$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft File: QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft (raw, json) Hash identifier: /GNncNLMR2BVALV5ws2Qpvb2+HPLyU2jGNoStpewyJI= Subject key identifier: A5:9E:99:E7:86:C3:D2:AE:D2:DE:E6:2E:57:C0:7C:35:4A:90:49:43 Authority key identifier: 42:67:CF:5D:03:00:4A:8F:EF:DF:21:39:5D:0F:E8:24:54:8B:13:C1 Certificate issuer: /CN=A91FCEB1/serialNumber=4267CF5D03004A8FEFDF21395D0FE824548B13C1 Certificate serial: 2126 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmfPXQMASo_v3yE5XQ_oJFSLE8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft Manifest number: 28C5 Signing time: Tue 24 Mar 2026 15:51:56 +0000 Manifest this update: Tue 24 Mar 2026 15:51:56 +0000 Manifest next update: Tue 31 Mar 2026 15:51:56 +0000 Files and hashes: 1: QmfPXQMASo_v3yE5XQ_oJFSLE8E.crl (hash: 3whOyZCGB6hOyOH9IO7AxsK7lK8Bfvz/1OFCaB+htJQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.crl rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmfPXQMASo_v3yE5XQ_oJFSLE8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 15:51:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8486 (0x2126) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCEB1, serialNumber=4267CF5D03004A8FEFDF21395D0FE824548B13C1 Validity Not Before: Mar 24 15:51:56 2026 GMT Not After : Mar 31 15:51:56 2026 GMT Subject: CN=69c2b31c-2daa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:0b:ae:a7:27:29:05:13:c9:96:3d:6f:ce:4b: 90:62:07:54:58:b7:8e:37:55:ca:01:14:8f:84:ee: 74:e2:3a:37:68:60:9b:0f:7e:b8:42:d0:1a:6b:7d: 5d:5f:12:1d:d3:25:83:48:7c:47:de:f6:a2:70:d9: 69:20:57:67:e3:3c:f8:d6:a2:6d:0e:e8:10:e6:6c: ff:79:da:a6:98:41:38:7f:0c:93:26:5c:8d:73:0c: e6:b8:45:f4:6f:87:c8:69:65:60:62:27:83:2f:7d: 77:e1:f1:e4:10:5a:39:a2:14:92:59:30:f2:de:a8: f3:3b:55:e9:69:df:ff:7f:c8:20:57:4e:7d:25:da: 50:e7:e6:71:1b:63:c3:9a:37:75:42:fd:00:a1:ea: 8b:29:a9:c5:1a:7e:2d:e9:b1:29:cc:87:00:3b:05: 62:3a:96:4b:e2:fe:c4:39:b1:3e:83:97:74:e8:ac: 3f:90:12:f2:e5:64:2c:b0:e9:82:99:81:ee:7e:92: 6e:e1:6b:e6:48:e6:04:33:2b:75:67:72:70:9e:f6: 0c:91:b7:ff:83:b0:cb:67:e7:48:bf:c2:e0:ef:5b: 77:58:72:2e:22:0f:9c:da:c6:6a:8e:41:08:75:12: 71:d4:8c:19:3a:a8:98:26:cd:0d:ec:b1:f2:4d:51: ef:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:9E:99:E7:86:C3:D2:AE:D2:DE:E6:2E:57:C0:7C:35:4A:90:49:43 X509v3 Authority Key Identifier: keyid:42:67:CF:5D:03:00:4A:8F:EF:DF:21:39:5D:0F:E8:24:54:8B:13:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmfPXQMASo_v3yE5XQ_oJFSLE8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:d7:81:33:7c:42:da:80:77:13:f0:e6:09:9d:25:ce:4e:da: 