$ rpki-client -vvf rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.mft File: qo4b42JCQNwzAgR_tBp9TkeAjvg.mft (raw, json) Hash identifier: LwvDaXF3osotCxg5Lan+1bFZtd0lrlnjV/2MaO4Ae0s= Subject key identifier: DF:73:D1:AC:57:CB:6C:FE:C7:40:E6:7F:AE:3B:30:C1:15:47:4F:A5 Authority key identifier: AA:8E:1B:E3:62:42:40:DC:33:02:04:7F:B4:1A:7D:4E:47:80:8E:F8 Certificate issuer: /CN=A911E509/serialNumber=AA8E1BE3624240DC3302047FB41A7D4E47808EF8 Certificate serial: 0A2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qo4b42JCQNwzAgR_tBp9TkeAjvg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.mft Manifest number: 09F3 Signing time: Tue 24 Mar 2026 19:45:19 +0000 Manifest this update: Tue 24 Mar 2026 19:45:18 +0000 Manifest next update: Tue 31 Mar 2026 19:45:18 +0000 Files and hashes: 1: qo4b42JCQNwzAgR_tBp9TkeAjvg.crl (hash: P9BOFtXGBDAFnZMKSpUiAoDCh2gIJZ3myUlMK+gtVGA=) 2: 2E18EB105D0C11EE873B1C2AC4F9AE02.roa (hash: ffDUuM9X2orV7o+aInsG+5suQOvozRrFfEYtHJPj+tI=) 3: 0FD0ED72DEDF11F085D204E3526F56BC.roa (hash: GXMx3T0wzMeQ5SqXIqTQB1NCcmuAlbTIQgesXA5F2WA=) 4: 35E2088CDEDC11F09573FB8A516F56BC.roa (hash: 3kA5OpKU9eHVzOskyos+lpBrFtE0p99oVGBf4/jqZSE=) 5: C2A410D4ADA011F08E990C1DC4F9AE02.roa (hash: qwwYep7qRlTP8X6SrltD3/DTpF9H98KfUFFBA+dvWXU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.crl rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qo4b42JCQNwzAgR_tBp9TkeAjvg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2606 (0xa2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E509, serialNumber=AA8E1BE3624240DC3302047FB41A7D4E47808EF8 Validity Not Before: Mar 24 19:45:18 2026 GMT Not After : Mar 31 19:45:18 2026 GMT Subject: CN=69c2e9cf-54d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:22:e9:75:83:9f:48:49:6f:87:12:7f:2e:d2: bf:45:5e:65:7e:24:c9:68:62:ca:a8:1a:77:64:db: e3:a0:1a:7d:83:48:1d:52:2b:a5:e9:26:5a:55:c9: 7c:4c:98:69:25:55:c3:cb:c1:e1:08:fd:32:1c:15: 8e:89:4c:7f:1c:20:a0:20:0d:bf:85:13:e1:94:55: a1:cb:64:c7:09:b0:0f:36:08:b2:d6:c7:b2:49:3a: 73:7d:1d:72:80:ea:21:c6:0d:0e:95:f8:de:c2:cb: 67:77:06:b4:0c:c9:3c:36:d9:9e:c7:8a:2b:89:8e: d3:23:b7:a8:bc:fd:eb:31:9d:aa:6a:10:6b:a4:f4: 2a:72:07:c5:8e:18:fe:50:c4:15:d7:c6:cd:27:50: e8:7b:4e:55:75:bd:3c:2b:1b:0d:d0:81:d6:80:ab: d5:70:33:a2:c7:31:72:be:be:bf:84:f0:78:28:dd: 13:1b:fa:76:2f:6c:3b:61:13:d3:3d:a0:3c:ad:94: 05:f7:ec:9c:1f:6d:44:0a:5a:22:b2:fc:c7:e1:72: 24:d6:2c:6f:9b:a5:87:40:e3:74:0a:2c:d8:7d:10: 7d:6d:77:9d:09:06:c7:e1:79:39:7f:0f:9a:f5:cf: e5:9f:57:d0:c5:61:72:61:6b:c1:d3:18:1b:4f:06: c9:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:73:D1:AC:57:CB:6C:FE:C7:40:E6:7F:AE:3B:30:C1:15:47:4F:A5 X509v3 