$ rpki-client -vvf rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft File: qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft (raw, json) Hash identifier: kC9K5RkgG0P1NE/2XKfa77soEL2L+ipfaAeB/r9nNGI= Subject key identifier: 57:2F:64:A6:DC:DB:12:6C:A0:A3:2D:18:09:CE:15:6C:1A:1A:E6:7E Authority key identifier: A8:1D:0D:61:F7:B7:30:DD:B7:42:CC:48:AD:D8:8A:04:D4:6F:D0:24 Certificate issuer: /CN=A91A192D/serialNumber=A81D0D61F7B730DDB742CC48ADD88A04D46FD024 Certificate serial: 01EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft Manifest number: 01CD Signing time: Wed 25 Mar 2026 03:25:39 +0000 Manifest this update: Wed 25 Mar 2026 03:25:38 +0000 Manifest next update: Wed 01 Apr 2026 03:25:38 +0000 Files and hashes: 1: qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl (hash: noBDQYdbcTk+Jq6xyfBMyyuvdBgPzfrzzv9dEQgWa7Q=) 2: C352565AC6E011EF87D90241C4F9AE02.roa (hash: 52J+v1k8tWgHY+HhlcSMLxR4J+xohtBlTQq3KKgwtyU=) 3: 4B3A3F3CC6DD11EFA7A63533C4F9AE02.roa (hash: 4G73HCE8g8pIr00a6pISVi9GuOkrooKElm9yIwS+mCs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:25:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 495 (0x1ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A192D, serialNumber=A81D0D61F7B730DDB742CC48ADD88A04D46FD024 Validity Not Before: Mar 25 03:25:38 2026 GMT Not After : Apr 1 03:25:38 2026 GMT Subject: CN=69c355b3-872b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:17:b8:7b:1a:46:c5:54:5d:62:80:31:1c:84: b5:b1:cb:c2:0a:6d:4e:b8:df:cf:22:53:29:70:56: 6d:b7:4d:40:b6:9d:a5:25:f8:fe:09:f9:45:e1:d1: 60:5f:d7:fd:a8:b8:4d:c3:52:4c:49:b7:1e:99:ce: 9f:cf:f7:7d:bd:b2:7c:68:1b:25:e4:2c:ae:35:18: 40:33:b5:41:41:b2:3f:c0:85:b5:ff:9d:58:05:b4: 59:13:96:d4:4a:c2:88:b3:86:dd:93:8d:d2:99:09: 4c:a8:5a:ac:71:d7:d6:fa:d6:fb:e0:95:ce:43:94: c6:ad:73:df:f9:86:a6:b0:4f:c3:a8:c5:f9:f3:13: e5:df:49:f5:27:da:ca:59:cd:62:26:a4:e1:ba:a0: c6:85:17:67:64:4b:8d:51:51:91:c5:70:98:7d:f8: 22:eb:6d:3d:d4:12:45:f9:08:87:54:f0:9e:7a:7e: 47:63:04:6a:85:42:4e:95:ad:60:c9:5f:2c:4c:9d: b9:d3:59:fe:b3:97:73:ce:2a:67:12:2b:f4:2b:3f: 8c:2f:c3:48:57:07:bc:05:a5:09:76:66:31:ff:d4: f6:0e:9b:71:d2:e6:b8:92:81:01:62:fc:72:a6:20: df:da:48:cf:25:77:63:60:f0:f4:ad:e7:30:65:57: f4:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:2F:64:A6:DC:DB:12:6C:A0:A3:2D:18:09:CE:15:6C:1A:1A:E6:7E X509v3 Authority Key Identifier: keyid:A8:1D:0D:61:F7:B7:30:DD:B7:42:CC:48:AD:D8:8A:04:D4:6F:D0:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:64:1d:28:20:d5:3a:fe:da:8e:85:7d:60:d5:d7:2b:24:d7: f2:cf:31:f1:41:89:a0:5e:0a:4d:33:e8:bb:be:6c:23:28:7d: 76:69:42:60:53:86:00:8b:4e:b2:19:9a:a9:ce:af:d3:71:95: 08:dc:7f:14:b0:49:7c:36:e8:c2:44:14:46:b7:c4:9f:f5:ba: ac:a8:ce:8e:e8:c8:29:1e:49:f1:2b:ac:fe:1e:81:cf:7f:fb: f8:45:7a:44:63:de:54:7f:40:6b:5b:f4:e3:73:24:7e:ef:ed: 38:90:45:9f:0c:19:27:b2:9d:ae:57:4c:51:fd:43:24:51:39: 4e:5c:96:ea:a1:2a:0e:cf:00:5e:3d:0c:d6:68:bc:5c:2b:01: 23:61:5f:8f:ad:f1:2e:c6:c4:4d:2d:a9:1c:3b:c0:9e:09:e3: 22:b3:ab:3f:f9:18:4c:57:8e:13:1f:63:b2:f3:4c:2b:a7:d0: 77:d3:60:cb:b9:3a:1e:db:a5:a9:08:0a:82:c6:46:5c:95:0e: 0b:20:83:95:d8:f1:26:aa:f0:2e:70:9b:68:49:66:15:9f:bd: 9c:b4:62:6f:68:44:5a:bc:15:5d:45:e4:f7:d0:1c:4b:4c:63: b5:ae:27:d8:22:3e:23:9c:ed:25:47:0b:f4:db:0a:59:fc:eb: bd:3c:3a:55 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTE5MkQxMTAvBgNVBAUTKEE4MUQwRDYxRjdCNzMwRERCNzQyQ0M0OEFERDg4QTA0 RDQ2RkQwMjQwHhcNMjYwMzI1MDMyNTM4WhcNMjYwNDAxMDMyNTM4WjAYMRYwFAYD VQQDEw02OWMzNTViMy04NzJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhxe4expGxVRdYoAxHIS1scvCCm1OuN/PIlMpcFZtt01Atp2lJfj+CflF4dFg X9f9qLhNw1JMSbcemc6fz/d9vbJ8aBsl5CyuNRhAM7VBQbI/wIW1/51YBbRZE5bU SsKIs4bdk43SmQlMqFqscdfW+tb74JXOQ5TGrXPf+YamsE/DqMX58xPl30n1J9rK Wc1iJqThuqDGhRdnZEuNUVGRxXCYffgi62091BJF+QiHVPCeen5HYwRqhUJOla1g yV8sTJ2501n+s5dzzipnEiv0Kz+ML8NIVwe8BaUJdmYx/9T2Dptx0ua4koEBYvxy piDf2kjPJXdjYPD0recwZVf0ewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFcvZKbc 2xJsoKMtGAnOFWwaGuZ+MB8GA1UdIwQYMBaAFKgdDWH3tzDdt0LMSK3YigTUb9Ak MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTkyRC9DQzY3RDI1MkE0 QkMxMUVFOUU1QTVENzJDNEY5QUUwMi9xQjBOWWZlM01OMjNRc3hJcmRpS0JOUnYw Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FCME5ZZmUzTU4yM1FzeElyZGlLQk5SdjBDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTkyRC9DQzY3RDI1MkE0QkMxMUVFOUU1QTVENzJDNEY5QUUwMi9xQjBOWWZlM01O MjNRc3hJcmRpS0JOUnYwQ1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbWQdKCDVOv7ajoV9YNXXKyTX8s8x8UGJoF4KTTPou75sIyh9dmlCYFOGAItO shmaqc6v03GVCNx/FLBJfDbowkQURrfEn/W6rKjOjujIKR5J8Sus/h6Bz3/7+EV6 RGPeVH9Aa1v043Mkfu/tOJBFnwwZJ7KdrldMUf1DJFE5TlyW6qEqDs8AXj0M1mi8 XCsBI2Ffj63xLsbETS2pHDvAngnjIrOrP/kYTFeOEx9jsvNMK6fQd9Ngy7k6Htul qQgKgsZGXJUOCyCDldjxJqrwLnCbaElmFZ+9nLRib2hEWrwVXUXk99AcS0xjta4n 2CI+I5ztJUcL9NsKWfzrvTw6VQ== -----END CERTIFICATE-----Generated at Thu Mar 26 04:24:12 2026 by rpki-client