$ rpki-client -vvf rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.mft File: QSE7L18kKfwyjsP06V1YhkAv62k.mft (raw, json) Hash identifier: UaqLdR0qaUmxvhqWpk7HfAa9f+giTY+r7dS0LcnkPv0= Subject key identifier: B5:36:CE:82:AA:84:2E:38:3D:73:64:72:82:47:AA:0C:92:82:2E:05 Authority key identifier: 41:21:3B:2F:5F:24:29:FC:32:8E:C3:F4:E9:5D:58:86:40:2F:EB:69 Certificate issuer: /CN=A91757CB/serialNumber=41213B2F5F2429FC328EC3F4E95D5886402FEB69 Certificate serial: 0190 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSE7L18kKfwyjsP06V1YhkAv62k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.mft Manifest number: 0179 Signing time: Wed 25 Mar 2026 03:59:58 +0000 Manifest this update: Wed 25 Mar 2026 03:59:57 +0000 Manifest next update: Wed 01 Apr 2026 03:59:57 +0000 Files and hashes: 1: QSE7L18kKfwyjsP06V1YhkAv62k.crl (hash: XY1FDT3m8CbAmLknfSYg/C73r8VNIMwW/WUiTrZ6z1M=) 2: EE01A248F2FB11EE9AA9E24CC4F9AE02.roa (hash: wtU3FReeveSRaGECvJZwcjQF5xOlaITNyX17soC/vMo=) 3: 47142068221311EFB680F113C4F9AE02.roa (hash: q1TM5Ebdt5SP+k07ZaaYP0AaM0RnbZZmHVQA7uMpDO0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.crl rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSE7L18kKfwyjsP06V1YhkAv62k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:59:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 400 (0x190) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91757CB, serialNumber=41213B2F5F2429FC328EC3F4E95D5886402FEB69 Validity Not Before: Mar 25 03:59:57 2026 GMT Not After : Apr 1 03:59:57 2026 GMT Subject: CN=69c35dbe-c723 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0b:d0:a5:d4:e8:2f:f3:2a:1d:42:90:ed:d7: 65:e8:20:66:5a:d8:26:bf:da:f4:97:4b:95:b6:b9: 33:6a:1f:7f:cc:ce:2d:5b:40:8e:11:aa:17:13:66: 4c:14:9b:b4:69:6e:de:c3:cd:d5:0f:14:d1:cf:e7: 5f:37:aa:fa:52:fb:ad:82:b5:38:9f:71:b7:1b:d6: 59:72:08:33:6c:1b:90:a8:f5:cb:32:3a:aa:58:c0: ba:62:c7:4c:5b:cf:e5:a1:cf:0c:cd:26:89:e2:fc: 0f:79:98:94:80:2c:fa:f1:0c:0d:ac:fa:e3:9b:2e: d8:8f:d4:eb:5c:cc:18:0f:e2:eb:08:93:72:e2:66: e8:00:f2:aa:a7:ca:9d:32:50:e3:20:ee:d5:88:ff: 20:f8:9f:8b:01:6e:4a:ab:d6:ea:d4:01:6d:c5:3e: 8c:7b:cc:36:2c:a7:df:dd:01:2f:d1:b0:69:ca:b3: c9:f4:38:bd:1d:7a:ed:76:88:b0:6a:0f:fa:31:a7: fb:75:4f:ae:ba:0d:96:b9:f3:02:20:df:27:b5:26: c6:c2:4b:6d:b3:f8:86:82:af:c6:68:e0:d3:d1:f0: 98:00:11:2d:6b:57:76:b5:dc:2e:f1:ed:94:c9:83: bc:5b:86:1a:25:0f:58:49:d4:ee:b0:10:42:4d:43: ef:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:36:CE:82:AA:84:2E:38:3D:73:64:72:82:47:AA:0C:92:82:2E:05 X509v3 Authority Key Identifier: keyid:41:21:3B:2F:5F:24:29:FC:32:8E:C3:F4:E9:5D:58:86:40:2F:EB:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSE7L18kKfwyjsP06V1YhkAv62k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:97:14:0c:8b:32:39:d2:c8:47:4c:03:e7:be:fa:b5:f6:f8: c7:26:89:43:35:86:d7:14:2c:c5:c2:43:89:cb:62:33:cb:9c: 48:3b:4a:6b:4d:30:db:71:a1:53:b5:c6:19:83:0c:c4:e9:2b: 81:df:a2:cf:a5:d9:ef:be:99:e9:d0:86:7c:ff:2d:79:18:54: d8:bb:f1:df:72:7b:a3:5c:fa:bb:85:d4:70:c2:fc:4a:8c:99: 1e:cb:d8:b2:2e:fa:48:49:6c:0f:66:ac:95:98:ff:43:49:65: 99:c6:76:f9:9f:8f:1f:42:c7:68:7c:e8:ae:42:14:24:d7:ae: 2c:32:05:9d:a5:10:22:7a:12:0e:f4:aa:7e:0f:5d:21:08:4b: 9c:00:69:be:51:27:f7:1c:d2:52:a0:3f:fe:73:ab:10:a6:6e: 9c:23:f7:fb:6a:0c:bb:59:9e:1b:52:a8:e0:cb:40:9b:12:15: 89:97:ff:9a:1e:ef:62:b7:14:75:ab:5d:68:34:4d:aa:f3:37: cb:9d:6c:f2:09:f5:51:c8:51:77:61:d7:dd:3b:a8:0b:ea:1b: 19:9b:dc:95:ce:e1:ca:ac:cc:ac:3f:e6:29:53:0f:d0:da:ea: df:10:1f:b9:cd:b4:fb:77:57:03:9f:eb:0e:fa:f6:ef:b4:79: 41:8d:45:39 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU3Q0IxMTAvBgNVBAUTKDQxMjEzQjJGNUYyNDI5RkMzMjhFQzNGNEU5NUQ1ODg2 NDAyRkVCNjkwHhcNMjYwMzI1MDM1OTU3WhcNMjYwNDAxMDM1OTU3WjAYMRYwFAYD VQQDEw02OWMzNWRiZS1jNzIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsgvQpdToL/MqHUKQ7ddl6CBmWtgmv9r0l0uVtrkzah9/zM4tW0COEaoXE2ZM FJu0aW7ew83VDxTRz+dfN6r6UvutgrU4n3G3G9ZZcggzbBuQqPXLMjqqWMC6YsdM W8/loc8MzSaJ4vwPeZiUgCz68QwNrPrjmy7Yj9TrXMwYD+LrCJNy4mboAPKqp8qd MlDjIO7ViP8g+J+LAW5Kq9bq1AFtxT6Me8w2LKff3QEv0bBpyrPJ9Di9HXrtdoiw ag/6Maf7dU+uug2WufMCIN8ntSbGwktts/iGgq/GaODT0fCYABEta1d2tdwu8e2U yYO8W4YaJQ9YSdTusBBCTUPvUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLU2zoKq hC44PXNkcoJHqgySgi4FMB8GA1UdIwQYMBaAFEEhOy9fJCn8Mo7D9OldWIZAL+tp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTdDQi80NTlCMEM2NEYy RjgxMUVFQTM1MDY3MzhDNEY5QUUwMi9RU0U3TDE4a0tmd3lqc1AwNlYxWWhrQXY2 MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FTRTdMMThrS2Z3eWpzUDA2VjFZaGtBdjYyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTdDQi80NTlCMEM2NEYyRjgxMUVFQTM1MDY3MzhDNEY5QUUwMi9RU0U3TDE4a0tm d3lqc1AwNlYxWWhrQXY2MmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAK5cUDIsyOdLIR0wD5776tfb4xyaJQzWG1xQsxcJDictiM8ucSDtKa00w23Gh U7XGGYMMxOkrgd+iz6XZ776Z6dCGfP8teRhU2Lvx33J7o1z6u4XUcML8SoyZHsvY si76SElsD2aslZj/Q0llmcZ2+Z+PH0LHaHzorkIUJNeuLDIFnaUQInoSDvSqfg9d IQhLnABpvlEn9xzSUqA//nOrEKZunCP3+2oMu1meG1Ko4MtAmxIViZf/mh7vYrcU datdaDRNqvM3y51s8gn1UchRd2HX3TuoC+obGZvclc7hyqzMrD/mKVMP0Nrq3xAf uc20+3dXA5/rDvr277R5QY1FOQ== -----END CERTIFICATE-----Generated at Thu Mar 26 11:19:39 2026 by rpki-client