$ rpki-client -vvf rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.mft File: q2LZY5CMwOOoAZmkPTEqNKBIgfA.mft (raw, json) Hash identifier: 9L6cBY28PhF3ZVWgVFB8Ewj65ATi21CrbkBVOcxykp4= Subject key identifier: BC:20:1F:4A:AB:26:8B:F1:8B:7E:CB:F3:75:6A:6C:61:25:1D:B5:52 Authority key identifier: AB:62:D9:63:90:8C:C0:E3:A8:01:99:A4:3D:31:2A:34:A0:48:81:F0 Certificate issuer: /CN=A912B6D9/serialNumber=AB62D963908CC0E3A80199A43D312A34A04881F0 Certificate serial: B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2LZY5CMwOOoAZmkPTEqNKBIgfA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.mft Manifest number: AE Signing time: Wed 25 Mar 2026 06:21:41 +0000 Manifest this update: Wed 25 Mar 2026 06:21:41 +0000 Manifest next update: Wed 01 Apr 2026 06:21:41 +0000 Files and hashes: 1: q2LZY5CMwOOoAZmkPTEqNKBIgfA.crl (hash: iuA5QQa5f8WnjnDHueByrJYjV1nVBTtb1iGn1FunsN0=) 2: 0E4F46F2532E11F0B87D127CC4F9AE02.roa (hash: +JT0f4RowYTHW2+9iIjJn3OKbrwqMZFChzHhfXtVmmk=) 3: 330409804CCE11F08ADD6485C4F9AE02.roa (hash: zyN+NtWVyoecz7nyEZ/xUxrT08G/oh3AIX0lScmlkrQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.crl rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2LZY5CMwOOoAZmkPTEqNKBIgfA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 06:21:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 178 (0xb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B6D9, serialNumber=AB62D963908CC0E3A80199A43D312A34A04881F0 Validity Not Before: Mar 25 06:21:41 2026 GMT Not After : Apr 1 06:21:41 2026 GMT Subject: CN=69c37ef5-ec4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:92:e9:d5:bd:32:70:28:82:e8:70:7b:ee:16: 9c:48:0e:93:21:6d:c8:80:59:c0:1e:5d:fa:3c:a4: 82:ba:67:1c:3c:2d:d6:bf:68:a7:68:87:3d:05:a5: 68:94:bf:a4:3a:c3:d7:f1:75:cc:e8:4e:26:06:00: ff:5e:4b:8c:5f:21:ab:92:bc:b7:32:8a:c4:9f:ed: 8a:5f:09:75:be:02:14:e8:3b:3e:4f:bf:cf:f3:f6: ad:8b:73:b9:cb:ce:e1:48:db:1e:56:9e:bb:39:1a: 95:54:71:3f:aa:ad:d5:d8:65:30:e0:4f:18:e0:0a: 0b:f7:e7:17:85:40:b2:4c:3e:44:51:26:fa:e4:2d: b3:d3:ad:6d:da:4c:59:ca:e4:a4:3a:83:6a:4a:0c: 7f:98:17:53:0e:12:40:e2:e2:ba:69:50:3d:9d:d2: c4:8a:45:d9:ea:c5:a3:2c:b0:ad:f6:d3:08:b4:ae: 2d:18:e2:ea:0f:44:8e:bc:dd:16:8c:f1:47:05:ca: 78:a8:9c:be:15:5b:8b:36:92:86:53:4d:50:14:a4: ef:77:e5:5c:e0:ac:c4:a1:47:0b:73:d9:70:4b:72: 5b:7d:d4:f9:17:30:00:bc:04:10:51:58:14:7f:d2: ac:b9:a0:47:dd:0e:b4:73:9f:97:02:a3:bb:29:58: 67:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:20:1F:4A:AB:26:8B:F1:8B:7E:CB:F3:75:6A:6C:61:25:1D:B5:52 X509v3 Authority Key Identifier: