$ rpki-client -vvf rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.mft File: qrLSCRHmfiw6NccByHZaaFtQDsc.mft (raw, json) Hash identifier: 0Vt2MV+Ny75UqwoDalj5Pxgnt1+eUUiTqOskxTtFec0= Subject key identifier: 7E:24:23:67:57:B7:B2:34:D1:57:46:41:9A:8C:2B:1C:61:48:52:42 Authority key identifier: AA:B2:D2:09:11:E6:7E:2C:3A:35:C7:01:C8:76:5A:68:5B:50:0E:C7 Certificate issuer: /CN=A9135B24/serialNumber=AAB2D20911E67E2C3A35C701C8765A685B500EC7 Certificate serial: 123E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrLSCRHmfiw6NccByHZaaFtQDsc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.mft Manifest number: 1234 Signing time: Thu 26 Mar 2026 17:04:41 +0000 Manifest this update: Thu 26 Mar 2026 17:04:40 +0000 Manifest next update: Thu 02 Apr 2026 17:04:40 +0000 Files and hashes: 1: qrLSCRHmfiw6NccByHZaaFtQDsc.crl (hash: I+h6r6ZWlgCv6aJ5/0CRaCCsu4RfYl/+/KILMiWsNVQ=) 2: 5AC7F986F83E11E8B1FA8F4AC4F9AE02.roa (hash: haDczAt/oRlo22edPz5C27xE4ffdwsxRT0uAhldT0vE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.crl rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrLSCRHmfiw6NccByHZaaFtQDsc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 17:04:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4670 (0x123e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135B24, serialNumber=AAB2D20911E67E2C3A35C701C8765A685B500EC7 Validity Not Before: Mar 26 17:04:40 2026 GMT Not After : Apr 2 17:04:40 2026 GMT Subject: CN=69c56729-b0c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:d8:52:61:4f:82:c1:fe:26:f0:18:7b:3b:80: e2:bc:da:c1:07:52:7d:8b:75:ed:3a:26:15:d0:22: 90:08:62:dc:fd:a6:f0:34:c0:5e:0d:d4:38:4c:ad: 27:dd:d6:69:70:83:7e:64:a9:57:4c:41:a4:a7:73: 5c:1f:b6:2f:ad:12:45:1a:7b:2b:85:c3:f2:eb:c9: 0a:c5:ef:6f:c6:2f:e1:42:f8:6a:0c:ea:aa:4d:ca: 0f:7b:7a:d3:e2:f0:03:68:55:92:ab:70:af:7a:43: 2f:81:89:4f:5a:fe:75:8f:1c:93:ec:61:00:01:37: 39:fb:9b:c6:d7:68:e4:05:11:d7:6c:49:1e:c5:db: 9e:2f:b4:02:29:14:7b:64:34:a3:61:9b:6e:9e:0e: 3e:f5:53:64:b8:9c:dc:ef:7e:56:04:c3:c2:fa:07: 2f:90:3d:4e:82:28:76:20:74:d5:03:ed:9f:08:d7: 39:2b:8c:7e:09:ef:58:b3:0e:05:e3:13:60:ed:fc: be:13:61:b6:5e:0d:a7:a4:b3:99:49:7c:09:27:c8: b6:94:f9:2b:8b:7d:d3:7f:fd:e6:4a:96:ea:b4:6a: 23:fd:d6:19:ce:d1:c1:69:74:eb:6b:8f:1f:50:f9: 3b:b4:62:af:38:0b:0a:cf:fb:f7:3f:5b:5b:bc:de: a9:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:24:23:67:57:B7:B2:34:D1:57:46:41:9A:8C:2B:1C:61:48:52:42 X509v3 Authority Key Identifier: