$ rpki-client -vvf rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.mft File: QstM8CH28_wMgcT98cl9dCEAMXs.mft (raw, json) Hash identifier: rlNq65ybw0+1YX/JUCZzmtzcv3X2pUoRDU5B6lLuiyE= Subject key identifier: 35:68:D5:0C:ED:B2:B3:F6:08:03:6D:AA:F1:1D:CF:F3:C8:61:B2:65 Authority key identifier: 42:CB:4C:F0:21:F6:F3:FC:0C:81:C4:FD:F1:C9:7D:74:21:00:31:7B Certificate issuer: /CN=A9113B73/serialNumber=42CB4CF021F6F3FC0C81C4FDF1C97D742100317B Certificate serial: 07DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QstM8CH28_wMgcT98cl9dCEAMXs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.mft Manifest number: 07D3 Signing time: Thu 26 Mar 2026 21:13:35 +0000 Manifest this update: Thu 26 Mar 2026 21:13:34 +0000 Manifest next update: Thu 02 Apr 2026 21:13:34 +0000 Files and hashes: 1: QstM8CH28_wMgcT98cl9dCEAMXs.crl (hash: +oe0MJd6++IfbzjnUwSCZKD5teTLeZYdmVJm6aa3HZc=) 2: 038C732E874611EB83B41D39C4F9AE02.roa (hash: 2JfNZ4QiLkf3fWIrtV5StFupWR5RzcN8rLVkxpO3w64=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.crl rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QstM8CH28_wMgcT98cl9dCEAMXs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 21:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2013 (0x7dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113B73, serialNumber=42CB4CF021F6F3FC0C81C4FDF1C97D742100317B Validity Not Before: Mar 26 21:13:34 2026 GMT Not After : Apr 2 21:13:34 2026 GMT Subject: CN=69c5a17e-edc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:88:a7:4f:bf:22:be:4e:68:64:03:34:82:ae: 1a:4e:76:da:d1:ac:63:91:4a:5e:9b:1c:e2:7b:d5: 89:5b:76:ca:c0:8b:c2:30:f4:ad:59:75:61:7e:ab: 70:c4:e9:97:40:7f:8a:8e:bb:c8:ef:76:fe:15:10: 20:53:a0:23:13:54:3f:d8:42:77:59:6b:b8:87:4d: 2c:fb:68:05:02:7a:46:35:c3:08:d1:bd:dc:b4:bc: 2d:55:14:a2:b3:b0:34:5e:03:a0:4b:e1:ca:fd:c8: 39:d8:3b:df:cb:91:c1:88:b3:e0:90:eb:ad:f7:3a: 76:a3:20:77:2a:ca:04:27:e0:43:ee:f6:0b:bb:77: ca:74:16:2a:be:dd:02:9d:d1:00:ad:db:8a:b1:6b: 12:f5:cf:a2:d9:6d:35:b1:9d:6a:85:a7:d4:fb:d7: 8a:77:5f:45:b8:47:4d:8b:da:15:bf:8a:b0:55:db: 38:64:ab:3b:d9:6c:e3:f8:d7:7c:ea:73:9b:a0:a9: 29:4a:dc:d7:80:91:fc:72:f7:ed:a2:aa:74:57:4b: 00:68:83:8c:1f:dc:1a:01:2c:65:14:26:d6:cd:a3: 07:5d:3d:6d:b2:a1:4f:bb:4c:04:4a:9e:a9:e7:b1: 35:56:38:2a:d0:d9:a2:0b:0a:7b:f8:16:6e:63:11: 24:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:68:D5:0C:ED:B2:B3:F6:08:03:6D:AA:F1:1D:CF:F3:C8:61:B2:65 X509v3 Authority Key Identifier: keyid:42:CB:4C:F0:21:F6:F3:FC:0C:81:C4:FD:F1:C9:7D:74:21:00:31:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QstM8CH28_wMgcT98cl9dCEAMXs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:8d:bd:20:d3:c2:b1:e5:39:32:02:48:1f:29:cc:78:8a:03: 21:53:b0:83:f7:32:00:b8:15:c1:58:2d:2b:da:3a:86:2e:f4: 5b:a7:b2:44:89:a9:d1:c3:c3:1f:dc:34:fe:2f:2b:4d:f1:46: ee:bb:0c:1e:86:5f:74:c4:6d:17:37:be:8e:4c:2f:6e:f5:fd: 83:91:e6:1e:fe:8c:3e:d2:59:12:c8:32:eb:b8:51:bc:81:6f: 46:cd:ad:68:26:03:22:9d:da:09:f9:5f:31:84:a0:b9:32:c0: a0:1e:02:e2:41:84:a0:e4:80:9d:a7:0a:27:d9:78:99:a6:69: a1:58:e6:9f:91:28:46:99:5c:b2:5f:ce:ce:9d:b6:6e:16:5b: 42:15:16:bd:6e:6f:e4:81:54:87:4c:4e:e9:0b:4f:80:74:4b: d1:8d:ba:75:0a:77:60:bb:3f:fa:70:d8:d4:9d:7d:c4:e8:97: 7a:bb:8f:2f:54:16:b3:6f:01:49:ce:2c:e9:52:b1:ff:59:20: 8f:72:06:fd:5e:6b:e3:83:6b:ec:56:1e:87:0c:c5:58:c3:22: 02:cd:f6:f1:df:26:9e:8c:b0:4c:9b:a0:4c:d9:e2:95:48:d6: 6a:01:4a:c3:b0:41:fb:1f:23:5e:d1:a6:2f:a3:d7:6b:0b:77: 84:e3:25:98 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB90wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTNCNzMxMTAvBgNVBAUTKDQyQ0I0Q0YwMjFGNkYzRkMwQzgxQzRGREYxQzk3RDc0 MjEwMDMxN0IwHhcNMjYwMzI2MjExMzM0WhcNMjYwNDAyMjExMzM0WjAYMRYwFAYD VQQDEw02OWM1YTE3ZS1lZGM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAgoinT78ivk5oZAM0gq4aTnba0axjkUpemxzie9WJW3bKwIvCMPStWXVhfqtw xOmXQH+KjrvI73b+FRAgU6AjE1Q/2EJ3WWu4h00s+2gFAnpGNcMI0b3ctLwtVRSi s7A0XgOgS+HK/cg52Dvfy5HBiLPgkOut9zp2oyB3KsoEJ+BD7vYLu3fKdBYqvt0C ndEArduKsWsS9c+i2W01sZ1qhafU+9eKd19FuEdNi9oVv4qwVds4ZKs72Wzj+Nd8 6nOboKkpStzXgJH8cvftoqp0V0sAaIOMH9waASxlFCbWzaMHXT1tsqFPu0wESp6p 57E1Vjgq0NmiCwp7+BZuYxEk8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDVo1Qzt srP2CANtqvEdz/PIYbJlMB8GA1UdIwQYMBaAFELLTPAh9vP8DIHE/fHJfXQhADF7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0I3My9CQTYzNTk4MjJG RTQxMUVCOERCNDFCMjVDNEY5QUUwMi9Rc3RNOENIMjhfd01nY1Q5OGNsOWRDRUFN WHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FzdE04Q0gyOF93TWdjVDk4Y2w5ZENFQU1Ycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx M0I3My9CQTYzNTk4MjJGRTQxMUVCOERCNDFCMjVDNEY5QUUwMi9Rc3RNOENIMjhf d01nY1Q5OGNsOWRDRUFNWHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAm429INPCseU5MgJIHynMeIoDIVOwg/cyALgVwVgtK9o6hi70W6eyRImp0cPD H9w0/i8rTfFG7rsMHoZfdMRtFze+jkwvbvX9g5HmHv6MPtJZEsgy67hRvIFvRs2t aCYDIp3aCflfMYSguTLAoB4C4kGEoOSAnacKJ9l4maZpoVjmn5EoRplcsl/Ozp22 bhZbQhUWvW5v5IFUh0xO6QtPgHRL0Y26dQp3YLs/+nDY1J19xOiXeruPL1QWs28B Sc4s6VKx/1kgj3IG/V5r44Nr7FYehwzFWMMiAs328d8mnoywTJugTNnilUjWagFK w7BB+x8jXtGmL6PXawt3hOMlmA== -----END CERTIFICATE-----Generated at Sat Mar 28 08:44:27 2026 by rpki-client