36:1d:2f:18:62:54:e4:6a:a6:f3:a3:e9:77: 29:df:64:4c:77:97:b2:e1:d9:86:a0:62:54:8b:39: e8:c7:4c:0f:9f:82:b3:ad:a1:18:ff:e2:22:b3:a2: cd:8c:99:43:34:bd:58:d2:3f:d3:f1:8d:0e:24:ee: e0:b9:2e:cd:c1:a4:5a:7d:f0:5f:28:9b:ad:d0:b4: 7e:9e:35:7d:9e:dd:82:af:82:c8:17:d5:5c:81:ab: 0e:23:b0:55:d0:63:1d:e7:af:8a:52:86:5d:33:c6: 92:57:59:64:7e:47:41:20:db:af:21:ca:80:b9:c4: f8:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:30:F0:89:4E:57:7C:8D:85:EB:7C:94:31:5C:C8:64:9B:FF:72:4C X509v3 Authority Key Identifier: keyid:AA:35:E2:F9:77:B5:5E:72:F9:16:35:BF:7D:53:BC:EB:53:47:98:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjXi-Xe1XnL5FjW_fVO861NHmDs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:ff:bb:9d:ba:f4:a6:a7:bf:4b:eb:9c:2b:c9:2a:e9:4d:55: d8:1f:dc:a1:de:fe:1b:a5:b5:ff:5f:16:6c:c5:8c:81:2a:3f: 61:ff:f3:8c:0b:51:76:c5:2a:0a:37:59:2f:d2:b4:e5:f9:ac: 14:98:f6:0e:79:a4:55:81:ed:81:df:1a:06:cb:7c:83:0f:24: d1:8d:1f:52:84:00:9d:2d:61:f6:84:88:4d:2d:54:53:28:e1: cf:2d:ea:9f:4b:fe:8c:1d:13:df:cd:c8:2c:70:26:e4:ef:03: cf:61:15:7d:da:43:e0:26:b2:2e:a3:58:fd:ef:48:09:da:20: 22:00:20:29:c3:21:79:56:24:c8:d7:48:37:a3:6b:70:67:78: 56:86:59:37:ed:a6:59:44:92:bd:08:17:c5:25:76:0e:04:ea: 31:5e:91:70:5a:cd:6b:61:cc:5b:17:d8:3e:f1:f9:3b:fd:9a: 87:4d:66:c5:7d:8f:5f:1e:d3:2f:4e:cd:86:84:41:eb:a9:e9: c7:d0:76:9f:11:87:75:e3:be:37:d1:a7:ba:1d:97:6b:09:ec: 5e:78:25:75:4d:bd:9b:c3:4f:d1:d9:8a:32:77:c8:75:1f:2c: 8f:d1:d1:3d:b9:aa:b6:fa:b4:7a:11:c1:64:3e:dc:12:80:30: 64:a9:ad:05 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICARAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDJDMzgxMTAvBgNVBAUTKEFBMzVFMkY5NzdCNTVFNzJGOTE2MzVCRjdENTNCQ0VC NTM0Nzk4M0IwHhcNMjYwNDE3MDU0NTU3WhcNMjYwNDI0MDU0NTU3WjAYMRYwFAYD VQQDEw02OWUxYzkxNS0wM2ExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxBt4Ooxbrj0CnB2HE1kHzWuPadQ9Ci/x9VNgeoXLU7p1he80W0zJUBR9gOBO ihQH54wz8z2HKCXW1whMcFepcp0o0KqbxmkxYhh5awblSMjk7llqsn/LsIU09ko4 YV+w4ToLJpy0D/cTKxDP6EeiSfWkxDgCYOPsg/SeswQHzlQPtujFVgEv/jYdLxhi VORqpvOj6Xcp32RMd5ey4dmGoGJUiznox0wPn4KzraEY/+Iis6LNjJlDNL1Y0j/T 8Y0OJO7guS7NwaRaffBfKJut0LR+njV9nt2Cr4LIF9VcgasOI7BV0GMd56+KUoZd M8aSV1lkfkdBINuvIcqAucT4OwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJYw8IlO V3yNhet8lDFcyGSb/3JMMB8GA1UdIwQYMBaAFKo14vl3tV5y+RY1v31TvOtTR5g7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkMzOC8wNEJBQTYxNEE5 OEMxMUVGOTM1MEZCNjNDNEY5QUUwMi9xalhpLVhlMVhuTDVGaldfZlZPODYxTkht RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3FqWGktWGUxWG5MNUZqV19mVk84NjFOSG1Ecy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MkMzOC8wNEJBQTYxNEE5OEMxMUVGOTM1MEZCNjNDNEY5QUUwMi9xalhpLVhlMVhu TDVGaldfZlZPODYxTkhtRHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAP/+7nbr0pqe/S+ucK8kq6U1V2B/cod7+G6W1/18WbMWMgSo/Yf/zjAtRdsUq CjdZL9K05fmsFJj2DnmkVYHtgd8aBst8gw8k0Y0fUoQAnS1h9oSITS1UUyjhzy3q n0v+jB0T383ILHAm5O8Dz2EVfdpD4CayLqNY/e9ICdogIgAgKcMheVYkyNdIN6Nr cGd4VoZZN+2mWUSSvQgXxSV2DgTqMV6RcFrNa2HMWxfYPvH5O/2ah01mxX2PXx7T L07NhoRB66npx9B2nxGHdeO+N9Gnuh2XawnsXngldU29m8NP0dmKMnfIdR8sj9HR Pbmqtvq0ehHBZD7cEoAwZKmtBQ== -----END CERTIFICATE-----Generated at Fri Apr 17 11:24:37 2026 by rpki-client