$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3B89/D8356BACB07411EA87B60F73C4F9AE02/QpCYAlfGdws2CulWLaWJPGDa2nc.mft File: QpCYAlfGdws2CulWLaWJPGDa2nc.mft (raw, json) Hash identifier: Whh73VC4mbdVd/YVdsRfw8btbgO24034yQ7vJb54a9A= Subject key identifier: 41:3B:F5:48:A7:C9:3D:79:DA:91:F2:73:75:22:B2:BE:47:A9:21:06 Authority key identifier: 42:90:98:02:57:C6:77:0B:36:0A:E9:56:2D:A5:89:3C:60:DA:DA:77 Certificate issuer: /CN=A91C3B89/serialNumber=4290980257C6770B360AE9562DA5893C60DADA77 Certificate serial: 096C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpCYAlfGdws2CulWLaWJPGDa2nc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3B89/D8356BACB07411EA87B60F73C4F9AE02/QpCYAlfGdws2CulWLaWJPGDa2nc.mft Manifest number: 096C Signing time: Tue 24 Mar 2026 19:51:03 +0000 Manifest this update: Tue 24 Mar 2026 19:51:02 +0000 Manifest next update: Tue 31 Mar 2026 19:51:02 +0000 Files and hashes: 1: QpCYAlfGdws2CulWLaWJPGDa2nc.crl (hash: P9TNaS2DfUdW8Ot2eGqYbSJE0dx7P9BlKEXKDHEY2RY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3B89/D8356BACB07411EA87B60F73C4F9AE02/QpCYAlfGdws2CulWLaWJPGDa2nc.crl rsync://rpki.apnic.net/member_repository/A91C3B89/D8356BACB07411EA87B60F73C4F9AE02/QpCYAlfGdws2CulWLaWJPGDa2nc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpCYAlfGdws2CulWLaWJPGDa2nc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:51:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2412 (0x96c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3B89, serialNumber=4290980257C6770B360AE9562DA5893C60DADA77 Validity Not Before: Mar 24 19:51:02 2026 GMT Not After : Mar 31 19:51:02 2026 GMT Subject: CN=69c2eb27-35f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3f:28:9a:06:a6:e9:0b:49:d1:f6:d5:32:58: 18:20:ba:1a:a1:99:64:c1:2b:c1:07:de:c2:c8:af: aa:0c:c4:db:9c:f4:d0:50:54:80:33:6e:7b:55:d5: c7:ff:dc:bc:22:fe:45:35:6b:7e:f4:e4:4e:aa:0f: e2:8e:6d:70:55:2b:40:0f:f2:ea:36:dd:39:13:2f: b3:da:b4:94:28:3d:6a:3e:03:37:70:36:1e:54:7b: c8:bc:70:95:97:7c:48:d5:55:77:a6:90:7c:46:4d: f5:6f:62:9a:e4:48:dc:ed:9d:00:a0:b3:4c:2c:90: 99:cc:54:b7:86:fb:a5:3e:6b:7c:9e:11:f7:0b:89: 3f:08:fb:39:27:fd:29:74:a7:59:63:55:7d:b6:01: 79:db:aa:a8:ee:da:5a:da:27:e4:68:35:1a:99:14: 12:83:1e:86:98:fb:e8:47:dc:f0:a4:f3:0f:42:16: de:80:2a:a6:21:7b:28:4c:25:88:9b:71:66:1c:45: 7f:dc:27:9a:9e:bc:e4:2b:5b:60:01:c1:ae:c4:e8: d7:d3:4f:63:99:fc:9f:1e:f7:7e:a3:07:a9:d2:d3: 8a:f1:b6:2b:a5:f9:62:7b:9a:09:54:1c:79:55:a5: ca:77:6b:da:ee:73:c6:dd:9a:55:5e:4e:c2:e3:97: 98:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:3B:F5:48:A7:C9:3D:79:DA:91:F2:73:75:22:B2:BE:47:A9:21:06 X509v3 Authority Key Identifier: keyid:42:90:98:02:57:C6:77:0B:36:0A:E9:56:2D:A5:89:3C:60:DA:DA:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3B89/D8356BACB07411EA87B60F73C4F9AE02/QpCYAlfGdws2CulWLaWJPGDa2nc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpCYAlfGdws2CulWLaWJPGDa2nc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3B89/D8356BACB07411EA87B60F73C4F9AE02/QpCYAlfGdws2CulWLaWJPGDa2nc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:d0:bb:03:2c:17:4a:c0:ad:75:fe:0a:31:b2:33:13:2d:f3: 48:1a:04:2c:4a:8d:06:ab:bf:56:f8:c9:9d:4a:53:22:9e:37: 97:ae:08:25:5b:cb:2d:47:47:0c:8c:0f:13:d5:05:b6:e5:96: 92:18:95:af:6d:46:8e:cb:5b:81:d2:c6:c4:a8:51:2f:fb:2a: be:71:73:d0:c6:a4:23:dd:b0:94:74:3b:64:5d:c0:69:13:12: 6f:e3:6b:20:14:8f:00:dc:a7:61:bb:3b:4d:60:2a:8f:98:ab: 4f:b6:a5:0b:e1:c3:44:ef:20:dc:16:94:2f:87:29:ef:9d:c9: 9d:07:84:89:81:1c:6f:79:0f:5e:45:f3:92:69:c0:8b:d3:fe: f3:65:94:d5:eb:6d:6b:9a:e9:50:a3:3a:67:21:a2:b1:ed:98: 56:a1:a9:dd:70:4b:3d:b3:51:83:22:da:a8:09:aa:ae:5f:e9: 0f:71:70:10:20:dc:a7:2d:86:45:0a:51:89:61:10:29:7d:9a: 3d:ab:f6:b5:95:31:de:8f:47:42:8b:bb:fb:78:47:55:ec:e7: fb:9b:b7:d2:dd:d4:b5:3f:d6:fe:4e:4c:37:41:ea:66:72:c4: de:cc:1f:a1:81:3b:73:6f:10:a9:d7:c2:53:78:44:9c:86:75: be:88:1f:78 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNCODkxMTAvBgNVBAUTKDQyOTA5ODAyNTdDNjc3MEIzNjBBRTk1NjJEQTU4OTND NjBEQURBNzcwHhcNMjYwMzI0MTk1MTAyWhcNMjYwMzMxMTk1MTAyWjAYMRYwFAYD VQQDEw02OWMyZWIyNy0zNWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtj8omgam6QtJ0fbVMlgYILoaoZlkwSvBB97CyK+qDMTbnPTQUFSAM257VdXH /9y8Iv5FNWt+9OROqg/ijm1wVStAD/LqNt05Ey+z2rSUKD1qPgM3cDYeVHvIvHCV l3xI1VV3ppB8Rk31b2Ka5Ejc7Z0AoLNMLJCZzFS3hvulPmt8nhH3C4k/CPs5J/0p dKdZY1V9tgF526qo7tpa2ifkaDUamRQSgx6GmPvoR9zwpPMPQhbegCqmIXsoTCWI m3FmHEV/3CeanrzkK1tgAcGuxOjX009jmfyfHvd+owep0tOK8bYrpflie5oJVBx5 VaXKd2va7nPG3ZpVXk7C45eY8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEE79Uin yT152pHyc3Uisr5HqSEGMB8GA1UdIwQYMBaAFEKQmAJXxncLNgrpVi2liTxg2tp3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0I4OS9EODM1NkJBQ0Iw NzQxMUVBODdCNjBGNzNDNEY5QUUwMi9RcENZQWxmR2R3czJDdWxXTGFXSlBHRGEy bmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FwQ1lBbGZHZHdzMkN1bFdMYVdKUEdEYTJuYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0I4OS9EODM1NkJBQ0IwNzQxMUVBODdCNjBGNzNDNEY5QUUwMi9RcENZQWxmR2R3 czJDdWxXTGFXSlBHRGEybmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAdC7AywXSsCtdf4KMbIzEy3zSBoELEqNBqu/VvjJnUpTIp43l64IJVvLLUdH DIwPE9UFtuWWkhiVr21GjstbgdLGxKhRL/sqvnFz0MakI92wlHQ7ZF3AaRMSb+Nr IBSPANynYbs7TWAqj5irT7alC+HDRO8g3BaUL4cp753JnQeEiYEcb3kPXkXzkmnA i9P+82WU1etta5rpUKM6ZyGise2YVqGp3XBLPbNRgyLaqAmqrl/pD3FwECDcpy2G RQpRiWEQKX2aPav2tZUx3o9HQou7+3hHVezn+5u30t3UtT/W/k5MN0HqZnLE3swf oYE7c28QqdfCU3hEnIZ1vogfeA== -----END CERTIFICATE-----Generated at Thu Mar 26 08:29:44 2026 by rpki-client