$ rpki-client -vvf rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft File: qE54NmnC-ZeE80T80yP8-ZHMQPs.mft (raw, json) Hash identifier: lZAKruYpeKdZaL2jc+hx0yg2LsBxEYnB/c0WfGC3tUg= Subject key identifier: 25:89:1D:32:31:23:AF:AB:2D:A5:27:A1:85:A9:AE:45:3D:64:43:4F Authority key identifier: A8:4E:78:36:69:C2:F9:97:84:F3:44:FC:D3:23:FC:F9:91:CC:40:FB Certificate issuer: /CN=A91604AC/serialNumber=A84E783669C2F99784F344FCD323FCF991CC40FB Certificate serial: 029C Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft Manifest number: 0291 Signing time: Tue 24 Mar 2026 21:43:43 +0000 Manifest this update: Tue 24 Mar 2026 21:43:43 +0000 Manifest next update: Tue 31 Mar 2026 21:43:43 +0000 Files and hashes: 1: qE54NmnC-ZeE80T80yP8-ZHMQPs.crl (hash: cqmHvbWRrNREmsmYCFsGXAqMAwmarxgjTS+toKnEzkc=) 2: 348854286B8F11ED9B07DD15C4F9AE02.roa (hash: G7jsBk4fvcjh37nS5qZqNh5Tij0qnfSlco4ujTa7Y4Y=) 3: 11DD43BA80E411ED993FD824C4F9AE02.roa (hash: 5GcZNiQopX8Mo16CBA648+0uWjV9xMYra66zDK9RZXw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.crl rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 21:43:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 668 (0x29c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91604AC, serialNumber=A84E783669C2F99784F344FCD323FCF991CC40FB Validity Not Before: Mar 24 21:43:43 2026 GMT Not After : Mar 31 21:43:43 2026 GMT Subject: CN=69c3058f-63bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:82:bc:30:5f:5f:8c:50:87:95:23:a6:49:64: ad:27:74:fd:6d:d7:b0:8b:2d:b5:42:89:05:3b:ba: 9c:7d:10:33:8c:4d:e6:c1:22:e2:05:31:cb:bf:ab: 98:02:23:a9:8a:e5:9f:49:73:12:ce:04:03:bc:98: 6d:93:1f:01:36:66:19:28:53:56:22:fe:bd:63:6c: ad:7e:07:0a:73:33:e8:10:a4:4b:0d:6e:8c:d8:ce: 0a:08:7d:a6:b2:84:ec:ba:ac:71:a0:e7:36:c4:47: 8c:c8:a0:78:98:1b:86:54:bb:aa:ef:2e:38:d3:e6: 02:c5:cd:1d:01:fb:d8:bf:b0:e4:48:8d:41:81:7a: 26:04:b7:b1:b3:4e:54:10:1c:ee:51:35:a6:95:54: 63:f9:3f:bf:1b:2f:d0:78:1b:5e:eb:56:d7:4d:1d: 1a:c7:59:82:24:d7:e0:b0:24:0b:87:b4:dd:70:7b: 40:c9:4e:fd:30:ec:ba:28:dd:39:7a:11:7c:95:c1: 7a:82:75:28:41:cd:d7:b6:da:61:bd:70:ab:1b:ec: 03:40:1d:f0:f5:1b:5e:16:42:d0:48:0d:38:de:8b: 8e:4c:c3:bd:bf:02:25:49:34:7f:84:a6:64:ee:2f: c3:00:df:27:fa:32:7d:9c:65:07:ae:ed:b3:9d:20: 24:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:89:1D:32:31:23:AF:AB:2D:A5:27:A1:85:A9:AE:45:3D:64:43:4F X509v3 Authority Key Identifier: keyid:A8:4E:78:36:69:C2:F9:97:84:F3:44:FC:D3:23:FC:F9:91:CC:40:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:d1:a4:f0:cb:e2:4b:0c:53:59:eb:d8:d9:c7:cb:a1:53:2e: 00:1b:01:23:9d:85:7e:1a:29:a9:6a:38:df:4f:1f:47:fe:db: f4:be:b7:67:4c:ef:22:21:cd:0e:a1:4f:c8:50:30:69:81:49: f4:1b:40:27:b7:74:16:6b:01:a6:c2:0a:46:72:37:33:7e:51: f8:98:9e:db:73:42:8d:20:8f:58:70:43:64:3f:16:b5:b6:f4: 06:70:39:33:31:8c:29:f9:f9:5d:60:51:d3:4a:ab:ec:40:6d: f5:09:b4:b9:26:88:5a:1b:0f:36:bf:a0:4b:9a:3c:72:02:fb: 4d:44:98:27:55:07:c2:75:c9:41:72:93:83:7d:af:4e:f6:bd: ed:13:d4:8b:85:07:a7:eb:4c:72:1b:47:f1:2f:30:45:f0:16: 47:a8:69:40:8a:43:fb:57:25:84:fa:05:f0:d0:25:2e:e6:19: 08:a3:87:a1:6e:24:67:e0:b0:17:91:41:54:25:f9:61:eb:9e: 9e:70:3e:42:49:96:78:18:b9:25:bf:d7:fd:2c:ee:c6:b4:b7: 15:bc:12:08:fd:8f:35:17:6e:64:b0:46:cd:9c:c2:c6:26:7c: 96:a8:33:ae:14:69:2f:0a:79:92:90:b1:78:54:fc:90:1b:05: bc:9c:3a:a7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA0QUMxMTAvBgNVBAUTKEE4NEU3ODM2NjlDMkY5OTc4NEYzNDRGQ0QzMjNGQ0Y5 OTFDQzQwRkIwHhcNMjYwMzI0MjE0MzQzWhcNMjYwMzMxMjE0MzQzWjAYMRYwFAYD VQQDEw02OWMzMDU4Zi02M2JjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxoK8MF9fjFCHlSOmSWStJ3T9bdewiy21QokFO7qcfRAzjE3mwSLiBTHLv6uY AiOpiuWfSXMSzgQDvJhtkx8BNmYZKFNWIv69Y2ytfgcKczPoEKRLDW6M2M4KCH2m soTsuqxxoOc2xEeMyKB4mBuGVLuq7y440+YCxc0dAfvYv7DkSI1BgXomBLexs05U EBzuUTWmlVRj+T+/Gy/QeBte61bXTR0ax1mCJNfgsCQLh7TdcHtAyU79MOy6KN05 ehF8lcF6gnUoQc3XttphvXCrG+wDQB3w9RteFkLQSA043ouOTMO9vwIlSTR/hKZk 7i/DAN8n+jJ9nGUHru2znSAk/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCWJHTIx I6+rLaUnoYWprkU9ZENPMB8GA1UdIwQYMBaAFKhOeDZpwvmXhPNE/NMj/PmRzED7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDRBQy8zNEJFQzVGNDQ0 NEMxMUVEQkRBOTEyN0NDNEY5QUUwMi9xRTU0Tm1uQy1aZUU4MFQ4MHlQOC1aSE1R UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3FFNTRObW5DLVplRTgwVDgweVA4LVpITVFQcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDRBQy8zNEJFQzVGNDQ0NEMxMUVEQkRBOTEyN0NDNEY5QUUwMi9xRTU0Tm1uQy1a ZUU4MFQ4MHlQOC1aSE1RUHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAutGk8MviSwxTWevY2cfLoVMuABsBI52FfhopqWo4308fR/7b9L63Z0zvIiHN DqFPyFAwaYFJ9BtAJ7d0FmsBpsIKRnI3M35R+Jie23NCjSCPWHBDZD8Wtbb0BnA5 MzGMKfn5XWBR00qr7EBt9Qm0uSaIWhsPNr+gS5o8cgL7TUSYJ1UHwnXJQXKTg32v Tva97RPUi4UHp+tMchtH8S8wRfAWR6hpQIpD+1clhPoF8NAlLuYZCKOHoW4kZ+Cw F5FBVCX5YeuennA+QkmWeBi5Jb/X/SzuxrS3FbwSCP2PNRduZLBGzZzCxiZ8lqgz rhRpLwp5kpCxeFT8kBsFvJw6pw== -----END CERTIFICATE-----Generated at Thu Mar 26 08:54:22 2026 by rpki-client