$ rpki-client -vvf rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft File: QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft (raw, json) Hash identifier: ww47mUqoR/Rfzgkt0rUZtaBy3IlzW16yFxxDKHjAM9Y= Subject key identifier: A7:12:55:ED:C7:1A:BC:8B:09:8A:EE:C3:47:58:BA:F3:38:81:F5:98 Authority key identifier: 41:05:97:D5:B0:00:43:E2:0A:A2:40:9E:32:71:ED:4F:41:E1:31:C7 Certificate issuer: /CN=A91F95E2/serialNumber=410597D5B00043E20AA2409E3271ED4F41E131C7 Certificate serial: 04DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQWX1bAAQ-IKokCeMnHtT0HhMcc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft Manifest number: 04D7 Signing time: Tue 24 Mar 2026 23:29:27 +0000 Manifest this update: Tue 24 Mar 2026 23:29:26 +0000 Manifest next update: Tue 31 Mar 2026 23:29:26 +0000 Files and hashes: 1: QQWX1bAAQ-IKokCeMnHtT0HhMcc.crl (hash: 5kSUe/z5ZnYWnyGvGG1gAo1DcfHfB21gTgoGU5zI370=) 2: 6229E2DC5C7911EC8C7BD812C4F9AE02.roa (hash: 8WBT2mYpXItDKfO9g6OLEzS6VivEAPbuFf/SLXRWDPw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.crl rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQWX1bAAQ-IKokCeMnHtT0HhMcc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:29:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1246 (0x4de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F95E2, serialNumber=410597D5B00043E20AA2409E3271ED4F41E131C7 Validity Not Before: Mar 24 23:29:26 2026 GMT Not After : Mar 31 23:29:26 2026 GMT Subject: CN=69c31e57-1054 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:a4:48:6a:fd:92:7a:cd:52:e0:67:36:9f:88: 7d:ad:65:41:b2:82:8d:2a:3c:01:2d:30:41:b1:c8: 4e:d8:92:81:82:a5:e1:1b:50:af:1b:9e:d2:25:9d: da:f2:f1:62:c7:e3:51:fe:ff:23:ad:0b:5c:89:38: 14:ef:0f:94:80:9b:ec:7b:a8:7b:e7:86:99:85:78: 87:c2:1d:96:02:ad:f0:3c:eb:f6:8b:f8:c3:2d:bf: f2:fc:73:19:1a:80:00:d2:1d:34:21:45:10:bc:7e: a4:bd:43:29:6d:27:eb:d8:38:fd:5d:6a:ce:cc:e9: fc:6f:e5:16:eb:91:03:ea:ee:87:48:de:6b:d7:5c: 9e:e7:80:60:90:9c:58:30:8e:20:29:77:e6:ad:79: 72:e4:8b:be:04:65:7f:b2:ca:a3:f9:33:29:f3:65: c3:8f:c6:9a:ed:f3:f2:2a:39:0c:5e:4f:27:dd:d1: 6d:a7:56:2f:e8:c4:d0:19:3b:43:f3:1d:56:b9:63: 45:ed:6e:c8:27:50:9e:79:54:7a:c3:2a:62:bb:31: 13:f0:85:99:3f:6e:7f:97:be:9c:49:d8:35:b5:71: 38:d8:8e:2c:b2:36:28:6e:72:69:71:3e:d4:f2:63: 8c:12:01:60:d5:3a:5a:bb:42:ee:f6:60:dc:e5:64: bd:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:12:55:ED:C7:1A:BC:8B:09:8A:EE:C3:47:58:BA:F3:38:81:F5:98 X509v3 Authority Key Identifier: keyid:41:05:97:D5:B0:00:43:E2:0A:A2:40:9E:32:71:ED:4F:41:E1:31:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQWX1bAAQ-IKokCeMnHtT0HhMcc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:20:db:1f:15:93:fc:82:c2:cf:8c:6b:e5:6c:e1:71:2d:a5: a3:a6:e6:cd:0e:f7:8c:32:ff:c9:c7:6a:b1:95:fb:0c:d5:cf: 84:03:30:84:93:50:d7:9d:12:00:87:22:d2:7a:93:ae:d5:2e: d9:f7:d5:50:42:ef:5f:2e:7d:58:ae:6b:56:ab:06:02:63:c9: 67:d5:49:e4:0e:ea:16:e2:1d:2c:68:12:3f:5b:7c:aa:24:48: 5f:02:c2:41:0d:12:ad:0e:82:1f:63:fe:81:35:9d:2d:0a:d6: 7d:47:c2:37:c1:c5:6a:90:60:ee:f3:be:9f:63:52:d3:5e:7a: 5c:68:67:0d:74:ca:46:f5:7e:24:22:df:32:81:8c:90:de:e1: 6d:bf:2e:19:36:1f:86:7d:36:d8:32:39:43:87:a0:99:db:92: 4b:1c:56:9a:6f:82:c8:f3:f8:0b:89:c0:b1:51:95:af:a6:ff: 00:7f:95:bb:79:26:25:bf:b9:4b:9d:9f:09:0b:7e:11:87:a8: b4:c1:3e:e6:de:04:e2:a8:22:bf:c8:5f:4c:02:f8:39:28:1d: 38:39:5c:50:b9:9a:b4:0a:6b:8c:72:45:a3:f8:f0:23:c3:ce: 32:03:c5:0a:b3:e1:59:d3:d5:5d:df:f7:44:f6:cb:17:0f:6c: 19:73:43:b1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjk1RTIxMTAvBgNVBAUTKDQxMDU5N0Q1QjAwMDQzRTIwQUEyNDA5RTMyNzFFRDRG NDFFMTMxQzcwHhcNMjYwMzI0MjMyOTI2WhcNMjYwMzMxMjMyOTI2WjAYMRYwFAYD VQQDEw02OWMzMWU1Ny0xMDU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA86RIav2Ses1S4Gc2n4h9rWVBsoKNKjwBLTBBschO2JKBgqXhG1CvG57SJZ3a 8vFix+NR/v8jrQtciTgU7w+UgJvse6h754aZhXiHwh2WAq3wPOv2i/jDLb/y/HMZ GoAA0h00IUUQvH6kvUMpbSfr2Dj9XWrOzOn8b+UW65ED6u6HSN5r11ye54BgkJxY MI4gKXfmrXly5Iu+BGV/ssqj+TMp82XDj8aa7fPyKjkMXk8n3dFtp1Yv6MTQGTtD 8x1WuWNF7W7IJ1CeeVR6wypiuzET8IWZP25/l76cSdg1tXE42I4ssjYobnJpcT7U 8mOMEgFg1Tpau0Lu9mDc5WS9HQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKcSVe3H GryLCYruw0dYuvM4gfWYMB8GA1UdIwQYMBaAFEEFl9WwAEPiCqJAnjJx7U9B4THH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTVFMi8xMTg1NDVGQTVD NzUxMUVDODlBQkZBMEJDNEY5QUUwMi9RUVdYMWJBQVEtSUtva0NlTW5IdFQwSGhN Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FRV1gxYkFBUS1JS29rQ2VNbkh0VDBIaE1jYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTVFMi8xMTg1NDVGQTVDNzUxMUVDODlBQkZBMEJDNEY5QUUwMi9RUVdYMWJBQVEt SUtva0NlTW5IdFQwSGhNY2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALCDbHxWT/ILCz4xr5WzhcS2lo6bmzQ73jDL/ycdqsZX7DNXPhAMwhJNQ150S AIci0nqTrtUu2ffVUELvXy59WK5rVqsGAmPJZ9VJ5A7qFuIdLGgSP1t8qiRIXwLC QQ0SrQ6CH2P+gTWdLQrWfUfCN8HFapBg7vO+n2NS0156XGhnDXTKRvV+JCLfMoGM kN7hbb8uGTYfhn022DI5Q4egmduSSxxWmm+CyPP4C4nAsVGVr6b/AH+Vu3kmJb+5 S52fCQt+EYeotME+5t4E4qgiv8hfTAL4OSgdODlcULmatAprjHJFo/jwI8POMgPF CrPhWdPVXd/3RPbLFw9sGXNDsQ== -----END CERTIFICATE-----Generated at Thu Mar 26 02:33:04 2026 by rpki-client