$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.mft File: msqKXCR04g_6ZzTz9yVL__GFE_4.mft (raw, json) Hash identifier: ga/HGZ2IFrNGRqbiDZUz5LuJ6A7LzpCgZYjv3Tx31gY= Subject key identifier: F2:33:4F:2D:2B:A0:F7:09:86:B4:53:EF:36:02:4C:F2:5A:4A:51:D6 Authority key identifier: 9A:CA:8A:5C:24:74:E2:0F:FA:67:34:F3:F7:25:4B:FF:F1:85:13:FE Certificate issuer: /CN=A91A8A96/serialNumber=9ACA8A5C2474E20FFA6734F3F7254BFFF18513FE Certificate serial: 351E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msqKXCR04g_6ZzTz9yVL__GFE_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.mft Manifest number: 351E Signing time: Tue 24 Mar 2026 15:05:22 +0000 Manifest this update: Tue 24 Mar 2026 15:05:22 +0000 Manifest next update: Tue 31 Mar 2026 15:05:22 +0000 Files and hashes: 1: msqKXCR04g_6ZzTz9yVL__GFE_4.crl (hash: YiPPm3DHGCXv4B7+jGYUm3qGSjIx80mOHBRhhRAnSik=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.crl rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msqKXCR04g_6ZzTz9yVL__GFE_4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 15:05:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13598 (0x351e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8A96, serialNumber=9ACA8A5C2474E20FFA6734F3F7254BFFF18513FE Validity Not Before: Mar 24 15:05:22 2026 GMT Not After : Mar 31 15:05:22 2026 GMT Subject: CN=69c2a832-f1b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:51:55:30:ba:02:63:08:25:9e:a2:38:ee:d2: 50:72:a0:fe:26:ce:1f:3e:b8:53:0e:df:0f:4b:cf: f4:18:61:86:01:ee:62:e3:ad:48:73:29:c9:8f:a6: 9e:9b:61:1a:76:85:01:d6:bb:c3:41:33:23:39:9b: bc:ab:9c:7a:cb:c1:35:6d:55:3c:46:c7:3c:26:72: f1:ec:f9:14:05:81:a8:b0:0f:9d:96:ab:66:88:0d: 84:d4:7b:a2:04:f6:3a:4e:32:96:50:3a:c3:21:34: 33:88:ea:88:5a:50:8d:4a:f7:66:7b:f7:9d:ba:38: b2:f6:29:b1:0b:39:cf:ee:e0:01:4a:6d:10:40:ae: d1:b5:c2:9d:53:90:db:9e:28:6d:63:ad:a2:d5:53: db:7e:e3:c8:ee:d4:3e:bf:51:33:81:e0:6e:1e:2f: 92:20:fd:59:7d:09:5e:53:aa:d6:28:a2:0a:ff:f8: cf:b0:09:0b:ef:6f:e0:87:95:e2:b1:91:3b:14:73: f1:c0:b4:cd:64:18:71:9a:bb:ba:76:97:b4:62:a6: ae:99:1b:b7:15:88:af:15:ba:a6:61:95:df:be:36: 80:3c:70:9e:6f:e3:6c:3b:4a:da:b3:a4:63:24:5e: 1e:9d:b3:91:7f:0e:ad:5f:5b:dc:3e:74:20:18:c0: ba:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:33:4F:2D:2B:A0:F7:09:86:B4:53:EF:36:02:4C:F2:5A:4A:51:D6 X509v3 Authority Key Identifier: keyid:9A:CA:8A:5C:24:74:E2:0F:FA:67:34:F3:F7:25:4B:FF:F1:85:13:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msqKXCR04g_6ZzTz9yVL__GFE_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:fb:7d:00:92:5a:f3:16:d5:99:10:8a:e4:96:ee:ca:09:e0: 53:3e:37:78:02:f6:f8:ab:0d:ef:6e:63:0e:c5:d9:42:d6:7d: 48:25:e8:32:76:a8:98:aa:cb:1b:58:c5:d5:ef:6e:df:b9:07: 4c:04:d7:60:10:ff:5c:7d:1a:f6:a3:27:1c:ce:e4:2e:63:9b: 32:0f:c9:24:7b:03:fc:c0:75:2a:d8:9b:7c:60:4a:9f:b3:7c: 82:77:64:d0:34:8c:8b:36:13:f7:d5:51:69:73:cf:35:2f:0c: 92:f6:e3:68:cc:8b:f4:3a:09:04:df:11:12:de:33:f8:4f:e0: 49:90:f5:db:b7:f3:f5:96:de:5e:a3:96:82:65:13:55:14:7d: 3e:12:f0:c8:91:a1:83:0e:df:8f:da:38:9c:05:a8:08:14:91: 1e:40:41:73:ce:35:bc:9d:1d:b3:c7:4c:ae:93:de:24:45:54: a8:f0:5a:5d:8d:3d:76:25:b2:eb:67:d1:2d:70:d3:4d:8c:29: c3:33:dd:65:fd:06:d9:5a:65:69:26:1d:f2:78:32:fb:34:46: 9b:49:ef:82:09:31:06:27:b5:77:4f:41:e8:66:1f:95:7c:a0: 44:f9:32:d4:3a:79:3a:db:fa:2a:88:2a:e8:c8:93:e3:5f:9c: 9c:1c:3c:30 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThBOTYxMTAvBgNVBAUTKDlBQ0E4QTVDMjQ3NEUyMEZGQTY3MzRGM0Y3MjU0QkZG RjE4NTEzRkUwHhcNMjYwMzI0MTUwNTIyWhcNMjYwMzMxMTUwNTIyWjAYMRYwFAYD VQQDEw02OWMyYTgzMi1mMWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxVFVMLoCYwglnqI47tJQcqD+Js4fPrhTDt8PS8/0GGGGAe5i461IcynJj6ae m2EadoUB1rvDQTMjOZu8q5x6y8E1bVU8Rsc8JnLx7PkUBYGosA+dlqtmiA2E1Hui BPY6TjKWUDrDITQziOqIWlCNSvdme/edujiy9imxCznP7uABSm0QQK7RtcKdU5Db nihtY62i1VPbfuPI7tQ+v1EzgeBuHi+SIP1ZfQleU6rWKKIK//jPsAkL72/gh5Xi sZE7FHPxwLTNZBhxmru6dpe0YqaumRu3FYivFbqmYZXfvjaAPHCeb+NsO0ras6Rj JF4enbORfw6tX1vcPnQgGMC6OwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPIzTy0r oPcJhrRT7zYCTPJaSlHWMB8GA1UdIwQYMBaAFJrKilwkdOIP+mc08/clS//xhRP+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEE5Ni85MDlENzQ5MDFE QTMxMUUyQTAwQjA2OTkwOEIwMkNEMi9tc3FLWENSMDRnXzZaelR6OXlWTF9fR0ZF XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21zcUtYQ1IwNGdfNlp6VHo5eVZMX19HRkVfNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEE5Ni85MDlENzQ5MDFEQTMxMUUyQTAwQjA2OTkwOEIwMkNEMi9tc3FLWENSMDRn XzZaelR6OXlWTF9fR0ZFXzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAs/t9AJJa8xbVmRCK5JbuygngUz43eAL2+KsN725jDsXZQtZ9SCXoMnaomKrL G1jF1e9u37kHTATXYBD/XH0a9qMnHM7kLmObMg/JJHsD/MB1KtibfGBKn7N8gndk 0DSMizYT99VRaXPPNS8MkvbjaMyL9DoJBN8REt4z+E/gSZD127fz9ZbeXqOWgmUT VRR9PhLwyJGhgw7fj9o4nAWoCBSRHkBBc841vJ0ds8dMrpPeJEVUqPBaXY09diWy 62fRLXDTTYwpwzPdZf0G2VplaSYd8ngy+zRGm0nvggkxBie1d09B6GYflXygRPky 1Dp5Otv6Kogq6MiT41+cnBw8MA== -----END CERTIFICATE-----Generated at Thu Mar 26 14:10:18 2026 by rpki-client