$ rpki-client -vvf rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/Q3_zTue8cFDJyEiGqpTOjPUMJPk.mft File: Q3_zTue8cFDJyEiGqpTOjPUMJPk.mft (raw, json) Hash identifier: +z6jDzF38mw6YpFrt+r+45pK0SX0u71uhuS9pH/Hg5I= Subject key identifier: 24:BE:98:01:C8:23:98:C8:E6:F2:8B:17:4D:C0:9C:14:9B:E1:C9:E8 Authority key identifier: 43:7F:F3:4E:E7:BC:70:50:C9:C8:48:86:AA:94:CE:8C:F5:0C:24:F9 Certificate issuer: /CN=A91580A1/serialNumber=437FF34EE7BC7050C9C84886AA94CE8CF50C24F9 Certificate serial: 08B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q3_zTue8cFDJyEiGqpTOjPUMJPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/Q3_zTue8cFDJyEiGqpTOjPUMJPk.mft Manifest number: 1475 Signing time: Thu 26 Mar 2026 18:48:17 +0000 Manifest this update: Thu 26 Mar 2026 18:48:17 +0000 Manifest next update: Thu 02 Apr 2026 18:48:17 +0000 Files and hashes: 1: Q3_zTue8cFDJyEiGqpTOjPUMJPk.crl (hash: gSr1T2Q+5wQHjqPoPRZ7lwK2GbUaGFCg13Ltd0wJK+g=) 2: B65A4FACE18C11ECB1697F55C4F9AE02.roa (hash: vDl44lVEn9bjZ8m5CRKO3O7LYYTN1Ha2YprEKZ3AYuY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/Q3_zTue8cFDJyEiGqpTOjPUMJPk.crl rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/Q3_zTue8cFDJyEiGqpTOjPUMJPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q3_zTue8cFDJyEiGqpTOjPUMJPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 18:48:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2226 (0x8b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91580A1, serialNumber=437FF34EE7BC7050C9C84886AA94CE8CF50C24F9 Validity Not Before: Mar 26 18:48:17 2026 GMT Not After : Apr 2 18:48:17 2026 GMT Subject: CN=69c57f71-cf07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:bb:04:96:d5:c8:1b:93:cc:50:ce:f1:97:c2: bb:5a:07:f2:df:24:90:db:18:fd:9d:b3:30:1d:12: 92:18:4e:2f:c8:89:9e:6b:09:2a:d9:74:a4:ff:f9: e5:3c:0c:62:e2:36:33:54:68:72:ac:8b:a1:84:3d: f6:c6:05:82:6a:8d:1d:89:23:2b:00:49:f0:d4:f6: 94:c0:03:4f:24:86:58:fa:12:55:7a:7d:5a:6c:72: 1e:fd:6b:be:8a:b8:59:2b:86:2f:16:8f:6c:da:6e: 05:49:79:1d:74:92:fd:78:95:a2:9a:3a:9b:33:b8: 23:e6:07:b3:bd:32:b4:11:b5:c6:a6:ea:9e:31:f5: be:78:57:13:63:f0:6b:93:13:69:6b:71:3d:f0:e6: 15:30:20:dc:b3:d4:d1:94:d5:d5:69:3d:93:37:03: 6a:cf:aa:46:80:81:c0:e6:75:7f:0c:26:79:19:e0: e4:36:23:00:a1:6c:88:ef:7a:e1:bb:91:df:59:47: 21:c7:e7:12:fd:4e:83:21:b1:d0:b8:e3:a9:0e:99: cb:e7:93:df:08:3a:94:1c:71:70:38:22:70:6b:ff: ca:cc:22:fa:32:3d:09:50:88:4e:a0:63:b9:76:af: 44:8b:96:7a:ca:8d:13:6e:8a:8b:ec:a6:71:17:4d: b0:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:BE:98:01:C8:23:98:C8:E6:F2:8B:17:4D:C0:9C:14:9B:E1:C9:E8 X509v3 Authority Key Identifier: keyid:43:7F:F3:4E:E7:BC:70:50:C9:C8:48:86:AA:94:CE:8C:F5:0C:24:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/Q3_zTue8cFDJyEiGqpTOjPUMJPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q3_zTue8cFDJyEiGqpTOjPUMJPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/Q3_zTue8cFDJyEiGqpTOjPUMJPk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:a8:39:e8:ad:1b:ad:d4:39:df:9a:d2:5f:d1:d9:ae:c6:5a: 3e:98:6f:ac:93:ea:f2:2f:28:ea:56:67:b1:b2:d3:34:c4:b2: df:18:d9:78:49:b4:59:d3:5f:19:10:e2:27:25:0c:27:c7:22: 89:9c:5b:0e:02:a0:7a:29:23:e3:7a:e1:4d:0c:d4:f4:c2:bd: 7c:a9:35:bf:70:a6:4e:64:30:93:f3:e9:26:c3:a7:52:0e:23: 25:ad:fb:77:ee:bc:d5:d8:e8:4a:86:25:ce:10:f4:45:16:65: bc:19:c9:e2:3f:44:40:28:16:15:cf:b1:ee:c1:fd:20:1a:34: de:0d:0b:c6:e5:35:8d:36:88:a6:fd:bb:81:98:99:4c:70:06: d1:9b:23:b9:90:bb:48:de:0d:05:78:ad:58:a5:ab:47:db:7c: d9:4b:b6:9b:c5:eb:32:7b:e8:a9:81:9b:b3:5b:ad:77:ee:fb: 89:7b:5f:25:9a:18:a9:3b:02:ca:74:2a:60:0e:1d:d2:76:6b: c1:62:26:97:a4:8b:6b:97:c3:f5:7c:3d:45:34:e5:ed:da:c0: 94:da:5d:6f:8d:4d:83:61:42:f1:38:42:04:fe:c0:94:9b:ee: 0d:18:70:f5:a2:e9:05:01:44:9f:98:db:e9:12:eb:0b:0a:3c: 51:88:77:c9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCLIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgwQTExMTAvBgNVBAUTKDQzN0ZGMzRFRTdCQzcwNTBDOUM4NDg4NkFBOTRDRThD RjUwQzI0RjkwHhcNMjYwMzI2MTg0ODE3WhcNMjYwNDAyMTg0ODE3WjAYMRYwFAYD VQQDEw02OWM1N2Y3MS1jZjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6bsEltXIG5PMUM7xl8K7Wgfy3ySQ2xj9nbMwHRKSGE4vyImeawkq2XSk//nl PAxi4jYzVGhyrIuhhD32xgWCao0diSMrAEnw1PaUwANPJIZY+hJVen1abHIe/Wu+ irhZK4YvFo9s2m4FSXkddJL9eJWimjqbM7gj5gezvTK0EbXGpuqeMfW+eFcTY/Br kxNpa3E98OYVMCDcs9TRlNXVaT2TNwNqz6pGgIHA5nV/DCZ5GeDkNiMAoWyI73rh u5HfWUchx+cS/U6DIbHQuOOpDpnL55PfCDqUHHFwOCJwa//KzCL6Mj0JUIhOoGO5 dq9Ei5Z6yo0TboqL7KZxF02wgQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCS+mAHI I5jI5vKLF03AnBSb4cnoMB8GA1UdIwQYMBaAFEN/807nvHBQychIhqqUzoz1DCT5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODBBMS85MjU2MEE2QTM3 NEQxMUVBQTBBM0JFNTVDNEY5QUUwMi9RM196VHVlOGNGREp5RWlHcXBUT2pQVU1K UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1EzX3pUdWU4Y0ZESnlFaUdxcFRPalBVTUpQay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODBBMS85MjU2MEE2QTM3NEQxMUVBQTBBM0JFNTVDNEY5QUUwMi9RM196VHVlOGNG REp5RWlHcXBUT2pQVU1KUGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJKg56K0brdQ535rSX9HZrsZaPphvrJPq8i8o6lZnsbLTNMSy3xjZeEm0WdNf GRDiJyUMJ8ciiZxbDgKgeikj43rhTQzU9MK9fKk1v3CmTmQwk/PpJsOnUg4jJa37 d+681djoSoYlzhD0RRZlvBnJ4j9EQCgWFc+x7sH9IBo03g0LxuU1jTaIpv27gZiZ THAG0ZsjuZC7SN4NBXitWKWrR9t82Uu2m8XrMnvoqYGbs1utd+77iXtfJZoYqTsC ynQqYA4d0nZrwWIml6SLa5fD9Xw9RTTl7drAlNpdb41Ng2FC8ThCBP7AlJvuDRhw 9aLpBQFEn5jb6RLrCwo8UYh3yQ== -----END CERTIFICATE-----Generated at Sat Mar 28 12:21:09 2026 by rpki-client