$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft File: qmMtxAKnAveanDaT6cxGxZge6Ow.mft (raw, json) Hash identifier: blCoC6rGbXPC5OuuJr1PHshGlSoDTgZYf9jFVvOjDbo= Subject key identifier: BB:CA:85:F9:73:BE:FD:A0:11:6A:47:36:AC:62:AA:BD:2B:31:00:0C Authority key identifier: AA:63:2D:C4:02:A7:02:F7:9A:9C:36:93:E9:CC:46:C5:98:1E:E8:EC Certificate issuer: /CN=A91ADBA2/serialNumber=AA632DC402A702F79A9C3693E9CC46C5981EE8EC Certificate serial: 1A94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmMtxAKnAveanDaT6cxGxZge6Ow.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft Manifest number: 1A8A Signing time: Tue 24 Mar 2026 16:14:59 +0000 Manifest this update: Tue 24 Mar 2026 16:14:59 +0000 Manifest next update: Tue 31 Mar 2026 16:14:59 +0000 Files and hashes: 1: qmMtxAKnAveanDaT6cxGxZge6Ow.crl (hash: vUXMEUU6ovaCXltdAWHrvXEZcrto8xj0jzO9lyMZP5g=) 2: 6C30EF68D9AD11EBA5CFBB17C4F9AE02.roa (hash: IsnopfiraJYXUMgM3zC6fdbepjtRf+a2njqVEtH3VtA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.crl rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmMtxAKnAveanDaT6cxGxZge6Ow.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:14:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6804 (0x1a94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADBA2, serialNumber=AA632DC402A702F79A9C3693E9CC46C5981EE8EC Validity Not Before: Mar 24 16:14:59 2026 GMT Not After : Mar 31 16:14:59 2026 GMT Subject: CN=69c2b883-0c79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:63:4f:40:03:09:71:bf:09:fe:41:d9:98:fa: 5b:de:e0:c4:8a:b3:53:29:14:c9:50:da:2f:14:d4: ef:83:8d:11:fa:11:8b:c5:71:c3:4b:5a:6d:0c:fb: 6d:51:99:4b:a4:63:bf:53:5e:0d:ba:f4:1c:1f:b6: cb:d1:67:d1:89:75:2b:17:56:95:ca:a7:34:e2:ad: b6:cb:68:36:03:c5:78:9d:5c:d5:9f:78:43:a3:9e: 75:fd:ca:e5:67:3c:6e:32:d4:41:a5:ba:2d:0a:39: 84:f5:a0:c7:b8:c1:cf:7c:8a:33:59:3b:33:a1:8e: 86:3d:be:80:fc:da:58:af:f9:df:bd:b3:a7:3b:07: bb:ea:9a:58:6a:91:b2:fc:b0:45:f2:9d:f5:62:d1: e1:69:d3:d6:8f:bd:ac:e9:b1:0c:8c:fb:02:4a:91: 82:dc:92:7c:2d:7f:23:60:3d:63:93:2b:63:dd:aa: 55:8f:c9:24:69:47:ca:61:d8:33:5a:47:e1:b2:81: a5:a7:69:52:30:ba:ab:57:dd:25:6e:fb:c4:99:d4: c5:dc:6d:d5:64:a7:9b:0d:45:68:70:f7:a3:7b:ad: 85:00:fd:a5:ca:19:3d:0d:81:f5:bd:71:a5:b9:3a: ee:a8:77:36:8d:62:08:a9:90:2c:c3:3f:c2:67:6e: 92:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:CA:85:F9:73:BE:FD:A0:11:6A:47:36:AC:62:AA:BD:2B:31:00:0C X509v3 Authority Key Identifier: keyid:AA:63:2D:C4:02:A7:02:F7:9A:9C:36:93:E9:CC:46:C5:98:1E:E8:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmMtxAKnAveanDaT6cxGxZge6Ow.