$ rpki-client -vvf rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.mft File: qOGTDLtyjL6NnqOi9kD1OYRjx1I.mft (raw, json) Hash identifier: QuMDoVenTuc3tszc1h/NvkrqUUP6iUIeTYe2JXx19pQ= Subject key identifier: 2C:0D:E7:24:88:C8:4E:7F:27:19:C8:64:04:88:DE:13:7F:15:58:9E Authority key identifier: A8:E1:93:0C:BB:72:8C:BE:8D:9E:A3:A2:F6:40:F5:39:84:63:C7:52 Certificate issuer: /CN=A9131C4B/serialNumber=A8E1930CBB728CBE8D9EA3A2F640F5398463C752 Certificate serial: 64 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qOGTDLtyjL6NnqOi9kD1OYRjx1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.mft Manifest number: 62 Signing time: Wed 25 Mar 2026 07:11:48 +0000 Manifest this update: Wed 25 Mar 2026 07:11:48 +0000 Manifest next update: Wed 01 Apr 2026 07:11:48 +0000 Files and hashes: 1: qOGTDLtyjL6NnqOi9kD1OYRjx1I.crl (hash: B0XfMeDDOM1UPTL6saEFzcoRthAOdcRjzsnErEdkb5k=) 2: E811884091F511F0AF44B33CC4F9AE02.roa (hash: Irh7MDZvJlnxMvTv5EexT1j1kWXR64vAPEi7R34OcPY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.crl rsync://rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qOGTDLtyjL6NnqOi9kD1OYRjx1I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:11:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 100 (0x64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131C4B, serialNumber=A8E1930CBB728CBE8D9EA3A2F640F5398463C752 Validity Not Before: Mar 25 07:11:48 2026 GMT Not After : Apr 1 07:11:48 2026 GMT Subject: CN=69c38ab4-766d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:dc:77:9c:2f:f8:be:eb:d1:70:26:8e:f7:16: ec:5c:11:87:de:0f:9f:73:4a:90:c6:9d:a7:62:7c: 35:ad:55:bd:a9:4e:0a:49:e9:16:8f:d8:7b:b3:19: b5:6a:37:ed:3b:75:d9:4a:81:db:27:1a:55:ba:bd: d5:83:31:ca:0b:df:5a:67:a8:76:a2:01:77:e5:9b: 63:a8:80:b8:0f:82:43:86:f6:fe:16:92:56:9a:68: 90:7b:9c:60:67:f1:0f:c5:b3:e7:06:c2:14:07:46: db:bc:47:43:93:5e:7a:ee:5c:52:4d:02:c9:f6:b9: a2:37:d4:bc:28:2d:85:89:f9:a8:bd:7a:36:aa:4a: cd:70:d0:9e:c2:36:88:61:a7:94:29:a9:1d:ce:e2: 9d:d5:4d:0e:18:9c:9d:05:5c:bb:82:cb:01:5b:cb: 7d:52:be:00:ea:b7:ca:9d:bc:42:d7:e1:84:ac:c8: 67:97:3f:b1:7d:70:cd:60:eb:47:7c:98:aa:b4:ba: 97:c2:58:b0:33:14:84:de:2a:89:f8:27:60:ad:d7: dc:6e:2e:59:f2:75:eb:03:b4:e1:1c:50:70:2c:a1: 19:41:a9:39:07:5b:93:d9:c6:eb:b1:37:4f:3e:20: 6c:ce:ac:cf:b5:4f:2e:fd:d6:ab:ee:30:ee:94:75: 3f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:0D:E7:24:88:C8:4E:7F:27:19:C8:64:04:88:DE:13:7F:15:58:9E X509v3 Authority Key Identifier: keyid:A8:E1:93:0C:BB:72:8C:BE:8D:9E:A3:A2:F6:40:F5:39:84:63:C7:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qOGTDLtyjL6NnqOi9kD1OYRjx1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:e1:bb:f9:8c:db:d6:e3:31:9f:11:ce:a4:c4:f6:47:2e:d0: c2:ac:c2:16:51:08:fe:fe:bc:08:aa:53:6d:6c:dc:3d:7a:e7: 1a:dd:2b:59:42:b2:6e:4f:8e:a0:2a:ea:8b:0a:9a:14:1c:54: 75:22:e2:a6:41:0a:89:9f:08:39:71:f2:fe:43:f4:43:be:a4: 31:fe:fe:2a:42:2a:82:53:d6:14:18:4a:b6:c6:33:23:ea:a7: fe:1e:0a:5f:9e:d9:af:28:5e:df:0b:7a:ff:c3:10:ff:43:e4: e2:61:2e:89:78:e6:06:97:94:38:62:87:5f:c8:bd:8d:93:37: 4f:ca:b1:8c:f1:e5:89:68:dc:3d:d2:22:07:fd:d5:a7:8d:a7: f7:3d:7e:32:3b:c1:de:d5:f7:49:9a:8e:c2:52:0f:65:32:f4: 6d:23:fb:2a:a2:96:24:0d:4d:da:77:8a:a7:a4:97:21:1b:00: 2d:f5:22:fb:00:0f:04:a8:fb:f0:0c:3e:39:a4:52:54:e1:0e: 85:c5:3b:fa:30:5e:7d:19:a4:4f:bc:af:a4:2c:f2:dc:99:57: 22:35:db:38:58:99:7c:40:c0:80:d6:0f:be:bd:36:df:dd:a4: a2:2f:05:0f:1a:d1:3c:92:bf:09:f8:ce:42:d5:5b:d4:85:2b: 53:f3:2d:7b -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MUM0QjExMC8GA1UEBRMoQThFMTkzMENCQjcyOENCRThEOUVBM0EyRjY0MEY1Mzk4 NDYzQzc1MjAeFw0yNjAzMjUwNzExNDhaFw0yNjA0MDEwNzExNDhaMBgxFjAUBgNV BAMTDTY5YzM4YWI0LTc2NmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCW3HecL/i+69FwJo73FuxcEYfeD59zSpDGnadifDWtVb2pTgpJ6RaP2HuzGbVq N+07ddlKgdsnGlW6vdWDMcoL31pnqHaiAXflm2OogLgPgkOG9v4WklaaaJB7nGBn 8Q/Fs+cGwhQHRtu8R0OTXnruXFJNAsn2uaI31LwoLYWJ+ai9ejaqSs1w0J7CNohh p5QpqR3O4p3VTQ4YnJ0FXLuCywFby31SvgDqt8qdvELX4YSsyGeXP7F9cM1g60d8 mKq0upfCWLAzFITeKon4J2Ct19xuLlnydesDtOEcUHAsoRlBqTkHW5PZxuuxN08+ IGzOrM+1Ty791qvuMO6UdT/tAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQULA3nJIjI Tn8nGchkBIjeE38VWJ4wHwYDVR0jBBgwFoAUqOGTDLtyjL6NnqOi9kD1OYRjx1Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMxQzRCLzA5QzZDMzdBOTFG NTExRjA4ODM0RUIxQUM0RjlBRTAyL3FPR1RETHR5akw2Tm5xT2k5a0QxT1lSangx SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcU9HVERMdHlqTDZObnFPaTlrRDFPWVJqeDFJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMx QzRCLzA5QzZDMzdBOTFGNTExRjA4ODM0RUIxQUM0RjlBRTAyL3FPR1RETHR5akw2 Tm5xT2k5a0QxT1lSangxSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBn4bv5jNvW4zGfEc6kxPZHLtDCrMIWUQj+/rwIqlNtbNw9euca3StZQrJuT46g KuqLCpoUHFR1IuKmQQqJnwg5cfL+Q/RDvqQx/v4qQiqCU9YUGEq2xjMj6qf+Hgpf ntmvKF7fC3r/wxD/Q+TiYS6JeOYGl5Q4YodfyL2NkzdPyrGM8eWJaNw90iIH/dWn jaf3PX4yO8He1fdJmo7CUg9lMvRtI/sqopYkDU3ad4qnpJchGwAt9SL7AA8EqPvw DD45pFJU4Q6FxTv6MF59GaRPvK+kLPLcmVciNds4WJl8QMCA1g++vTbf3aSiLwUP GtE8kr8J+M5C1VvUhStT8y17 -----END CERTIFICATE-----Generated at Thu Mar 26 11:35:49 2026 by rpki-client