$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft File: qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft (raw, json) Hash identifier: tLTMteesgMHVQ+tHvHeRPqVMzpR5utWzd/yfXPh+9c4= Subject key identifier: D1:A4:62:41:78:F1:A0:74:CC:21:0D:EC:F0:D5:CA:A9:2C:E3:EF:2E Authority key identifier: AA:B5:24:E5:95:A5:30:E1:2C:13:AA:21:1C:2E:F2:6B:69:DD:9C:9B Certificate issuer: /CN=A91E4EF7/serialNumber=AAB524E595A530E12C13AA211C2EF26B69DD9C9B Certificate serial: 1BD1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft Manifest number: 1BB7 Signing time: Tue 24 Mar 2026 16:09:45 +0000 Manifest this update: Tue 24 Mar 2026 16:09:45 +0000 Manifest next update: Tue 31 Mar 2026 16:09:45 +0000 Files and hashes: 1: qrUk5ZWlMOEsE6ohHC7ya2ndnJs.crl (hash: HG+85Z7NELtr6gjWEkVsgqmEkvmsLp8aj9RPRZ0Hi/U=) 2: E24736EC9D9011EC89314083C4F9AE02.roa (hash: 7UZYPuwQDAPrdcrwJXsBYa/SwYNkxbesU3WpZSjYsEY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.crl rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:09:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7121 (0x1bd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4EF7, serialNumber=AAB524E595A530E12C13AA211C2EF26B69DD9C9B Validity Not Before: Mar 24 16:09:45 2026 GMT Not After : Mar 31 16:09:45 2026 GMT Subject: CN=69c2b749-bbcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:50:bc:ed:7a:e1:52:62:4b:49:80:8d:07:7e: eb:81:d5:c1:37:c1:3d:ed:f8:7f:2c:d3:50:35:d6: 35:8b:01:9c:bb:64:70:6b:a8:04:99:a9:9b:79:e7: 26:1f:bc:df:b7:0f:ad:b3:08:98:6c:3e:f4:77:96: 92:2a:ac:82:e1:91:70:6b:99:ad:fc:2e:62:23:c2: 3e:73:b1:2a:33:e0:3c:35:64:83:68:38:f8:0c:53: 14:22:68:d0:3b:47:b2:36:31:d4:67:69:61:34:f8: 74:d2:a6:bd:a4:99:dd:50:52:35:8d:39:46:ae:79: f9:92:30:6b:66:4e:85:dd:4f:0c:29:ec:38:38:51: 4e:50:ed:7f:c8:e4:bb:ad:bf:1d:63:c1:52:f4:5a: 43:7f:3c:db:b5:0f:b0:16:7c:dd:88:74:26:76:d1: 69:d0:c1:ef:de:79:d5:3b:08:df:68:11:4b:cd:38: f5:ee:1c:2b:1b:86:1e:f8:c2:16:1f:90:e1:53:1e: ff:3f:f8:30:8e:ab:3e:66:de:28:86:38:4c:8d:62: 93:d7:79:c4:69:8c:bf:6a:72:03:c0:7b:08:a3:55: db:4b:bb:9c:c6:fa:35:ac:b0:6d:cb:ca:68:df:75: 6e:07:26:dd:57:d8:68:a6:88:1f:96:a5:64:f8:36: 8f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:A4:62:41:78:F1:A0:74:CC:21:0D:EC:F0:D5:CA:A9:2C:E3:EF:2E X509v3 Authority Key Identifier: keyid:AA:B5:24:E5:95:A5:30:E1:2C:13:AA:21:1C:2E:F2:6B:69:DD:9C:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:9c:13:e0:58:9d:2f:1e:ec:82:01:2a:1d:f9:48:39:73:66: 