$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft File: sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft (raw, json) Hash identifier: WqhcBtFp8O+lyi1cH7nIQVDjGaWmq4WY9R8pZEfpD3g= Subject key identifier: F4:99:53:34:6D:C4:37:CE:64:86:C1:1F:93:C1:E5:3A:EC:3C:F5:24 Authority key identifier: B2:A2:5D:DE:1A:9E:C9:1B:59:98:6A:53:2F:78:83:54:36:18:32:48 Certificate issuer: /CN=A91BC966/serialNumber=B2A25DDE1A9EC91B59986A532F78835436183248 Certificate serial: 0CC8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqJd3hqeyRtZmGpTL3iDVDYYMkg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft Manifest number: 0C93 Signing time: Tue 24 Mar 2026 18:28:06 +0000 Manifest this update: Tue 24 Mar 2026 18:28:05 +0000 Manifest next update: Tue 31 Mar 2026 18:28:05 +0000 Files and hashes: 1: sqJd3hqeyRtZmGpTL3iDVDYYMkg.crl (hash: OefjcZHDtY+L7bLDouPKRe/shw5//V+FGnnXYhzGzdo=) 2: 5DA849821C1211EA819EA46EC4F9AE02.roa (hash: eCHx5TEwPytpGbIBlZulCq7A1nRaBvbKK495Pm+3Ngg=) 3: A6A53FA2D67E11EEAA2CA218C4F9AE02.roa (hash: BRmPmtc5QBOF2VogbiXT+Z/yISNL/WKoFANPMdmFsXw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.crl rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqJd3hqeyRtZmGpTL3iDVDYYMkg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:28:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3272 (0xcc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC966, serialNumber=B2A25DDE1A9EC91B59986A532F78835436183248 Validity Not Before: Mar 24 18:28:05 2026 GMT Not After : Mar 31 18:28:05 2026 GMT Subject: CN=69c2d7b6-b4b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:de:52:79:17:c7:1e:78:e1:db:2b:8c:19:94: a2:4b:78:0f:c9:a0:4c:d2:b7:8e:dc:1d:c1:0f:34: 17:15:2e:1c:82:ad:1c:f9:b0:df:3f:78:e7:27:a0: 4d:39:38:9e:bb:fe:07:47:70:e4:2f:05:35:d2:f0: fe:98:3f:5e:83:d8:20:dd:56:19:d4:2e:92:10:f0: 90:e8:54:81:51:4b:01:8a:3b:1b:bb:b7:e0:78:b5: 94:01:dc:ab:f9:8e:ae:32:c0:ce:d6:39:5e:56:41: 72:f1:7f:20:f5:4d:88:a3:f7:e8:cb:3a:01:f0:64: 7f:02:60:54:40:77:df:80:fc:8f:61:e6:08:bc:ce: c2:bc:4e:8f:3f:75:fe:50:db:33:36:fe:ba:d8:33: 95:82:07:81:61:12:dc:c4:35:1c:0a:e5:94:c6:68: 35:0f:94:88:9d:a4:9a:3e:76:12:8f:d2:61:66:a9: c8:77:7a:20:a4:fc:28:f6:6b:ff:e7:7a:6d:6f:9f: 8c:e7:92:5a:d2:33:6c:57:4d:e4:f3:3e:3c:67:08: 1d:e1:c5:55:89:89:5d:cd:76:2e:00:4a:73:e0:a9: 41:f3:6f:72:05:7c:67:11:5b:56:dd:d7:56:1d:61: c5:fa:45:a4:b2:91:54:1d:16:da:6a:21:4f:e4:4a: b4:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:99:53:34:6D:C4:37:CE:64:86:C1:1F:93:C1:E5:3A:EC:3C:F5:24 X509v3 Authority Key Identifier: