$ rpki-client -vvf rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.mft File: qKOD5jSR4Rute14s0kFBYh9NtBY.mft (raw, json) Hash identifier: W6mN74JlV3rL5+XPAqdbyUfUP+ZTh4Tqv7MxeXsMNUE= Subject key identifier: E2:BF:D5:3B:C6:74:05:D7:4F:0C:38:9B:37:09:0C:15:D0:7D:30:D7 Authority key identifier: A8:A3:83:E6:34:91:E1:1B:AD:7B:5E:2C:D2:41:41:62:1F:4D:B4:16 Certificate issuer: /CN=A913BB9E/serialNumber=A8A383E63491E11BAD7B5E2CD24141621F4DB416 Certificate serial: 065E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qKOD5jSR4Rute14s0kFBYh9NtBY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.mft Manifest number: 0653 Signing time: Tue 24 Mar 2026 22:22:54 +0000 Manifest this update: Tue 24 Mar 2026 22:22:53 +0000 Manifest next update: Tue 31 Mar 2026 22:22:53 +0000 Files and hashes: 1: qKOD5jSR4Rute14s0kFBYh9NtBY.crl (hash: K2J8PwLM2UpPepdYDH2HVoFc+RUq1nhuqR+xCrKkzf4=) 2: FD62B046DF1611ED81C1BE7CC4F9AE02.roa (hash: RpPhdY8+tXmNKm2CO6PsrLMjG0gZZmTjNB6euQu9tho=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.crl rsync://rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qKOD5jSR4Rute14s0kFBYh9NtBY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 22:22:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1630 (0x65e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913BB9E, serialNumber=A8A383E63491E11BAD7B5E2CD24141621F4DB416 Validity Not Before: Mar 24 22:22:53 2026 GMT Not After : Mar 31 22:22:53 2026 GMT Subject: CN=69c30ebd-1f83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:a1:b2:16:8c:ce:6f:8d:9d:f3:23:07:6a:17: ac:c7:92:c8:a4:50:81:c9:1b:0e:a7:72:ed:3f:ff: 0e:67:fe:a4:79:04:b0:f5:06:2d:fd:b3:4a:8e:ea: b7:d4:37:46:f9:95:93:36:53:ad:03:a8:15:8d:99: 8f:3f:24:d0:bb:3f:42:f0:c6:59:05:4c:e3:05:7d: 25:f8:bd:92:6c:53:b9:75:f9:18:6c:4b:8e:85:8e: de:5f:70:80:e0:19:eb:d5:41:bc:ec:99:10:5e:f1: 6e:e8:1b:64:56:76:82:2a:68:26:97:a7:0f:ce:fc: 59:54:ef:d4:12:2a:e3:dc:e9:5c:62:61:47:40:54: 75:ca:bf:b7:78:82:bf:d1:a4:ae:25:06:a6:bb:41: 90:da:16:a0:e4:e7:21:d2:b5:02:a4:33:86:ae:1e: 3d:db:0c:8d:ed:85:56:92:1e:f3:0e:fb:af:d5:b5: af:81:a3:7b:5b:59:a3:24:bb:51:e6:64:66:f2:15: 30:65:65:31:a6:e0:d0:84:af:3a:2d:cc:f1:98:2e: 6d:85:4c:2b:f1:82:d6:5f:b6:6c:a9:b8:c1:73:e5: d1:38:99:99:bd:46:33:33:f0:9a:8b:e1:2c:da:a6: 92:af:4a:e6:b5:91:a4:85:c0:c9:13:22:bb:68:e3: a6:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:BF:D5:3B:C6:74:05:D7:4F:0C:38:9B:37:09:0C:15:D0:7D:30:D7 X509v3 Authority Key Identifier: