$ rpki-client -vvf rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft File: Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft (raw, json) Hash identifier: ZpX1Ijs7UUNVEYucKNF40RCrn9ioAEyVQ0DBA3MlX50= Subject key identifier: 0E:9A:3A:DD:56:01:56:6F:6C:C2:52:D1:3A:BC:28:A2:70:9D:D5:72 Authority key identifier: 43:E1:E8:C4:26:1C:E0:7D:4F:8E:4C:FB:7A:3F:83:3F:BB:46:B8:8C Certificate issuer: /CN=A9118D0F/serialNumber=43E1E8C4261CE07D4F8E4CFB7A3F833FBB46B88C Certificate serial: 09E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft Manifest number: 09C1 Signing time: Tue 24 Mar 2026 19:44:45 +0000 Manifest this update: Tue 24 Mar 2026 19:44:44 +0000 Manifest next update: Tue 31 Mar 2026 19:44:44 +0000 Files and hashes: 1: Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.crl (hash: ZLuc8rQMdepVy8EIuTVsQ+eKvbnpLFtDFEH8Xy1B7hI=) 2: 75D91256B2F311EBB8A53526C4F9AE02.roa (hash: 61z0KuT36nUVuAoy7v3bsXZ/PxDyaJ+n/vqrzGvGZYM=) 3: 0D491000A64811EA939A7F67C4F9AE02.roa (hash: G8tEalgIYlF459jNjIZOJNDqLr5DDsJR+CWVbE3khX8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.crl rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:44:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2533 (0x9e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118D0F, serialNumber=43E1E8C4261CE07D4F8E4CFB7A3F833FBB46B88C Validity Not Before: Mar 24 19:44:44 2026 GMT Not After : Mar 31 19:44:44 2026 GMT Subject: CN=69c2e9ad-7fcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:63:b5:1b:7f:35:62:30:f9:da:39:32:bd:de: ab:42:33:c8:12:a5:73:cc:d2:2f:61:8d:0c:22:d4: 7f:69:c6:be:df:29:2f:e9:73:71:5f:2a:96:14:97: 85:22:30:94:db:78:d4:5d:ee:a0:ab:d0:d2:b2:96: 9d:97:6e:d2:89:18:f3:e2:ac:eb:f6:a9:77:da:a6: 87:63:2c:db:42:42:82:7e:ad:f4:84:41:27:9b:ea: 29:6c:8c:ea:1e:1b:3c:79:a4:4c:0b:2b:64:64:58: 82:92:ad:96:2e:40:b5:ad:2d:7a:20:7c:71:9a:47: b9:6c:8f:2a:0a:19:ef:8e:c0:aa:60:6f:67:7b:a6: 4d:3a:52:77:ab:43:e2:e7:1e:da:46:99:84:93:e0: 6a:77:32:a0:93:c3:fe:c3:83:ca:57:61:f5:b3:ee: 92:23:74:53:b9:98:4b:e7:f2:e5:f5:69:ff:0e:6f: 6a:55:6a:05:34:47:3f:c5:cb:b9:92:fb:b6:37:52: 36:a8:69:81:fd:e3:dc:e4:ea:33:6c:8c:16:76:b0: f1:47:95:d5:ab:25:16:cd:f8:f3:34:6c:aa:0b:ca: ca:ec:1d:bf:00:de:b2:e3:c1:a6:9b:93:18:44:f6: 7d:b5:94:46:36:28:d8:1c:cd:9a:0f:9c:69:a4:d0: 0d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:9A:3A:DD:56:01:56:6F:6C:C2:52:D1:3A:BC:28:A2:70:9D:D5:72 X509v3 Authority Key Identifier: keyid:43:E1:E8:C4:26:1C:E0:7D:4F:8E:4C:FB:7A:3F:83:3F:BB:46:B8:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:df:32:b4:4a:56:d9:2b:b8:c1:f3:0d:00:66:ab:65:81:0a: 3b:aa:34:9c:48:f0:e1:c6:db:8f:4f:a0:2a:92:0f:ff:90:31: f1:ed:03:64:74:e9:55:39:4a:39:8c:13:40:c6:e2:dc:7b:ab: a4:02:9c:36:53:31:6a:f4:ec:e1:8d:22:26:c2:53:11:52:d9: 99:0d:5c:bb:92:fa:a6:af:c7:0b:fb:8c:a2:9f:50:1e:e1:65: 79:7b:2b:4b:83:4d:6a:9a:0d:f9:77:77:98:bd:5f:6e:94:44: da:1c:ee:de:13:a2:12:22:3c:1b:42:0c:bb:b9:28:40:59:e0: e5:7f:bb:65:35:aa:27:57:1d:23:9e:5e:23:f6:19:dc:c0:cb: a2:53:71:0d:9b:c9:b6:54:90:51:e4:83:f3:8e:45:94:5d:8b: 24:2c:38:95:06:f3:61:a8:50:69:eb:81:42:a7:86:8c:2b:25: 47:98:83:ff:d3:61:3f:2c:4d:5d:42:f5:ac:ff:13:26:e0:1b: 72:44:51:e9:b3:8c:00:a1:ca:54:32:cf:05:ca:cf:45:24:ac: 01:7a:44:c7:69:09:e8:9b:98:40:09:4a:1b:9c:9a:93:87:af: 65:57:47:80:63:3d:35:cc:13:59:69:eb:fb:2f:e2:b4:43:38: 28:c6:4b:bd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCeUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThEMEYxMTAvBgNVBAUTKDQzRTFFOEM0MjYxQ0UwN0Q0RjhFNENGQjdBM0Y4MzNG QkI0NkI4OEMwHhcNMjYwMzI0MTk0NDQ0WhcNMjYwMzMxMTk0NDQ0WjAYMRYwFAYD VQQDEw02OWMyZTlhZC03ZmNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw2O1G381YjD52jkyvd6rQjPIEqVzzNIvYY0MItR/aca+3ykv6XNxXyqWFJeF IjCU23jUXe6gq9DSspadl27SiRjz4qzr9ql32qaHYyzbQkKCfq30hEEnm+opbIzq Hhs8eaRMCytkZFiCkq2WLkC1rS16IHxxmke5bI8qChnvjsCqYG9ne6ZNOlJ3q0Pi 5x7aRpmEk+BqdzKgk8P+w4PKV2H1s+6SI3RTuZhL5/Ll9Wn/Dm9qVWoFNEc/xcu5 kvu2N1I2qGmB/ePc5OozbIwWdrDxR5XVqyUWzfjzNGyqC8rK7B2/AN6y48Gmm5MY RPZ9tZRGNijYHM2aD5xppNANSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA6aOt1W AVZvbMJS0Tq8KKJwndVyMB8GA1UdIwQYMBaAFEPh6MQmHOB9T45M+3o/gz+7RriM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEQwRi83RDIyNzNCNEE2 NDYxMUVBQUY5RTkxNjJDNEY5QUUwMi9RLUhveENZYzRIMVBqa3o3ZWotRFA3dEd1 SXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1EtSG94Q1ljNEgxUGprejdlai1EUDd0R3VJdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OEQwRi83RDIyNzNCNEE2NDYxMUVBQUY5RTkxNjJDNEY5QUUwMi9RLUhveENZYzRI MVBqa3o3ZWotRFA3dEd1SXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdd8ytEpW2Su4wfMNAGarZYEKO6o0nEjw4cbbj0+gKpIP/5Ax8e0DZHTpVTlK OYwTQMbi3HurpAKcNlMxavTs4Y0iJsJTEVLZmQ1cu5L6pq/HC/uMop9QHuFleXsr S4NNapoN+Xd3mL1fbpRE2hzu3hOiEiI8G0IMu7koQFng5X+7ZTWqJ1cdI55eI/YZ 3MDLolNxDZvJtlSQUeSD845FlF2LJCw4lQbzYahQaeuBQqeGjCslR5iD/9NhPyxN XUL1rP8TJuAbckRR6bOMAKHKVDLPBcrPRSSsAXpEx2kJ6JuYQAlKG5yak4evZVdH gGM9NcwTWWnr+y/itEM4KMZLvQ== -----END CERTIFICATE-----Generated at Thu Mar 26 02:33:55 2026 by rpki-client