keyid:B2:A2:5D:DE:1A:9E:C9:1B:59:98:6A:53:2F:78:83:54:36:18:32:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqJd3hqeyRtZmGpTL3iDVDYYMkg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:87:87:81:1b:68:d5:65:81:46:81:a1:5f:ec:29:41:33:77: ca:f5:60:04:f4:d1:17:17:16:99:9c:39:f0:01:93:a1:bb:6b: 78:ea:07:bb:bc:62:49:92:be:7c:e3:19:db:ae:d7:af:3d:de: 5a:c0:40:03:14:fd:17:f3:c2:9d:f1:fe:ae:a1:37:7d:17:9c: 08:f5:41:f6:4a:06:ff:ab:eb:71:b6:57:9b:71:1f:71:e3:2d: ff:72:f0:37:54:7c:eb:8a:29:00:98:91:f5:8d:d8:89:8b:29: cd:33:86:db:f6:6a:96:ab:04:c1:22:7a:bb:e4:36:7b:72:ae: 6d:a8:ea:d2:23:06:8d:80:6a:22:f2:6c:cd:90:c7:36:fb:8a: cb:e2:7b:6a:0d:6f:b7:1f:a1:f8:c0:fe:0a:4f:37:aa:30:fe: 04:00:e6:15:1f:b7:ac:7c:28:9e:85:09:29:8c:7b:fb:2f:76: 2b:ee:5e:2e:e0:8e:4e:27:f3:0a:24:0b:a6:29:02:92:0b:53: 4f:3f:ba:9b:d0:9e:6e:d3:57:83:7b:93:40:fc:17:fe:5d:b9: 98:c7:ea:51:4f:a6:ef:89:16:1c:44:4f:f9:e0:f4:50:53:5a: 84:81:fe:9e:d6:eb:93:d6:1a:c9:01:31:13:f3:51:91:37:62: 43:7d:ac:d4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM5NjYxMTAvBgNVBAUTKEIyQTI1RERFMUE5RUM5MUI1OTk4NkE1MzJGNzg4MzU0 MzYxODMyNDgwHhcNMjYwMzI0MTgyODA1WhcNMjYwMzMxMTgyODA1WjAYMRYwFAYD VQQDEw02OWMyZDdiNi1iNGI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwd5SeRfHHnjh2yuMGZSiS3gPyaBM0reO3B3BDzQXFS4cgq0c+bDfP3jnJ6BN OTieu/4HR3DkLwU10vD+mD9eg9gg3VYZ1C6SEPCQ6FSBUUsBijsbu7fgeLWUAdyr +Y6uMsDO1jleVkFy8X8g9U2Io/foyzoB8GR/AmBUQHffgPyPYeYIvM7CvE6PP3X+ UNszNv662DOVggeBYRLcxDUcCuWUxmg1D5SInaSaPnYSj9JhZqnId3ogpPwo9mv/ 53ptb5+M55Ja0jNsV03k8z48Zwgd4cVViYldzXYuAEpz4KlB829yBXxnEVtW3ddW HWHF+kWkspFUHRbaaiFP5Eq0/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPSZUzRt xDfOZIbBH5PB5TrsPPUkMB8GA1UdIwQYMBaAFLKiXd4anskbWZhqUy94g1Q2GDJI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzk2Ni9BMTk1MkJBMjFD MTExMUVBQjZDM0M3NkRDNEY5QUUwMi9zcUpkM2hxZXlSdFptR3BUTDNpRFZEWVlN a2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NxSmQzaHFleVJ0Wm1HcFRMM2lEVkRZWU1rZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Qzk2Ni9BMTk1MkJBMjFDMTExMUVBQjZDM0M3NkRDNEY5QUUwMi9zcUpkM2hxZXlS dFptR3BUTDNpRFZEWVlNa2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJYeHgRto1WWBRoGhX+wpQTN3yvVgBPTRFxcWmZw58AGTobtreOoHu7xiSZK+ fOMZ267Xrz3eWsBAAxT9F/PCnfH+rqE3fRecCPVB9koG/6vrcbZXm3EfceMt/3Lw N1R864opAJiR9Y3YiYspzTOG2/ZqlqsEwSJ6u+Q2e3Kubajq0iMGjYBqIvJszZDH NvuKy+J7ag1vtx+h+MD+Ck83qjD+BADmFR+3rHwonoUJKYx7+y92K+5eLuCOTifz CiQLpikCkgtTTz+6m9CebtNXg3uTQPwX/l25mMfqUU+m74kWHERP+eD0UFNahIH+ ntbrk9YayQExE/NRkTdiQ32s1A== -----END CERTIFICATE-----Generated at Thu Mar 26 07:30:18 2026 by rpki-client