$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft File: q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft (raw, json) Hash identifier: GMs6nA66Vy3FefZfMzuQoKa/0SXwnoAisTQdqZzva0o= Subject key identifier: E7:F0:33:F9:02:68:B4:24:54:C8:3A:03:07:DE:70:1C:BC:28:44:29 Authority key identifier: AB:67:E8:2F:C8:6A:AC:A8:2A:CF:F8:DC:36:45:CD:71:61:01:3F:76 Certificate issuer: /CN=A91D1E4C/serialNumber=AB67E82FC86AACA82ACFF8DC3645CD7161013F76 Certificate serial: 039A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft Manifest number: 0C30 Signing time: Tue 24 Mar 2026 20:13:15 +0000 Manifest this update: Tue 24 Mar 2026 20:13:14 +0000 Manifest next update: Tue 31 Mar 2026 20:13:14 +0000 Files and hashes: 1: q2foL8hqrKgqz_jcNkXNcWEBP3Y.crl (hash: kocfZn+/NuDSFB/YAYDmiUZZ0aNUHfZQR+frS0PGQb0=) 2: 3DD8C628940111F09204AF71C4F9AE02.roa (hash: rKjGeR3bW3KsKLNlokaXVqhFpQOnZispIcGW123rOaY=) 3: FC358296CFA011EDA4AC5B18C4F9AE02.roa (hash: XL/ZcgALP761TCI8hEan3K78GIrb6EiGTeA4Vn2wUJI=) 4: 2AD1C746940111F0B07D7068C4F9AE02.roa (hash: AIsLYj1Q0Ri7p3sC6uZCzxYzj0O4+4SA75lfHau1SqU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.crl rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:13:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 922 (0x39a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1E4C, serialNumber=AB67E82FC86AACA82ACFF8DC3645CD7161013F76 Validity Not Before: Mar 24 20:13:14 2026 GMT Not After : Mar 31 20:13:14 2026 GMT Subject: CN=69c2f05a-8208 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:63:06:50:99:f7:05:1d:0b:58:c2:19:bc:3d: fe:29:94:24:f1:6e:c4:72:14:e7:4c:e2:04:20:98: af:81:1a:24:0a:26:55:0c:45:6a:0f:bc:0f:cd:fb: 12:f2:28:91:3d:44:6b:76:4c:31:76:3c:8f:f5:43: 35:d3:15:df:e2:ce:7b:75:c3:ab:cf:c1:24:11:3b: 76:ef:a0:67:89:9f:7c:e5:11:a0:4e:59:c6:db:73: 4c:b9:e0:a4:b8:46:70:2e:06:32:64:d3:f9:41:74: 9d:22:bd:12:7f:82:1e:19:fc:93:f9:98:98:08:68: 05:be:58:42:e8:46:4b:22:57:41:a5:33:6b:ed:15: fd:04:19:0b:3b:77:7b:92:5e:64:30:e4:f5:35:92: 2c:c6:7c:36:a9:78:aa:97:c2:f0:cc:06:2a:7a:a9: cf:64:51:e0:72:2e:80:e1:65:03:b5:83:50:0d:53: f3:8d:3d:47:f1:81:ba:98:9f:b8:db:e4:03:cb:ea: 6a:51:41:56:0c:a9:8a:7c:c2:89:27:9c:28:9b:04: 4f:1a:ba:40:85:6c:d2:24:d8:c2:6e:d2:22:f7:b4: 60:d8:85:19:a0:78:3a:1a:71:32:aa:9d:6b:09:d3: d9:1b:f0:b6:93:5e:07:5d:1d:02:59:21:08:f3:85: b1:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:F0:33:F9:02:68:B4:24:54:C8:3A:03:07:DE:70:1C:BC:28:44:29 X509v3 Authority Key Identifier: keyid:AB:67:E8:2F:C8:6A:AC:A8:2A:CF:F8:DC:36:45:CD:71:61:01:3F:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:dc:1e:cd:eb:49:f4:54:93:f1:3e:6b:db:fc:30:98:d3:fb: b4:ca:13:89:2e:04:fe:18:6e:03:a1:39:50:f4:84:ba:64:c1: 6d:49:4f:d5:ac:b1:93:b7:e1:fc:4f:8d:1d:0f:43:d1:c2:7a: e1:c1:21:ee:f8:af:c4:64:31:e1:7d:fc:b0:27:70:7d:9d:b5: 98:0b:a7:6c:ad:21:fc:59:14:99:38:0e:b3:88:9d:56:80:53: f0:ce:6c:11:a5:12:2f:63:38:30:dd:eb:06:1d:2e:0e:33:18: c4:69:ac:9b:e9:90:9d:71:7a:9c:71:28:27:0a:6e:a7:65:02: f0:37:6a:4b:07:71:4c:4c:6c:fc:92:f7:fe:1a:6e:9d:32:c8: 81:06:eb:9c:54:9f:50:f2:bd:bf:69:d0:e5:b5:cb:d6:b2:a9: 52:20:e4:fb:24:23:c3:d5:4e:67:fa:af:53:16:03:3f:63:8e: 8c:2b:ad:f5:6f:35:a4:16:6e:80:38:f7:6d:bc:47:2e:35:6f: 3e:bf:fb:2e:13:84:9d:ba:cb:5e:5c:c8:14:ba:58:ab:4e:5f: c3:88:16:03:4c:89:2f:24:2b:06:67:68:6a:e4:06:55:9e:fe: 4f:f3:6b:7c:65:f4:54:89:0e:21:7c:61:02:f3:f4:a0:3a:30: 43:e6:f8:fd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA5owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFFNEMxMTAvBgNVBAUTKEFCNjdFODJGQzg2QUFDQTgyQUNGRjhEQzM2NDVDRDcx NjEwMTNGNzYwHhcNMjYwMzI0MjAxMzE0WhcNMjYwMzMxMjAxMzE0WjAYMRYwFAYD VQQDEw02OWMyZjA1YS04MjA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu2MGUJn3BR0LWMIZvD3+KZQk8W7EchTnTOIEIJivgRokCiZVDEVqD7wPzfsS 8iiRPURrdkwxdjyP9UM10xXf4s57dcOrz8EkETt276BniZ985RGgTlnG23NMueCk uEZwLgYyZNP5QXSdIr0Sf4IeGfyT+ZiYCGgFvlhC6EZLIldBpTNr7RX9BBkLO3d7 kl5kMOT1NZIsxnw2qXiql8LwzAYqeqnPZFHgci6A4WUDtYNQDVPzjT1H8YG6mJ+4 2+QDy+pqUUFWDKmKfMKJJ5womwRPGrpAhWzSJNjCbtIi97Rg2IUZoHg6GnEyqp1r CdPZG/C2k14HXR0CWSEI84WxDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOfwM/kC aLQkVMg6AwfecBy8KEQpMB8GA1UdIwQYMBaAFKtn6C/IaqyoKs/43DZFzXFhAT92 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUU0Qy83REFEQTU2Q0Q5 NEQxMUVBQTYwNEFDNTNDNEY5QUUwMi9xMmZvTDhocXJLZ3F6X2pjTmtYTmNXRUJQ M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3EyZm9MOGhxcktncXpfamNOa1hOY1dFQlAzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUU0Qy83REFEQTU2Q0Q5NEQxMUVBQTYwNEFDNTNDNEY5QUUwMi9xMmZvTDhocXJL Z3F6X2pjTmtYTmNXRUJQM1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAN9wezetJ9FST8T5r2/wwmNP7tMoTiS4E/hhuA6E5UPSEumTBbUlP1ayxk7fh /E+NHQ9D0cJ64cEh7vivxGQx4X38sCdwfZ21mAunbK0h/FkUmTgOs4idVoBT8M5s EaUSL2M4MN3rBh0uDjMYxGmsm+mQnXF6nHEoJwpup2UC8DdqSwdxTExs/JL3/hpu nTLIgQbrnFSfUPK9v2nQ5bXL1rKpUiDk+yQjw9VOZ/qvUxYDP2OOjCut9W81pBZu gDj3bbxHLjVvPr/7LhOEnbrLXlzIFLpYq05fw4gWA0yJLyQrBmdoauQGVZ7+T/Nr fGX0VIkOIXxhAvP0oDowQ+b4/Q== -----END CERTIFICATE-----Generated at Thu Mar 26 06:05:00 2026 by rpki-client