$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.mft File: QW1s1gOQ-3yW7XnXjOdvVK_PRFg.mft (raw, json) Hash identifier: MARoLHJKZJzJayckB/Jviu1gQZWmPz85eX37zKb6GDE= Subject key identifier: CD:03:B1:22:B0:0D:B3:46:7B:40:9B:07:82:71:6C:9A:6F:3F:23:27 Authority key identifier: 41:6D:6C:D6:03:90:FB:7C:96:ED:79:D7:8C:E7:6F:54:AF:CF:44:58 Certificate issuer: /CN=A91E5D61/serialNumber=416D6CD60390FB7C96ED79D78CE76F54AFCF4458 Certificate serial: 1338 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.mft Manifest number: 4882 Signing time: Tue 24 Mar 2026 14:21:08 +0000 Manifest this update: Tue 24 Mar 2026 14:21:07 +0000 Manifest next update: Tue 31 Mar 2026 14:21:07 +0000 Files and hashes: 1: QW1s1gOQ-3yW7XnXjOdvVK_PRFg.crl (hash: /kAwBav5rcH74xrtf3pY/FR2rZwEYT/AqhdJRrGYCYU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.crl rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 14:21:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4920 (0x1338) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D61, serialNumber=416D6CD60390FB7C96ED79D78CE76F54AFCF4458 Validity Not Before: Mar 24 14:21:07 2026 GMT Not After : Mar 31 14:21:07 2026 GMT Subject: CN=69c29dd3-59e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:0e:2d:d4:16:55:a2:4f:78:9e:3f:db:d8:1b: a6:9f:75:2f:a5:f4:f4:52:91:6b:d3:73:d6:3c:16: d3:80:12:bd:c7:6c:11:67:98:5f:21:9d:6e:1c:7d: 7f:1c:4a:ae:ff:c7:2c:9b:51:e9:ef:18:69:b6:09: 98:cb:0d:36:11:87:f2:4b:ba:1a:ad:0e:6b:81:ad: 0e:db:62:8a:31:cf:55:33:4e:21:5a:62:24:3b:65: 8f:ea:ea:a8:e5:3b:14:69:59:04:dc:b0:bf:3d:6c: b3:73:74:50:cf:07:5a:be:34:eb:92:99:22:77:0c: f8:d9:2e:f2:9b:f6:54:6c:12:93:be:6c:aa:61:09: 81:e2:82:e6:4e:5d:62:7e:b2:45:00:06:c8:70:35: 74:37:03:43:c9:38:a9:51:5c:22:30:d1:f8:05:1d: 58:ef:4d:37:83:20:20:cf:dc:86:a7:b1:ff:41:3c: d5:b0:e6:77:2c:03:3e:3b:c5:58:26:96:72:5a:43: aa:52:6a:8f:e9:9a:16:6a:eb:f8:cb:35:88:01:d4: 0f:b3:7c:83:78:88:d4:f1:21:0c:23:7e:f8:0f:97: 33:83:60:73:45:a6:e5:15:58:41:67:36:13:24:52: c0:a3:cb:2c:f9:6e:e4:6a:19:00:f3:bd:a6:74:78: 70:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:03:B1:22:B0:0D:B3:46:7B:40:9B:07:82:71:6C:9A:6F:3F:23:27 X509v3 Authority Key Identifier: keyid:41:6D:6C:D6:03:90:FB:7C:96:ED:79:D7:8C:E7:6F:54:AF:CF:44:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:e0:88:d1:4f:39:63:03:77:ae:eb:93:7c:0d:01:3c:c0:e3: 