keyid:AB:62:D9:63:90:8C:C0:E3:A8:01:99:A4:3D:31:2A:34:A0:48:81:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2LZY5CMwOOoAZmkPTEqNKBIgfA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:d6:03:d1:3e:3f:17:cf:11:b6:5c:90:c7:92:96:0a:c3:be: 8e:26:bf:26:f5:12:44:4a:aa:49:bb:38:c5:fe:0d:e6:33:c0: 22:97:20:0a:3a:dd:f2:6e:aa:ac:34:29:a0:1d:2a:b1:e9:f7: be:6b:eb:1b:04:1b:ce:c4:8c:04:8f:0c:ea:70:5f:7d:0f:b0: 72:3d:0e:55:89:b0:ba:8a:75:dd:f9:b7:6d:e9:24:94:d8:22: 8c:d3:0c:f9:48:40:4d:5e:4d:97:a4:b9:0b:be:00:e4:79:c8: e0:41:47:ba:5c:12:7d:06:2d:fa:76:be:92:bc:c7:15:77:b5: 76:b4:5b:ca:08:91:3b:49:2f:94:34:8f:06:4e:31:47:ad:d8: ad:fe:b0:6f:8f:43:a4:f7:95:ce:9e:c5:71:8b:19:e5:da:e7: 25:7e:74:a2:28:c5:62:d7:02:04:da:15:6f:a6:49:78:39:bc: 71:f7:51:dd:ad:6c:ce:d6:b1:58:89:c1:bc:d0:4b:c2:4d:9c: 44:d8:da:2c:21:2e:62:eb:55:2c:43:69:30:53:9e:63:6a:e8: d1:36:61:f2:13:64:f9:5f:a1:31:43:8d:bb:08:88:78:a7:93: 57:94:d2:33:58:03:27:43:52:d9:c6:98:62:3e:b7:a1:44:47: 72:f3:5f:75 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICALIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI2RDkxMTAvBgNVBAUTKEFCNjJEOTYzOTA4Q0MwRTNBODAxOTlBNDNEMzEyQTM0 QTA0ODgxRjAwHhcNMjYwMzI1MDYyMTQxWhcNMjYwNDAxMDYyMTQxWjAYMRYwFAYD VQQDEw02OWMzN2VmNS1lYzRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs5Lp1b0ycCiC6HB77hacSA6TIW3IgFnAHl36PKSCumccPC3Wv2inaIc9BaVo lL+kOsPX8XXM6E4mBgD/XkuMXyGrkry3MorEn+2KXwl1vgIU6Ds+T7/P8/ati3O5 y87hSNseVp67ORqVVHE/qq3V2GUw4E8Y4AoL9+cXhUCyTD5EUSb65C2z061t2kxZ yuSkOoNqSgx/mBdTDhJA4uK6aVA9ndLEikXZ6sWjLLCt9tMItK4tGOLqD0SOvN0W jPFHBcp4qJy+FVuLNpKGU01QFKTvd+Vc4KzEoUcLc9lwS3JbfdT5FzAAvAQQUVgU f9KsuaBH3Q60c5+XAqO7KVhnmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLwgH0qr Jovxi37L83VqbGElHbVSMB8GA1UdIwQYMBaAFKti2WOQjMDjqAGZpD0xKjSgSIHw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjZEOS83NzQzRDUxRTFF NUYxMUYwQkEzODlBNEVDNEY5QUUwMi9xMkxaWTVDTXdPT29BWm1rUFRFcU5LQkln ZkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3EyTFpZNUNNd09Pb0FabWtQVEVxTktCSWdmQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjZEOS83NzQzRDUxRTFFNUYxMUYwQkEzODlBNEVDNEY5QUUwMi9xMkxaWTVDTXdP T29BWm1rUFRFcU5LQklnZkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPNYD0T4/F88RtlyQx5KWCsO+jia/JvUSREqqSbs4xf4N5jPAIpcgCjrd8m6q rDQpoB0qsen3vmvrGwQbzsSMBI8M6nBffQ+wcj0OVYmwuop13fm3bekklNgijNMM +UhATV5Nl6S5C74A5HnI4EFHulwSfQYt+na+krzHFXe1drRbygiRO0kvlDSPBk4x R63Yrf6wb49DpPeVzp7FcYsZ5drnJX50oijFYtcCBNoVb6ZJeDm8cfdR3a1sztax WInBvNBLwk2cRNjaLCEuYutVLENpMFOeY2ro0TZh8hNk+V+hMUONuwiIeKeTV5TS M1gDJ0NS2caYYj63oURHcvNfdQ== -----END CERTIFICATE-----Generated at Thu Mar 26 13:40:48 2026 by rpki-client