$ rpki-client -vvf rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft File: QLjSLvI7N7C55T88ThDWrj64qZ8.mft (raw, json) Hash identifier: 1fJKSUWAeiKGo1oZyfOVGLfueuLYCdQOljK4DJMB/TA= Subject key identifier: 69:9D:2C:F6:26:66:3D:61:FD:85:FC:EF:F0:C4:D8:B8:CE:20:2C:F2 Authority key identifier: 40:B8:D2:2E:F2:3B:37:B0:B9:E5:3F:3C:4E:10:D6:AE:3E:B8:A9:9F Certificate issuer: /CN=A91E689D/serialNumber=40B8D22EF23B37B0B9E53F3C4E10D6AE3EB8A99F Certificate serial: 352C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLjSLvI7N7C55T88ThDWrj64qZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft Manifest number: 3525 Signing time: Thu 26 Mar 2026 15:02:50 +0000 Manifest this update: Thu 26 Mar 2026 15:02:50 +0000 Manifest next update: Thu 02 Apr 2026 15:02:50 +0000 Files and hashes: 1: QLjSLvI7N7C55T88ThDWrj64qZ8.crl (hash: oXCbrzdBdLTn4C748asz+O7k+eZfnkG58J8QqLnZ/EU=) 2: 3773AC0C8B6111EFA3A49037C4F9AE02.roa (hash: Te4mjLd0tS0Pp8TK/M4FDw7bPNKLJP9S5lFxUos08I4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.crl rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLjSLvI7N7C55T88ThDWrj64qZ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 15:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13612 (0x352c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E689D, serialNumber=40B8D22EF23B37B0B9E53F3C4E10D6AE3EB8A99F Validity Not Before: Mar 26 15:02:50 2026 GMT Not After : Apr 2 15:02:50 2026 GMT Subject: CN=69c54a9a-a184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:74:7f:d8:b9:97:d3:81:12:66:d8:7f:85:9b: 9c:57:e0:4d:83:02:85:80:cf:9d:c7:64:41:4b:7e: c1:3b:68:b0:0a:c3:5b:04:bc:eb:a5:d8:90:69:04: 3a:38:c7:c2:17:83:e5:41:cc:c4:e5:1f:c6:75:02: f4:75:85:f5:88:b0:cf:ba:a9:d0:8c:3c:0d:51:3e: 3e:8d:82:f1:d6:ac:05:a9:72:6a:f5:d0:19:a5:af: 6c:89:18:3d:9c:58:07:4f:21:cd:e6:6f:e4:6f:cb: 9b:83:0c:1d:c6:11:51:61:92:de:26:f4:16:a0:0e: 61:46:47:0c:52:27:3b:9e:ce:83:25:43:a0:c2:4a: da:57:b7:5a:25:a2:a6:8c:6b:55:e4:b6:e6:1c:19: 6d:c4:c7:c7:04:1e:ca:a8:57:1f:fb:42:6b:b9:61: 91:e8:40:2e:4c:66:cb:9e:3b:95:45:37:2c:85:94: b7:03:49:4f:65:29:c1:5f:d4:43:f3:1e:6b:90:3e: 50:ea:dd:b1:57:1d:bf:cf:0d:82:d5:16:0c:97:1b: bd:f0:71:a6:39:4e:9b:7c:d1:d2:e5:b2:41:3d:bd: a8:cf:3b:eb:ac:4d:4f:ef:f1:86:af:46:d8:3e:99: 3a:48:1f:66:14:32:e9:28:54:d2:58:73:91:eb:b3: 24:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:9D:2C:F6:26:66:3D:61:FD:85:FC:EF:F0:C4:D8:B8:CE:20:2C:F2 X509v3 Authority Key Identifier: keyid:40:B8:D2:2E:F2:3B:37:B0:B9:E5:3F:3C:4E:10:D6:AE:3E:B8:A9:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLjSLvI7N7C55T88ThDWrj64qZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:c7:29:90:7c:54:73:b1:14:9e:7b:dc:c5:96:44:6a:54:cd: 6d:a2:3d:88:68:37:2d:3e:55:48:97:2d:b3:d5:63:db:c8:ae: 77:cb:0c:5f:89:54:35:9d:75:31:94:b0:fa:a5:76:ff:dd:fb: f1:63:bd:11:a2:c8:34:07:eb:21:b8:fe:ec:89:54:c5:6d:08: 03:f2:80:1f:f1:68:a2:6b:28:b7:43:1c:08:c8:f2:e5:28:d7: 5a:89:31:70:0a:98:2e:da:7c:3e:0c:d5:07:e5:e6:90:90:23: fe:f5:47:81:23:ed:22:69:86:a8:fe:dc:26:aa:dc:67:83:e8: 12:6e:96:13:2a:77:04:9a:a9:7d:37:b5:f7:22:0d:95:df:19: b2:44:9c:6c:df:bc:74:73:47:25:9f:77:b6:65:bd:12:49:fb: a7:27:c6:4d:ae:7e:60:35:e8:b4:16:bb:44:2f:94:3d:f4:ae: 51:47:de:78:33:8d:58:01:b1:44:73:5f:39:0d:83:ed:3d:96: d7:ac:86:6b:aa:70:0a:15:b3:15:68:30:45:67:08:2a:03:7f: d9:24:11:46:af:7a:ab:76:ba:a8:98:cd:92:17:e9:47:8f:68: 8f:b3:5d:88:75:0a:79:50:f7:06:74:9c:51:a0:a1:72:27:1b: 1f:37:d1:6a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNSwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTY4OUQxMTAvBgNVBAUTKDQwQjhEMjJFRjIzQjM3QjBCOUU1M0YzQzRFMTBENkFF M0VCOEE5OUYwHhcNMjYwMzI2MTUwMjUwWhcNMjYwNDAyMTUwMjUwWjAYMRYwFAYD VQQDEw02OWM1NGE5YS1hMTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArXR/2LmX04ESZth/hZucV+BNgwKFgM+dx2RBS37BO2iwCsNbBLzrpdiQaQQ6 OMfCF4PlQczE5R/GdQL0dYX1iLDPuqnQjDwNUT4+jYLx1qwFqXJq9dAZpa9siRg9 nFgHTyHN5m/kb8ubgwwdxhFRYZLeJvQWoA5hRkcMUic7ns6DJUOgwkraV7daJaKm jGtV5LbmHBltxMfHBB7KqFcf+0JruWGR6EAuTGbLnjuVRTcshZS3A0lPZSnBX9RD 8x5rkD5Q6t2xVx2/zw2C1RYMlxu98HGmOU6bfNHS5bJBPb2ozzvrrE1P7/GGr0bY Ppk6SB9mFDLpKFTSWHOR67Mk1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGmdLPYm Zj1h/YX87/DE2LjOICzyMB8GA1UdIwQYMBaAFEC40i7yOzewueU/PE4Q1q4+uKmf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjg5RC9DN0M2M0RBODFE OUUxMUUyODNDRUZBOEUwOEIwMkNEMi9RTGpTTHZJN043QzU1VDg4VGhEV3JqNjRx WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FMalNMdkk3TjdDNTVUODhUaERXcmo2NHFaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Njg5RC9DN0M2M0RBODFEOUUxMUUyODNDRUZBOEUwOEIwMkNEMi9RTGpTTHZJN043 QzU1VDg4VGhEV3JqNjRxWjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMccpkHxUc7EUnnvcxZZEalTNbaI9iGg3LT5VSJcts9Vj28iud8sMX4lUNZ11 MZSw+qV2/9378WO9EaLINAfrIbj+7IlUxW0IA/KAH/Foomsot0McCMjy5SjXWokx cAqYLtp8PgzVB+XmkJAj/vVHgSPtImmGqP7cJqrcZ4PoEm6WEyp3BJqpfTe19yIN ld8ZskScbN+8dHNHJZ93tmW9Ekn7pyfGTa5+YDXotBa7RC+UPfSuUUfeeDONWAGx RHNfOQ2D7T2W16yGa6pwChWzFWgwRWcIKgN/2SQRRq96q3a6qJjNkhfpR49oj7Nd iHUKeVD3BnScUaChcicbHzfRag== -----END CERTIFICATE-----Generated at Sat Mar 28 12:01:36 2026 by rpki-client