Authority Key Identifier: keyid:AA:8E:1B:E3:62:42:40:DC:33:02:04:7F:B4:1A:7D:4E:47:80:8E:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qo4b42JCQNwzAgR_tBp9TkeAjvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:46:a2:4c:34:1d:ac:17:87:00:e1:9f:cf:07:bf:37:ca:9f: 06:a7:f6:92:c6:63:4a:40:76:30:f3:bd:25:40:6c:56:be:49: 6a:24:9a:a6:eb:6d:49:ef:56:45:1b:39:c0:e4:27:23:f7:c0: 76:8b:94:4f:90:2d:32:b9:b6:13:cc:c1:eb:3e:4b:32:14:02: a1:49:ce:92:89:fe:8b:7d:f6:03:e0:3b:85:a3:2d:c4:fa:e0: 38:e3:a9:16:c3:35:56:17:f8:53:a4:32:af:2b:c6:c0:1f:e2: 1c:84:13:49:be:3b:3d:d3:fd:f8:ab:a0:87:fc:12:a5:4f:d6: 3a:f3:2c:8f:2c:02:fa:66:ff:c8:0f:cf:92:41:11:16:7a:b9: 62:20:22:2f:69:e6:1e:bc:d8:57:2c:01:fb:9c:70:c2:65:83: 9a:65:6a:53:f9:0c:8b:3c:f0:4a:7b:0d:4d:fd:cc:96:04:f1: 8f:8c:83:52:19:02:79:6d:02:9b:94:79:68:11:bb:8f:48:58: 85:96:df:75:87:0b:24:2c:0a:d4:a1:18:aa:0e:88:06:44:5f: ed:76:c8:c5:7f:0b:c7:68:8a:df:85:8b:a1:da:bd:2b:77:63: 0e:89:23:af:e2:a6:69:79:dc:ec:a8:1a:2a:f2:c5:ff:b1:b6: 3a:70:53:c3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCi4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU1MDkxMTAvBgNVBAUTKEFBOEUxQkUzNjI0MjQwREMzMzAyMDQ3RkI0MUE3RDRF NDc4MDhFRjgwHhcNMjYwMzI0MTk0NTE4WhcNMjYwMzMxMTk0NTE4WjAYMRYwFAYD VQQDEw02OWMyZTljZi01NGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxCLpdYOfSElvhxJ/LtK/RV5lfiTJaGLKqBp3ZNvjoBp9g0gdUiul6SZaVcl8 TJhpJVXDy8HhCP0yHBWOiUx/HCCgIA2/hRPhlFWhy2THCbAPNgiy1seySTpzfR1y gOohxg0Olfjewstndwa0DMk8Ntmex4oriY7TI7eovP3rMZ2qahBrpPQqcgfFjhj+ UMQV18bNJ1Doe05Vdb08KxsN0IHWgKvVcDOixzFyvr6/hPB4KN0TG/p2L2w7YRPT PaA8rZQF9+ycH21ECloisvzH4XIk1ixvm6WHQON0CizYfRB9bXedCQbH4Xk5fw+a 9c/ln1fQxWFyYWvB0xgbTwbJ2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN9z0axX y2z+x0Dmf647MMEVR0+lMB8GA1UdIwQYMBaAFKqOG+NiQkDcMwIEf7QafU5HgI74 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTUwOS83OUVBNTkxRUE3 QkQxMUVBQUFBNjI5NDhDNEY5QUUwMi9xbzRiNDJKQ1FOd3pBZ1JfdEJwOVRrZUFq dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FvNGI0MkpDUU53ekFnUl90QnA5VGtlQWp2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTUwOS83OUVBNTkxRUE3QkQxMUVBQUFBNjI5NDhDNEY5QUUwMi9xbzRiNDJKQ1FO d3pBZ1JfdEJwOVRrZUFqdmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMkaiTDQdrBeHAOGfzwe/N8qfBqf2ksZjSkB2MPO9JUBsVr5JaiSaputtSe9W RRs5wOQnI/fAdouUT5AtMrm2E8zB6z5LMhQCoUnOkon+i332A+A7haMtxPrgOOOp FsM1Vhf4U6QyryvGwB/iHIQTSb47PdP9+Kugh/wSpU/WOvMsjywC+mb/yA/PkkER Fnq5YiAiL2nmHrzYVywB+5xwwmWDmmVqU/kMizzwSnsNTf3MlgTxj4yDUhkCeW0C m5R5aBG7j0hYhZbfdYcLJCwK1KEYqg6IBkRf7XbIxX8Lx2iK34WLodq9K3djDokj r+KmaXnc7KgaKvLF/7G2OnBTww== -----END CERTIFICATE-----Generated at Thu Mar 26 19:56:15 2026 by rpki-client