27:41:12:7f:e6:f7:36:c0:05:8d:90:6a:a1:5c:03:c8:94:91: b2:40:d5:a6:77:12:23:86:e9:0f:a5:be:49:7d:d1:35:a5:66: 89:d2:02:f7:2d:c7:77:ce:3d:3b:09:06:5c:4d:c8:27:7f:cd: 7b:8f:b4:c5:5f:d5:d1:de:2f:84:57:ef:5f:18:21:d5:21:3d: c3:4b:95:16:9c:d3:aa:9f:0d:8b:5b:87:a1:a5:7e:60:66:95: 80:56:7e:03:8a:f4:31:dc:e6:db:de:a4:09:e9:29:c7:f3:a5: ba:36:48:f0:34:ce:b6:2e:c9:c3:3e:47:9c:08:93:03:18:09: 42:f2:33:28:e9:66:d2:6e:06:cc:16:0e:8a:72:6c:99:6a:75: 5b:e5:9f:c4:81:4f:20:4e:14:9f:af:5f:22:ce:ef:5b:f2:16: 66:95:68:cf:c4:4b:80:ec:6a:a3:b6:71:fd:b6:e6:0d:ef:3e: ec:67:e4:b9:1f:b6:5b:09:2b:c9:f1:d0:5a:40:95:5b:72:65: 64:6c:a2:c8:44:1a:26:b5:03:e2:d1:e6:31:06:9b:2a:ef:bd: 6c:5f:3d:56:8c:1f:cb:4f:e7:32:01:18:84:0d:a5:a6:c6:af: c6:fc:dd:b0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICG9EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRFRjcxMTAvBgNVBAUTKEFBQjUyNEU1OTVBNTMwRTEyQzEzQUEyMTFDMkVGMjZC NjlERDlDOUIwHhcNMjYwMzI0MTYwOTQ1WhcNMjYwMzMxMTYwOTQ1WjAYMRYwFAYD VQQDEw02OWMyYjc0OS1iYmNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAulC87XrhUmJLSYCNB37rgdXBN8E97fh/LNNQNdY1iwGcu2Rwa6gEmambeecm H7zftw+tswiYbD70d5aSKqyC4ZFwa5mt/C5iI8I+c7EqM+A8NWSDaDj4DFMUImjQ O0eyNjHUZ2lhNPh00qa9pJndUFI1jTlGrnn5kjBrZk6F3U8MKew4OFFOUO1/yOS7 rb8dY8FS9FpDfzzbtQ+wFnzdiHQmdtFp0MHv3nnVOwjfaBFLzTj17hwrG4Ye+MIW H5DhUx7/P/gwjqs+Zt4ohjhMjWKT13nEaYy/anIDwHsIo1XbS7ucxvo1rLBty8po 33VuBybdV9hopogflqVk+DaP1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNGkYkF4 8aB0zCEN7PDVyqks4+8uMB8GA1UdIwQYMBaAFKq1JOWVpTDhLBOqIRwu8mtp3Zyb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEVGNy9DNDZGRDc3NDFC OEYxMUU3QUM0QzcyMjlDNEY5QUUwMi9xclVrNVpXbE1PRXNFNm9oSEM3eWEybmRu SnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FyVWs1WldsTU9Fc0U2b2hIQzd5YTJuZG5Kcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEVGNy9DNDZGRDc3NDFCOEYxMUU3QUM0QzcyMjlDNEY5QUUwMi9xclVrNVpXbE1P RXNFNm9oSEM3eWEybmRuSnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAa5wT4FidLx7sggEqHflIOXNmJ0ESf+b3NsAFjZBqoVwDyJSRskDVpncSI4bp D6W+SX3RNaVmidIC9y3Hd849OwkGXE3IJ3/Ne4+0xV/V0d4vhFfvXxgh1SE9w0uV FpzTqp8Ni1uHoaV+YGaVgFZ+A4r0Mdzm296kCekpx/OlujZI8DTOti7Jwz5HnAiT AxgJQvIzKOlm0m4GzBYOinJsmWp1W+WfxIFPIE4Un69fIs7vW/IWZpVoz8RLgOxq o7Zx/bbmDe8+7GfkuR+2WwkryfHQWkCVW3JlZGyiyEQaJrUD4tHmMQabKu+9bF89 Vowfy0/nMgEYhA2lpsavxvzdsA== -----END CERTIFICATE-----Generated at Thu Mar 26 02:38:10 2026 by rpki-client