$ rpki-client -vvf rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.mft File: qeq8JGURbtEdbIza4gESN88fWd8.mft (raw, json) Hash identifier: Hq6qnZaUrbfTmAuUeUkCc1fflNE3kpE36dOA34ZGaB0= Subject key identifier: 6B:9E:C5:53:94:01:79:64:45:64:43:FE:5E:74:6E:4F:C9:C1:89:CE Authority key identifier: A9:EA:BC:24:65:11:6E:D1:1D:6C:8C:DA:E2:01:12:37:CF:1F:59:DF Certificate issuer: /CN=A91871C2/serialNumber=A9EABC2465116ED11D6C8CDAE2011237CF1F59DF Certificate serial: 0824 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qeq8JGURbtEdbIza4gESN88fWd8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.mft Manifest number: 07D1 Signing time: Tue 24 Mar 2026 21:21:41 +0000 Manifest this update: Tue 24 Mar 2026 21:21:40 +0000 Manifest next update: Tue 31 Mar 2026 21:21:40 +0000 Files and hashes: 1: qeq8JGURbtEdbIza4gESN88fWd8.crl (hash: rm/Ml5g5yfXoU9Y7zNxb5jUoDJUQ95BtjkHJA0AGU3s=) 2: F30B07CE705011F0A5A44E86C4F9AE02.roa (hash: yqzH+VRJDdIn8v1i8jejnoTV03RvjOrdo0NsV1Hhxj0=) 3: A5307E284CEF11F092F69C81C4F9AE02.roa (hash: ssil7SjTurDlxeBBscPAUJTsyrsCuWA39a0ktEouOcI=) 4: BA4083F84CEF11F0A46DCE81C4F9AE02.roa (hash: iWVOHg6QDBIqMpA3MO5LObP6AHCPSfyjRAL55UZ4G0g=) 5: C5465290559C11F0BBD2D127C4F9AE02.roa (hash: LJbta/JJVJ23WgZ0akF5Ov55pEZeCXuRcU1xDJv2re0=) 6: C446B484559C11F0BBD2D127C4F9AE02.roa (hash: ZE3RMF3wHAnlFS7ZCENNLqhdWX3pKqPIaFPP+R0+EHA=) 7: 8BF305A2F44711F0849EF3E6616F56BC.roa (hash: 8FXTDQ3pdrB9lI0tc6cwlsOBLuq+7Ubnrq4d6bTJfQo=) 8: B43753D005AC11ECB86F694EC4F9AE02.roa (hash: R34hnb67EtA7MxdkNi5WSU1aixEiNDr681Fh+Yd4Kag=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.crl rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qeq8JGURbtEdbIza4gESN88fWd8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 21:21:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2084 (0x824) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91871C2, serialNumber=A9EABC2465116ED11D6C8CDAE2011237CF1F59DF Validity Not Before: Mar 24 21:21:40 2026 GMT Not After : Mar 31 21:21:40 2026 GMT Subject: CN=69c30064-5346 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:83:ee:fb:35:66:62:1c:cb:05:60:19:16:cd: 2c:82:00:81:31:e3:b3:8a:16:d7:9b:b0:34:cd:32: 02:5a:31:b4:98:76:9e:06:a6:88:60:2f:78:ec:ce: c6:32:2c:cb:9a:35:db:f9:a2:33:96:d2:33:51:f1: 74:ea:cf:01:4b:b5:42:ea:0e:d4:e1:d7:3f:2b:bb: a9:16:7c:25:bc:94:63:0e:9a:00:29:9b:92:97:4c: 5f:bd:a7:46:84:46:a8:24:36:50:91:ec:71:f8:3c: 81:e0:9e:4f:b8:7b:dc:a4:8f:03:74:da:31:c6:44: 54:43:12:90:f4:53:ae:f1:7a:59:da:ad:4e:ba:66: c7:fc:d8:6c:62:a9:e5:5f:e9:a7:c0:a5:df:3e:d5: 34:a1:4b:68:88:9f:c7:e6:4c:51:c4:f7:34:33:71: 94:2a:83:bd:bb:5a:13:21:ba:50:66:82:87:24:9d: 84:79:47:1b:d0:85:d9:c6:d7:9c:8e:f7:91:86:0e: 10:fb:0d:df:77:f8:3b:e8:00:4a:d7:d9:a7:59:1d: de:8d:f3:d1:a4:09:19:1b:96:fd:96:01:19:ab:e7: 37:df:27:86:b2:1b:02:2a:7a:dd:36:18:ca:77:03: 