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:eb:ed:7b:c6:d4:f4:77:cd:d1:1a:72:2b:91:23:fb:d2:74: 63:5e:9c:30:9f:0f:44:e0:5b:e7:39:4f:fe:7b:a8:36:95:7d: 08:71:2c:db:63:5c:a9:be:e6:ba:08:1d:95:ac:c1:1b:0e:49: 84:95:ec:0f:ec:67:ac:a2:a4:94:be:37:31:7b:e0:01:9a:c6: ff:21:2c:c8:13:93:c8:54:e3:69:00:f2:f5:22:f3:ac:ad:5d: ff:31:a3:93:db:83:70:ca:9b:a4:e8:3a:68:d9:ff:18:13:ab: e6:2a:7c:7d:ad:f6:89:57:df:e9:be:09:7a:a3:8b:05:8a:f6: 44:98:7b:34:d7:51:66:f3:f4:32:00:57:bd:1f:37:45:0c:d8: 54:84:82:32:db:a0:6e:e2:4c:fb:95:f6:73:f5:1a:1f:37:26: 07:71:90:4c:58:4e:de:3e:e8:78:fd:c0:c0:00:b1:14:63:93: 8f:23:f7:3b:38:09:20:18:db:89:2d:36:78:ea:93:90:9e:8f: ff:d3:60:3f:30:66:39:b7:a7:9b:43:44:b2:d2:0b:3d:a1:6c: 32:06:68:c4:0a:a4:c9:b7:a3:41:37:27:26:d8:4e:1a:50:32: b0:75:eb:c8:11:e6:98:2c:1a:1a:4d:21:28:cc:29:fb:a8:8b: 05:2b:32:e8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGpQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURCQTIxMTAvBgNVBAUTKEFBNjMyREM0MDJBNzAyRjc5QTlDMzY5M0U5Q0M0NkM1 OTgxRUU4RUMwHhcNMjYwMzI0MTYxNDU5WhcNMjYwMzMxMTYxNDU5WjAYMRYwFAYD VQQDEw02OWMyYjg4My0wYzc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmGNPQAMJcb8J/kHZmPpb3uDEirNTKRTJUNovFNTvg40R+hGLxXHDS1ptDPtt UZlLpGO/U14NuvQcH7bL0WfRiXUrF1aVyqc04q22y2g2A8V4nVzVn3hDo551/crl ZzxuMtRBpbotCjmE9aDHuMHPfIozWTszoY6GPb6A/NpYr/nfvbOnOwe76ppYapGy /LBF8p31YtHhadPWj72s6bEMjPsCSpGC3JJ8LX8jYD1jkytj3apVj8kkaUfKYdgz WkfhsoGlp2lSMLqrV90lbvvEmdTF3G3VZKebDUVocPeje62FAP2lyhk9DYH1vXGl uTruqHc2jWIIqZAswz/CZ26SNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLvKhflz vv2gEWpHNqxiqr0rMQAMMB8GA1UdIwQYMBaAFKpjLcQCpwL3mpw2k+nMRsWYHujs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREJBMi9ENjk1NDQxMjU1 M0IxMUU3QUEwRURFMkFDNEY5QUUwMi9xbU10eEFLbkF2ZWFuRGFUNmN4R3haZ2U2 T3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FtTXR4QUtuQXZlYW5EYVQ2Y3hHeFpnZTZPdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REJBMi9ENjk1NDQxMjU1M0IxMUU3QUEwRURFMkFDNEY5QUUwMi9xbU10eEFLbkF2 ZWFuRGFUNmN4R3haZ2U2T3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALuvte8bU9HfN0RpyK5Ej+9J0Y16cMJ8PROBb5zlP/nuoNpV9CHEs22Ncqb7m uggdlazBGw5JhJXsD+xnrKKklL43MXvgAZrG/yEsyBOTyFTjaQDy9SLzrK1d/zGj k9uDcMqbpOg6aNn/GBOr5ip8fa32iVff6b4JeqOLBYr2RJh7NNdRZvP0MgBXvR83 RQzYVISCMtugbuJM+5X2c/UaHzcmB3GQTFhO3j7oeP3AwACxFGOTjyP3OzgJIBjb iS02eOqTkJ6P/9NgPzBmObenm0NEstILPaFsMgZoxAqkybejQTcnJthOGlAysHXr yBHmmCwaGk0hKMwp+6iLBSsy6A== -----END CERTIFICATE-----Generated at Thu Mar 26 06:25:56 2026 by rpki-client