47:29:ad:cf:98:e8:67:51:16:06:40:5d:12:10:be:8e:32:ca: 8d:68:81:95:39:2d:12:cb:4f:90:0d:1e:4a:2a:68:e7:cb:c8: 20:cf:93:40:ff:c8:b0:ce:fe:7b:0e:da:51:b7:f7:58:d3:f0: 08:b7:6c:4b:ef:00:fc:8e:d7:44:88:b2:35:0f:54:51:ba:2b: f0:cf:65:2b:b9:c2:21:04:1c:30:ba:df:9b:0d:b0:0f:4b:06: 96:ea:da:89:99:2a:3c:51:0a:76:ae:3b:3d:9c:47:b1:11:84: 06:dd:f1:1c:d9:a2:6a:24:19:1d:e0:db:cf:7b:5a:6c:ba:fd: 8e:6d:2e:c6:ba:74:fb:49:15:ca:74:81:c5:9c:b8:d6:17:33: 6b:aa:b1:f8:67:5a:b9:56:c4:4a:03:4d:c6:32:92:dd:5d:a5: 80:9c:8e:15:8c:69:bb:c1:5b:67:f4:ba:9b:7f:ee:2e:27:32: cb:bc:a8:9e:00:36:26:fc:a5:fd:eb:89:dc:ea:08:ea:e6:5f: 9e:85:fb:fa:59:71:55:e3:e0:de:82:d9:4c:d4:e0:f3:5a:bf: 6c:90:f0:35:29:10:35:5f:83:30:2b:b1:45:eb:63:15:be:32: a1:4a:b8:d2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICISYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNFQjExMTAvBgNVBAUTKDQyNjdDRjVEMDMwMDRBOEZFRkRGMjEzOTVEMEZFODI0 NTQ4QjEzQzEwHhcNMjYwMzI0MTU1MTU2WhcNMjYwMzMxMTU1MTU2WjAYMRYwFAYD VQQDEw02OWMyYjMxYy0yZGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAgwuupycpBRPJlj1vzkuQYgdUWLeON1XKARSPhO504jo3aGCbD364QtAaa31d XxId0yWDSHxH3vaicNlpIFdn4zz41qJtDugQ5mz/edqmmEE4fwyTJlyNcwzmuEX0 b4fIaWVgYieDL3134fHkEFo5ohSSWTDy3qjzO1Xpad//f8ggV059JdpQ5+ZxG2PD mjd1Qv0AoeqLKanFGn4t6bEpzIcAOwViOpZL4v7EObE+g5d06Kw/kBLy5WQssOmC mYHufpJu4WvmSOYEMyt1Z3JwnvYMkbf/g7DLZ+dIv8Lg71t3WHIuIg+c2sZqjkEI dRJx1IwZOqiYJs0N7LHyTVHvTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKWemeeG w9Ku0t7mLlfAfDVKkElDMB8GA1UdIwQYMBaAFEJnz10DAEqP798hOV0P6CRUixPB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0VCMS9FRkI4NzVDODA4 QzkxMUU2OEM3Nzg4NzhDNEY5QUUwMi9RbWZQWFFNQVNvX3YzeUU1WFFfb0pGU0xF OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FtZlBYUU1BU29fdjN5RTVYUV9vSkZTTEU4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0VCMS9FRkI4NzVDODA4QzkxMUU2OEM3Nzg4NzhDNEY5QUUwMi9RbWZQWFFNQVNv X3YzeUU1WFFfb0pGU0xFOEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsNeBM3xC2oB3E/DmCZ0lzk7aRymtz5joZ1EWBkBdEhC+jjLKjWiBlTktEstP kA0eSipo58vIIM+TQP/IsM7+ew7aUbf3WNPwCLdsS+8A/I7XRIiyNQ9UUbor8M9l K7nCIQQcMLrfmw2wD0sGluraiZkqPFEKdq47PZxHsRGEBt3xHNmiaiQZHeDbz3ta bLr9jm0uxrp0+0kVynSBxZy41hcza6qx+GdauVbESgNNxjKS3V2lgJyOFYxpu8Fb Z/S6m3/uLicyy7yongA2Jvyl/euJ3OoI6uZfnoX7+llxVePg3oLZTNTg81q/bJDw NSkQNV+DMCuxRetjFb4yoUq40g== -----END CERTIFICATE-----Generated at Thu Mar 26 04:58:53 2026 by rpki-client