$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4700/42CC0D50B3BB11F0A931BA6FC4F9AE02/QGOUHymkcXnuj_UfMB3x6kEfvTg.mft File: QGOUHymkcXnuj_UfMB3x6kEfvTg.mft (raw, json) Hash identifier: UqAbA9TldLMpb2kNT4dVdt4UXaCt5uhSsUTQagAyVm0= Subject key identifier: 08:95:B1:BD:7F:41:B0:49:F5:3E:FE:C6:73:71:32:F3:D8:D0:2E:5A Authority key identifier: 40:63:94:1F:29:A4:71:79:EE:8F:F5:1F:30:1D:F1:EA:41:1F:BD:38 Certificate issuer: /CN=A91E4700/serialNumber=4063941F29A47179EE8FF51F301DF1EA411FBD38 Certificate serial: 75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGOUHymkcXnuj_UfMB3x6kEfvTg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4700/42CC0D50B3BB11F0A931BA6FC4F9AE02/QGOUHymkcXnuj_UfMB3x6kEfvTg.mft Manifest number: 65 Signing time: Wed 25 Mar 2026 07:25:28 +0000 Manifest this update: Wed 25 Mar 2026 07:25:27 +0000 Manifest next update: Wed 01 Apr 2026 07:25:27 +0000 Files and hashes: 1: QGOUHymkcXnuj_UfMB3x6kEfvTg.crl (hash: /bNCY5qcPIRXMCHcQ6XifUnYEK9/3aGUSrgQSq1Tl7Q=) 2: 6A797774BDDF11F0B524BD85C4F9AE02.roa (hash: 8w/0YJBW6UK1DI6hNcDAiSGDGO9AI7vRgBVhPpRorOY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4700/42CC0D50B3BB11F0A931BA6FC4F9AE02/QGOUHymkcXnuj_UfMB3x6kEfvTg.crl rsync://rpki.apnic.net/member_repository/A91E4700/42CC0D50B3BB11F0A931BA6FC4F9AE02/QGOUHymkcXnuj_UfMB3x6kEfvTg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGOUHymkcXnuj_UfMB3x6kEfvTg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:25:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 117 (0x75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4700, serialNumber=4063941F29A47179EE8FF51F301DF1EA411FBD38 Validity Not Before: Mar 25 07:25:27 2026 GMT Not After : Apr 1 07:25:27 2026 GMT Subject: CN=69c38de8-068c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f6:53:a9:98:21:c6:b1:64:26:c0:5e:2c:5f: f2:74:17:19:0b:59:73:a9:67:80:f2:d1:ec:9a:d2: 0b:ad:52:03:3f:e9:2d:31:ae:2f:6c:88:10:68:10: e1:c7:69:d0:00:2a:61:f7:c9:b5:19:0d:cd:84:d1: c4:d5:b1:cd:a5:94:9c:07:18:e8:6d:34:b0:e5:16: ba:a6:2d:e5:a8:4e:89:8e:81:eb:64:33:ba:63:22: 98:a7:87:88:3b:8b:ec:0d:c6:f3:32:9b:6b:58:f6: ec:f8:9f:40:e5:a9:60:c8:a0:b1:f9:5e:36:f4:bf: 9a:7e:0a:cf:37:85:53:d3:91:35:8c:e6:41:47:49: 10:3b:12:6e:b1:bb:6d:e4:fc:7f:77:4b:98:99:29: 10:14:4f:3b:d0:e4:41:f6:79:de:7b:94:c4:fb:d4: d5:bf:15:c2:c6:29:c6:09:cb:a8:84:17:12:6c:79: b9:ee:c8:a7:1b:fc:90:66:31:98:ab:b5:5c:db:a4: a4:0f:00:7b:dd:29:fc:bd:94:c2:f9:ff:cc:07:9e: 99:c4:f6:75:55:09:c9:b8:38:fd:65:07:f1:18:6c: 45:32:04:54:c2:1b:ff:fd:c7:c5:0b:37:28:aa:cb: a5:ae:c5:c8:11:62:34:c1:ce:30:1e:a7:b0:16:2a: 26:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:95:B1:BD:7F:41:B0:49:F5:3E:FE:C6:73:71:32:F3:D8:D0:2E:5A X509v3 Authority Key Identifier: keyid:40:63:94:1F:29:A4:71:79:EE:8F:F5:1F:30:1D:F1:EA:41:1F:BD:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4700/42CC0D50B3BB11F0A931BA6FC4F9AE02/QGOUHymkcXnuj_UfMB3x6kEfvTg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGOUHymkcXnuj_UfMB3x6kEfvTg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4700/42CC0D50B3BB11F0A931BA6FC4F9AE02/QGOUHymkcXnuj_UfMB3x6kEfvTg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:b3:6c:d3:56:1c:0e:c8:09:69:b4:6e:0a:cc:bc:e5:aa:be: d9:40:47:c0:66:e3:70:8b:17:9f:6a:1a:b3:84:76:8a:fc:11: 8d:a8:e1:63:93:5f:99:ee:4f:eb:fe:59:c8:b6:6a:28:a7:2a: 1c:1d:22:7b:31:fe:ef:13:52:19:f8:fc:aa:26:fb:dd:6c:7a: 66:3f:1c:09:84:0c:29:97:c9:ce:22:55:26:08:3b:cb:d2:22: 4e:43:12:5e:94:c7:5c:c3:54:b4:85:ab:4c:68:9b:28:a1:a3: 97:0b:05:3f:72:fa:67:79:8f:54:ca:6c:d7:7f:1f:99:f7:22: 43:78:75:1d:51:32:8a:38:09:16:11:2c:74:92:7e:c9:55:ff: 83:e8:c0:dd:94:af:34:b6:0a:01:cc:82:6b:c4:49:b5:de:75: 42:cf:08:d9:c9:31:4b:ca:e2:a1:31:fc:1d:bd:12:3f:bf:00: a6:52:ea:db:d7:62:e6:80:7d:14:9c:11:c6:0e:49:9c:40:27: 4a:ab:6d:9b:a0:c8:93:e6:94:c6:0d:0d:d3:60:1b:14:0b:19: 0f:44:7d:6f:70:e9:e5:22:1f:3b:e4:90:f2:e8:ac:e0:47:3d: e9:78:b2:42:a3:18:ee:ed:e4:fd:e2:53:58:af:c5:3f:f1:65: a9:f0:d0:af -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBdTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NDcwMDExMC8GA1UEBRMoNDA2Mzk0MUYyOUE0NzE3OUVFOEZGNTFGMzAxREYxRUE0 MTFGQkQzODAeFw0yNjAzMjUwNzI1MjdaFw0yNjA0MDEwNzI1MjdaMBgxFjAUBgNV BAMTDTY5YzM4ZGU4LTA2OGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCc9lOpmCHGsWQmwF4sX/J0FxkLWXOpZ4Dy0eya0gutUgM/6S0xri9siBBoEOHH adAAKmH3ybUZDc2E0cTVsc2llJwHGOhtNLDlFrqmLeWoTomOgetkM7pjIpinh4g7 i+wNxvMym2tY9uz4n0DlqWDIoLH5Xjb0v5p+Cs83hVPTkTWM5kFHSRA7Em6xu23k /H93S5iZKRAUTzvQ5EH2ed57lMT71NW/FcLGKcYJy6iEFxJsebnuyKcb/JBmMZir tVzbpKQPAHvdKfy9lML5/8wHnpnE9nVVCcm4OP1lB/EYbEUyBFTCG//9x8ULNyiq y6WuxcgRYjTBzjAep7AWKiYvAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUCJWxvX9B sEn1Pv7Gc3Ey89jQLlowHwYDVR0jBBgwFoAUQGOUHymkcXnuj/UfMB3x6kEfvTgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0NzAwLzQyQ0MwRDUwQjNC QjExRjBBOTMxQkE2RkM0RjlBRTAyL1FHT1VIeW1rY1hudWpfVWZNQjN4NmtFZnZU Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUUdPVUh5bWtjWG51al9VZk1CM3g2a0VmdlRnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0 NzAwLzQyQ0MwRDUwQjNCQjExRjBBOTMxQkE2RkM0RjlBRTAyL1FHT1VIeW1rY1hu dWpfVWZNQjN4NmtFZnZUZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQDDs2zTVhwOyAlptG4KzLzlqr7ZQEfAZuNwixefahqzhHaK/BGNqOFjk1+Z7k/r /lnItmoopyocHSJ7Mf7vE1IZ+PyqJvvdbHpmPxwJhAwpl8nOIlUmCDvL0iJOQxJe lMdcw1S0hatMaJsooaOXCwU/cvpneY9UymzXfx+Z9yJDeHUdUTKKOAkWESx0kn7J Vf+D6MDdlK80tgoBzIJrxEm13nVCzwjZyTFLyuKhMfwdvRI/vwCmUurb12LmgH0U nBHGDkmcQCdKq22boMiT5pTGDQ3TYBsUCxkPRH1vcOnlIh875JDy6KzgRz3peLJC oxju7eT94lNYr8U/8WWp8NCv -----END CERTIFICATE-----Generated at Thu Mar 26 05:38:19 2026 by rpki-client