$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft File: qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft (raw, json) Hash identifier: mtOjKVrLhpPpM4REJPUIXP/weO9fmiLQQGbgGCiqVuI= Subject key identifier: B2:54:F1:B6:59:D9:21:15:1C:42:A9:C1:B0:D6:77:0F:B3:99:97:95 Authority key identifier: A8:41:BD:C5:AF:A9:E9:A0:A9:5B:88:54:61:13:CA:74:5E:E9:63:B5 Certificate issuer: /CN=A91F5216/serialNumber=A841BDC5AFA9E9A0A95B88546113CA745EE963B5 Certificate serial: 0286 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qEG9xa-p6aCpW4hUYRPKdF7pY7U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft Manifest number: 027F Signing time: Fri 17 Apr 2026 01:40:23 +0000 Manifest this update: Fri 17 Apr 2026 01:40:23 +0000 Manifest next update: Fri 24 Apr 2026 01:40:23 +0000 Files and hashes: 1: qEG9xa-p6aCpW4hUYRPKdF7pY7U.crl (hash: FP9WE6O5DgNOZKvTQuWPevSws1xHLmD/7K5H0Ww/Lto=) 2: CDA9BB546E0C11ED8BF41547C4F9AE02.roa (hash: iidP4Us9GgMi0GERSJV3IXDzaUrLqtbT5ZMr2dmP2mc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.crl rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qEG9xa-p6aCpW4hUYRPKdF7pY7U.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:40:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 646 (0x286) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5216, serialNumber=A841BDC5AFA9E9A0A95B88546113CA745EE963B5 Validity Not Before: Apr 17 01:40:23 2026 GMT Not After : Apr 24 01:40:23 2026 GMT Subject: CN=69e18f87-429f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:59:11:0e:a2:d2:c5:51:f3:3b:6e:99:45:f6: bd:3f:bf:76:82:04:c1:c1:df:1b:37:cc:f7:07:44: 32:66:46:da:f9:08:b4:be:69:65:90:55:f4:0a:65: 3d:28:91:25:70:0d:9e:8c:fc:1b:fb:e6:4c:d2:24: e6:30:27:fa:b6:61:dc:3e:e3:d1:de:e7:52:79:50: f7:9c:b4:4b:66:d2:50:9f:ed:1b:03:5c:30:3b:59: 10:0a:9d:e3:42:02:12:9c:58:fd:f9:05:28:af:05: ba:f4:f1:18:9c:6c:bb:0b:7c:7a:33:6d:14:d7:12: 8c:6c:de:21:8a:89:fb:c2:3a:ae:69:54:13:ef:58: 88:08:8a:a2:81:32:ae:b2:6d:e5:10:ca:94:f1:dd: 77:71:cd:27:e2:d0:fc:76:15:7f:3c:7f:ba:44:c0: 81:76:dd:26:57:1d:c9:02:9a:63:08:bf:84:cc:e8: d4:09:27:52:08:b3:f0:5f:25:01:e1:6f:e7:1f:3e: 21:2c:b4:d5:0b:f5:76:8a:c5:35:7d:65:d4:5b:5c: 80:b3:db:5f:c4:b2:9d:8a:82:d6:ce:5a:19:4a:a1: a0:79:bf:b2:0f:74:bf:61:cd:40:fe:f3:22:bd:11: ff:34:e2:da:37:20:f7:8e:c6:2b:0c:b0:da:df:c3: c4:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:54:F1:B6:59:D9:21:15:1C:42:A9:C1:B0:D6:77:0F:B3:99:97:95 X509v3 Authority Key Identifier: keyid:A8:41:BD:C5:AF:A9:E9:A0:A9:5B:88:54:61:13:CA:74:5E:E9:63:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qEG9xa-p6aCpW4hUYRPKdF7pY7U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:c0:3d:04:85:ce:3f:99:c6:1f:97:dd:ff:3a:47:51:0d:5c: 0a:72:79:cb:04:35:f5:13:ee:78:d0:76:09:7a:56:8d:43:86: fb:11:28:d4:0c:d3:23:33:31:67:0f:80:55:9c:bb:cd:eb:fd: 83:a2:57:2f:66:e2:45:20:04:ef:56:63:a6:22:d8:42:24:87: 46:82:ac:93:5a:89:ba:3b:29:c4:7a:3b:ab:cb:41:eb:95:d4: da:84:90:2a:0e:3d:9b:4c:57:61:3d:f8:5d:e2:d2:93:1b:e4: 67:35:fb:c3:5e:35:6d:0d:7b:42:22:9b:5a:1c:28:11:7e:91: 2e:97:32:d3:e8:28:64:d4:45:1d:69:70:42:4d:62:ce:7f:75: 0a:71:b9:c0:16:4b:5e:39:94:1b:c8:34:df:aa:d8:ed:db:bf: 29:52:d3:d1:14:9c:87:d1:fd:3c:70:3c:04:2d:a2:a4:7a:f5: b4:29:3a:8a:c6:a6:b0:62:5c:37:8e:18:66:27:f3:8b:06:ab: a5:7c:7d:f8:5e:db:c1:d7:72:5d:77:ed:2b:4f:96:0a:a5:80: 98:42:78:e2:ce:fa:26:e4:95:fa:91:25:15:24:05:76:45:e2: d0:40:be:38:b4:53:8a:46:4b:e3:9a:b3:c5:7a:6c:14:95:a3: 55:5a:62:1f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAoYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUyMTYxMTAvBgNVBAUTKEE4NDFCREM1QUZBOUU5QTBBOTVCODg1NDYxMTNDQTc0 NUVFOTYzQjUwHhcNMjYwNDE3MDE0MDIzWhcNMjYwNDI0MDE0MDIzWjAYMRYwFAYD VQQDEw02OWUxOGY4Ny00MjlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmlkRDqLSxVHzO26ZRfa9P792ggTBwd8bN8z3B0QyZkba+Qi0vmllkFX0CmU9 KJElcA2ejPwb++ZM0iTmMCf6tmHcPuPR3udSeVD3nLRLZtJQn+0bA1wwO1kQCp3j QgISnFj9+QUorwW69PEYnGy7C3x6M20U1xKMbN4hion7wjquaVQT71iICIqigTKu sm3lEMqU8d13cc0n4tD8dhV/PH+6RMCBdt0mVx3JAppjCL+EzOjUCSdSCLPwXyUB 4W/nHz4hLLTVC/V2isU1fWXUW1yAs9tfxLKdioLWzloZSqGgeb+yD3S/Yc1A/vMi vRH/NOLaNyD3jsYrDLDa38PEAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLJU8bZZ 2SEVHEKpwbDWdw+zmZeVMB8GA1UdIwQYMBaAFKhBvcWvqemgqVuIVGETynRe6WO1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTIxNi81Q0Q1RTczMDZF MDgxMUVEQkVFRDYyODRDNEY5QUUwMi9xRUc5eGEtcDZhQ3BXNGhVWVJQS2RGN3BZ N1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3FFRzl4YS1wNmFDcFc0aFVZUlBLZEY3cFk3VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTIxNi81Q0Q1RTczMDZFMDgxMUVEQkVFRDYyODRDNEY5QUUwMi9xRUc5eGEtcDZh Q3BXNGhVWVJQS2RGN3BZN1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHcA9BIXOP5nGH5fd/zpHUQ1cCnJ5ywQ19RPueNB2CXpWjUOG+xEo1AzTIzMx Zw+AVZy7zev9g6JXL2biRSAE71ZjpiLYQiSHRoKsk1qJujspxHo7q8tB65XU2oSQ Kg49m0xXYT34XeLSkxvkZzX7w141bQ17QiKbWhwoEX6RLpcy0+goZNRFHWlwQk1i zn91CnG5wBZLXjmUG8g036rY7du/KVLT0RSch9H9PHA8BC2ipHr1tCk6isamsGJc N44YZifziwarpXx9+F7bwddyXXftK0+WCqWAmEJ44s76JuSV+pElFSQFdkXi0EC+ OLRTikZL45qzxXpsFJWjVVpiHw== -----END CERTIFICATE-----Generated at Fri Apr 17 14:07:29 2026 by rpki-client