$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.mft File: qK6pspMKYU1coxq59-hDeTYaL0M.mft (raw, json) Hash identifier: k/mvfPSxPSJwJZzzc115spFMW1fj3VOwjxnP9ixFPXQ= Subject key identifier: 96:A6:73:94:4C:79:AC:44:03:90:DE:1A:57:AD:94:21:3E:D0:F1:1F Authority key identifier: A8:AE:A9:B2:93:0A:61:4D:5C:A3:1A:B9:F7:E8:43:79:36:1A:2F:43 Certificate issuer: /CN=A91D7C1D/serialNumber=A8AEA9B2930A614D5CA31AB9F7E84379361A2F43 Certificate serial: 0A4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qK6pspMKYU1coxq59-hDeTYaL0M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.mft Manifest number: 0A3B Signing time: Tue 24 Mar 2026 19:31:57 +0000 Manifest this update: Tue 24 Mar 2026 19:31:56 +0000 Manifest next update: Tue 31 Mar 2026 19:31:56 +0000 Files and hashes: 1: qK6pspMKYU1coxq59-hDeTYaL0M.crl (hash: 4clnNC10r5y6tLSZZZ6vAg3JA1+yKtxICM33aCJ95UY=) 2: A292E3529E9711EEB6899B1CC4F9AE02.roa (hash: mpij4Re6bXjGBWFyLXPJmKPd1UHVx7aiX6dvj4qN29k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.crl rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qK6pspMKYU1coxq59-hDeTYaL0M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:31:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2637 (0xa4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7C1D, serialNumber=A8AEA9B2930A614D5CA31AB9F7E84379361A2F43 Validity Not Before: Mar 24 19:31:56 2026 GMT Not After : Mar 31 19:31:56 2026 GMT Subject: CN=69c2e6ad-5efd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b6:9e:0c:3e:19:60:81:4e:24:08:a6:65:bd: 79:1d:c4:59:81:fa:71:fa:c4:c0:4f:36:54:ed:77: 17:f4:d4:51:95:d9:72:cc:b7:9b:59:17:0b:67:04: 13:22:62:27:a1:75:e9:99:84:5d:01:dc:dd:09:98: b2:e6:6a:54:32:cb:2f:b4:3a:6a:c5:38:6e:cc:56: c1:0e:50:91:f6:4c:dc:43:1f:07:f0:be:53:79:b7: f5:7f:c1:ea:d2:6a:8c:32:ea:6e:49:0f:48:9b:88: 9d:9c:93:bc:8f:f6:61:4b:93:06:5c:9e:1f:f8:0b: f1:20:c9:05:af:70:bc:fd:b3:3f:aa:6c:48:60:09: af:57:e7:cc:2b:ce:75:23:ea:85:34:74:aa:f5:8c: 4d:5d:f2:89:11:cb:0c:5a:e1:75:07:26:09:1a:f8: b6:ad:15:16:6b:32:fb:48:63:6d:f9:be:3c:a5:5d: 6b:eb:d8:76:40:d1:f3:a4:3f:01:50:8d:4d:49:0f: eb:f6:cf:83:80:bb:f4:fd:4e:03:80:46:e2:6e:52: a3:93:a1:da:53:fb:be:5d:ca:eb:b9:b6:6a:46:8d: 38:45:ef:0a:17:09:fc:86:be:d8:0e:d9:9e:fe:f3: 6f:0f:56:25:f3:e6:f0:ba:61:8c:06:88:ba:78:42: 5a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:A6:73:94:4C:79:AC:44:03:90:DE:1A:57:AD:94:21:3E:D0:F1:1F X509v3 Authority Key Identifier: keyid:A8:AE:A9:B2:93:0A:61:4D:5C:A3:1A:B9:F7:E8:43:79:36:1A:2F:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qK6pspMKYU1coxq59-hDeTYaL0M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:5c:b7:21:14:c6:e0:23:b3:a8:2e:0b:72:d5:b7:06:88:11: fd:d0:38:ec:15:82:fe:0b:47:e4:7d:4a:86:95:31:d1:ce:80: b3:7e:e3:c3:9d:3a:68:ab:d1:cc:f9:10:20:f2:74:d2:71:90: 20:71:3a:90:a8:27:bc:5b:9d:ad:7a:9e:d8:49:de:fe:06:93: 4c:ed:a8:3f:90:17:19:54:69:57:8c:8c:dc:a0:d7:90:c4:f0: a2:ed:b2:28:df:38:a4:bf:b8:4e:9f:50:0a:91:8e:f8:90:a5: 1c:84:a1:2e:ae:48:c0:7f:70:0f:ae:59:35:c3:66:3d:8e:82: 58:c0:26:95:13:7e:cf:8c:d9:ac:8b:ac:d6:da:59:c9:4b:22: 09:ba:7c:5a:99:5f:b6:34:dc:f1:11:0c:cc:1c:39:71:cc:67: 9e:ca:54:02:d9:85:54:c4:cf:7c:a9:32:38:bf:45:f8:fb:62: b8:10:67:80:f4:0e:bc:bc:3f:0b:10:41:41:96:30:c3:c3:5d: c9:6e:37:65:d2:fa:08:c1:35:28:ac:17:65:e0:4d:a7:7e:4c: b9:0c:7d:40:bd:a8:a6:69:25:0c:b5:1b:65:bd:73:aa:d5:78: 4a:49:92:83:09:3b:08:2a:fc:9f:f4:b9:56:98:ea:41:3b:09: 84:e4:09:99 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCk0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDdDMUQxMTAvBgNVBAUTKEE4QUVBOUIyOTMwQTYxNEQ1Q0EzMUFCOUY3RTg0Mzc5 MzYxQTJGNDMwHhcNMjYwMzI0MTkzMTU2WhcNMjYwMzMxMTkzMTU2WjAYMRYwFAYD VQQDEw02OWMyZTZhZC01ZWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwbaeDD4ZYIFOJAimZb15HcRZgfpx+sTATzZU7XcX9NRRldlyzLebWRcLZwQT ImInoXXpmYRdAdzdCZiy5mpUMssvtDpqxThuzFbBDlCR9kzcQx8H8L5Tebf1f8Hq 0mqMMupuSQ9Im4idnJO8j/ZhS5MGXJ4f+AvxIMkFr3C8/bM/qmxIYAmvV+fMK851 I+qFNHSq9YxNXfKJEcsMWuF1ByYJGvi2rRUWazL7SGNt+b48pV1r69h2QNHzpD8B UI1NSQ/r9s+DgLv0/U4DgEbiblKjk6HaU/u+XcrrubZqRo04Re8KFwn8hr7YDtme /vNvD1Yl8+bwumGMBoi6eEJacQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJamc5RM eaxEA5DeGletlCE+0PEfMB8GA1UdIwQYMBaAFKiuqbKTCmFNXKMauffoQ3k2Gi9D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEN0MxRC9BODA3MEFGMjhB RjAxMUVBQTk1MjgzMDlDNEY5QUUwMi9xSzZwc3BNS1lVMWNveHE1OS1oRGVUWWFM ME0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FLNnBzcE1LWVUxY294cTU5LWhEZVRZYUwwTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE N0MxRC9BODA3MEFGMjhBRjAxMUVBQTk1MjgzMDlDNEY5QUUwMi9xSzZwc3BNS1lV MWNveHE1OS1oRGVUWWFMME0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZly3IRTG4COzqC4LctW3BogR/dA47BWC/gtH5H1KhpUx0c6As37jw506aKvR zPkQIPJ00nGQIHE6kKgnvFudrXqe2Ene/gaTTO2oP5AXGVRpV4yM3KDXkMTwou2y KN84pL+4Tp9QCpGO+JClHIShLq5IwH9wD65ZNcNmPY6CWMAmlRN+z4zZrIus1tpZ yUsiCbp8WplftjTc8REMzBw5ccxnnspUAtmFVMTPfKkyOL9F+PtiuBBngPQOvLw/ CxBBQZYww8NdyW43ZdL6CME1KKwXZeBNp35MuQx9QL2opmklDLUbZb1zqtV4SkmS gwk7CCr8n/S5VpjqQTsJhOQJmQ== -----END CERTIFICATE-----Generated at Thu Mar 26 14:27:23 2026 by rpki-client