$ rpki-client -vvf rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.mft File: lqQx7QZ8PrHkc8EwSsbfm3YiVaM.mft (raw, json) Hash identifier: qes2pf97ITsE2nvtyFHJJRONDLtyd8g1cFObqHrtvvY= Subject key identifier: 78:46:38:0F:60:4E:A1:DB:20:86:31:60:0C:87:B7:57:02:5A:08:A1 Authority key identifier: 96:A4:31:ED:06:7C:3E:B1:E4:73:C1:30:4A:C6:DF:9B:76:22:55:A3 Certificate issuer: /CN=A918779B/serialNumber=96A431ED067C3EB1E473C1304AC6DF9B762255A3 Certificate serial: 1095 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.mft Manifest number: 17FA Signing time: Tue 24 Mar 2026 17:14:16 +0000 Manifest this update: Tue 24 Mar 2026 17:14:16 +0000 Manifest next update: Tue 31 Mar 2026 17:14:16 +0000 Files and hashes: 1: lqQx7QZ8PrHkc8EwSsbfm3YiVaM.crl (hash: SkK3VnXyrBN13NRU0LknQc5sn7cUfwYUkhx1pzAcdTU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.crl rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:14:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4245 (0x1095) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918779B, serialNumber=96A431ED067C3EB1E473C1304AC6DF9B762255A3 Validity Not Before: Mar 24 17:14:16 2026 GMT Not After : Mar 31 17:14:16 2026 GMT Subject: CN=69c2c668-0677 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:2c:93:85:27:84:03:ba:b7:70:4a:ca:68:ba: c6:62:38:eb:7a:9d:d8:c5:ba:15:66:31:d1:ff:06: 4e:68:7a:92:4f:2b:db:dd:2d:f5:45:51:66:de:b7: f5:9a:83:29:a6:39:bc:42:7d:54:61:63:fc:78:26: a9:be:b5:52:a3:0e:52:31:ff:9b:d5:58:12:93:7f: ee:5d:7b:90:05:ee:a9:d8:28:46:ba:74:b1:4b:68: 68:d9:f8:3a:61:c0:5a:29:45:47:f0:e7:5c:fb:8b: 5e:7a:77:59:9f:ad:50:2a:55:71:4c:64:e0:8d:12: d4:77:72:84:4d:5e:7c:ee:99:9a:e8:c9:e6:a2:62: 4a:3a:ea:9d:7e:50:d0:12:6d:ad:dd:54:5f:c0:d3: 84:07:8a:2c:b3:a2:63:eb:1e:ad:a6:6a:3e:38:a4: 65:64:c3:db:25:7a:cf:76:d7:5c:1b:21:bb:07:c3: ac:14:3a:fa:14:35:f6:89:06:f3:e7:1a:d4:19:f1: f0:9f:8d:6c:63:bf:95:bb:0a:67:4e:57:46:79:5e: d9:c1:1b:cb:43:25:87:c7:65:12:40:91:ca:09:4f: d0:e9:aa:4d:ba:a3:68:c7:cb:cb:3a:23:27:e7:da: 7e:8c:67:40:1a:8e:35:2f:c5:37:92:7e:a8:d3:0e: 47:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:46:38:0F:60:4E:A1:DB:20:86:31:60:0C:87:B7:57:02:5A:08:A1 X509v3 Authority Key Identifier: keyid:96:A4:31:ED:06:7C:3E:B1:E4:73:C1:30:4A:C6:DF:9B:76:22:55:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:f7:f6:29:9d:36:48:2c:ca:4f:7f:5e:41:3a:57:88:a4:6b: b6:17:a4:e1:28:7a:73:8b:1b:01:18:64:f3:ab:d5:6d:d7:d0: de:82:a2:5a:08:ea:e1:79:f4:51:0f:f0:bf:35:74:31:89:66: ff:0c:ef:06:44:d5:f6:ab:83:1c:77:21:22:f8:a6:74:88:d5: 22:ad:5a:94:19:41:36:a6:87:08:b9:68:27:06:fe:56:89:cd: dd:ed:4c:d8:cc:86:cb:d2:3d:98:41:64:9e:27:eb:99:49:f1: 3f:ed:eb:da:76:42:4a:29:f5:3b:15:55:25:fb:c4:cd:99:24: 7e:c6:42:10:22:a0:3c:63:c6:5c:8c:0e:89:23:5c:1e:5c:63: 7a:f7:f6:e1:f8:f6:2e:18:ec:20:15:ea:99:74:35:2e:72:47: b4:ca:e0:4c:bd:b4:ff:56:5b:c6:bf:07:eb:eb:50:c4:96:a1: 4a:96:fb:7a:37:80:c3:26:a8:53:e8:02:1c:b0:98:1f:c2:ea: e3:7a:98:5c:bc:15:dd:e1:bf:df:46:c5:f7:61:7a:6f:b5:65: f6:45:c0:bc:3a:5c:bf:cd:5f:93:31:cf:46:13:88:b4:26:c2: ac:28:c6:c1:6d:5e:4e:35:43:86:c3:76:02:ed:d2:e2:0a:82: 08:cb:8c:b3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc3OUIxMTAvBgNVBAUTKDk2QTQzMUVEMDY3QzNFQjFFNDczQzEzMDRBQzZERjlC NzYyMjU1QTMwHhcNMjYwMzI0MTcxNDE2WhcNMjYwMzMxMTcxNDE2WjAYMRYwFAYD VQQDEw02OWMyYzY2OC0wNjc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiCyThSeEA7q3cErKaLrGYjjrep3YxboVZjHR/wZOaHqSTyvb3S31RVFm3rf1 moMppjm8Qn1UYWP8eCapvrVSow5SMf+b1VgSk3/uXXuQBe6p2ChGunSxS2ho2fg6 YcBaKUVH8Odc+4teendZn61QKlVxTGTgjRLUd3KETV587pma6MnmomJKOuqdflDQ Em2t3VRfwNOEB4oss6Jj6x6tpmo+OKRlZMPbJXrPdtdcGyG7B8OsFDr6FDX2iQbz 5xrUGfHwn41sY7+VuwpnTldGeV7ZwRvLQyWHx2USQJHKCU/Q6apNuqNox8vLOiMn 59p+jGdAGo41L8U3kn6o0w5H9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHhGOA9g TqHbIIYxYAyHt1cCWgihMB8GA1UdIwQYMBaAFJakMe0GfD6x5HPBMErG35t2IlWj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Nzc5Qi83Q0Y1OUZBQTRB NzIxMUU5ODM5MTIxODBDNEY5QUUwMi9scVF4N1FaOFBySGtjOEV3U3NiZm0zWWlW YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xxUXg3UVo4UHJIa2M4RXdTc2JmbTNZaVZhTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Nzc5Qi83Q0Y1OUZBQTRBNzIxMUU5ODM5MTIxODBDNEY5QUUwMi9scVF4N1FaOFBy SGtjOEV3U3NiZm0zWWlWYU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAx/f2KZ02SCzKT39eQTpXiKRrthek4Sh6c4sbARhk86vVbdfQ3oKiWgjq4Xn0 UQ/wvzV0MYlm/wzvBkTV9quDHHchIvimdIjVIq1alBlBNqaHCLloJwb+VonN3e1M 2MyGy9I9mEFknifrmUnxP+3r2nZCSin1OxVVJfvEzZkkfsZCECKgPGPGXIwOiSNc Hlxjevf24fj2LhjsIBXqmXQ1LnJHtMrgTL20/1Zbxr8H6+tQxJahSpb7ejeAwyao U+gCHLCYH8Lq43qYXLwV3eG/30bF92F6b7Vl9kXAvDpcv81fkzHPRhOItCbCrCjG wW1eTjVDhsN2Au3S4gqCCMuMsw== -----END CERTIFICATE-----Generated at Thu Mar 26 09:59:20 2026 by rpki-client