$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.mft File: QSPpAOai7I_ptdcDt5KA7yFAfIE.mft (raw, json) Hash identifier: li+Rq1/OplbJ5IsdmCJML3HO5Gw1DYxu7r2tPo36cRg= Subject key identifier: 1A:03:39:0B:91:FF:4D:E7:8D:CB:40:36:88:2D:B9:E8:9B:BA:CB:7B Authority key identifier: 41:23:E9:00:E6:A2:EC:8F:E9:B5:D7:03:B7:92:80:EF:21:40:7C:81 Certificate issuer: /CN=A91F3B2E/serialNumber=4123E900E6A2EC8FE9B5D703B79280EF21407C81 Certificate serial: 026E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSPpAOai7I_ptdcDt5KA7yFAfIE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.mft Manifest number: 0254 Signing time: Fri 17 Apr 2026 02:19:28 +0000 Manifest this update: Fri 17 Apr 2026 02:19:28 +0000 Manifest next update: Fri 24 Apr 2026 02:19:28 +0000 Files and hashes: 1: QSPpAOai7I_ptdcDt5KA7yFAfIE.crl (hash: y79nafHkKuwht4E8ek6E5l3znxyawsByygNlMHlBJvc=) 2: 2B8EF9AA083911F0A051CE72C4F9AE02.roa (hash: L0al7k74eWiWJ3CDPsdhftXr9mpgHroxqH7auSGrGNY=) 3: A91AF6A8CE7811EF89FA3944C4F9AE02.roa (hash: /XptYTwhi0uVDIVVDFau7tevix2taawngS3ewC7+5mA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.crl rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSPpAOai7I_ptdcDt5KA7yFAfIE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:19:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 622 (0x26e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3B2E, serialNumber=4123E900E6A2EC8FE9B5D703B79280EF21407C81 Validity Not Before: Apr 17 02:19:28 2026 GMT Not After : Apr 24 02:19:28 2026 GMT Subject: CN=69e198b0-1284 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e1:0d:af:da:ee:e0:c6:c5:00:f9:57:a9:65: 0a:71:76:82:1d:41:e6:9f:1b:6f:53:0d:74:52:c0: 27:d0:21:f8:94:8d:5e:22:2b:4c:53:99:2b:2d:51: 1f:50:ba:12:f3:50:96:38:17:08:fd:13:7b:33:8a: 4b:ae:6c:86:c8:f4:8c:da:fd:13:75:51:c8:f8:76: 04:ce:6c:41:c7:9e:35:9b:49:54:a1:df:39:3a:9b: 58:44:6e:5c:09:ff:41:90:46:a0:6e:ce:15:dd:2f: 83:18:5d:4a:01:41:c6:3e:19:2e:b5:f0:78:de:f0: d3:97:06:25:90:ed:04:65:c7:02:0b:2b:3d:bf:7a: 7e:09:b2:82:58:1b:32:ef:1f:fb:c9:b1:bd:27:5a: f5:6e:48:3b:33:03:42:d4:0f:b2:e7:2b:57:e1:0e: 6f:82:6d:8f:c1:f6:e6:ae:36:f0:d3:e0:60:54:f0: 82:10:cf:ca:dc:29:3c:87:cb:69:6e:da:bf:90:2b: 2a:6c:ed:44:4c:f3:59:96:f8:fb:0a:a1:85:fb:9d: 5d:29:c7:ef:44:4d:cd:43:3f:a7:a4:cf:8f:e7:7e: 0f:d2:32:c4:db:54:ef:20:e5:bf:3e:06:d7:43:90: a9:a0:ac:64:a6:81:fb:6b:22:bc:e3:3e:75:97:ab: ec:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:03:39:0B:91:FF:4D:E7:8D:CB:40:36:88:2D:B9:E8:9B:BA:CB:7B X509v3 Authority Key Identifier: keyid:41:23:E9:00:E6:A2:EC:8F:E9:B5:D7:03:B7:92:80:EF:21:40:7C:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSPpAOai7I_ptdcDt5KA7yFAfIE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:ec:95:74:5b:6a:56:5f:c0:d6:db:9d:83:b1:e5:89:a0:04: 0c:2e:6e:df:dd:77:fc:0b:40:ff:bb:c9:8e:43:2d:e8:de:f4: eb:25:e5:9f:82:45:47:13:1e:b5:93:ca:07:f7:3d:d9:01:cf: 89:05:03:d1:31:11:10:b8:4a:e1:84:5a:50:24:af:a0:da:d8: f5:8b:1a:0c:9b:c9:fb:77:25:d6:6c:37:a4:5d:38:72:c6:23: df:d0:eb:6b:b9:75:bc:4d:99:85:62:f9:ad:ce:47:ea:c8:11: 97:05:70:1a:cc:a7:ed:73:15:77:0c:5a:86:2a:56:1d:6f:e2: 8e:c1:24:1c:8c:8d:5c:39:be:e5:58:8d:f2:b6:13:e7:bd:45: c3:43:72:51:cc:f2:1f:53:de:c6:92:28:6e:f4:03:bd:4d:7e: 8c:17:2c:75:dc:31:6a:3c:81:7b:c1:c5:3e:10:1b:c8:a3:ce: a1:d3:4a:d4:19:0d:cf:0f:12:69:e3:22:bb:ef:e4:4c:9f:80: 9f:1d:1c:5f:2b:d7:c7:14:eb:d6:16:e0:90:fa:5a:a2:1a:92: c9:82:c4:0a:e9:00:fb:e7:63:13:e0:dd:2c:82:3d:f7:26:a0: 62:a6:e3:d2:1e:33:da:e8:4b:36:7c:ee:f5:93:2c:31:00:d9: 2d:85:b6:86 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAm4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNCMkUxMTAvBgNVBAUTKDQxMjNFOTAwRTZBMkVDOEZFOUI1RDcwM0I3OTI4MEVG MjE0MDdDODEwHhcNMjYwNDE3MDIxOTI4WhcNMjYwNDI0MDIxOTI4WjAYMRYwFAYD VQQDEw02OWUxOThiMC0xMjg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAveENr9ru4MbFAPlXqWUKcXaCHUHmnxtvUw10UsAn0CH4lI1eIitMU5krLVEf ULoS81CWOBcI/RN7M4pLrmyGyPSM2v0TdVHI+HYEzmxBx541m0lUod85OptYRG5c Cf9BkEagbs4V3S+DGF1KAUHGPhkutfB43vDTlwYlkO0EZccCCys9v3p+CbKCWBsy 7x/7ybG9J1r1bkg7MwNC1A+y5ytX4Q5vgm2Pwfbmrjbw0+BgVPCCEM/K3Ck8h8tp btq/kCsqbO1ETPNZlvj7CqGF+51dKcfvRE3NQz+npM+P534P0jLE21TvIOW/PgbX Q5CpoKxkpoH7ayK84z51l6vsaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBoDOQuR /03njctANogtueibust7MB8GA1UdIwQYMBaAFEEj6QDmouyP6bXXA7eSgO8hQHyB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0IyRS8wRjU1QzY5NkQ2 N0QxMUVEODZEMzM3NTBDNEY5QUUwMi9RU1BwQU9haTdJX3B0ZGNEdDVLQTd5RkFm SUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FTUHBBT2FpN0lfcHRkY0R0NUtBN3lGQWZJRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG M0IyRS8wRjU1QzY5NkQ2N0QxMUVEODZEMzM3NTBDNEY5QUUwMi9RU1BwQU9haTdJ X3B0ZGNEdDVLQTd5RkFmSUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAf+yVdFtqVl/A1tudg7HliaAEDC5u3913/AtA/7vJjkMt6N706yXln4JFRxMe tZPKB/c92QHPiQUD0TERELhK4YRaUCSvoNrY9YsaDJvJ+3cl1mw3pF04csYj39Dr a7l1vE2ZhWL5rc5H6sgRlwVwGsyn7XMVdwxahipWHW/ijsEkHIyNXDm+5ViN8rYT 571Fw0NyUczyH1PexpIobvQDvU1+jBcsddwxajyBe8HFPhAbyKPOodNK1BkNzw8S aeMiu+/kTJ+Anx0cXyvXxxTr1hbgkPpaohqSyYLECukA++djE+DdLII99yagYqbj 0h4z2uhLNnzu9ZMsMQDZLYW2hg== -----END CERTIFICATE-----Generated at Fri Apr 17 12:32:54 2026 by rpki-client