$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft File: qjXi-Xe1XnL5FjW_fVO861NHmDs.mft (raw, json) Hash identifier: txtbrJ/dhHwsWAJ5eky5wV3xoXTnFs9JW2Sv5jx6BPY= Subject key identifier: 70:65:32:02:D9:6F:02:C0:54:76:2C:35:98:84:A2:14:DC:53:B3:B9 Authority key identifier: AA:35:E2:F9:77:B5:5E:72:F9:16:35:BF:7D:53:BC:EB:53:47:98:3B Certificate issuer: /CN=A91D2C38/serialNumber=AA35E2F977B55E72F91635BF7D53BCEB5347983B Certificate serial: 0104 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjXi-Xe1XnL5FjW_fVO861NHmDs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft Manifest number: FC Signing time: Wed 25 Mar 2026 05:25:13 +0000 Manifest this update: Wed 25 Mar 2026 05:25:12 +0000 Manifest next update: Wed 01 Apr 2026 05:25:12 +0000 Files and hashes: 1: qjXi-Xe1XnL5FjW_fVO861NHmDs.crl (hash: k+ZF4MQBsgfjSfuOASCTOeta+W3xy0+EZn8jaOtRqv0=) 2: 8D6B6D86A98C11EFAAC0F364C4F9AE02.roa (hash: hAmO+Dq9vGZAILDadtbesaeJmrxEB8UrXmpWc1/KCyg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.crl rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjXi-Xe1XnL5FjW_fVO861NHmDs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:25:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 260 (0x104) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2C38, serialNumber=AA35E2F977B55E72F91635BF7D53BCEB5347983B Validity Not Before: Mar 25 05:25:12 2026 GMT Not After : Apr 1 05:25:12 2026 GMT Subject: CN=69c371b9-9d2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:3f:8a:70:54:87:2c:6f:34:76:d5:4d:33:30: 9b:12:0f:ba:dd:b4:55:87:f6:73:4e:23:1f:94:6d: b1:99:c0:0c:25:8f:68:1c:bf:4f:dc:a9:ae:a8:9e: 78:40:5d:e9:c3:ec:2f:28:0c:90:f4:46:4b:6c:63: 3e:af:bb:b7:c2:17:a0:16:07:6e:61:80:2c:94:65: c0:34:49:c7:10:58:e6:ee:a8:94:db:d1:44:04:7a: 14:fb:7e:ff:33:fe:6a:5a:f3:59:fd:40:e7:79:c6: 8e:2a:b2:05:7c:1c:68:10:13:89:36:0b:ee:9f:93: 3c:06:56:89:f2:53:50:04:6f:e9:40:d4:48:cb:10: 1a:bb:a5:d6:ce:ea:ff:77:af:62:6d:a7:57:c7:8f: 85:8f:6e:fa:bf:eb:1c:6d:e1:9f:31:32:51:f2:61: b9:39:b2:58:24:02:b3:6d:75:e6:0d:63:fc:27:30: 8b:35:fe:ea:bf:1a:23:a0:47:ee:10:00:a0:ed:8e: e2:f7:54:b1:e8:06:f0:f6:4d:4b:8d:ae:8a:c4:1c: 37:82:66:60:f9:2e:d8:2b:a1:f8:bc:df:e9:0b:0a: 67:aa:ec:5f:a7:61:0c:c9:37:9b:82:59:a4:e1:06: 9e:90:81:d0:2c:2a:5b:a0:ad:8d:34:7b:d2:02:e1: 2f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:65:32:02:D9:6F:02:C0:54:76:2C:35:98:84:A2:14:DC:53:B3:B9 X509v3 Authority Key Identifier: keyid:AA:35:E2:F9:77:B5:5E:72:F9:16:35:BF:7D:53:BC:EB:53:47:98:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjXi-Xe1XnL5FjW_fVO861NHmDs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:fb:d5:4f:00:ee:85:6a:fb:c9:e2:83:4e:33:32:2c:ea:49: da:76:76:56:04:e9:8c:77:ff:ff:f4:39:d6:dc:fa:bc:7f:ed: 4c:55:3a:35:aa:ff:11:f6:03:be:fa:39:2d:54:62:f7:13:76: 3c:1e:c5:78:b5:4e:b1:26:59:1d:71:dc:16:21:f6:f2:38:0c: a3:82:f6:68:72:c1:69:2e:f2:cc:06:bd:7b:82:7b:88:fe:a3: 18:ce:9c:3a:9c:2b:29:71:08:a5:a3:eb:b9:99:3f:c8:2d:51: 2b:f5:fb:68:b6:30:6f:c5:a8:5c:10:57:01:01:10:93:0c:df: d4:c6:09:4d:4d:c7:5d:37:46:45:29:94:50:ca:82:e9:cc:5e: 24:cd:31:73:21:e1:6d:63:16:3a:3e:2f:6d:93:c1:7f:f7:2f: e7:19:90:a0:e9:c9:6a:02:79:b8:1d:b4:89:f7:0a:a8:f9:35: 5e:0b:58:e3:20:79:7f:33:74:31:0e:20:5b:da:37:bb:cd:3a: 77:08:62:82:56:27:63:61:50:60:a6:8d:e3:55:6d:7e:f0:30: 67:c1:1f:6e:e8:48:ab:c4:c3:db:61:2f:16:7e:c5:a1:42:4a: 8e:03:36:73:d1:08:a6:bb:bf:2b:e7:0e:91:e4:06:b2:d8:17: 1c:f1:1a:ab -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDJDMzgxMTAvBgNVBAUTKEFBMzVFMkY5NzdCNTVFNzJGOTE2MzVCRjdENTNCQ0VC NTM0Nzk4M0IwHhcNMjYwMzI1MDUyNTEyWhcNMjYwNDAxMDUyNTEyWjAYMRYwFAYD VQQDEw02OWMzNzFiOS05ZDJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1z+KcFSHLG80dtVNMzCbEg+63bRVh/ZzTiMflG2xmcAMJY9oHL9P3KmuqJ54 QF3pw+wvKAyQ9EZLbGM+r7u3whegFgduYYAslGXANEnHEFjm7qiU29FEBHoU+37/ M/5qWvNZ/UDnecaOKrIFfBxoEBOJNgvun5M8BlaJ8lNQBG/pQNRIyxAau6XWzur/ d69ibadXx4+Fj276v+scbeGfMTJR8mG5ObJYJAKzbXXmDWP8JzCLNf7qvxojoEfu EACg7Y7i91Sx6Abw9k1Lja6KxBw3gmZg+S7YK6H4vN/pCwpnquxfp2EMyTebglmk 4QaekIHQLCpboK2NNHvSAuEvFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHBlMgLZ bwLAVHYsNZiEohTcU7O5MB8GA1UdIwQYMBaAFKo14vl3tV5y+RY1v31TvOtTR5g7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkMzOC8wNEJBQTYxNEE5 OEMxMUVGOTM1MEZCNjNDNEY5QUUwMi9xalhpLVhlMVhuTDVGaldfZlZPODYxTkht RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3FqWGktWGUxWG5MNUZqV19mVk84NjFOSG1Ecy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MkMzOC8wNEJBQTYxNEE5OEMxMUVGOTM1MEZCNjNDNEY5QUUwMi9xalhpLVhlMVhu TDVGaldfZlZPODYxTkhtRHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApfvVTwDuhWr7yeKDTjMyLOpJ2nZ2VgTpjHf///Q51tz6vH/tTFU6Nar/EfYD vvo5LVRi9xN2PB7FeLVOsSZZHXHcFiH28jgMo4L2aHLBaS7yzAa9e4J7iP6jGM6c OpwrKXEIpaPruZk/yC1RK/X7aLYwb8WoXBBXAQEQkwzf1MYJTU3HXTdGRSmUUMqC 6cxeJM0xcyHhbWMWOj4vbZPBf/cv5xmQoOnJagJ5uB20ifcKqPk1XgtY4yB5fzN0 MQ4gW9o3u806dwhiglYnY2FQYKaN41VtfvAwZ8EfbuhIq8TD22EvFn7FoUJKjgM2 c9EIpru/K+cOkeQGstgXHPEaqw== -----END CERTIFICATE-----Generated at Thu Mar 26 17:21:07 2026 by rpki-client