$ rpki-client -vvf rpki.apnic.net/member_repository/A911CC94/22404ABE1C5311F19D0BE5DD083D8C67/Q03xGF63GUxktwjMLSVjSCTiTh4.mft File: Q03xGF63GUxktwjMLSVjSCTiTh4.mft (raw, json) Hash identifier: 1jy3Hj1GVoO1hVDOo0GFTOJcd1cpDuwToBQbF9/jimU= Subject key identifier: 45:02:98:F4:99:F4:67:45:BF:B3:F8:35:16:DD:7F:FE:ED:F7:DC:E5 Authority key identifier: 43:4D:F1:18:5E:B7:19:4C:64:B7:08:CC:2D:25:63:48:24:E2:4E:1E Certificate issuer: /CN=A911CC94/serialNumber=434DF1185EB7194C64B708CC2D25634824E24E1E Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q03xGF63GUxktwjMLSVjSCTiTh4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CC94/22404ABE1C5311F19D0BE5DD083D8C67/Q03xGF63GUxktwjMLSVjSCTiTh4.mft Manifest number: 0B Signing time: Wed 25 Mar 2026 08:19:54 +0000 Manifest this update: Wed 25 Mar 2026 08:19:53 +0000 Manifest next update: Wed 01 Apr 2026 08:19:53 +0000 Files and hashes: 1: Q03xGF63GUxktwjMLSVjSCTiTh4.crl (hash: t+oPVDqabSSvrhMK3UROaRydhSyxAGiLQNoeokwlg30=) 2: DB87563A1C5711F1811E0EC90A3D8C67.roa (hash: Uot0wKL2V+rres779GpUT7rmL47pZ4/zXDcozOfp2iU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CC94/22404ABE1C5311F19D0BE5DD083D8C67/Q03xGF63GUxktwjMLSVjSCTiTh4.crl rsync://rpki.apnic.net/member_repository/A911CC94/22404ABE1C5311F19D0BE5DD083D8C67/Q03xGF63GUxktwjMLSVjSCTiTh4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q03xGF63GUxktwjMLSVjSCTiTh4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:19:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CC94, serialNumber=434DF1185EB7194C64B708CC2D25634824E24E1E Validity Not Before: Mar 25 08:19:53 2026 GMT Not After : Apr 1 08:19:53 2026 GMT Subject: CN=69c39aaa-cfc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:4f:2c:1b:a7:0a:5d:0f:16:38:7c:18:61:fb: 1e:d3:ef:af:0a:11:d1:54:12:4b:75:e2:f0:e4:b4: 21:ab:3d:16:32:4a:a0:d3:e7:75:44:eb:f1:f9:92: 59:2f:cf:3a:9b:7a:f9:2b:e4:5e:11:37:d3:c3:51: 33:38:3f:58:db:e6:0e:9e:94:dc:5b:5a:b1:e4:36: 64:e4:fd:46:bf:59:cd:ec:9d:3a:87:43:63:c1:2a: fd:cf:1d:4c:85:e7:3a:36:b7:cb:57:06:d9:1d:b1: 94:6e:84:6c:91:43:1d:74:73:a6:d3:d0:2b:8e:8c: 86:0d:67:71:e3:f1:55:e9:70:87:58:f9:e1:d5:71: 13:ae:86:26:80:d4:8a:fa:7d:79:6c:ea:e7:84:f4: 7a:5b:ab:03:0f:b8:3c:3d:59:4f:8c:37:b6:03:e3: 5a:42:d3:44:9f:c5:86:65:94:ae:0c:bc:4a:62:ae: a3:d3:9e:39:44:ad:29:85:82:e3:db:39:d9:c8:0a: 53:ae:28:31:e2:57:27:51:56:b2:8a:e2:ec:fe:2e: 71:e9:7c:da:ba:4a:2d:8a:94:47:5e:f3:b4:be:99: 43:47:dd:2e:10:7c:fe:90:6f:95:fb:94:ff:ca:3d: 37:64:50:dd:f0:13:a2:90:75:bd:1d:43:fc:74:e8: 83:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:02:98:F4:99:F4:67:45:BF:B3:F8:35:16:DD:7F:FE:ED:F7:DC:E5 X509v3 Authority Key Identifier: keyid:43:4D:F1:18:5E:B7:19:4C:64:B7:08:CC:2D:25:63:48:24:E2:4E:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CC94/22404ABE1C5311F19D0BE5DD083D8C67/Q03xGF63GUxktwjMLSVjSCTiTh4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q03xGF63GUxktwjMLSVjSCTiTh4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CC94/22404ABE1C5311F19D0BE5DD083D8C67/Q03xGF63GUxktwjMLSVjSCTiTh4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:57:f4:bb:42:88:c3:6e:c6:04:80:04:3b:03:b2:58:65:4f: 82:41:3a:41:7f:88:f2:dd:49:82:b6:d5:02:3a:c5:53:82:3f: fe:08:3d:92:71:2a:3a:1f:04:91:e8:b3:ed:06:d1:b2:6a:0a: 0b:03:59:3c:6d:b0:aa:36:33:97:e8:52:f2:68:27:55:65:0a: c8:30:ea:fc:1d:59:42:d7:b0:2c:72:70:10:ad:30:0b:3f:fb: bd:fd:7d:67:ed:5d:b3:aa:d6:50:cb:61:94:11:41:43:af:33: b3:9d:fd:e5:cf:74:a2:e5:81:84:e7:24:e9:0b:5a:f5:51:a8: 0c:bb:c1:2e:3e:5a:6a:15:58:46:38:fc:0b:49:35:5a:26:8f: 2b:2d:e6:8c:b5:16:77:f0:50:85:f1:26:f4:ac:77:f8:76:fa: 24:f9:bf:1a:d2:b1:7e:77:4c:e3:52:b5:27:02:47:fa:9f:6c: 63:fa:f4:4c:ad:82:e5:1f:bc:2d:ca:fc:8c:46:68:8a:55:8f: 08:28:c8:1b:06:9a:9d:ad:89:3b:bc:84:3c:69:f3:e0:55:2e: 6e:8f:a8:fb:d3:77:5b:c5:1f:14:e0:1b:63:08:e4:0e:25:e8: cb:31:51:5c:fb:9f:0b:45:e3:42:70:22:9a:ce:8b:54:64:99: a2:95:2a:d8 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx Q0M5NDExMC8GA1UEBRMoNDM0REYxMTg1RUI3MTk0QzY0QjcwOENDMkQyNTYzNDgy NEUyNEUxRTAeFw0yNjAzMjUwODE5NTNaFw0yNjA0MDEwODE5NTNaMBgxFjAUBgNV BAMTDTY5YzM5YWFhLWNmYzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDaTywbpwpdDxY4fBhh+x7T768KEdFUEkt14vDktCGrPRYySqDT53VE6/H5klkv zzqbevkr5F4RN9PDUTM4P1jb5g6elNxbWrHkNmTk/Ua/Wc3snTqHQ2PBKv3PHUyF 5zo2t8tXBtkdsZRuhGyRQx10c6bT0CuOjIYNZ3Hj8VXpcIdY+eHVcROuhiaA1Ir6 fXls6ueE9HpbqwMPuDw9WU+MN7YD41pC00SfxYZllK4MvEpirqPTnjlErSmFguPb OdnIClOuKDHiVydRVrKK4uz+LnHpfNq6Si2KlEde87S+mUNH3S4QfP6Qb5X7lP/K PTdkUN3wE6KQdb0dQ/x06INpAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQURQKY9Jn0 Z0W/s/g1Ft1//u333OUwHwYDVR0jBBgwFoAUQ03xGF63GUxktwjMLSVjSCTiTh4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFDQzk0LzIyNDA0QUJFMUM1 MzExRjE5RDBCRTVERDA4M0Q4QzY3L1EwM3hHRjYzR1V4a3R3ak1MU1ZqU0NUaVRo NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUTAzeEdGNjNHVXhrdHdqTUxTVmpTQ1RpVGg0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFD Qzk0LzIyNDA0QUJFMUM1MzExRjE5RDBCRTVERDA4M0Q4QzY3L1EwM3hHRjYzR1V4 a3R3ak1MU1ZqU0NUaVRoNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAkV/S7QojDbsYEgAQ7A7JYZU+CQTpBf4jy3UmCttUCOsVTgj/+CD2ScSo6HwSR 6LPtBtGyagoLA1k8bbCqNjOX6FLyaCdVZQrIMOr8HVlC17AscnAQrTALP/u9/X1n 7V2zqtZQy2GUEUFDrzOznf3lz3Si5YGE5yTpC1r1UagMu8EuPlpqFVhGOPwLSTVa Jo8rLeaMtRZ38FCF8Sb0rHf4dvok+b8a0rF+d0zjUrUnAkf6n2xj+vRMrYLlH7wt yvyMRmiKVY8IKMgbBpqdrYk7vIQ8afPgVS5uj6j703dbxR8U4BtjCOQOJejLMVFc +58LReNCcCKazotUZJmilSrY -----END CERTIFICATE-----Generated at Thu Mar 26 00:28:20 2026 by rpki-client