$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.mft File: QSPpAOai7I_ptdcDt5KA7yFAfIE.mft (raw, json) Hash identifier: 6QukyspnDxAvCY+iWwxe73UVYTExfQ4uSbsWnJKBPww= Subject key identifier: E6:C9:08:2B:23:00:A2:85:DA:86:6C:7C:2E:13:F1:0D:57:46:B8:F3 Authority key identifier: 41:23:E9:00:E6:A2:EC:8F:E9:B5:D7:03:B7:92:80:EF:21:40:7C:81 Certificate issuer: /CN=A91F3B2E/serialNumber=4123E900E6A2EC8FE9B5D703B79280EF21407C81 Certificate serial: 0263 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSPpAOai7I_ptdcDt5KA7yFAfIE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.mft Manifest number: 0249 Signing time: Fri 27 Mar 2026 02:11:38 +0000 Manifest this update: Fri 27 Mar 2026 02:11:37 +0000 Manifest next update: Fri 03 Apr 2026 02:11:37 +0000 Files and hashes: 1: QSPpAOai7I_ptdcDt5KA7yFAfIE.crl (hash: J24bVZugdwmzdjwfLil4dS76j42MPK1ECAy2ZjUVPks=) 2: A91AF6A8CE7811EF89FA3944C4F9AE02.roa (hash: /XptYTwhi0uVDIVVDFau7tevix2taawngS3ewC7+5mA=) 3: 2B8EF9AA083911F0A051CE72C4F9AE02.roa (hash: L0al7k74eWiWJ3CDPsdhftXr9mpgHroxqH7auSGrGNY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.crl rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSPpAOai7I_ptdcDt5KA7yFAfIE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 02:11:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 611 (0x263) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3B2E, serialNumber=4123E900E6A2EC8FE9B5D703B79280EF21407C81 Validity Not Before: Mar 27 02:11:37 2026 GMT Not After : Apr 3 02:11:37 2026 GMT Subject: CN=69c5e75a-2b8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:50:61:d2:23:4b:53:5e:83:89:e0:62:2a:34: 50:06:4f:aa:18:67:39:a1:1b:43:8b:16:d6:41:6c: 6c:b8:4b:2f:20:83:cf:29:65:af:78:3f:05:2d:87: ad:2d:c0:07:f7:63:6f:94:42:25:4b:50:52:5a:14: be:a8:7b:40:e5:e3:b7:4d:02:1e:dc:72:f4:4c:56: 70:e9:21:68:ea:44:b9:88:ed:a3:0a:01:fb:ea:a2: 3e:92:d5:d1:bb:20:e5:6e:a1:94:cc:3e:50:5c:94: 7f:e8:bb:d6:7f:78:01:65:11:47:41:5a:e8:d8:7d: a7:f0:b1:4a:df:ea:76:0b:5f:e6:7d:8c:7f:15:27: 0d:30:03:d7:72:40:88:d6:f7:ae:e5:8f:1c:d1:38: 60:c7:03:c1:2e:b6:28:df:74:6f:e7:b7:16:26:80: 79:0e:2a:11:1d:ad:48:ed:f0:8b:49:20:23:2c:db: 7e:24:d1:c4:af:a6:89:44:43:c0:90:66:fc:cb:1f: b3:63:be:97:83:21:bd:a3:de:50:dd:bd:b2:ae:fa: 07:35:6c:9c:3d:5f:81:21:2b:ef:03:57:13:6d:6f: 4d:36:0f:15:84:4a:45:ac:09:d8:ca:0c:0a:cd:53: b3:d6:b3:48:8e:e8:72:54:ed:e2:69:03:9d:8b:2e: 75:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:C9:08:2B:23:00:A2:85:DA:86:6C:7C:2E:13:F1:0D:57:46:B8:F3 X509v3 Authority Key Identifier: keyid:41:23:E9:00:E6:A2:EC:8F:E9:B5:D7:03:B7:92:80:EF:21:40:7C:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSPpAOai7I_ptdcDt5KA7yFAfIE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:50:c4:30:3a:a6:2c:f4:91:7e:c2:4f:a4:15:73:0a:61:83: 1d:06:87:ed:17:da:0d:57:16:12:ac:53:f2:ea:cb:74:6f:f8: ac:27:7e:2a:c8:61:55:64:e4:90:5d:5c:d8:c7:34:48:09:07: e4:44:be:91:fb:7f:a7:c3:02:ee:35:ec:00:2d:59:f4:ca:6f: 72:f9:86:5d:ab:d9:5b:cd:00:3f:16:0b:dc:cb:c3:86:54:9a: 20:15:91:23:6e:5d:49:e9:15:f2:1e:e6:c6:46:4a:ac:f7:82: c5:f7:e2:d0:2e:6c:5f:e8:5a:3a:c9:42:5a:d3:5c:c4:a4:4b: 20:68:c2:e6:72:70:7c:fb:7e:67:28:91:74:52:ee:b5:12:53: 58:1c:a8:37:86:7a:13:2c:98:f3:4b:be:29:f4:16:19:ed:56: 74:8a:81:23:20:4c:c8:59:d0:6b:94:c4:be:84:c1:73:29:fb: 5d:b6:e0:dc:f0:78:0b:9d:0d:3f:82:31:e8:23:b5:25:de:e9: 0c:9f:b6:3a:54:2a:5f:6d:f3:67:c6:22:27:f5:9b:8b:84:1e: a9:17:f6:ac:a8:93:4d:4f:74:21:2e:51:53:04:64:16:3b:c2: 06:b8:3d:98:a8:54:03:f5:71:bf:75:91:f4:0e:65:54:d6:2f: 1e:5a:2e:d7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAmMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNCMkUxMTAvBgNVBAUTKDQxMjNFOTAwRTZBMkVDOEZFOUI1RDcwM0I3OTI4MEVG MjE0MDdDODEwHhcNMjYwMzI3MDIxMTM3WhcNMjYwNDAzMDIxMTM3WjAYMRYwFAYD VQQDEw02OWM1ZTc1YS0yYjhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsFBh0iNLU16DieBiKjRQBk+qGGc5oRtDixbWQWxsuEsvIIPPKWWveD8FLYet LcAH92NvlEIlS1BSWhS+qHtA5eO3TQIe3HL0TFZw6SFo6kS5iO2jCgH76qI+ktXR uyDlbqGUzD5QXJR/6LvWf3gBZRFHQVro2H2n8LFK3+p2C1/mfYx/FScNMAPXckCI 1veu5Y8c0ThgxwPBLrYo33Rv57cWJoB5DioRHa1I7fCLSSAjLNt+JNHEr6aJREPA kGb8yx+zY76XgyG9o95Q3b2yrvoHNWycPV+BISvvA1cTbW9NNg8VhEpFrAnYygwK zVOz1rNIjuhyVO3iaQOdiy512QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFObJCCsj AKKF2oZsfC4T8Q1XRrjzMB8GA1UdIwQYMBaAFEEj6QDmouyP6bXXA7eSgO8hQHyB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0IyRS8wRjU1QzY5NkQ2 N0QxMUVEODZEMzM3NTBDNEY5QUUwMi9RU1BwQU9haTdJX3B0ZGNEdDVLQTd5RkFm SUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FTUHBBT2FpN0lfcHRkY0R0NUtBN3lGQWZJRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG M0IyRS8wRjU1QzY5NkQ2N0QxMUVEODZEMzM3NTBDNEY5QUUwMi9RU1BwQU9haTdJ X3B0ZGNEdDVLQTd5RkFmSUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZlDEMDqmLPSRfsJPpBVzCmGDHQaH7RfaDVcWEqxT8urLdG/4rCd+KshhVWTk kF1c2Mc0SAkH5ES+kft/p8MC7jXsAC1Z9MpvcvmGXavZW80APxYL3MvDhlSaIBWR I25dSekV8h7mxkZKrPeCxffi0C5sX+haOslCWtNcxKRLIGjC5nJwfPt+ZyiRdFLu tRJTWByoN4Z6EyyY80u+KfQWGe1WdIqBIyBMyFnQa5TEvoTBcyn7Xbbg3PB4C50N P4Ix6CO1Jd7pDJ+2OlQqX23zZ8YiJ/Wbi4QeqRf2rKiTTU90IS5RUwRkFjvCBrg9 mKhUA/Vxv3WR9A5lVNYvHlou1w== -----END CERTIFICATE-----Generated at Sat Mar 28 08:44:46 2026 by rpki-client