$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.mft File: qkjQtX4IXNlA26F5HapYc8wZx_4.mft (raw, json) Hash identifier: OhOGurS5Y6HhHd2AaP+1XptaAuL2+En4KWOKnvZ4cIY= Subject key identifier: 03:5D:14:9E:19:A5:F0:CB:32:38:A6:F9:41:35:9A:08:54:0F:94:4E Authority key identifier: AA:48:D0:B5:7E:08:5C:D9:40:DB:A1:79:1D:AA:58:73:CC:19:C7:FE Certificate issuer: /CN=A91EA582/serialNumber=AA48D0B57E085CD940DBA1791DAA5873CC19C7FE Certificate serial: 0439 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkjQtX4IXNlA26F5HapYc8wZx_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.mft Manifest number: 0432 Signing time: Fri 17 Apr 2026 00:14:08 +0000 Manifest this update: Fri 17 Apr 2026 00:14:07 +0000 Manifest next update: Fri 24 Apr 2026 00:14:07 +0000 Files and hashes: 1: qkjQtX4IXNlA26F5HapYc8wZx_4.crl (hash: +QMh00L0gggTujNg/PQsBQvdMhhP+JmrectflHRNh5Q=) 2: 9924B750A1AF11EC9A73D814C4F9AE02.roa (hash: OnrJHjAaotCz5N5oezIxaMJXxP9Vqz9O52EXIcge9Do=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.crl rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkjQtX4IXNlA26F5HapYc8wZx_4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 00:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1081 (0x439) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA582, serialNumber=AA48D0B57E085CD940DBA1791DAA5873CC19C7FE Validity Not Before: Apr 17 00:14:07 2026 GMT Not After : Apr 24 00:14:07 2026 GMT Subject: CN=69e17b50-8b74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5f:7b:81:da:66:7f:8a:9f:ad:cd:d3:3d:25: c3:e6:c1:91:d8:67:8b:84:eb:f6:a6:49:55:13:70: d4:dd:c2:64:da:51:0a:34:d4:28:58:32:6f:13:f8: 12:2f:fb:6a:33:fe:ef:87:66:9f:3b:d1:78:36:6d: 1e:58:21:76:ff:a6:d6:36:41:fa:2c:e2:28:ba:c6: e9:0e:fa:bc:5a:da:85:85:df:22:f7:2c:74:a1:a6: 6e:85:de:be:8a:a7:6b:c0:65:51:5c:22:69:38:f7: 36:29:bf:e4:73:c9:07:0c:96:97:06:1e:0c:12:20: c5:dd:f9:d8:ee:c4:73:0d:ce:34:66:11:6b:a3:0f: 62:86:11:6e:90:27:dc:9b:6a:0e:e5:ce:b5:44:1e: 4a:9a:b8:71:f5:bb:00:7d:15:3a:be:3d:43:50:be: 97:5d:15:e6:93:12:a2:19:bc:2b:5a:f6:0d:82:51: 0f:29:35:e4:ff:0e:dd:0b:b9:19:2f:7c:c6:1a:f8: ea:ba:10:73:21:78:cf:60:46:f6:99:50:d1:1e:ce: 95:83:ca:d4:ff:f4:32:a1:a7:c6:6f:44:dd:69:e1: 69:a8:d7:61:0a:ff:6f:74:28:d9:40:94:f2:74:81: 05:8c:5f:89:5a:8f:df:66:38:98:0f:d3:06:52:4d: f0:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:5D:14:9E:19:A5:F0:CB:32:38:A6:F9:41:35:9A:08:54:0F:94:4E X509v3 Authority Key Identifier: keyid:AA:48:D0:B5:7E:08:5C:D9:40:DB:A1:79:1D:AA:58:73:CC:19:C7:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkjQtX4IXNlA26F5HapYc8wZx_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:fa:a8:a2:2f:2a:42:36:63:86:67:ac:3a:1f:17:88:0b:77: 56:f4:18:8a:68:63:92:02:c6:2a:0a:50:8b:a9:c3:51:b2:79: b2:79:3b:b1:c6:d6:7b:f3:bf:cd:c3:b0:cd:ae:e6:cb:b4:fa: 40:db:ab:0b:43:e3:fc:cf:1e:f9:a8:42:63:0a:2a:85:dd:a0: 0c:73:61:bb:50:9d:07:d4:46:86:51:f5:ad:36:33:cd:af:52: cb:f0:bc:aa:b2:d0:fb:7a:9e:57:33:70:07:d7:6b:39:72:5a: 1d:2c:10:f1:fe:4f:71:db:a6:58:0c:3f:82:9c:bc:80:65:4f: 7b:bb:82:f0:e2:ef:d5:d1:e8:d0:df:2a:ee:ae:9b:40:a6:ff: 25:51:c5:ad:a8:8e:0d:6f:b6:bb:09:6a:71:97:79:ec:5a:ee: 8a:bf:76:b9:b5:42:f8:af:e2:cc:64:92:e9:42:04:5f:11:e3: 14:23:1d:d1:17:9b:ea:54:46:1c:44:38:49:09:e0:20:8f:b7: 0b:86:8e:16:ea:53:2f:72:36:00:cd:46:0a:24:bf:c0:29:92: 3e:ad:b0:3e:8a:4d:4a:54:e0:b6:12:d4:20:fb:4d:e2:82:4d: 6c:20:12:5e:aa:05:c6:dd:ec:d4:76:44:35:c5:78:36:5e:e9: ec:2c:34:f3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBDkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE1ODIxMTAvBgNVBAUTKEFBNDhEMEI1N0UwODVDRDk0MERCQTE3OTFEQUE1ODcz Q0MxOUM3RkUwHhcNMjYwNDE3MDAxNDA3WhcNMjYwNDI0MDAxNDA3WjAYMRYwFAYD VQQDEw02OWUxN2I1MC04Yjc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtF97gdpmf4qfrc3TPSXD5sGR2GeLhOv2pklVE3DU3cJk2lEKNNQoWDJvE/gS L/tqM/7vh2afO9F4Nm0eWCF2/6bWNkH6LOIousbpDvq8WtqFhd8i9yx0oaZuhd6+ iqdrwGVRXCJpOPc2Kb/kc8kHDJaXBh4MEiDF3fnY7sRzDc40ZhFrow9ihhFukCfc m2oO5c61RB5Kmrhx9bsAfRU6vj1DUL6XXRXmkxKiGbwrWvYNglEPKTXk/w7dC7kZ L3zGGvjquhBzIXjPYEb2mVDRHs6Vg8rU//QyoafGb0TdaeFpqNdhCv9vdCjZQJTy dIEFjF+JWo/fZjiYD9MGUk3wzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFANdFJ4Z pfDLMjim+UE1mghUD5ROMB8GA1UdIwQYMBaAFKpI0LV+CFzZQNuheR2qWHPMGcf+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTU4Mi85NzRGQ0FBMEEx MTkxMUVDOEM0RkZBODNDNEY5QUUwMi9xa2pRdFg0SVhObEEyNkY1SGFwWWM4d1p4 XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FralF0WDRJWE5sQTI2RjVIYXBZYzh3WnhfNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTU4Mi85NzRGQ0FBMEExMTkxMUVDOEM0RkZBODNDNEY5QUUwMi9xa2pRdFg0SVhO bEEyNkY1SGFwWWM4d1p4XzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVPqooi8qQjZjhmesOh8XiAt3VvQYimhjkgLGKgpQi6nDUbJ5snk7scbWe/O/ zcOwza7my7T6QNurC0Pj/M8e+ahCYwoqhd2gDHNhu1CdB9RGhlH1rTYzza9Sy/C8 qrLQ+3qeVzNwB9drOXJaHSwQ8f5PcdumWAw/gpy8gGVPe7uC8OLv1dHo0N8q7q6b QKb/JVHFraiODW+2uwlqcZd57Fruir92ubVC+K/izGSS6UIEXxHjFCMd0Reb6lRG HEQ4SQngII+3C4aOFupTL3I2AM1GCiS/wCmSPq2wPopNSlTgthLUIPtN4oJNbCAS XqoFxt3s1HZENcV4Nl7p7Cw08w== -----END CERTIFICATE-----Generated at Fri Apr 17 18:40:03 2026 by rpki-client