2e:b4:f4:a6:72:99:f1:cf:4e:38:7d:f0:a3:a8:db:3a:79:c8: 8c:90:d4:58:96:f2:e0:3d:8b:51:63:09:3a:d9:16:af:68:65: d7:3f:2c:3c:a8:23:1d:88:8e:56:83:43:eb:75:e6:29:53:a7: 72:47:04:10:e9:51:f4:88:0e:e5:0f:f0:4f:dd:dc:be:09:59: 69:54:58:91:41:d7:83:b0:f5:06:1d:16:1f:8e:20:1d:14:0b: 49:9d:13:32:d3:77:f4:ee:a0:82:e3:71:45:c0:52:fd:9b:4e: 6e:70:f9:72:83:fc:fe:b1:c7:ff:3b:75:e8:5f:48:ac:c1:c3: 68:e3:62:71:db:de:8a:e6:eb:93:44:3c:c9:16:5c:26:d5:2b: 1e:05:54:07:06:90:d6:6c:98:e4:63:3a:b4:dd:a7:13:39:a3: 8c:4a:ff:48:a8:ae:eb:3b:ab:df:92:b5:6e:65:1e:bb:1b:1f: 62:22:33:7a:3c:4b:0d:d3:e7:2c:26:87:e3:07:f8:3d:fd:a7: e9:8c:80:8b:45:fd:5c:9e:c5:b5:26:98:d8:f0:b7:3c:f8:7e: 4d:89:0a:45:8e:93:b8:be:d9:b3:4f:b9:8b:f9:5f:43:b8:09: e2:bb:25:c3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEzgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVENjExMTAvBgNVBAUTKDQxNkQ2Q0Q2MDM5MEZCN0M5NkVENzlENzhDRTc2RjU0 QUZDRjQ0NTgwHhcNMjYwMzI0MTQyMTA3WhcNMjYwMzMxMTQyMTA3WjAYMRYwFAYD VQQDEw02OWMyOWRkMy01OWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlA4t1BZVok94nj/b2Bumn3UvpfT0UpFr03PWPBbTgBK9x2wRZ5hfIZ1uHH1/ HEqu/8csm1Hp7xhptgmYyw02EYfyS7oarQ5rga0O22KKMc9VM04hWmIkO2WP6uqo 5TsUaVkE3LC/PWyzc3RQzwdavjTrkpkidwz42S7ym/ZUbBKTvmyqYQmB4oLmTl1i frJFAAbIcDV0NwNDyTipUVwiMNH4BR1Y7003gyAgz9yGp7H/QTzVsOZ3LAM+O8VY JpZyWkOqUmqP6ZoWauv4yzWIAdQPs3yDeIjU8SEMI374D5czg2BzRablFVhBZzYT JFLAo8ss+W7kahkA872mdHhwLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM0DsSKw DbNGe0CbB4JxbJpvPyMnMB8GA1UdIwQYMBaAFEFtbNYDkPt8lu1514znb1Svz0RY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUQ2MS8yQTdDN0Q5ODFE NzkxMUUyODc5RTM4QzUwOEIwMkNEMi9RVzFzMWdPUS0zeVc3WG5Yak9kdlZLX1BS RmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1FXMXMxZ09RLTN5VzdYblhqT2R2VktfUFJGZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUQ2MS8yQTdDN0Q5ODFENzkxMUUyODc5RTM4QzUwOEIwMkNEMi9RVzFzMWdPUS0z eVc3WG5Yak9kdlZLX1BSRmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAxOCI0U85YwN3ruuTfA0BPMDjLrT0pnKZ8c9OOH3wo6jbOnnIjJDUWJby4D2L UWMJOtkWr2hl1z8sPKgjHYiOVoND63XmKVOnckcEEOlR9IgO5Q/wT93cvglZaVRY kUHXg7D1Bh0WH44gHRQLSZ0TMtN39O6gguNxRcBS/ZtObnD5coP8/rHH/zt16F9I rMHDaONicdveiubrk0Q8yRZcJtUrHgVUBwaQ1myY5GM6tN2nEzmjjEr/SKiu6zur 35K1bmUeuxsfYiIzejxLDdPnLCaH4wf4Pf2n6YyAi0X9XJ7FtSaY2PC3PPh+TYkK RY6TuL7Zs0+5i/lfQ7gJ4rslww== -----END CERTIFICATE-----Generated at Thu Mar 26 06:53:23 2026 by rpki-client