keyid:A8:A3:83:E6:34:91:E1:1B:AD:7B:5E:2C:D2:41:41:62:1F:4D:B4:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qKOD5jSR4Rute14s0kFBYh9NtBY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:94:79:88:8b:f0:15:f4:46:69:9d:0e:63:db:21:92:6e:97: 5c:0b:c6:a5:e9:2a:0a:51:55:3b:7b:de:f7:a3:5a:24:02:13: 0c:ea:e8:1b:28:be:0a:87:ba:94:fb:62:1b:cc:62:67:72:6a: d4:64:70:9f:33:a8:00:ad:43:41:a8:e2:85:e8:2e:eb:bc:9f: 91:f2:75:13:96:39:93:2d:97:b9:98:e8:3e:25:8f:98:dc:d3: 17:4b:cd:ec:93:0a:e2:89:87:cd:68:d7:18:26:8f:6a:65:cd: 69:e6:9a:9a:7f:7c:88:72:af:6f:9d:8f:76:37:58:33:da:c4: 00:84:6b:3e:08:2c:bf:5d:f3:1d:53:dd:21:9d:61:e3:65:ef: cd:58:85:59:66:96:21:fc:6a:46:8e:05:96:3b:75:7a:83:33: 0e:1e:50:5f:04:de:88:40:e0:58:1c:28:7e:94:1c:7c:6b:fa: 89:6d:f7:ae:59:ad:04:28:e0:2f:ff:dd:80:f2:c1:ce:b5:35: 58:d8:03:a7:6a:ff:7f:c1:ac:5f:1c:bf:ac:47:70:57:8b:82: 55:5f:70:cc:fd:9b:10:e7:be:6c:69:fe:29:08:d1:9c:7f:7a: b6:3d:4a:3e:9c:a6:f5:85:11:69:1c:74:f9:ac:27:b3:12:67: 85:aa:03:6a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBl4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0JCOUUxMTAvBgNVBAUTKEE4QTM4M0U2MzQ5MUUxMUJBRDdCNUUyQ0QyNDE0MTYy MUY0REI0MTYwHhcNMjYwMzI0MjIyMjUzWhcNMjYwMzMxMjIyMjUzWjAYMRYwFAYD VQQDEw02OWMzMGViZC0xZjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4KGyFozOb42d8yMHahesx5LIpFCByRsOp3LtP/8OZ/6keQSw9QYt/bNKjuq3 1DdG+ZWTNlOtA6gVjZmPPyTQuz9C8MZZBUzjBX0l+L2SbFO5dfkYbEuOhY7eX3CA 4Bnr1UG87JkQXvFu6BtkVnaCKmgml6cPzvxZVO/UEirj3OlcYmFHQFR1yr+3eIK/ 0aSuJQamu0GQ2hag5Och0rUCpDOGrh492wyN7YVWkh7zDvuv1bWvgaN7W1mjJLtR 5mRm8hUwZWUxpuDQhK86LczxmC5thUwr8YLWX7ZsqbjBc+XROJmZvUYzM/Cai+Es 2qaSr0rmtZGkhcDJEyK7aOOm0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOK/1TvG dAXXTww4mzcJDBXQfTDXMB8GA1UdIwQYMBaAFKijg+Y0keEbrXteLNJBQWIfTbQW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQkI5RS80M0UyQzQyNkM3 RjgxMUVCODA5NDc1MTVDNEY5QUUwMi9xS09ENWpTUjRSdXRlMTRzMGtGQlloOU50 QlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FLT0Q1alNSNFJ1dGUxNHMwa0ZCWWg5TnRCWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QkI5RS80M0UyQzQyNkM3RjgxMUVCODA5NDc1MTVDNEY5QUUwMi9xS09ENWpTUjRS dXRlMTRzMGtGQlloOU50QlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIpR5iIvwFfRGaZ0OY9shkm6XXAvGpekqClFVO3ve96NaJAITDOroGyi+Coe6 lPtiG8xiZ3Jq1GRwnzOoAK1DQajihegu67yfkfJ1E5Y5ky2XuZjoPiWPmNzTF0vN 7JMK4omHzWjXGCaPamXNaeaamn98iHKvb52PdjdYM9rEAIRrPggsv13zHVPdIZ1h 42XvzViFWWaWIfxqRo4Fljt1eoMzDh5QXwTeiEDgWBwofpQcfGv6iW33rlmtBCjg L//dgPLBzrU1WNgDp2r/f8GsXxy/rEdwV4uCVV9wzP2bEOe+bGn+KQjRnH96tj1K Ppym9YURaRx0+awnsxJnhaoDag== -----END CERTIFICATE-----Generated at Thu Mar 26 15:06:42 2026 by rpki-client