$ rpki-client -vvf rpki.apnic.net/member_repository/A913C91A/61E70D86161811EE80B9414EC4F9AE02/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.mft File: q4eJxwx0Lq-Vn0ahuXTlRUwK_68.mft (raw, json) Hash identifier: 9A/KQHeuKNuZJOMuOB4RZeUOVgF446uZWqwHQlBgXdQ= Subject key identifier: 0F:E8:4D:A3:81:E9:8C:60:FE:33:DB:08:B7:C3:45:C3:43:C6:23:83 Authority key identifier: AB:87:89:C7:0C:74:2E:AF:95:9F:46:A1:B9:74:E5:45:4C:0A:FF:AF Certificate issuer: /CN=A913C91A/serialNumber=AB8789C70C742EAF959F46A1B974E5454C0AFFAF Certificate serial: 022D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C91A/61E70D86161811EE80B9414EC4F9AE02/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.mft Manifest number: 021E Signing time: Wed 25 Mar 2026 02:25:32 +0000 Manifest this update: Wed 25 Mar 2026 02:25:32 +0000 Manifest next update: Wed 01 Apr 2026 02:25:32 +0000 Files and hashes: 1: q4eJxwx0Lq-Vn0ahuXTlRUwK_68.crl (hash: /4qB/qPLbMM5ewxlVhDdyLqAjM47JfZRvzwc40SJsak=) 2: ADAEBBD6161F11EE9C6E4529C4F9AE02.roa (hash: /3te3zobVZswJsFFIn071Wgbe9BzUFq7AKG46skLDvA=) 3: ACFD7470161F11EE9C6E4529C4F9AE02.roa (hash: Hhuce/k2Nig26k0PhaoBK79YcGuzei5AcpeXnj1kphs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C91A/61E70D86161811EE80B9414EC4F9AE02/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.crl rsync://rpki.apnic.net/member_repository/A913C91A/61E70D86161811EE80B9414EC4F9AE02/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:25:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 557 (0x22d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C91A, serialNumber=AB8789C70C742EAF959F46A1B974E5454C0AFFAF Validity Not Before: Mar 25 02:25:32 2026 GMT Not After : Apr 1 02:25:32 2026 GMT Subject: CN=69c3479c-0bd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:34:1d:54:20:1e:ca:30:98:da:c5:bb:f0:da: 8e:06:92:0a:e1:17:f7:90:ae:9e:2b:f9:fa:6e:13: 11:10:33:c7:79:58:3b:97:b7:7d:72:d7:28:d8:1e: db:db:15:39:7e:d3:b4:6b:98:a5:97:a1:6e:0e:87: 61:f4:60:27:cf:f4:3b:61:76:cb:de:21:39:c2:45: 0b:24:5f:b6:cb:eb:85:ad:9e:92:40:f5:9f:a7:7a: c9:53:4c:0b:91:e9:e3:7a:58:68:4c:f5:dd:d6:dd: db:a9:2f:63:8a:76:20:55:12:e3:80:e9:8f:4f:fa: 3f:2f:84:0d:6f:3f:b8:d7:29:4f:9e:47:fe:68:86: 1f:51:95:4c:5c:e5:2e:76:85:bf:42:3e:b0:e7:47: ab:52:af:3a:d8:07:75:03:e3:70:ab:a9:ff:65:95: dc:4b:e8:0e:37:b9:7e:48:4f:31:34:ba:9d:32:a9: 8b:fb:33:cd:6c:b3:25:52:e3:46:e6:e2:85:d4:a5: 96:71:38:84:59:63:9b:e1:f7:7b:ae:01:09:bc:be: 72:a5:c6:13:bd:e9:66:ad:fd:c2:84:87:cd:bd:39: 8d:11:d0:1e:15:a1:f8:39:a2:32:eb:c5:7a:d0:25: 8a:6c:aa:f4:54:05:33:3c:01:9b:2d:76:c3:57:18: 4c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:E8:4D:A3:81:E9:8C:60:FE:33:DB:08:B7:C3:45:C3:43:C6:23:83 X509v3 Authority Key Identifier: keyid:AB:87:89:C7:0C:74:2E:AF:95:9F:46:A1:B9:74:E5:45:4C:0A:FF:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C91A/61E70D86161811EE80B9414EC4F9AE02/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C91A/61E70D86161811EE80B9414EC4F9AE02/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:c4:d8:da:55:3a:ad:c7:95:bf:eb:63:32:0a:93:e0:60:4e: 7c:34:d5:ed:12:ee:f6:4b:03:20:fa:6e:30:c2:59:2a:f0:36: 41:61:06:83:91:5e:4b:2e:83:bc:fb:00:80:a2:69:95:2d:02: 53:a1:57:b2:aa:02:58:0c:22:51:d9:f9:7f:e8:13:ee:5f:c2: 65:80:9b:39:7d:1f:2f:c1:d1:40:df:ef:59:ef:ee:29:07:02: 72:2a:f2:56:b3:97:0f:29:8a:98:79:57:24:2a:bb:6c:dd:46: 01:81:df:9d:99:b2:25:27:f8:e2:c1:b0:e2:22:25:a6:20:59: 32:14:5e:43:86:0c:fb:a0:67:7c:46:39:33:81:7c:7a:89:8e: 98:e9:fe:ab:27:62:79:18:a1:d8:12:c7:32:b7:b4:36:a5:a5: 41:35:bb:1f:57:d9:64:fe:8c:af:27:12:1f:98:2d:bf:72:50: 55:c7:7c:56:0b:cb:91:0a:98:1f:1f:72:ae:85:8a:b0:52:0e: 72:ba:06:d4:ff:9e:46:22:11:b7:b8:b6:66:48:9b:a6:69:0b: 65:38:35:45:4d:10:5f:f0:3e:95:90:c4:56:92:4c:2e:c0:f5: 22:26:6c:0d:8d:a6:02:3c:3f:e8:b1:85:81:9a:30:03:40:17: af:ec:4b:bc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAi0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0M5MUExMTAvBgNVBAUTKEFCODc4OUM3MEM3NDJFQUY5NTlGNDZBMUI5NzRFNTQ1 NEMwQUZGQUYwHhcNMjYwMzI1MDIyNTMyWhcNMjYwNDAxMDIyNTMyWjAYMRYwFAYD VQQDEw02OWMzNDc5Yy0wYmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzzQdVCAeyjCY2sW78NqOBpIK4Rf3kK6eK/n6bhMREDPHeVg7l7d9ctco2B7b 2xU5ftO0a5ill6FuDodh9GAnz/Q7YXbL3iE5wkULJF+2y+uFrZ6SQPWfp3rJU0wL kenjelhoTPXd1t3bqS9jinYgVRLjgOmPT/o/L4QNbz+41ylPnkf+aIYfUZVMXOUu doW/Qj6w50erUq862Ad1A+Nwq6n/ZZXcS+gON7l+SE8xNLqdMqmL+zPNbLMlUuNG 5uKF1KWWcTiEWWOb4fd7rgEJvL5ypcYTvelmrf3ChIfNvTmNEdAeFaH4OaIy68V6 0CWKbKr0VAUzPAGbLXbDVxhM2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA/oTaOB 6Yxg/jPbCLfDRcNDxiODMB8GA1UdIwQYMBaAFKuHiccMdC6vlZ9Gobl05UVMCv+v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzkxQS82MUU3MEQ4NjE2 MTgxMUVFODBCOTQxNEVDNEY5QUUwMi9xNGVKeHd4MExxLVZuMGFodVhUbFJVd0tf NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3E0ZUp4d3gwTHEtVm4wYWh1WFRsUlV3S182OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzkxQS82MUU3MEQ4NjE2MTgxMUVFODBCOTQxNEVDNEY5QUUwMi9xNGVKeHd4MExx LVZuMGFodVhUbFJVd0tfNjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkcTY2lU6rceVv+tjMgqT4GBOfDTV7RLu9ksDIPpuMMJZKvA2QWEGg5FeSy6D vPsAgKJplS0CU6FXsqoCWAwiUdn5f+gT7l/CZYCbOX0fL8HRQN/vWe/uKQcCciry VrOXDymKmHlXJCq7bN1GAYHfnZmyJSf44sGw4iIlpiBZMhReQ4YM+6BnfEY5M4F8 eomOmOn+qydieRih2BLHMre0NqWlQTW7H1fZZP6MrycSH5gtv3JQVcd8VgvLkQqY Hx9yroWKsFIOcroG1P+eRiIRt7i2ZkibpmkLZTg1RU0QX/A+lZDEVpJMLsD1IiZs DY2mAjw/6LGFgZowA0AXr+xLvA== -----END CERTIFICATE-----Generated at Thu Mar 26 05:23:24 2026 by rpki-client