$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft File: 2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft (raw, json) Hash identifier: mR6IjJ7XjdEYuuwqquvJbjSNQKip2InUIC1HtEvvd3M= Subject key identifier: 81:70:27:FD:48:95:E7:C5:96:A0:F1:78:11:EF:AD:7A:40:D8:DF:7C Authority key identifier: DA:AA:B1:2E:92:FA:0E:E0:43:C2:0E:EA:F2:BE:46:96:A2:C3:78:77 Certificate issuer: /CN=A91E6B73/serialNumber=DAAAB12E92FA0EE043C20EEAF2BE4696A2C37877 Certificate serial: 04B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qqxLpL6DuBDwg7q8r5GlqLDeHc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft Manifest number: 04AD Signing time: Tue 24 Mar 2026 23:37:38 +0000 Manifest this update: Tue 24 Mar 2026 23:37:38 +0000 Manifest next update: Tue 31 Mar 2026 23:37:38 +0000 Files and hashes: 1: 2qqxLpL6DuBDwg7q8r5GlqLDeHc.crl (hash: UOc4ft2RIVP6FlklsmKgquxMp7g7WKgQcBxNsPOYNHc=) 2: 4F12B4886EEB11EC8699607FC4F9AE02.roa (hash: pn9LmjcYfqtWkrqq70s413/aWhMNAUVc8lSHHO31hw4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.crl rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qqxLpL6DuBDwg7q8r5GlqLDeHc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:37:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1207 (0x4b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6B73, serialNumber=DAAAB12E92FA0EE043C20EEAF2BE4696A2C37877 Validity Not Before: Mar 24 23:37:38 2026 GMT Not After : Mar 31 23:37:38 2026 GMT Subject: CN=69c32042-48ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a8:74:ae:ef:7b:38:89:40:e3:04:fd:b0:e6: af:58:d0:a3:7a:7b:0b:da:bc:72:33:e6:3a:9c:72: 10:24:a2:43:54:4e:47:75:fa:b2:06:28:54:4f:64: d0:0e:c6:d4:d0:b1:35:73:b8:34:f9:7a:65:81:2e: fc:71:87:fb:6f:48:a7:eb:d4:70:ea:36:f2:36:74: 6f:92:06:82:f0:db:74:15:81:7a:9e:7f:c0:f7:04: 57:40:21:35:78:b4:17:38:f1:13:e5:19:5a:44:79: b4:8e:ae:f1:b4:bd:17:c8:5b:bc:8d:3e:fb:31:d7: d0:df:18:f0:54:71:0e:2a:ac:a5:9e:7a:f6:3d:91: ca:80:f5:52:a8:f4:cf:d0:2c:c6:9b:5a:92:02:ea: 52:8d:cf:f5:8e:05:66:75:87:85:04:65:c5:f7:bd: e9:a2:8f:c1:ca:be:86:38:5c:42:7c:ff:e6:94:ef: 25:be:03:7c:30:0c:ea:59:54:03:26:d9:19:76:15: bd:d1:a4:fb:7d:a7:a8:5f:80:43:a7:2f:ae:56:21: ed:4a:1b:12:0b:8e:1d:66:04:ac:07:a8:74:14:0f: f7:35:03:43:2f:8b:77:8c:4f:e8:8c:48:08:41:a1: 08:01:95:14:82:1f:4c:dd:2f:28:bc:7a:ff:b6:41: 05:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:70:27:FD:48:95:E7:C5:96:A0:F1:78:11:EF:AD:7A:40:D8:DF:7C X509v3 Authority Key Identifier: keyid:DA:AA:B1:2E:92:FA:0E:E0:43:C2:0E:EA:F2:BE:46:96:A2:C3:78:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qqxLpL6DuBDwg7q8r5GlqLDeHc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:02:7b:55:bc:d5:97:48:19:4e:d6:19:8b:84:01:36:4a:df: 30:05:7d:68:82:15:bc:e3:28:8a:92:99:67:74:72:25:b2:75: 16:18:cb:58:42:bf:8e:b5:bc:28:11:bf:d2:03:b4:d1:46:43: 48:55:a9:30:7d:6a:7a:e6:29:0e:ee:5a:d9:ff:1b:d8:0a:90: aa:6f:a3:ce:6a:7b:62:8e:5a:d5:d3:89:34:00:4d:f8:9a:72: 81:0d:9f:30:c5:d2:d1:16:49:a4:1e:82:40:50:41:49:48:59: 12:ca:7b:dd:7a:1a:86:f5:3c:f8:1b:da:5e:ab:82:6e:2f:b5: bc:fe:e2:22:8e:39:7e:1d:cf:b1:32:d7:3b:02:9b:6c:0b:53: e7:85:a8:07:0d:4e:a6:c7:ba:22:94:ce:12:c5:f1:5a:24:8f: 2f:18:26:1b:ac:fd:1d:09:92:44:f5:c0:47:f7:d1:cc:02:c5: 03:a5:2a:4e:6c:99:3b:52:9b:c6:1d:f0:c0:37:59:cc:2c:58: 88:94:e3:46:2e:b3:51:47:9e:77:9f:6e:0d:b6:33:6a:96:1c: 33:ce:24:ae:88:b2:38:0e:e5:19:24:44:48:4b:a3:be:09:eb: 26:dc:4d:b7:a7:4d:c7:0c:06:52:5a:65:0f:6f:2a:0d:da:90: e5:ad:dc:5e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBLcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZCNzMxMTAvBgNVBAUTKERBQUFCMTJFOTJGQTBFRTA0M0MyMEVFQUYyQkU0Njk2 QTJDMzc4NzcwHhcNMjYwMzI0MjMzNzM4WhcNMjYwMzMxMjMzNzM4WjAYMRYwFAYD VQQDEw02OWMzMjA0Mi00OGFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtqh0ru97OIlA4wT9sOavWNCjensL2rxyM+Y6nHIQJKJDVE5HdfqyBihUT2TQ DsbU0LE1c7g0+XplgS78cYf7b0in69Rw6jbyNnRvkgaC8Nt0FYF6nn/A9wRXQCE1 eLQXOPET5RlaRHm0jq7xtL0XyFu8jT77MdfQ3xjwVHEOKqylnnr2PZHKgPVSqPTP 0CzGm1qSAupSjc/1jgVmdYeFBGXF973poo/Byr6GOFxCfP/mlO8lvgN8MAzqWVQD JtkZdhW90aT7faeoX4BDpy+uViHtShsSC44dZgSsB6h0FA/3NQNDL4t3jE/ojEgI QaEIAZUUgh9M3S8ovHr/tkEFOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIFwJ/1I lefFlqDxeBHvrXpA2N98MB8GA1UdIwQYMBaAFNqqsS6S+g7gQ8IO6vK+Rpaiw3h3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkI3My9FQTgwOUZGMjZF RDIxMUVDQUUyRUI4MjlDNEY5QUUwMi8ycXF4THBMNkR1QkR3ZzdxOHI1R2xxTERl SGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJxcXhMcEw2RHVCRHdnN3E4cjVHbHFMRGVIYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkI3My9FQTgwOUZGMjZFRDIxMUVDQUUyRUI4MjlDNEY5QUUwMi8ycXF4THBMNkR1 QkR3ZzdxOHI1R2xxTERlSGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHwJ7VbzVl0gZTtYZi4QBNkrfMAV9aIIVvOMoipKZZ3RyJbJ1FhjLWEK/jrW8 KBG/0gO00UZDSFWpMH1qeuYpDu5a2f8b2AqQqm+jzmp7Yo5a1dOJNABN+JpygQ2f MMXS0RZJpB6CQFBBSUhZEsp73XoahvU8+BvaXquCbi+1vP7iIo45fh3PsTLXOwKb bAtT54WoBw1Opse6IpTOEsXxWiSPLxgmG6z9HQmSRPXAR/fRzALFA6UqTmyZO1Kb xh3wwDdZzCxYiJTjRi6zUUeed59uDbYzapYcM84kroiyOA7lGSRESEujvgnrJtxN t6dNxwwGUlplD28qDdqQ5a3cXg== -----END CERTIFICATE-----Generated at Thu Mar 26 22:12:07 2026 by rpki-client