$ rpki-client -vvf rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.mft File: cQovxyPTd706pfsnGkrolOV6dFQ.mft (raw, json) Hash identifier: wUjBG64Y4KueciX7rUkueA6fWwxpuLbCHOV9y/zlXbA= Subject key identifier: 7A:32:AF:F0:78:D7:04:A2:DA:3D:40:10:4D:34:DE:CD:E7:0D:3F:63 Authority key identifier: 71:0A:2F:C7:23:D3:77:BD:3A:A5:FB:27:1A:4A:E8:94:E5:7A:74:54 Certificate issuer: /CN=A91976E2/serialNumber=710A2FC723D377BD3AA5FB271A4AE894E57A7454 Certificate serial: 0413 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQovxyPTd706pfsnGkrolOV6dFQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.mft Manifest number: 0409 Signing time: Wed 25 Mar 2026 00:06:16 +0000 Manifest this update: Wed 25 Mar 2026 00:06:15 +0000 Manifest next update: Wed 01 Apr 2026 00:06:15 +0000 Files and hashes: 1: cQovxyPTd706pfsnGkrolOV6dFQ.crl (hash: 4kRyeY519sHf9szs55lEuKSKO4Hgn2Fknn1ase+YHVw=) 2: FA3E8D68BA2911F0A4AFE171C4F9AE02.roa (hash: IBw3K5oTaYkP1Lamfe7f4AbVCUVD2an81GV/CK0SpBk=) 3: ADDCA5F4BA2911F0B6E66A71C4F9AE02.roa (hash: yukIsGAb+vTypvuZwx1hx3ziu2U2pui3Ec+csD8aQRc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.crl rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQovxyPTd706pfsnGkrolOV6dFQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:06:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1043 (0x413) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91976E2, serialNumber=710A2FC723D377BD3AA5FB271A4AE894E57A7454 Validity Not Before: Mar 25 00:06:15 2026 GMT Not After : Apr 1 00:06:15 2026 GMT Subject: CN=69c326f7-083e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c7:51:c5:98:c8:c0:e5:22:bb:bc:d1:1d:8a: 11:a0:dc:77:bc:77:59:47:b3:33:48:2b:c5:b6:59: cd:2f:b7:6b:46:90:5c:07:16:bd:c7:f2:d6:f9:5c: c1:97:8b:4c:ad:2c:53:a2:ca:1a:0d:37:96:3a:d1: 77:0a:3a:9a:ae:02:e5:b2:78:c7:5c:fb:1d:d7:fc: f2:50:f4:e0:84:9f:1a:77:55:c8:f9:03:e2:88:2c: fd:75:fe:c8:b3:39:e4:7d:6b:72:50:28:6e:b1:f4: a5:b2:fa:54:7c:cb:9e:38:f1:97:e2:f4:bb:4d:cf: b7:4d:14:22:2a:97:ef:4c:d9:3b:49:6a:22:d2:55: 00:38:fe:44:c3:9e:1f:e9:9b:a7:bb:96:21:a2:c8: 23:21:e6:ce:7f:3e:60:cd:8c:ae:2e:f7:b7:15:79: 84:3f:2f:b4:fa:c1:fd:08:37:e9:fe:78:ec:5e:bf: 3c:4e:46:56:88:04:73:18:3f:ff:0b:4c:59:f9:e9: d2:a8:c9:ed:f1:49:cd:3d:f3:51:d5:02:7e:f9:d8: cd:1b:83:ed:d2:18:d8:b9:34:34:3d:a8:d5:8f:7b: 76:73:95:7f:dc:48:8b:bc:65:db:e9:22:22:35:3b: 5d:e8:16:29:ca:91:27:c8:b9:6e:a4:9f:6e:d4:dc: 12:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:32:AF:F0:78:D7:04:A2:DA:3D:40:10:4D:34:DE:CD:E7:0D:3F:63 X509v3 Authority Key Identifier: keyid:71:0A:2F:C7:23:D3:77:BD:3A:A5:FB:27:1A:4A:E8:94:E5:7A:74:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQovxyPTd706pfsnGkrolOV6dFQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:77:c3:9e:9a:11:d3:c5:ee:6e:0c:67:ef:8a:f6:3a:42:be: 7b:dc:53:03:b3:b2:2f:07:67:f8:3a:ea:0d:39:77:fe:e9:29: f7:0f:fb:bf:ab:27:24:75:93:48:88:c8:da:1a:c3:4c:48:19: 90:99:cb:53:19:cc:4e:4d:a4:43:fa:36:a3:1c:05:d8:4b:5b: 34:41:56:67:20:1e:4f:d7:e2:ef:c3:2e:d3:91:8c:a6:32:b0: 15:cf:96:a5:ff:53:f0:f8:37:78:78:e6:b7:b9:d5:8e:13:7b: 13:60:ef:3a:90:69:60:97:6b:f4:3e:bc:a7:a3:98:38:bd:d5: ff:52:82:a3:b8:b0:8c:0b:f7:a5:53:24:eb:ad:d1:d2:61:a3: a8:89:72:2d:90:a1:cb:58:3b:90:de:4b:2e:74:af:8a:70:e1: e8:c0:29:28:c5:ef:e5:e2:13:64:c0:bd:4c:5f:80:e4:4d:96: 67:f2:ee:93:bd:cd:b4:40:27:1f:69:2a:bd:35:32:56:92:a4: c0:3f:81:e1:19:ff:05:39:18:32:87:20:90:22:e1:ac:88:ed: 73:e9:e4:65:7f:8c:01:a2:26:33:9d:da:87:35:d1:68:88:31: ef:c9:15:c4:c9:75:d6:72:32:37:66:b4:db:9c:06:53:c3:23: a3:8e:b8:f1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBBMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTc2RTIxMTAvBgNVBAUTKDcxMEEyRkM3MjNEMzc3QkQzQUE1RkIyNzFBNEFFODk0 RTU3QTc0NTQwHhcNMjYwMzI1MDAwNjE1WhcNMjYwNDAxMDAwNjE1WjAYMRYwFAYD VQQDEw02OWMzMjZmNy0wODNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAscdRxZjIwOUiu7zRHYoRoNx3vHdZR7MzSCvFtlnNL7drRpBcBxa9x/LW+VzB l4tMrSxTosoaDTeWOtF3CjqargLlsnjHXPsd1/zyUPTghJ8ad1XI+QPiiCz9df7I sznkfWtyUChusfSlsvpUfMueOPGX4vS7Tc+3TRQiKpfvTNk7SWoi0lUAOP5Ew54f 6Zunu5YhosgjIebOfz5gzYyuLve3FXmEPy+0+sH9CDfp/njsXr88TkZWiARzGD// C0xZ+enSqMnt8UnNPfNR1QJ++djNG4Pt0hjYuTQ0PajVj3t2c5V/3EiLvGXb6SIi NTtd6BYpypEnyLlupJ9u1NwSpwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHoyr/B4 1wSi2j1AEE003s3nDT9jMB8GA1UdIwQYMBaAFHEKL8cj03e9OqX7JxpK6JTlenRU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzZFMi80N0M0NEFEOEFF ODkxMUVDOEE4RDMzNjhDNEY5QUUwMi9jUW92eHlQVGQ3MDZwZnNuR2tyb2xPVjZk RlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NRb3Z4eVBUZDcwNnBmc25Ha3JvbE9WNmRGUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzZFMi80N0M0NEFEOEFFODkxMUVDOEE4RDMzNjhDNEY5QUUwMi9jUW92eHlQVGQ3 MDZwZnNuR2tyb2xPVjZkRlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAL3fDnpoR08Xubgxn74r2OkK+e9xTA7OyLwdn+DrqDTl3/ukp9w/7v6snJHWT SIjI2hrDTEgZkJnLUxnMTk2kQ/o2oxwF2EtbNEFWZyAeT9fi78Mu05GMpjKwFc+W pf9T8Pg3eHjmt7nVjhN7E2DvOpBpYJdr9D68p6OYOL3V/1KCo7iwjAv3pVMk663R 0mGjqIlyLZChy1g7kN5LLnSvinDh6MApKMXv5eITZMC9TF+A5E2WZ/Luk73NtEAn H2kqvTUyVpKkwD+B4Rn/BTkYMocgkCLhrIjtc+nkZX+MAaImM53ahzXRaIgx78kV xMl11nIyN2a025wGU8Mjo4648Q== -----END CERTIFICATE-----Generated at Thu Mar 26 02:33:18 2026 by rpki-client