$ rpki-client -vvf rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.mft File: QeXcIVUGn_MX5e44x1t4icIhl-M.mft (raw, json) Hash identifier: 7Cc3CgyNuWRKM2O4+R5ztJN5kaBFM1dIFcUbfrLb6C4= Subject key identifier: FD:A1:6C:CA:03:DB:CC:2F:4D:E4:68:F0:D2:2E:48:7A:52:B6:5E:81 Authority key identifier: 41:E5:DC:21:55:06:9F:F3:17:E5:EE:38:C7:5B:78:89:C2:21:97:E3 Certificate issuer: /CN=A91B72D9/serialNumber=41E5DC2155069FF317E5EE38C75B7889C22197E3 Certificate serial: 04E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeXcIVUGn_MX5e44x1t4icIhl-M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.mft Manifest number: 04C8 Signing time: Tue 24 Mar 2026 23:36:24 +0000 Manifest this update: Tue 24 Mar 2026 23:36:23 +0000 Manifest next update: Tue 31 Mar 2026 23:36:23 +0000 Files and hashes: 1: QeXcIVUGn_MX5e44x1t4icIhl-M.crl (hash: mAH3sWPC1mYxZmIh6dw/liHj2LGXfj1Yp3mbWyn5umM=) 2: 43E6BE1AF53411EF9DE3BD34C4F9AE02.roa (hash: 0Bo2hHPRP76nejRj/EVVT9FzU9vQs0YDaVNN7sh0ZdQ=) 3: 4FD9C050F53411EFBF7FCA34C4F9AE02.roa (hash: 4j2H8uU7/aRuPDnI28o6Sv8nL9kjvWfBPDjQZsso1iI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.crl rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeXcIVUGn_MX5e44x1t4icIhl-M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:36:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1250 (0x4e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B72D9, serialNumber=41E5DC2155069FF317E5EE38C75B7889C22197E3 Validity Not Before: Mar 24 23:36:23 2026 GMT Not After : Mar 31 23:36:23 2026 GMT Subject: CN=69c31ff8-c3e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:db:f4:9e:02:df:76:2d:fa:bb:aa:32:43:89: 90:af:a8:63:6b:f2:55:c7:d4:98:66:40:c5:f9:9c: 70:00:a3:b0:a5:dd:42:fa:1a:95:88:8e:ae:8a:fa: ef:d0:cb:01:ff:8e:df:d2:f5:27:00:83:19:e7:8d: ec:94:99:3f:d5:2b:ec:3c:d2:3c:28:ef:33:df:8f: 4b:ce:4c:29:64:10:46:4a:c5:a5:4b:74:d5:47:4a: 9f:15:80:c7:73:8c:3c:43:86:21:47:07:c5:bc:d7: 49:02:d0:fe:25:82:71:54:68:94:78:eb:fb:a7:f3: ee:e0:87:11:de:40:46:a0:4b:2f:16:88:6f:83:0a: 5b:0a:44:5f:e4:19:63:85:78:59:12:92:76:10:c0: 94:18:eb:4b:00:90:3f:1c:06:d4:1f:c3:0b:c3:e9: 28:fd:17:fd:05:e8:5f:f9:5f:d9:99:45:40:44:46: 95:6c:da:a0:2f:46:eb:c2:44:15:2d:73:e3:97:8b: b5:c6:c1:24:41:7d:58:61:0f:15:c9:0a:33:f6:bc: 7b:61:a4:97:64:ce:dc:ec:38:81:9e:15:fb:f2:da: a9:40:ea:cb:29:15:86:bb:67:0c:5b:c8:eb:26:db: 46:76:91:2f:91:3e:a8:b2:78:94:4e:51:96:d4:94: 01:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:A1:6C:CA:03:DB:CC:2F:4D:E4:68:F0:D2:2E:48:7A:52:B6:5E:81 X509v3 Authority Key Identifier: keyid:41:E5:DC:21:55:06:9F:F3:17:E5:EE:38:C7:5B:78:89:C2:21:97:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeXcIVUGn_MX5e44x1t4icIhl-M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:4a:98:73:11:93:73:20:d0:69:d2:83:0f:9c:8d:f1:15:c3: 6a:84:4c:32:8e:e0:83:86:47:bb:ae:cc:80:64:4e:e5:0a:d1: 52:9a:a9:ed:92:8f:94:78:54:c7:b6:60:b1:94:0f:7b:e9:17: e2:4c:18:ff:63:a6:2a:36:b1:6a:79:90:bb:00:35:90:22:ea: b3:66:32:a7:a6:98:5d:17:33:42:d3:6b:a9:0c:58:b9:b2:8b: ab:c3:3f:69:3a:e6:4d:1d:5f:55:c7:13:de:2e:5a:67:51:62: 50:3f:a4:44:7f:56:f5:37:33:f1:4e:5c:c5:14:bc:d6:78:7b: c4:74:08:56:d3:d6:5e:98:b3:68:fa:aa:26:ca:ac:5b:46:2a: 0f:f8:72:0a:91:47:85:00:84:be:d2:ca:0c:1e:b0:4b:c2:0d: 21:0d:ee:ac:bb:50:12:3c:bc:0b:6e:81:de:8c:15:9c:eb:71: 83:ab:92:40:b7:da:df:f5:16:88:28:82:6d:27:f6:e9:98:ae: 1b:e3:e6:3a:7f:ab:de:0b:a5:77:30:71:ba:7d:48:19:a0:91: c4:35:22:4f:b0:18:30:d1:a1:04:31:8f:91:75:2f:e5:e2:2a: db:82:18:1c:83:ed:01:bc:f3:03:c4:9c:fa:b3:63:3b:42:9d: 31:d4:79:54 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjcyRDkxMTAvBgNVBAUTKDQxRTVEQzIxNTUwNjlGRjMxN0U1RUUzOEM3NUI3ODg5 QzIyMTk3RTMwHhcNMjYwMzI0MjMzNjIzWhcNMjYwMzMxMjMzNjIzWjAYMRYwFAYD VQQDEw02OWMzMWZmOC1jM2U3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtNv0ngLfdi36u6oyQ4mQr6hja/JVx9SYZkDF+ZxwAKOwpd1C+hqViI6uivrv 0MsB/47f0vUnAIMZ543slJk/1SvsPNI8KO8z349LzkwpZBBGSsWlS3TVR0qfFYDH c4w8Q4YhRwfFvNdJAtD+JYJxVGiUeOv7p/Pu4IcR3kBGoEsvFohvgwpbCkRf5Blj hXhZEpJ2EMCUGOtLAJA/HAbUH8MLw+ko/Rf9Behf+V/ZmUVAREaVbNqgL0brwkQV LXPjl4u1xsEkQX1YYQ8VyQoz9rx7YaSXZM7c7DiBnhX78tqpQOrLKRWGu2cMW8jr JttGdpEvkT6osniUTlGW1JQBcwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP2hbMoD 28wvTeRo8NIuSHpStl6BMB8GA1UdIwQYMBaAFEHl3CFVBp/zF+XuOMdbeInCIZfj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzJEOS9BQTIzRkE5NjY5 NzExMUVDQjYyNTkzMENDNEY5QUUwMi9RZVhjSVZVR25fTVg1ZTQ0eDF0NGljSWhs LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FlWGNJVlVHbl9NWDVlNDR4MXQ0aWNJaGwtTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzJEOS9BQTIzRkE5NjY5NzExMUVDQjYyNTkzMENDNEY5QUUwMi9RZVhjSVZVR25f TVg1ZTQ0eDF0NGljSWhsLU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALkqYcxGTcyDQadKDD5yN8RXDaoRMMo7gg4ZHu67MgGRO5QrRUpqp7ZKPlHhU x7ZgsZQPe+kX4kwY/2OmKjaxanmQuwA1kCLqs2Yyp6aYXRczQtNrqQxYubKLq8M/ aTrmTR1fVccT3i5aZ1FiUD+kRH9W9Tcz8U5cxRS81nh7xHQIVtPWXpizaPqqJsqs W0YqD/hyCpFHhQCEvtLKDB6wS8INIQ3urLtQEjy8C26B3owVnOtxg6uSQLfa3/UW iCiCbSf26ZiuG+PmOn+r3guldzBxun1IGaCRxDUiT7AYMNGhBDGPkXUv5eIq24IY HIPtAbzzA8Sc+rNjO0KdMdR5VA== -----END CERTIFICATE-----Generated at Thu Mar 26 00:51:18 2026 by rpki-client