$ rpki-client -vvf rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.mft File: Q2ssXwP5HKdBxqJJ3AFabVRKYqY.mft (raw, json) Hash identifier: m/oVKhB7b+nWHkhJ5GZzidyj+ZmYHcO77JjdAv4DuAU= Subject key identifier: E5:DC:77:27:3B:D3:99:D0:EB:F8:DB:99:97:4C:FC:56:37:96:F6:3D Authority key identifier: 43:6B:2C:5F:03:F9:1C:A7:41:C6:A2:49:DC:01:5A:6D:54:4A:62:A6 Certificate issuer: /CN=A911647C/serialNumber=436B2C5F03F91CA741C6A249DC015A6D544A62A6 Certificate serial: 0B77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.mft Manifest number: 0ABD Signing time: Tue 24 Mar 2026 19:28:54 +0000 Manifest this update: Tue 24 Mar 2026 19:28:54 +0000 Manifest next update: Tue 31 Mar 2026 19:28:54 +0000 Files and hashes: 1: Q2ssXwP5HKdBxqJJ3AFabVRKYqY.crl (hash: lB17SWZ1rycEFMIa+5LHy2UoWrk9xabBdrDq8OSIBDI=) 2: 61EFB2ACAC3611EDA5995F3FC4F9AE02.roa (hash: lxrRVOjIONZ0+sk1QUPdtSqTSIWnhV1Sgp2inbSvE0o=) 3: 0EA44D4E5ADD11EBB9CEE568C4F9AE02.roa (hash: xyMhDnjS1J7j5KhCCxE7FkpfD0zlq+Ub21i1KmDM4ok=) 4: DCF88EAE5ED811EBAB677671C4F9AE02.roa (hash: M8kgzZ/qskhWT6RqbwLXgYKBgdTgBhgTCm6VDEfCRyI=) 5: 8626FFC65AE511EBA452D33EC4F9AE02.roa (hash: If1p2T4ry814caqPtmeuOiTH0yVCnehjVYiIPxJ8aBs=) 6: 84023C06D24611EABDDF5344C4F9AE02.roa (hash: FMzg28ZdQ4F0sdhtK2wuRkllmrqXUEFKB65mg1sG8L4=) 7: 553170245AC511EBA052F663C4F9AE02.roa (hash: 7erTlCvInc3AVRLw7wvtHf/eZ1jEoIGiOeY13F8Zqv8=) 8: 0DE32D9C2B1E11F0AFEB852DC4F9AE02.roa (hash: zt8ovKN7+n8nwUz7dlHlvLBjh4KwXCc4mYOMPsqbe38=) 9: C3E2252E205F11EE8117111CC4F9AE02.roa (hash: jZ6Iauv/dN/4P0hBUVndivCUUgxGO8TMbCYwzqgk7iI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.crl rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:28:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2935 (0xb77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911647C, serialNumber=436B2C5F03F91CA741C6A249DC015A6D544A62A6 Validity Not Before: Mar 24 19:28:54 2026 GMT Not After : Mar 31 19:28:54 2026 GMT Subject: CN=69c2e5f6-8334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:c7:20:2c:93:d8:7c:6c:3d:f7:b6:96:98:34: 68:f3:3b:7a:b2:74:a9:3c:d9:fd:ba:30:95:1b:7c: 48:6b:f5:3a:ef:87:d6:93:6f:96:d4:9c:f1:81:21: 5d:f8:91:e5:0b:5a:48:64:2e:54:ef:af:d0:3a:ac: 77:13:fd:86:54:1c:cd:9f:41:3c:3b:d4:61:6a:43: 6a:89:60:fb:15:d7:2b:56:33:8a:0e:34:aa:2f:19: 97:09:7d:a5:07:52:0f:37:74:c0:1f:61:e5:0c:5b: 20:5c:ee:31:8d:ae:e8:12:cf:05:90:01:58:12:35: ae:2c:da:4a:5e:ca:b9:f5:50:2b:ad:b9:3d:0c:e2: a1:9b:79:fd:5e:72:a0:d4:90:7b:9a:9b:56:46:d4: b2:c0:14:51:25:17:78:fb:93:c7:7e:1d:d4:54:3a: f5:4c:ba:ee:e0:3e:db:9c:30:ac:ae:d5:35:2a:f3: dc:40:d5:63:14:28:20:90:7b:9e:d2:85:8f:f4:bf: 61:3f:29:1a:2c:ca:64:c9:37:06:25:75:c4:58:e1: eb:82:ab:ed:a6:50:11:0e:2b:e8:c1:9f:3d:a6:fd: 60:31:e6:5e:bf:85:8c:ec:e1:1d:b8:4a:83:db:5c: 