$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft File: QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft (raw, json) Hash identifier: 069H/TSDd/zXJIOW9RKjLzz4fpMMDB23fabwf347N2c= Subject key identifier: 3F:3D:F3:D4:89:EF:A2:87:A3:24:B2:F0:E7:02:D0:C2:C8:11:05:59 Authority key identifier: 42:67:CF:5D:03:00:4A:8F:EF:DF:21:39:5D:0F:E8:24:54:8B:13:C1 Certificate issuer: /CN=A91FCEB1/serialNumber=4267CF5D03004A8FEFDF21395D0FE824548B13C1 Certificate serial: 2133 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmfPXQMASo_v3yE5XQ_oJFSLE8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft Manifest number: 28DF Signing time: Sat 18 Apr 2026 15:52:02 +0000 Manifest this update: Sat 18 Apr 2026 15:52:02 +0000 Manifest next update: Sat 25 Apr 2026 15:52:02 +0000 Files and hashes: 1: QmfPXQMASo_v3yE5XQ_oJFSLE8E.crl (hash: bPj2xc4WbFmOyn2QoZpYizv4yin7M4SwdyG8AJBHcgo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.crl rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmfPXQMASo_v3yE5XQ_oJFSLE8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 15:52:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8499 (0x2133) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCEB1, serialNumber=4267CF5D03004A8FEFDF21395D0FE824548B13C1 Validity Not Before: Apr 18 15:52:02 2026 GMT Not After : Apr 25 15:52:02 2026 GMT Subject: CN=69e3a8a2-5ce1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d0:be:e9:bf:8b:b1:f1:e8:65:91:61:27:db: 70:79:f6:ef:23:ec:9e:30:44:e6:2a:14:56:06:b3: f1:c8:45:79:9b:86:f5:21:f5:ee:a0:61:4a:76:02: 12:8c:8b:47:3d:ce:c6:6e:f6:65:95:a8:28:db:52: 0a:68:8a:23:1a:5a:f4:99:69:f1:d1:12:19:08:54: 1c:03:e0:e6:d6:70:19:04:98:d2:ea:26:99:9c:3a: 07:ed:69:f3:4e:d8:90:bd:75:4f:73:62:28:73:d3: 3c:20:07:5d:4a:f3:28:57:fc:34:e2:b7:52:3f:63: be:35:77:05:4b:29:63:a1:3f:e2:cc:5a:3c:db:dd: 89:6c:03:1f:37:b3:59:ab:51:d2:34:1d:e6:5a:71: b6:8b:95:2f:63:d5:21:fa:d2:76:53:cb:c2:3d:70: 66:2a:c6:b9:99:3a:03:d7:48:5a:8c:a6:ad:4b:d7: d6:a9:fe:17:2d:c8:5b:66:bc:49:1c:ec:eb:32:4d: b7:ac:23:8a:f9:5a:9b:ea:06:48:ef:d7:64:c7:33: 7e:5d:a6:4e:91:61:0a:03:06:d7:a9:71:30:5d:bb: 90:9b:4f:9e:2a:00:ff:1a:2a:c3:37:77:75:f8:01: 18:2d:38:56:c2:ef:22:2a:5b:ad:5a:13:f4:fe:0e: 19:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:3D:F3:D4:89:EF:A2:87:A3:24:B2:F0:E7:02:D0:C2:C8:11:05:59 X509v3 Authority Key Identifier: keyid:42:67:CF:5D:03:00:4A:8F:EF:DF:21:39:5D:0F:E8:24:54:8B:13:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmfPXQMASo_v3yE5XQ_oJFSLE8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:75:23:bf:85:e7:b3:03:09:5b:3c:b9:ea:22:97:b3:fc:08: db:0f:19:18:c3:04:ae:bb:20:e0:3d:28:98:51:5c:c3:51:e1: 07:b1:e3:99:d7:1a:7e:df:c8:67:cd:a0:6a:e6:08:2b:66:7e: 69:1c:87:49:2d:a7:38:8f:79:60:f7:d6:e5:1f:5c:22:8b:09: 54:0d:12:a4:62:c9:c1:0d:18:92:18:b7:05:90:73:62:74:ce: e4:cf:a9:3d:f4:5a:9d:7b:6b:2e:23:77:cc:8a:9f:be:8e:95: b4:56:d1:88:a5:f1:82:63:10:df:52:9d:40:85:21:b8:49:a6: 05:7d:7a:fd:e0:f5:02:53:17:08:98:1c:26:1e:03:3a:56:26: 34:ba:b8:68:45:39:02:50:c6:29:a5:95:72:48:c9:63:2f:4c: 02:48:a9:9f:a6:0a:ba:62:07:b7:bc:14:7d:91:34:30:8a:cb: 8c:bd:f2:98:8a:cb:6d:a1:d6:8d:fc:19:70:f9:45:74:ae:e2: f1:51:60:f4:04:9d:7a:94:ab:9f:9f:7f:7e:2c:aa:42:bd:8b: ac:66:ae:8d:34:98:05:bf:03:d2:11:21:64:50:5a:6d:fe:1e: fc:c9:0f:b9:0e:3b:b6:1a:23:40:f1:19:6c:6f:09:31:47:e8: 78:04:3c:84 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICITMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNFQjExMTAvBgNVBAUTKDQyNjdDRjVEMDMwMDRBOEZFRkRGMjEzOTVEMEZFODI0 NTQ4QjEzQzEwHhcNMjYwNDE4MTU1MjAyWhcNMjYwNDI1MTU1MjAyWjAYMRYwFAYD VQQDEw02OWUzYThhMi01Y2UxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsdC+6b+LsfHoZZFhJ9twefbvI+yeMETmKhRWBrPxyEV5m4b1IfXuoGFKdgIS jItHPc7GbvZllago21IKaIojGlr0mWnx0RIZCFQcA+Dm1nAZBJjS6iaZnDoH7Wnz TtiQvXVPc2Ioc9M8IAddSvMoV/w04rdSP2O+NXcFSyljoT/izFo8292JbAMfN7NZ q1HSNB3mWnG2i5UvY9Uh+tJ2U8vCPXBmKsa5mToD10hajKatS9fWqf4XLchbZrxJ HOzrMk23rCOK+Vqb6gZI79dkxzN+XaZOkWEKAwbXqXEwXbuQm0+eKgD/GirDN3d1 +AEYLThWwu8iKlutWhP0/g4ZiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD8989SJ 76KHoySy8OcC0MLIEQVZMB8GA1UdIwQYMBaAFEJnz10DAEqP798hOV0P6CRUixPB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0VCMS9FRkI4NzVDODA4 QzkxMUU2OEM3Nzg4NzhDNEY5QUUwMi9RbWZQWFFNQVNvX3YzeUU1WFFfb0pGU0xF OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FtZlBYUU1BU29fdjN5RTVYUV9vSkZTTEU4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0VCMS9FRkI4NzVDODA4QzkxMUU2OEM3Nzg4NzhDNEY5QUUwMi9RbWZQWFFNQVNv X3YzeUU1WFFfb0pGU0xFOEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARHUjv4XnswMJWzy56iKXs/wI2w8ZGMMErrsg4D0omFFcw1HhB7Hjmdcaft/I Z82gauYIK2Z+aRyHSS2nOI95YPfW5R9cIosJVA0SpGLJwQ0Ykhi3BZBzYnTO5M+p PfRanXtrLiN3zIqfvo6VtFbRiKXxgmMQ31KdQIUhuEmmBX16/eD1AlMXCJgcJh4D OlYmNLq4aEU5AlDGKaWVckjJYy9MAkipn6YKumIHt7wUfZE0MIrLjL3ymIrLbaHW jfwZcPlFdK7i8VFg9ASdepSrn59/fiyqQr2LrGaujTSYBb8D0hEhZFBabf4e/MkP uQ47thojQPEZbG8JMUfoeAQ8hA== -----END CERTIFICATE-----Generated at Sun Apr 19 15:31:09 2026 by rpki-client