$ rpki-client -vvf rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft File: q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft (raw, json) Hash identifier: 2bQ4lr7EXiPAe/ZWxZW628KXnZLcj3cCdRJJuizILH4= Subject key identifier: 06:F7:A0:7D:70:EB:A9:3F:D0:E2:03:E2:7B:DE:4D:81:DE:E6:C2:37 Authority key identifier: AB:45:DB:FC:35:57:7F:27:C9:9F:CF:40:A3:9B:38:6B:32:35:0A:DA Certificate issuer: /CN=A9136CB3/serialNumber=AB45DBFC35577F27C99FCF40A39B386B32350ADA Certificate serial: 01EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0Xb_DVXfyfJn89Ao5s4azI1Cto.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft Manifest number: 01E0 Signing time: Wed 25 Mar 2026 02:51:22 +0000 Manifest this update: Wed 25 Mar 2026 02:51:22 +0000 Manifest next update: Wed 01 Apr 2026 02:51:22 +0000 Files and hashes: 1: q0Xb_DVXfyfJn89Ao5s4azI1Cto.crl (hash: /sxoTA1teHgNU29GwIifMO3pIAKASwWA99nETR1+kd0=) 2: 20DA8B7E571D11EEAA430244C4F9AE02.roa (hash: hdiJI/Pl7CfApe4A3Ae8zDLrz5/BDB6o+JJ3zkJ+3n8=) 3: 0648277C065B11F1BBF0D547343D8C67.roa (hash: UPZChaoPwZygYNvD1ZEQcZn9IurnbGE9M73HomojtHk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.crl rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0Xb_DVXfyfJn89Ao5s4azI1Cto.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:51:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 495 (0x1ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136CB3, serialNumber=AB45DBFC35577F27C99FCF40A39B386B32350ADA Validity Not Before: Mar 25 02:51:22 2026 GMT Not After : Apr 1 02:51:22 2026 GMT Subject: CN=69c34daa-4f5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:1b:6a:bd:75:18:db:3e:c6:42:4f:e4:29:b6: 76:d4:12:3c:32:16:9d:d2:44:79:93:5a:ef:0d:cc: b6:80:06:f4:4d:10:b2:dc:cc:e6:9a:c0:f2:db:48: 25:34:d2:b6:f8:f4:c0:ba:ea:23:a4:6a:08:af:f2: 9c:8e:71:06:f7:51:ad:e9:91:f7:e2:b4:be:12:44: c8:50:e4:2c:c4:2e:db:ab:b1:3e:fa:b5:0c:6e:c7: c9:36:85:7e:c0:4c:42:dc:31:f3:92:af:13:13:90: 1e:97:3f:b0:8d:17:4d:4b:86:d6:9c:16:ac:82:c4: 16:7f:fb:e1:91:fd:f0:13:1c:82:4f:f2:9f:71:78: bd:84:66:e8:83:b3:90:57:80:06:a8:f1:13:89:95: 46:61:81:90:14:d2:e3:55:40:1f:a2:4e:a0:c1:42: ab:da:ae:32:0f:fc:66:dc:e9:a2:d9:55:ad:20:97: 40:2d:a1:f7:f5:08:9a:b2:5f:31:12:53:82:aa:ce: b2:fa:78:46:b4:8d:71:7c:20:08:9c:86:8d:19:c1: 18:c1:70:04:dd:3f:91:83:01:db:6c:c8:c7:bc:c2: a2:da:82:c3:fc:29:16:a9:36:3f:98:2a:1f:2b:42: 52:88:14:d7:41:a3:0c:c3:23:2f:aa:14:60:2f:19: bf:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:F7:A0:7D:70:EB:A9:3F:D0:E2:03:E2:7B:DE:4D:81:DE:E6:C2:37 X509v3 Authority Key Identifier: keyid:AB:45:DB:FC:35:57:7F:27:C9:9F:CF:40:A3:9B:38:6B:32:35:0A:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0Xb_DVXfyfJn89Ao5s4azI1Cto.