$ rpki-client -vvf rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft File: q9Q1SGWcuydu-NNbghL4OOjOt18.mft (raw, json) Hash identifier: YQ5zyIhnLgJchrTSkk59rjDVZfTXgpeyGVPsB2HoiSw= Subject key identifier: FE:8F:E4:65:5A:00:F6:6F:F3:6D:39:E8:7E:15:4F:82:E9:FC:DF:FE Authority key identifier: AB:D4:35:48:65:9C:BB:27:6E:F8:D3:5B:82:12:F8:38:E8:CE:B7:5F Certificate issuer: /CN=A9132B1E/serialNumber=ABD43548659CBB276EF8D35B8212F838E8CEB75F Certificate serial: 0B50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft Manifest number: 0AB2 Signing time: Tue 24 Mar 2026 19:30:09 +0000 Manifest this update: Tue 24 Mar 2026 19:30:08 +0000 Manifest next update: Tue 31 Mar 2026 19:30:08 +0000 Files and hashes: 1: q9Q1SGWcuydu-NNbghL4OOjOt18.crl (hash: pKchfdRJIM663p6+l7lBocZyaOLxpP6+uicvEXLq5yg=) 2: 0B0485A250B811EBA8A3C670C4F9AE02.roa (hash: Ly8SSkcgskhGQRoPTJo3pO2wtWF8MHFHJUjxu+Q5Vgk=) 3: AF2F0B70CA7011F08E39E018C4F9AE02.roa (hash: K5LzMbNtKqH25iKtWdvWZe2aJGrqN5SOd0zyr400Qxc=) 4: 6580E03C79E511EC99DA1B51C4F9AE02.roa (hash: wlIurFaBpaXYDDean85NO67hD8yyKAoACdepsfWqkkM=) 5: ABF4F248555511F0A341047BC4F9AE02.roa (hash: w3FZYA8pQMfaRKp1mIPedAuxP7NKNsznrdKgzqYMe2I=) 6: C14670EE323811F09C91DE2FC4F9AE02.roa (hash: W+v47olv9hi+vpg+AhoU4zpy1f8xz0X0Hoo6FgJgCAc=) 7: AEB63B14CA7011F09EF8E018C4F9AE02.roa (hash: npxDOaYlzq4v0D7ZqGwAs2+cX+X00ZFlXzEs2lS/E/g=) 8: AE493460CA7011F0B41AE018C4F9AE02.roa (hash: aeJLAovFP6DXjYFrG69v6mvG7/KwF4hFCypD2VryA+k=) 9: 2452CF76CA7211F0B02B6A1BC4F9AE02.roa (hash: VyFPTCs08W6m53CM1t6yDsUT0ET2zwscs652Zwcp3P8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.crl rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:30:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2896 (0xb50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132B1E, serialNumber=ABD43548659CBB276EF8D35B8212F838E8CEB75F Validity Not Before: Mar 24 19:30:08 2026 GMT Not After : Mar 31 19:30:08 2026 GMT Subject: CN=69c2e640-b33e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:53:bd:5a:7b:dd:48:9f:e2:f0:11:f4:43:c0: b9:a3:51:ac:7d:cd:e4:e3:ca:66:e7:7c:bf:ed:64: 7a:04:fe:63:1d:5e:48:ca:45:ab:c8:56:4b:12:ad: 04:21:ae:99:16:d5:86:e4:48:fe:c5:59:ba:55:52: 36:1a:94:7a:b1:5d:72:3a:36:58:91:e2:c1:e7:7c: 10:61:84:65:87:96:12:12:df:63:94:80:2b:de:d8: 43:6a:d6:81:4a:7f:a4:13:e1:c5:e0:7b:36:66:13: ec:b4:bc:68:23:e2:0d:0f:f4:85:a3:7c:b7:80:56: 73:f3:9c:f7:d1:b2:12:19:71:d6:10:43:28:f3:81: d0:c4:66:15:27:e9:a0:20:11:d8:d6:30:db:eb:ee: d2:6d:99:ca:72:8f:6b:20:f5:25:b0:e0:35:55:20: fb:27:af:2c:b5:e5:fc:73:b6:82:6d:0b:d3:ac:ea: 12:7e:a6:ee:7d:86:2a:29:9a:b3:b7:da:db:b3:00: 85:a4:f0:63:99:17:0b:fe:a2:13:90:12:c9:ca:3d: 40:77:6d:bd:cb:ff:3d:a9:f8:fd:4f:94:91:b3:cd: a3:c2:79:be:2a:9f:cd:50:09:ce:01:2f:ce:22:a7: da:1f:8e:e7:8c:13:48:d1:d3:95:62:c9:19:7a:d7: 7b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:8F:E4:65:5A:00:F6:6F:F3:6D:39:E8:7E:15:4F:82:E9:FC:DF:FE X509v3 Authority Key Identifier: keyid:AB:D4:35:48:65:9C:BB:27:6E:F8:D3:5B:82:12:F8:38:E8:CE:B7:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:3c:98:52:85:5e:5e:e5:30:bc:82:03:e4:6b:7a:73:17:66: 05:6a:46:5a:9c:bc:b7:37:46:ef:0b:cc:8e:a9:cf:e2:3d:80: bd:29:bd:ff:5b:fe:e7:ae:4b:d0:de:af:a6:fc:be:0c:f0:77: 24:58:9e:6a:38:59:29:06:e7:52:9d:ea:aa:b5:e6:9a:9d:d9: ab:bf:29:f5:47:c8:b8:b5:de:78:cf:69:60:ac:56:30:1d:fe: 66:58:92:ea:23:84:51:e1:c2:e1:fc:10:64:74:1c:fb:3e:90: db:60:89:0a:0d:e2:1e:c1:ff:db:ed:8c:80:cd:f8:3f:ab:30: ed:d5:4b:e0:70:62:17:b9:7f:5c:81:29:80:59:d1:98:0d:86: 7d:dc:f4:75:20:ff:da:28:1e:49:c6:83:dd:ea:a3:ed:7e:89: e4:8a:46:38:0e:6e:94:8c:bb:d0:62:1e:fc:0d:6a:c7:2f:08: 8d:79:57:37:b3:45:63:26:2d:07:df:53:04:22:c6:7a:c6:f3: 57:2b:47:f5:ce:d5:f0:5b:96:ea:b7:95:1d:8f:45:86:6f:7f: 77:47:86:80:5a:2c:cb:41:df:8e:39:06:88:7d:0d:54:39:c8: 3d:bd:91:13:25:6f:92:6f:1c:31:e0:9c:ea:85:77:c2:bf:bc: 09:9f:c7:32 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC1AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJCMUUxMTAvBgNVBAUTKEFCRDQzNTQ4NjU5Q0JCMjc2RUY4RDM1QjgyMTJGODM4 RThDRUI3NUYwHhcNMjYwMzI0MTkzMDA4WhcNMjYwMzMxMTkzMDA4WjAYMRYwFAYD VQQDEw02OWMyZTY0MC1iMzNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1FO9WnvdSJ/i8BH0Q8C5o1Gsfc3k48pm53y/7WR6BP5jHV5IykWryFZLEq0E Ia6ZFtWG5Ej+xVm6VVI2GpR6sV1yOjZYkeLB53wQYYRlh5YSEt9jlIAr3thDataB Sn+kE+HF4Hs2ZhPstLxoI+IND/SFo3y3gFZz85z30bISGXHWEEMo84HQxGYVJ+mg IBHY1jDb6+7SbZnKco9rIPUlsOA1VSD7J68steX8c7aCbQvTrOoSfqbufYYqKZqz t9rbswCFpPBjmRcL/qITkBLJyj1Ad229y/89qfj9T5SRs82jwnm+Kp/NUAnOAS/O IqfaH47njBNI0dOVYskZetd7gQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP6P5GVa APZv82056H4VT4Lp/N/+MB8GA1UdIwQYMBaAFKvUNUhlnLsnbvjTW4IS+Djozrdf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkIxRS84OTM2Q0MwNDg4 MzIxMUVBODQ4NjFCNzBDNEY5QUUwMi9xOVExU0dXY3V5ZHUtTk5iZ2hMNE9Pak90 MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3E5UTFTR1djdXlkdS1OTmJnaEw0T09qT3QxOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkIxRS84OTM2Q0MwNDg4MzIxMUVBODQ4NjFCNzBDNEY5QUUwMi9xOVExU0dXY3V5 ZHUtTk5iZ2hMNE9Pak90MTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsjyYUoVeXuUwvIID5Gt6cxdmBWpGWpy8tzdG7wvMjqnP4j2AvSm9/1v+565L 0N6vpvy+DPB3JFieajhZKQbnUp3qqrXmmp3Zq78p9UfIuLXeeM9pYKxWMB3+ZliS 6iOEUeHC4fwQZHQc+z6Q22CJCg3iHsH/2+2MgM34P6sw7dVL4HBiF7l/XIEpgFnR mA2Gfdz0dSD/2igeScaD3eqj7X6J5IpGOA5ulIy70GIe/A1qxy8IjXlXN7NFYyYt B99TBCLGesbzVytH9c7V8FuW6reVHY9Fhm9/d0eGgFosy0HfjjkGiH0NVDnIPb2R EyVvkm8cMeCc6oV3wr+8CZ/HMg== -----END CERTIFICATE-----Generated at Thu Mar 26 21:39:57 2026 by rpki-client