0e:12:00:ac:52:80:89:34:9f:df:16:99:e2:39:13: aa:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:9E:C5:53:94:01:79:64:45:64:43:FE:5E:74:6E:4F:C9:C1:89:CE X509v3 Authority Key Identifier: keyid:A9:EA:BC:24:65:11:6E:D1:1D:6C:8C:DA:E2:01:12:37:CF:1F:59:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qeq8JGURbtEdbIza4gESN88fWd8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:50:86:ff:de:a5:50:4d:9e:b9:6b:60:d7:22:f0:97:f9:a1: a7:35:73:2a:9b:a1:36:a9:66:cf:67:3f:11:d8:45:5f:55:d7: d0:18:37:98:26:12:f9:ac:a8:c6:be:45:2f:17:e9:61:2e:91: 08:c4:a0:1b:49:d9:b9:30:47:2e:a5:a7:4d:3b:77:b4:8c:4c: ad:37:f6:bf:4d:d7:e1:35:23:06:70:83:04:e1:38:ca:78:5f: 44:2d:ee:77:af:5b:76:56:32:f0:a0:aa:a2:41:44:60:a2:a9: 40:4b:22:a0:c7:1e:46:2f:69:16:f1:1a:f8:1a:9c:e7:e7:72: b9:1a:8b:b4:00:f7:ff:e2:01:58:0b:44:51:91:c7:ab:ce:2b: 23:89:03:69:94:e3:1e:eb:02:13:29:80:57:13:a8:ca:b0:d2: 11:2e:1a:1a:24:9a:4a:5f:c1:8a:b4:69:47:51:fa:f5:70:4a: ea:70:87:da:51:3d:33:ca:d9:49:ee:4f:6d:7f:fa:a7:0d:32: 1f:5b:b6:dd:d1:ac:de:a7:a1:bf:24:15:b0:84:2d:47:ba:85: 95:ec:2c:e4:31:46:7e:65:b1:4e:db:6e:fc:63:32:d6:1f:ea: 28:0a:20:5c:39:69:40:05:88:60:f0:9b:e1:75:c3:b0:e8:dc: 6e:af:f9:ba -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCCQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODcxQzIxMTAvBgNVBAUTKEE5RUFCQzI0NjUxMTZFRDExRDZDOENEQUUyMDExMjM3 Q0YxRjU5REYwHhcNMjYwMzI0MjEyMTQwWhcNMjYwMzMxMjEyMTQwWjAYMRYwFAYD VQQDEw02OWMzMDA2NC01MzQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxIPu+zVmYhzLBWAZFs0sggCBMeOzihbXm7A0zTICWjG0mHaeBqaIYC947M7G MizLmjXb+aIzltIzUfF06s8BS7VC6g7U4dc/K7upFnwlvJRjDpoAKZuSl0xfvadG hEaoJDZQkexx+DyB4J5PuHvcpI8DdNoxxkRUQxKQ9FOu8XpZ2q1OumbH/NhsYqnl X+mnwKXfPtU0oUtoiJ/H5kxRxPc0M3GUKoO9u1oTIbpQZoKHJJ2EeUcb0IXZxtec jveRhg4Q+w3fd/g76ABK19mnWR3ejfPRpAkZG5b9lgEZq+c33yeGshsCKnrdNhjK dwMOEgCsUoCJNJ/fFpniOROqxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGuexVOU AXlkRWRD/l50bk/JwYnOMB8GA1UdIwQYMBaAFKnqvCRlEW7RHWyM2uIBEjfPH1nf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzFDMi9ERTYxNjY2ODU1 QTkxMUVCOTlBRkRBNURDNEY5QUUwMi9xZXE4SkdVUmJ0RWRiSXphNGdFU044OGZX ZDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FlcThKR1VSYnRFZGJJemE0Z0VTTjg4ZldkOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzFDMi9ERTYxNjY2ODU1QTkxMUVCOTlBRkRBNURDNEY5QUUwMi9xZXE4SkdVUmJ0 RWRiSXphNGdFU044OGZXZDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbVCG/96lUE2euWtg1yLwl/mhpzVzKpuhNqlmz2c/EdhFX1XX0Bg3mCYS+ayo xr5FLxfpYS6RCMSgG0nZuTBHLqWnTTt3tIxMrTf2v03X4TUjBnCDBOE4ynhfRC3u d69bdlYy8KCqokFEYKKpQEsioMceRi9pFvEa+Bqc5+dyuRqLtAD3/+IBWAtEUZHH q84rI4kDaZTjHusCEymAVxOoyrDSES4aGiSaSl/BirRpR1H69XBK6nCH2lE9M8rZ Se5PbX/6pw0yH1u23dGs3qehvyQVsIQtR7qFlews5DFGfmWxTttu/GMy1h/qKAog XDlpQAWIYPCb4XXDsOjcbq/5ug== -----END CERTIFICATE-----Generated at Thu Mar 26 14:10:39 2026 by rpki-client