$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.mft File: qX6qTW8VW40nxAro4yfZulLDS0I.mft (raw, json) Hash identifier: Okc4e2aSC1nMwwdIoFu78Oh639zEVTXVqiWxvujSzoM= Subject key identifier: 4A:F0:43:41:6E:D7:70:E1:A7:05:84:87:48:56:28:25:2F:21:0D:A5 Authority key identifier: A9:7E:AA:4D:6F:15:5B:8D:27:C4:0A:E8:E3:27:D9:BA:52:C3:4B:42 Certificate issuer: /CN=A91EB4AF/serialNumber=A97EAA4D6F155B8D27C40AE8E327D9BA52C34B42 Certificate serial: 03D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qX6qTW8VW40nxAro4yfZulLDS0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.mft Manifest number: 03B3 Signing time: Fri 17 Apr 2026 00:39:18 +0000 Manifest this update: Fri 17 Apr 2026 00:39:17 +0000 Manifest next update: Fri 24 Apr 2026 00:39:17 +0000 Files and hashes: 1: qX6qTW8VW40nxAro4yfZulLDS0I.crl (hash: 66YX4o3WKUBJyWFZ72MI6IZUS9HHkVNC85FzP8myZx4=) 2: 595774341B6211F0B9733473C4F9AE02.roa (hash: FsghJjQsuRRGpnhop47UMyZjNIpI+E4uxqKOZi0XVJ8=) 3: DCE70C6EF9B911ED8314C10EC4F9AE02.roa (hash: lkd89MpvF6HjrZnQ7+Am4kQJDo7BJMWf79Z8hJQl200=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.crl rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qX6qTW8VW40nxAro4yfZulLDS0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 00:39:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 980 (0x3d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB4AF, serialNumber=A97EAA4D6F155B8D27C40AE8E327D9BA52C34B42 Validity Not Before: Apr 17 00:39:17 2026 GMT Not After : Apr 24 00:39:17 2026 GMT Subject: CN=69e18136-ed58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c9:97:17:ca:5d:0b:87:96:9d:a0:ec:8d:57: 94:80:a2:05:0a:0d:ae:ba:8a:f4:02:15:19:ad:f4: e5:59:a8:43:63:24:ba:ce:ca:9b:87:ab:0d:3c:da: 1b:3f:5e:82:d7:5b:59:53:b2:31:10:de:ba:b0:ff: 50:aa:9b:a8:a8:fc:2a:1b:be:9f:e3:0e:21:c7:92: 08:a7:80:5c:5a:77:01:6c:b3:99:44:c2:0e:41:cb: ce:c0:31:c6:2a:51:c5:7e:a2:9e:53:11:a2:15:07: 95:9a:cc:c8:d6:f0:ce:8c:d0:b7:94:51:e2:33:ae: a1:c9:e8:dc:68:fa:7f:96:0d:5a:88:c6:6e:ee:4f: 90:97:a2:12:c9:e6:5a:7c:73:ef:53:22:70:cd:0a: 0b:e9:f1:82:f5:31:a6:70:70:c1:ce:ad:49:f1:b0: 8c:bc:46:1a:f6:fd:0c:41:39:54:a1:f8:f3:eb:38: db:af:62:91:34:6d:ee:ff:9e:ce:c5:3e:a7:cb:53: 21:a4:17:a0:2e:08:d9:46:b6:8c:ed:42:e6:02:fa: 96:e6:3c:05:f5:45:53:f8:5c:af:29:aa:a3:26:63: ea:32:61:15:cb:73:1f:69:9d:2d:d5:d5:1e:b7:db: bf:cf:ed:33:6c:2e:98:a9:1a:6b:3b:99:8e:cb:ad: f3:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:F0:43:41:6E:D7:70:E1:A7:05:84:87:48:56:28:25:2F:21:0D:A5 X509v3 Authority Key Identifier: keyid:A9:7E:AA:4D:6F:15:5B:8D:27:C4:0A:E8:E3:27:D9:BA:52:C3:4B:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qX6qTW8VW40nxAro4yfZulLDS0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:cd:34:c3:8c:85:82:ee:5a:3d:b6:2c:15:bc:f8:f7:c6:36: 37:27:b8:d9:e6:f3:60:41:db:23:f5:77:33:13:d7:ed:04:3e: 40:e2:f0:38:83:4b:ba:19:a3:cf:ba:7b:a2:f9:83:95:91:52: 0e:7d:89:01:c5:87:84:0e:e1:8a:ab:0b:ec:84:e1:aa:d9:a2: 65:13:69:f6:f3:37:5b:59:39:e6:8b:00:8d:ac:a7:9c:4a:f5: 11:c7:b6:0a:95:ef:a8:7c:52:65:33:93:66:64:61:c2:f8:92: e4:d4:ea:7f:05:2b:f2:41:11:ff:e6:3a:11:6e:bf:b1:70:b8: 61:f5:a1:aa:1c:b1:ae:2b:5d:60:13:a7:54:f9:b9:3d:ed:a4: 39:70:7d:0b:e0:dc:3e:72:67:6c:e5:70:a8:47:8d:7e:5c:b6: 65:d8:60:10:91:59:6f:cc:6a:9d:7f:40:a4:7b:4a:98:9e:1a: 61:e6:c8:f3:b3:2e:15:da:6b:a2:8b:b2:50:69:7f:77:f7:1f: d3:2e:19:7f:49:42:e2:73:4f:ad:0f:a3:7f:ef:0a:78:57:1c: 14:7f:9b:3b:aa:98:3a:4e:98:75:fb:a7:23:2e:a8:ac:bb:43: f7:cf:64:f3:3f:d1:a6:05:8f:1f:be:64:8b:75:e3:69:17:51: 31:3c:57:0c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA9QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI0QUYxMTAvBgNVBAUTKEE5N0VBQTRENkYxNTVCOEQyN0M0MEFFOEUzMjdEOUJB NTJDMzRCNDIwHhcNMjYwNDE3MDAzOTE3WhcNMjYwNDI0MDAzOTE3WjAYMRYwFAYD VQQDEw02OWUxODEzNi1lZDU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0cmXF8pdC4eWnaDsjVeUgKIFCg2uuor0AhUZrfTlWahDYyS6zsqbh6sNPNob P16C11tZU7IxEN66sP9QqpuoqPwqG76f4w4hx5IIp4BcWncBbLOZRMIOQcvOwDHG KlHFfqKeUxGiFQeVmszI1vDOjNC3lFHiM66hyejcaPp/lg1aiMZu7k+Ql6ISyeZa fHPvUyJwzQoL6fGC9TGmcHDBzq1J8bCMvEYa9v0MQTlUofjz6zjbr2KRNG3u/57O xT6ny1MhpBegLgjZRraM7ULmAvqW5jwF9UVT+FyvKaqjJmPqMmEVy3MfaZ0t1dUe t9u/z+0zbC6YqRprO5mOy63zoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFErwQ0Fu 13DhpwWEh0hWKCUvIQ2lMB8GA1UdIwQYMBaAFKl+qk1vFVuNJ8QK6OMn2bpSw0tC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjRBRi9DQzdCMjU1QURD QTkxMUVDOTRFM0UwMjlDNEY5QUUwMi9xWDZxVFc4Vlc0MG54QXJvNHlmWnVsTERT MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FYNnFUVzhWVzQwbnhBcm80eWZadWxMRFMwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjRBRi9DQzdCMjU1QURDQTkxMUVDOTRFM0UwMjlDNEY5QUUwMi9xWDZxVFc4Vlc0 MG54QXJvNHlmWnVsTERTMEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsM00w4yFgu5aPbYsFbz498Y2Nye42ebzYEHbI/V3MxPX7QQ+QOLwOINLuhmj z7p7ovmDlZFSDn2JAcWHhA7hiqsL7IThqtmiZRNp9vM3W1k55osAjaynnEr1Ece2 CpXvqHxSZTOTZmRhwviS5NTqfwUr8kER/+Y6EW6/sXC4YfWhqhyxritdYBOnVPm5 Pe2kOXB9C+DcPnJnbOVwqEeNfly2ZdhgEJFZb8xqnX9ApHtKmJ4aYebI87MuFdpr oouyUGl/d/cf0y4Zf0lC4nNPrQ+jf+8KeFccFH+bO6qYOk6YdfunIy6orLtD989k 8z/RpgWPH75ki3XjaRdRMTxXDA== -----END CERTIFICATE-----Generated at Fri Apr 17 14:07:02 2026 by rpki-client