keyid:AA:B2:D2:09:11:E6:7E:2C:3A:35:C7:01:C8:76:5A:68:5B:50:0E:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrLSCRHmfiw6NccByHZaaFtQDsc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:83:5a:cc:44:3e:66:65:42:e6:f6:e6:ee:f4:03:ef:93:74: 50:51:20:b9:9d:22:b3:01:d8:18:98:20:0e:93:10:56:5f:f8: b6:f1:e4:6b:93:06:87:fe:ba:8a:16:cb:40:68:30:93:ff:70: 88:d6:0a:8e:95:73:3a:92:e6:4d:a0:b8:49:ef:6a:d8:ac:0b: 8a:53:56:e2:8c:11:ab:0a:e5:a6:5d:39:08:d3:3f:06:82:fa: 2d:04:b8:65:0e:38:d2:a0:88:c8:f6:b6:d5:d2:1a:d9:8e:02: d8:f6:d3:fd:02:11:83:42:18:dc:e9:03:f4:76:33:1e:ec:f9: 28:c1:be:d0:54:61:45:a6:8a:89:11:a1:a1:45:14:da:22:81: 39:eb:36:39:b3:fe:9d:3d:b0:2e:84:b1:07:f3:da:9f:d9:51: 1e:71:5f:03:28:1a:e6:9a:95:7d:9d:30:c2:87:87:bf:71:db: 87:f2:67:61:ba:bf:51:6e:b4:13:7c:86:9c:ec:52:e5:4e:c5: b5:82:6d:0d:0a:22:9d:1d:e8:af:59:35:db:e1:ec:b3:07:86: a2:28:3b:8e:c1:81:90:1d:fe:c4:be:6c:28:ef:97:ea:1a:a4: 69:98:99:4e:71:82:52:3f:21:c6:60:4d:9d:43:e8:45:c6:53: 78:9c:fd:4b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEj4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzVCMjQxMTAvBgNVBAUTKEFBQjJEMjA5MTFFNjdFMkMzQTM1QzcwMUM4NzY1QTY4 NUI1MDBFQzcwHhcNMjYwMzI2MTcwNDQwWhcNMjYwNDAyMTcwNDQwWjAYMRYwFAYD VQQDEw02OWM1NjcyOS1iMGMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5NhSYU+Cwf4m8Bh7O4DivNrBB1J9i3XtOiYV0CKQCGLc/abwNMBeDdQ4TK0n 3dZpcIN+ZKlXTEGkp3NcH7YvrRJFGnsrhcPy68kKxe9vxi/hQvhqDOqqTcoPe3rT 4vADaFWSq3CvekMvgYlPWv51jxyT7GEAATc5+5vG12jkBRHXbEkexdueL7QCKRR7 ZDSjYZtung4+9VNkuJzc735WBMPC+gcvkD1Ogih2IHTVA+2fCNc5K4x+Ce9Ysw4F 4xNg7fy+E2G2Xg2npLOZSXwJJ8i2lPkri33Tf/3mSpbqtGoj/dYZztHBaXTra48f UPk7tGKvOAsKz/v3P1tbvN6pCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH4kI2dX t7I00VdGQZqMKxxhSFJCMB8GA1UdIwQYMBaAFKqy0gkR5n4sOjXHAch2WmhbUA7H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUIyNC8zQkE2OTFBOEY4 M0QxMUU4QjBFQzM0NDhDNEY5QUUwMi9xckxTQ1JIbWZpdzZOY2NCeUhaYWFGdFFE c2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FyTFNDUkhtZml3Nk5jY0J5SFphYUZ0UURzYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NUIyNC8zQkE2OTFBOEY4M0QxMUU4QjBFQzM0NDhDNEY5QUUwMi9xckxTQ1JIbWZp dzZOY2NCeUhaYWFGdFFEc2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACINazEQ+ZmVC5vbm7vQD75N0UFEguZ0iswHYGJggDpMQVl/4tvHka5MGh/66 ihbLQGgwk/9wiNYKjpVzOpLmTaC4Se9q2KwLilNW4owRqwrlpl05CNM/BoL6LQS4 ZQ440qCIyPa21dIa2Y4C2PbT/QIRg0IY3OkD9HYzHuz5KMG+0FRhRaaKiRGhoUUU 2iKBOes2ObP+nT2wLoSxB/Pan9lRHnFfAyga5pqVfZ0wwoeHv3Hbh/JnYbq/UW60 E3yGnOxS5U7FtYJtDQoinR3or1k12+HssweGoig7jsGBkB3+xL5sKO+X6hqkaZiZ TnGCUj8hxmBNnUPoRcZTeJz9Sw== -----END CERTIFICATE-----Generated at Fri Mar 27 07:48:03 2026 by rpki-client