$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft File: CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft (raw, json) Hash identifier: ltfaZ/USqPQ8nRtVPKlUI/6vWk9S3ny6VNmE+h/y2Ro= Subject key identifier: 76:06:AF:54:DC:B0:D3:00:A1:68:EE:3B:46:47:6A:19:B7:47:48:6D Authority key identifier: 0A:A5:DE:29:26:5A:08:E2:7A:58:1D:89:44:65:BD:CD:B7:37:09:BB Certificate issuer: /CN=A91DC017/serialNumber=0AA5DE29265A08E27A581D894465BDCDB73709BB Certificate serial: 028B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft Manifest number: 0272 Signing time: Fri 17 Apr 2026 01:54:47 +0000 Manifest this update: Fri 17 Apr 2026 01:54:47 +0000 Manifest next update: Fri 24 Apr 2026 01:54:47 +0000 Files and hashes: 1: CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.crl (hash: 26Z3rebU9EjLy98AZSihsPjacp9fFiSkb4OJqd5jd9w=) 2: 08A1C0B8DC5011EF9C212C5CC4F9AE02.roa (hash: 4eriJ+anZ8scJn8XHXKnKYPlWoQjR5KP9FszJSNrcus=) 3: C0C268B8441C11EF9E110F1EC4F9AE02.roa (hash: BGZ/L+eylo480mcZ7HtgDtqGQJY6fpOnqOG9oduD88w=) 4: 1B8DE01C641911EF83FFBF3CC4F9AE02.roa (hash: 5SoS9wM/g+HshG7EbVwFWNY7qgmWv+2rIEwCE8gvraE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.crl rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:54:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 651 (0x28b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC017, serialNumber=0AA5DE29265A08E27A581D894465BDCDB73709BB Validity Not Before: Apr 17 01:54:47 2026 GMT Not After : Apr 24 01:54:47 2026 GMT Subject: CN=69e192e7-814e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a7:5e:93:c5:31:10:f7:40:62:d1:ae:07:c1: 87:3c:e0:c9:1b:a5:d6:31:af:10:9a:89:35:5a:16: 44:05:01:4b:52:00:ed:9f:8a:f4:ef:2c:3f:0a:37: 49:d1:36:bf:35:53:53:57:e6:5d:e9:3d:85:85:b9: f9:63:2a:03:28:3f:8a:4a:a3:52:20:d6:fb:10:4f: 06:4e:84:b1:4e:6c:9c:da:8f:7f:b6:fa:62:51:ae: 45:0b:61:2d:db:b0:9f:fd:e9:08:1b:de:21:48:c3: 13:5e:99:d7:4e:16:5d:63:3b:b2:88:78:47:21:dc: e2:bf:b1:4c:e9:92:bb:04:bb:41:9d:ae:b8:fe:bd: ed:0b:5a:af:8f:ff:e6:a8:5e:00:d9:3b:45:f1:36: 3b:9b:fb:d9:0c:ba:fb:50:3e:85:4a:6c:76:30:f0: 98:e0:90:11:ef:cd:66:e0:76:24:8c:ea:fe:22:61: 18:53:9b:14:62:af:75:ec:63:7f:69:cc:8b:12:c6: 20:36:1b:20:2b:92:78:e3:5e:a6:14:13:8d:5a:84: 3a:95:98:e2:4b:fc:97:c2:e8:e4:66:51:8c:04:82: d6:cc:c2:03:67:66:94:76:fa:43:3f:0d:3f:53:11: 83:98:e8:50:3f:cd:92:ea:1f:c7:e3:aa:11:cf:89: 50:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:06:AF:54:DC:B0:D3:00:A1:68:EE:3B:46:47:6A:19:B7:47:48:6D X509v3 Authority Key Identifier: keyid:0A:A5:DE:29:26:5A:08:E2:7A:58:1D:89:44:65:BD:CD:B7:37:09:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:b4:a4:39:b3:fd:00:73:aa:f0:80:44:36:75:7d:c1:5c:a1: 7f:8a:8d:6a:b5:84:5d:3a:13:27:ad:20:9c:54:7d:b4:27:71: 39:b9:a1:e5:16:cf:83:19:c0:07:4d:ec:93:10:12:f5:3d:23: 75:2f:aa:a4:15:0e:02:0e:4d:8a:80:b9:37:0f:ce:3e:76:e6: ed:2f:58:f2:9a:b4:b4:25:78:e6:53:89:07:bd:8a:54:10:97: 05:04:c3:38:fb:45:e1:d1:3d:ba:4b:67:e9:88:cc:e2:1f:40: 25:a4:75:25:86:c9:5c:13:ff:79:82:b8:b5:2e:6a:e0:03:79: af:3f:91:5b:70:91:dd:ad:7e:b7:e8:32:06:aa:0f:b9:e0:53: 86:9d:f1:50:29:3a:36:f5:2c:4b:5e:7c:ee:a2:e4:54:86:3b: ca:4a:6b:2a:7d:e7:36:d6:fe:c7:44:20:f3:c2:71:52:b1:99: 9c:9f:d5:2f:42:e9:fc:fd:bb:1d:57:30:42:88:76:aa:71:66: cf:25:cb:88:4b:80:63:11:c0:6f:9c:75:70:01:78:c7:95:f8: 4f:8e:8a:85:ab:49:a0:5d:f2:61:8e:5c:aa:6e:5b:b7:29:51: 7a:c3:25:8f:f5:6a:b6:bd:ec:17:9e:00:db:87:1a:b0:3c:83: 7f:b9:d2:c0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAoswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMwMTcxMTAvBgNVBAUTKDBBQTVERTI5MjY1QTA4RTI3QTU4MUQ4OTQ0NjVCRENE QjczNzA5QkIwHhcNMjYwNDE3MDE1NDQ3WhcNMjYwNDI0MDE1NDQ3WjAYMRYwFAYD VQQDEw02OWUxOTJlNy04MTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoqdek8UxEPdAYtGuB8GHPODJG6XWMa8Qmok1WhZEBQFLUgDtn4r07yw/CjdJ 0Ta/NVNTV+Zd6T2Fhbn5YyoDKD+KSqNSINb7EE8GToSxTmyc2o9/tvpiUa5FC2Et 27Cf/ekIG94hSMMTXpnXThZdYzuyiHhHIdziv7FM6ZK7BLtBna64/r3tC1qvj//m qF4A2TtF8TY7m/vZDLr7UD6FSmx2MPCY4JAR781m4HYkjOr+ImEYU5sUYq917GN/ acyLEsYgNhsgK5J4416mFBONWoQ6lZjiS/yXwujkZlGMBILWzMIDZ2aUdvpDPw0/ UxGDmOhQP82S6h/H46oRz4lQxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHYGr1Tc sNMAoWjuO0ZHahm3R0htMB8GA1UdIwQYMBaAFAql3ikmWgjielgdiURlvc23Nwm7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzAxNy8xMDVBQzhGQzkw QzMxMUVEQkExRENDMjNDNEY5QUUwMi9DcVhlS1NaYUNPSjZXQjJKUkdXOXpiYzND YnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NxWGVLU1phQ09KNldCMkpSR1c5emJjM0Nicy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzAxNy8xMDVBQzhGQzkwQzMxMUVEQkExRENDMjNDNEY5QUUwMi9DcVhlS1NaYUNP SjZXQjJKUkdXOXpiYzNDYnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfLSkObP9AHOq8IBENnV9wVyhf4qNarWEXToTJ60gnFR9tCdxObmh5RbPgxnA B03skxAS9T0jdS+qpBUOAg5NioC5Nw/OPnbm7S9Y8pq0tCV45lOJB72KVBCXBQTD OPtF4dE9uktn6YjM4h9AJaR1JYbJXBP/eYK4tS5q4AN5rz+RW3CR3a1+t+gyBqoP ueBThp3xUCk6NvUsS1587qLkVIY7ykprKn3nNtb+x0Qg88JxUrGZnJ/VL0Lp/P27 HVcwQoh2qnFmzyXLiEuAYxHAb5x1cAF4x5X4T46KhatJoF3yYY5cqm5btylResMl j/Vqtr3sF54A24casDyDf7nSwA== -----END CERTIFICATE-----Generated at Fri Apr 17 12:33:26 2026 by rpki-client