$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB6E8/32E34DEEAE2B11F098EA2E85C4F9AE02/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.mft File: 1Qh-tx-4EvEAL_iEsvnVbjvdTPI.mft (raw, json) Hash identifier: 1bsEAKLK+k/Jt0NnOQjO/NAbj7yf25sIWYWC8f5oocY= Subject key identifier: C1:1C:26:9E:F2:64:71:02:1E:32:65:63:79:F2:93:1C:2E:19:F4:BD Authority key identifier: D5:08:7E:B7:1F:B8:12:F1:00:2F:F8:84:B2:F9:D5:6E:3B:DD:4C:F2 Certificate issuer: /CN=A91CB6E8/serialNumber=D5087EB71FB812F1002FF884B2F9D56E3BDD4CF2 Certificate serial: 53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB6E8/32E34DEEAE2B11F098EA2E85C4F9AE02/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.mft Manifest number: 53 Signing time: Wed 25 Mar 2026 07:23:06 +0000 Manifest this update: Wed 25 Mar 2026 07:23:06 +0000 Manifest next update: Wed 01 Apr 2026 07:23:06 +0000 Files and hashes: 1: 1Qh-tx-4EvEAL_iEsvnVbjvdTPI.crl (hash: aKlbNuLeVFuabMkW7/5VeBiwkjf01POoFinrvIzf5ws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB6E8/32E34DEEAE2B11F098EA2E85C4F9AE02/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.crl rsync://rpki.apnic.net/member_repository/A91CB6E8/32E34DEEAE2B11F098EA2E85C4F9AE02/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:23:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 83 (0x53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB6E8, serialNumber=D5087EB71FB812F1002FF884B2F9D56E3BDD4CF2 Validity Not Before: Mar 25 07:23:06 2026 GMT Not After : Apr 1 07:23:06 2026 GMT Subject: CN=69c38d5a-8f12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ec:b4:f6:59:11:01:b8:0f:e4:3a:7d:43:b3: c7:c5:aa:e7:05:0f:ef:da:c7:2a:d4:51:9f:dd:94: c6:da:1e:60:37:e9:02:b7:b1:37:d4:e0:ab:5b:3d: ab:e0:a4:cf:f7:b9:6d:84:72:55:02:18:1b:a7:29: aa:4e:19:4e:ad:40:f5:19:22:5e:f7:82:c0:68:7a: d2:5d:6f:05:9d:a4:b0:ae:7e:45:84:1b:cd:58:e3: ea:89:ab:8c:2b:17:9b:69:c7:fd:90:bd:c9:ea:af: c5:c1:a6:16:4d:d3:3d:c5:d3:9d:66:71:85:a6:22: c0:8f:e1:b9:0d:e6:05:f8:74:81:a1:72:99:9a:5f: 6b:23:18:77:58:f1:09:94:4d:00:92:d0:e5:3a:a2: 90:76:dc:77:1e:33:57:52:f5:d6:82:24:ca:64:da: 8c:f6:26:c6:a3:51:0f:ec:af:5d:2d:14:c8:fc:ed: 92:fe:27:43:d3:cc:ab:d1:a9:a8:0a:8e:3d:78:6c: 7a:45:b0:63:86:52:f2:a4:81:1c:73:33:6a:01:85: 79:0a:78:ae:8f:1e:ea:fb:c2:2d:ea:70:10:a5:b7: c2:fd:70:fd:2c:53:f3:11:95:cd:59:80:c2:d6:25: 65:13:3e:e6:c5:74:46:34:d5:ff:08:39:db:a0:4a: dd:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:1C:26:9E:F2:64:71:02:1E:32:65:63:79:F2:93:1C:2E:19:F4:BD X509v3 Authority Key Identifier: keyid:D5:08:7E:B7:1F:B8:12:F1:00:2F:F8:84:B2:F9:D5:6E:3B:DD:4C:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB6E8/32E34DEEAE2B11F098EA2E85C4F9AE02/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB6E8/32E34DEEAE2B11F098EA2E85C4F9AE02/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:20:17:c7:4a:90:2b:aa:6e:31:fd:cf:8e:de:38:9c:22:9b: b3:23:35:67:64:38:0c:7d:84:3b:04:40:7c:58:30:62:ae:ae: 83:be:1a:c7:a9:e8:d1:27:75:96:0b:07:22:24:75:e5:8d:e3: 20:79:c7:a5:be:39:ea:07:08:49:71:53:43:c5:37:61:82:1c: f4:0e:f2:b9:d6:03:ff:24:4b:84:11:13:eb:6f:94:77:a0:26: f6:95:2e:af:e8:36:eb:12:dc:93:e2:cf:c7:cf:16:46:43:33: 7e:8f:f8:c5:1b:17:82:55:31:b4:d7:d8:76:f1:88:d5:81:bb: 9b:c1:6a:7c:be:9d:ca:6f:d4:f3:58:23:d2:c0:57:3e:73:8f: 4f:d1:da:e8:5f:97:cd:23:1b:00:01:9c:80:65:7f:c3:c7:46: cd:63:2f:03:a3:d2:d7:48:dd:c9:90:ba:9e:64:e8:22:7e:cd: c3:8c:f1:79:7c:75:a5:af:8c:66:e7:5c:49:d0:ca:ec:b8:1d: 94:26:bc:d9:d1:08:6b:e1:7f:6a:98:f8:29:82:64:6f:87:ce: 8f:a9:70:c1:2e:63:fc:b4:4f:a0:64:82:72:a8:75:86:36:b3: f8:99:ff:1a:23:52:33:c0:4e:be:e4:4e:d2:59:80:82:ca:cf: 6d:27:ec:c8 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QjZFODExMC8GA1UEBRMoRDUwODdFQjcxRkI4MTJGMTAwMkZGODg0QjJGOUQ1NkUz QkRENENGMjAeFw0yNjAzMjUwNzIzMDZaFw0yNjA0MDEwNzIzMDZaMBgxFjAUBgNV BAMTDTY5YzM4ZDVhLThmMTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCu7LT2WREBuA/kOn1Ds8fFqucFD+/axyrUUZ/dlMbaHmA36QK3sTfU4KtbPavg pM/3uW2EclUCGBunKapOGU6tQPUZIl73gsBoetJdbwWdpLCufkWEG81Y4+qJq4wr F5tpx/2Qvcnqr8XBphZN0z3F051mcYWmIsCP4bkN5gX4dIGhcpmaX2sjGHdY8QmU TQCS0OU6opB23HceM1dS9daCJMpk2oz2JsajUQ/sr10tFMj87ZL+J0PTzKvRqagK jj14bHpFsGOGUvKkgRxzM2oBhXkKeK6PHur7wi3qcBClt8L9cP0sU/MRlc1ZgMLW JWUTPubFdEY01f8IOdugSt2ZAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUwRwmnvJk cQIeMmVjefKTHC4Z9L0wHwYDVR0jBBgwFoAU1Qh+tx+4EvEAL/iEsvnVbjvdTPIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNCNkU4LzMyRTM0REVFQUUy QjExRjA5OEVBMkU4NUM0RjlBRTAyLzFRaC10eC00RXZFQUxfaUVzdm5WYmp2ZFRQ SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMVFoLXR4LTRFdkVBTF9pRXN2blZianZkVFBJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNC NkU4LzMyRTM0REVFQUUyQjExRjA5OEVBMkU4NUM0RjlBRTAyLzFRaC10eC00RXZF QUxfaUVzdm5WYmp2ZFRQSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAAIBfHSpArqm4x/c+O3jicIpuzIzVnZDgMfYQ7BEB8WDBirq6DvhrHqejRJ3WW CwciJHXljeMgecelvjnqBwhJcVNDxTdhghz0DvK51gP/JEuEERPrb5R3oCb2lS6v 6DbrEtyT4s/HzxZGQzN+j/jFGxeCVTG019h28YjVgbubwWp8vp3Kb9TzWCPSwFc+ c49P0droX5fNIxsAAZyAZX/Dx0bNYy8Do9LXSN3JkLqeZOgifs3DjPF5fHWlr4xm 51xJ0MrsuB2UJrzZ0Qhr4X9qmPgpgmRvh86PqXDBLmP8tE+gZIJyqHWGNrP4mf8a I1IzwE6+5E7SWYCCys9tJ+zI -----END CERTIFICATE-----Generated at Thu Mar 26 05:55:25 2026 by rpki-client