$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4803/80F034BEF9E111EBA32CE21BC4F9AE02/Qql4rYPdXtKaTl3bYbVvExelpaQ.mft File: Qql4rYPdXtKaTl3bYbVvExelpaQ.mft (raw, json) Hash identifier: KB7wDGYhj4fuAHWE0g9Pbvat/ZNMTX7oy6wF3ISuRdE= Subject key identifier: ED:92:7D:E0:62:31:E6:67:07:35:7C:B7:D5:D5:D1:A3:E2:AB:9B:07 Authority key identifier: 42:A9:78:AD:83:DD:5E:D2:9A:4E:5D:DB:61:B5:6F:13:17:A5:A5:A4 Certificate issuer: /CN=A91D4803/serialNumber=42A978AD83DD5ED29A4E5DDB61B56F1317A5A5A4 Certificate serial: 05E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qql4rYPdXtKaTl3bYbVvExelpaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4803/80F034BEF9E111EBA32CE21BC4F9AE02/Qql4rYPdXtKaTl3bYbVvExelpaQ.mft Manifest number: 05DA Signing time: Thu 16 Apr 2026 22:54:56 +0000 Manifest this update: Thu 16 Apr 2026 22:54:55 +0000 Manifest next update: Thu 23 Apr 2026 22:54:55 +0000 Files and hashes: 1: Qql4rYPdXtKaTl3bYbVvExelpaQ.crl (hash: d34PdA3dsTttkBBB0xXlwcLm97W+mKhBzULDlBzjJC0=) 2: 2B1B8C92F9E511EBBB9B5D22C4F9AE02.roa (hash: fQgQ0VLTGkoR20JE5CrFqxEVCmsrE7jBwatjIG70kMM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4803/80F034BEF9E111EBA32CE21BC4F9AE02/Qql4rYPdXtKaTl3bYbVvExelpaQ.crl rsync://rpki.apnic.net/member_repository/A91D4803/80F034BEF9E111EBA32CE21BC4F9AE02/Qql4rYPdXtKaTl3bYbVvExelpaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qql4rYPdXtKaTl3bYbVvExelpaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 22:54:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1507 (0x5e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4803, serialNumber=42A978AD83DD5ED29A4E5DDB61B56F1317A5A5A4 Validity Not Before: Apr 16 22:54:55 2026 GMT Not After : Apr 23 22:54:55 2026 GMT Subject: CN=69e168bf-1bb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:6c:b5:14:01:0f:93:63:85:cd:7b:98:0b:ad: 89:3e:95:42:4e:49:3c:ea:46:30:d4:a9:26:cd:dc: 81:ab:fe:0a:e3:a8:27:75:95:72:bb:5d:54:86:26: 2e:04:8d:a1:57:b9:00:7b:f1:f6:65:42:3b:bf:88: 11:05:5f:f8:0c:ba:9b:32:3d:2b:82:05:2c:75:c4: 8a:37:73:76:90:70:01:d7:a1:15:b5:f6:e3:01:cb: 19:af:3e:af:39:9d:27:d6:6f:2a:74:47:58:ec:64: f1:e8:74:49:22:69:fd:10:ba:de:95:9e:53:52:c6: 1b:c2:59:9b:26:f0:6f:70:3e:ce:5d:c0:91:07:32: d8:5f:77:21:79:b9:4c:79:9d:50:26:d7:a8:d2:8c: 8c:d9:f8:d2:aa:e7:ab:39:aa:46:f9:26:f2:36:e2: 01:60:34:a1:fb:d4:78:ca:4a:5e:73:d8:79:15:3a: 8f:1c:86:93:de:6d:ee:e3:26:d7:31:0d:63:c6:be: 3f:ce:fb:59:db:e7:ed:fd:ae:ad:fc:87:34:39:bb: 7b:48:14:43:df:67:b1:73:c6:1d:bf:4e:98:d4:67: c1:0e:ad:d5:1b:f4:e6:9e:c5:1e:28:12:85:c5:69: a7:d9:5d:cf:ca:d4:dc:ef:32:4c:0c:8e:af:56:22: 59:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:92:7D:E0:62:31:E6:67:07:35:7C:B7:D5:D5:D1:A3:E2:AB:9B:07 X509v3 Authority Key Identifier: keyid:42:A9:78:AD:83:DD:5E:D2:9A:4E:5D:DB:61:B5:6F:13:17:A5:A5:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4803/80F034BEF9E111EBA32CE21BC4F9AE02/Qql4rYPdXtKaTl3bYbVvExelpaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qql4rYPdXtKaTl3bYbVvExelpaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4803/80F034BEF9E111EBA32CE21BC4F9AE02/Qql4rYPdXtKaTl3bYbVvExelpaQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:c1:cd:93:bb:25:12:9d:88:1e:23:b6:e5:19:15:f3:84:95: 2d:5c:ed:4a:0b:a2:47:31:ae:71:44:5e:17:79:13:0e:06:dc: 18:86:39:d8:85:3a:99:d1:3a:d4:b7:eb:ae:bd:6c:5b:c6:89: ac:7f:4d:b4:de:d0:16:82:02:3f:2a:07:51:1c:cf:a9:de:4f: 56:5c:96:83:1e:9b:2b:c8:48:49:4c:d4:91:bd:03:4f:71:8d: 75:10:e7:a2:e6:ff:b0:a7:1e:66:58:f8:ee:85:5f:70:de:a0: 25:14:36:94:66:e6:e3:8d:ab:9b:81:0d:0b:25:f6:12:98:d0: a0:93:f4:ac:d9:6a:73:ca:12:f6:c2:03:2b:1d:a9:8b:58:91: 1e:cf:72:99:02:31:56:98:52:90:52:67:3e:b1:0d:ee:00:e9: c7:d4:ed:61:e9:a7:3d:17:7f:e8:19:6d:32:41:44:3b:36:f2: 6a:7a:72:66:43:4e:07:bc:a2:7a:31:f4:ab:d1:48:4c:c5:03: b2:05:8d:08:21:de:06:43:c4:7a:ba:51:75:b3:87:db:92:07: f8:71:31:ad:f9:e9:c7:42:eb:32:86:73:5c:4a:33:cc:e8:1f: ad:65:5c:58:50:e9:d9:96:d7:a9:66:2f:38:63:9a:8a:54:05: 70:b7:44:a7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBeMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ4MDMxMTAvBgNVBAUTKDQyQTk3OEFEODNERDVFRDI5QTRFNUREQjYxQjU2RjEz MTdBNUE1QTQwHhcNMjYwNDE2MjI1NDU1WhcNMjYwNDIzMjI1NDU1WjAYMRYwFAYD VQQDEw02OWUxNjhiZi0xYmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnmy1FAEPk2OFzXuYC62JPpVCTkk86kYw1KkmzdyBq/4K46gndZVyu11UhiYu BI2hV7kAe/H2ZUI7v4gRBV/4DLqbMj0rggUsdcSKN3N2kHAB16EVtfbjAcsZrz6v OZ0n1m8qdEdY7GTx6HRJImn9ELrelZ5TUsYbwlmbJvBvcD7OXcCRBzLYX3cheblM eZ1QJteo0oyM2fjSquerOapG+SbyNuIBYDSh+9R4ykpec9h5FTqPHIaT3m3u4ybX MQ1jxr4/zvtZ2+ft/a6t/Ic0Obt7SBRD32exc8Ydv06Y1GfBDq3VG/TmnsUeKBKF xWmn2V3PytTc7zJMDI6vViJZaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO2SfeBi MeZnBzV8t9XV0aPiq5sHMB8GA1UdIwQYMBaAFEKpeK2D3V7Smk5d22G1bxMXpaWk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDgwMy84MEYwMzRCRUY5 RTExMUVCQTMyQ0UyMUJDNEY5QUUwMi9RcWw0cllQZFh0S2FUbDNiWWJWdkV4ZWxw YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FxbDRyWVBkWHRLYVRsM2JZYlZ2RXhlbHBhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDgwMy84MEYwMzRCRUY5RTExMUVCQTMyQ0UyMUJDNEY5QUUwMi9RcWw0cllQZFh0 S2FUbDNiWWJWdkV4ZWxwYVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAscHNk7slEp2IHiO25RkV84SVLVztSguiRzGucUReF3kTDgbcGIY52IU6mdE6 1Lfrrr1sW8aJrH9NtN7QFoICPyoHURzPqd5PVlyWgx6bK8hISUzUkb0DT3GNdRDn oub/sKceZlj47oVfcN6gJRQ2lGbm442rm4ENCyX2EpjQoJP0rNlqc8oS9sIDKx2p i1iRHs9ymQIxVphSkFJnPrEN7gDpx9TtYemnPRd/6BltMkFEOzbyanpyZkNOB7yi ejH0q9FITMUDsgWNCCHeBkPEerpRdbOH25IH+HExrfnpx0LrMoZzXEozzOgfrWVc WFDp2ZbXqWYvOGOailQFcLdEpw== -----END CERTIFICATE-----Generated at Fri Apr 17 12:37:21 2026 by rpki-client