7a:07:94:1b:48:3e:27:da:a3:b1:64:56:f9:1e:0d: a3:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:DC:77:27:3B:D3:99:D0:EB:F8:DB:99:97:4C:FC:56:37:96:F6:3D X509v3 Authority Key Identifier: keyid:43:6B:2C:5F:03:F9:1C:A7:41:C6:A2:49:DC:01:5A:6D:54:4A:62:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:bf:a6:96:69:d6:57:d1:4e:18:98:b0:e9:ac:33:0f:cc:ff: 29:c0:bb:c2:dc:96:2c:b7:19:c3:45:86:92:1a:11:42:7d:45: 93:18:6e:e6:09:32:97:c0:d9:45:bd:dc:25:40:bf:2d:37:58: 70:5b:04:80:b3:29:a5:1a:ff:dc:4a:d0:46:c1:5e:96:96:b2: c5:1c:fb:1e:aa:06:b8:75:c5:03:b8:f9:e7:4e:f4:9b:a7:fb: d5:e3:42:4f:19:9b:63:7c:4c:87:30:1b:bb:c0:ff:4b:70:ec: 4d:d8:0b:89:94:9c:9f:8e:34:a5:e5:72:b9:79:b4:63:5a:5c: 7a:95:35:f9:e3:b4:6e:72:9c:cd:d1:e5:52:dc:13:f5:9d:0b: 1c:44:57:dc:1c:5a:e5:1b:aa:bd:c3:ae:79:37:65:7b:f9:a5: 35:26:91:c6:52:b0:44:fb:8d:8e:36:22:64:49:76:e6:2b:c8: 16:b1:16:d2:c7:f0:a7:b7:13:4d:ac:df:b9:d6:7b:13:41:45: a7:63:40:13:40:0c:26:12:50:5a:3d:88:d4:f6:e0:a5:0c:66: 71:bf:6c:d8:ee:7c:7b:fc:56:5d:c1:41:b5:f0:e0:15:b7:02: 63:03:3a:b1:09:7f:1c:00:57:33:f6:88:22:eb:93:04:e2:1a: 79:9a:cf:37 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC3cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY0N0MxMTAvBgNVBAUTKDQzNkIyQzVGMDNGOTFDQTc0MUM2QTI0OURDMDE1QTZE NTQ0QTYyQTYwHhcNMjYwMzI0MTkyODU0WhcNMjYwMzMxMTkyODU0WjAYMRYwFAYD VQQDEw02OWMyZTVmNi04MzM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA68cgLJPYfGw997aWmDRo8zt6snSpPNn9ujCVG3xIa/U674fWk2+W1JzxgSFd +JHlC1pIZC5U76/QOqx3E/2GVBzNn0E8O9RhakNqiWD7FdcrVjOKDjSqLxmXCX2l B1IPN3TAH2HlDFsgXO4xja7oEs8FkAFYEjWuLNpKXsq59VArrbk9DOKhm3n9XnKg 1JB7mptWRtSywBRRJRd4+5PHfh3UVDr1TLru4D7bnDCsrtU1KvPcQNVjFCggkHue 0oWP9L9hPykaLMpkyTcGJXXEWOHrgqvtplARDivowZ89pv1gMeZev4WM7OEduEqD 21x6B5QbSD4n2qOxZFb5Hg2jIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOXcdyc7 05nQ6/jbmZdM/FY3lvY9MB8GA1UdIwQYMBaAFENrLF8D+RynQcaiSdwBWm1USmKm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjQ3Qy80MzdDQzQwNjg1 MTMxMUVBQUEwQjBBN0ZDNEY5QUUwMi9RMnNzWHdQNUhLZEJ4cUpKM0FGYWJWUktZ cVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Eyc3NYd1A1SEtkQnhxSkozQUZhYlZSS1lxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjQ3Qy80MzdDQzQwNjg1MTMxMUVBQUEwQjBBN0ZDNEY5QUUwMi9RMnNzWHdQNUhL ZEJ4cUpKM0FGYWJWUktZcVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsr+mlmnWV9FOGJiw6awzD8z/KcC7wtyWLLcZw0WGkhoRQn1Fkxhu5gkyl8DZ Rb3cJUC/LTdYcFsEgLMppRr/3ErQRsFelpayxRz7HqoGuHXFA7j55070m6f71eNC TxmbY3xMhzAbu8D/S3DsTdgLiZScn440peVyuXm0Y1pcepU1+eO0bnKczdHlUtwT 9Z0LHERX3Bxa5RuqvcOueTdle/mlNSaRxlKwRPuNjjYiZEl25ivIFrEW0sfwp7cT TazfudZ7E0FFp2NAE0AMJhJQWj2I1PbgpQxmcb9s2O58e/xWXcFBtfDgFbcCYwM6 sQl/HABXM/aIIuuTBOIaeZrPNw== -----END CERTIFICATE-----Generated at Thu Mar 26 16:40:00 2026 by rpki-client