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:a1:7f:ff:c5:4f:25:2a:2c:20:60:71:6c:55:8b:10:44:80: 5c:02:ff:47:5f:85:90:47:12:be:0d:05:b8:f2:71:21:d8:41: 58:05:32:ac:1f:ff:f9:3b:35:a8:20:61:fa:dd:26:a8:08:b7: 8e:63:31:97:f2:39:80:22:24:e2:f4:d9:e5:dc:77:75:fd:c4: 76:57:e6:6f:9a:f3:84:05:76:e0:e6:91:ce:26:ff:2d:bc:60: 17:39:3a:7e:85:97:00:8b:71:a2:f9:f1:8b:15:fb:df:75:4d: 8e:1e:fc:d1:35:9d:87:1a:01:6a:db:79:4a:66:db:4e:c5:95: 7e:5d:1e:70:62:1f:7b:46:10:80:3c:25:53:b1:22:9d:97:b4: 1c:40:83:2a:64:63:2c:04:44:80:c1:1f:2b:41:5e:89:32:df: 35:40:8d:f9:20:0f:d2:0f:cd:38:cd:27:d9:0b:35:89:f1:b1: 71:ac:81:53:59:3e:1e:60:69:81:0a:36:90:de:75:2c:f3:3f: bd:e1:e1:ac:c5:9b:74:6b:68:c0:27:76:be:cc:ae:f4:1c:f2: 2d:31:5d:5e:b1:f9:31:30:94:1b:97:8d:20:a4:a6:1b:e0:c7: 95:4f:5b:86:90:d3:1a:72:d2:f4:26:96:3f:a0:36:21:71:d2: cc:7a:bd:b8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZDQjMxMTAvBgNVBAUTKEFCNDVEQkZDMzU1NzdGMjdDOTlGQ0Y0MEEzOUIzODZC MzIzNTBBREEwHhcNMjYwMzI1MDI1MTIyWhcNMjYwNDAxMDI1MTIyWjAYMRYwFAYD VQQDEw02OWMzNGRhYS00ZjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1RtqvXUY2z7GQk/kKbZ21BI8Mhad0kR5k1rvDcy2gAb0TRCy3MzmmsDy20gl NNK2+PTAuuojpGoIr/KcjnEG91Gt6ZH34rS+EkTIUOQsxC7bq7E++rUMbsfJNoV+ wExC3DHzkq8TE5Aelz+wjRdNS4bWnBasgsQWf/vhkf3wExyCT/KfcXi9hGbog7OQ V4AGqPETiZVGYYGQFNLjVUAfok6gwUKr2q4yD/xm3Omi2VWtIJdALaH39Qiasl8x ElOCqs6y+nhGtI1xfCAInIaNGcEYwXAE3T+RgwHbbMjHvMKi2oLD/CkWqTY/mCof K0JSiBTXQaMMwyMvqhRgLxm/dwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAb3oH1w 66k/0OID4nveTYHe5sI3MB8GA1UdIwQYMBaAFKtF2/w1V38nyZ/PQKObOGsyNQra MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkNCMy9BNUZEODRGMjU3 MUIxMUVFQjQxOEFCM0VDNEY5QUUwMi9xMFhiX0RWWGZ5ZkpuODlBbzVzNGF6STFD dG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3EwWGJfRFZYZnlmSm44OUFvNXM0YXpJMUN0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkNCMy9BNUZEODRGMjU3MUIxMUVFQjQxOEFCM0VDNEY5QUUwMi9xMFhiX0RWWGZ5 ZkpuODlBbzVzNGF6STFDdG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAK6F//8VPJSosIGBxbFWLEESAXAL/R1+FkEcSvg0FuPJxIdhBWAUyrB//+Ts1 qCBh+t0mqAi3jmMxl/I5gCIk4vTZ5dx3df3Edlfmb5rzhAV24OaRzib/LbxgFzk6 foWXAItxovnxixX733VNjh780TWdhxoBatt5SmbbTsWVfl0ecGIfe0YQgDwlU7Ei nZe0HECDKmRjLAREgMEfK0FeiTLfNUCN+SAP0g/NOM0n2Qs1ifGxcayBU1k+HmBp gQo2kN51LPM/veHhrMWbdGtowCd2vsyu9BzyLTFdXrH5MTCUG5eNIKSmG+DHlU9b hpDTGnLS9CaWP6A2IXHSzHq9uA== -----END CERTIFICATE-----Generated at Thu Mar 26 02:43:31 2026 by rpki-client