$ rpki-client -vvf rpki.apnic.net/member_repository/A9140BED/08E0E0661F3811EFB059B665C4F9AE02/QZ8npM_s9GHbgvb5BnZPttZfI88.mft File: QZ8npM_s9GHbgvb5BnZPttZfI88.mft (raw, json) Hash identifier: kW8xdby6Nv2dgmcnJM6cenC95OkXE8WHTtlf7L7OCws= Subject key identifier: 1D:72:61:58:EC:56:FF:11:81:3B:BF:91:29:1D:0A:A7:F4:77:2A:55 Authority key identifier: 41:9F:27:A4:CF:EC:F4:61:DB:82:F6:F9:06:76:4F:B6:D6:5F:23:CF Certificate issuer: /CN=A9140BED/serialNumber=419F27A4CFECF461DB82F6F906764FB6D65F23CF Certificate serial: 0166 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZ8npM_s9GHbgvb5BnZPttZfI88.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140BED/08E0E0661F3811EFB059B665C4F9AE02/QZ8npM_s9GHbgvb5BnZPttZfI88.mft Manifest number: 015A Signing time: Wed 25 Mar 2026 04:17:26 +0000 Manifest this update: Wed 25 Mar 2026 04:17:26 +0000 Manifest next update: Wed 01 Apr 2026 04:17:26 +0000 Files and hashes: 1: QZ8npM_s9GHbgvb5BnZPttZfI88.crl (hash: ck9o1VNAQgO/6h2TeUe+4BO9BHShDdgbGPEEsxVuQtc=) 2: ED7C0BCC287211EFA1483A2FC4F9AE02.roa (hash: y+oCb7jxR3D55AFcUV4IpcRd8DG8LNASO4m3mEiRdoA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140BED/08E0E0661F3811EFB059B665C4F9AE02/QZ8npM_s9GHbgvb5BnZPttZfI88.crl rsync://rpki.apnic.net/member_repository/A9140BED/08E0E0661F3811EFB059B665C4F9AE02/QZ8npM_s9GHbgvb5BnZPttZfI88.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZ8npM_s9GHbgvb5BnZPttZfI88.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:17:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 358 (0x166) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140BED, serialNumber=419F27A4CFECF461DB82F6F906764FB6D65F23CF Validity Not Before: Mar 25 04:17:26 2026 GMT Not After : Apr 1 04:17:26 2026 GMT Subject: CN=69c361d6-ef2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ee:18:be:47:30:c5:9a:e7:12:87:fb:48:70: bb:b2:3c:fa:46:d7:b5:6f:92:24:91:f7:6f:53:c3: f9:0c:15:13:e7:4e:fd:29:80:83:99:e2:e9:31:03: 2f:b2:88:0d:d1:4f:74:e5:d0:f3:06:03:30:b6:ce: 93:d8:a2:aa:63:d7:a9:15:b4:de:04:18:ac:24:b6: b4:92:f1:e3:b6:16:01:2f:24:8a:50:ba:67:53:97: 93:e9:29:92:4b:79:db:bf:2e:6d:86:49:df:0c:0f: 6a:72:33:0c:e1:f2:46:92:bb:76:bc:33:3e:81:02: 7a:10:19:42:c1:54:d9:02:40:84:6f:bc:15:9b:65: a6:7e:35:b6:d9:7e:ed:d7:09:2e:ea:96:b2:2b:45: d4:2a:98:d3:66:3f:57:93:35:49:2c:93:52:62:21: 33:b9:84:78:f0:0a:8b:d1:af:8e:03:57:b6:cc:fe: 29:83:c0:be:e3:c2:15:88:08:e4:ec:f2:f7:88:e7: eb:b2:d7:4f:b1:f3:4f:39:42:53:a0:01:0f:57:93: d4:10:3c:eb:cf:04:84:0d:9d:c1:d1:ba:24:32:86: 73:81:d4:6b:55:ea:43:d3:d6:01:12:4a:df:bc:00: 00:04:de:12:13:5b:5c:66:4c:59:40:46:2b:b1:21: 37:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:72:61:58:EC:56:FF:11:81:3B:BF:91:29:1D:0A:A7:F4:77:2A:55 X509v3 Authority Key Identifier: keyid:41:9F:27:A4:CF:EC:F4:61:DB:82:F6:F9:06:76:4F:B6:D6:5F:23:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140BED/08E0E0661F3811EFB059B665C4F9AE02/QZ8npM_s9GHbgvb5BnZPttZfI88.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZ8npM_s9GHbgvb5BnZPttZfI88.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140BED/08E0E0661F3811EFB059B665C4F9AE02/QZ8npM_s9GHbgvb5BnZPttZfI88.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:96:d9:d5:2a:d2:8d:b1:f6:be:81:20:4b:45:9b:aa:e2:95: 08:48:e1:c5:9e:00:6f:95:bf:58:77:d7:b7:5a:b2:95:b5:f3: a6:60:62:98:28:47:33:30:12:2c:21:60:88:85:ba:01:84:03: 1c:c9:29:15:96:d0:a9:e6:0c:cc:03:a1:ae:dc:12:11:41:80: e3:eb:10:15:51:19:d4:d1:84:7d:5c:63:24:c8:85:3b:e9:c1: 6f:23:a9:15:53:39:34:96:a1:f4:6e:8e:07:2c:58:d8:42:69: 8b:07:2e:7d:0a:1f:4d:7b:74:3c:86:6f:83:f9:88:ce:40:74: 45:30:66:a6:a0:6d:c0:6c:a8:cb:42:2b:62:29:62:41:bf:a8: 58:00:c3:f7:82:0b:8c:76:7a:ad:06:e4:ff:f9:61:8b:e7:e7: 40:c7:54:c6:13:e2:62:5a:3d:1c:68:cc:f6:46:85:ae:e6:19: 03:09:2b:20:17:32:70:98:f6:6f:85:20:a3:e7:42:96:38:d6: 2c:ef:16:84:17:67:8d:6c:2f:35:dd:dc:4c:3e:2c:09:3f:7d: 15:92:9f:bc:64:47:5a:86:8c:2f:cf:54:11:1f:ff:be:9e:c9: 79:d1:55:21:b1:5f:a7:6f:99:69:b1:4a:6e:b4:1f:71:75:18: ae:9f:e0:de -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBCRUQxMTAvBgNVBAUTKDQxOUYyN0E0Q0ZFQ0Y0NjFEQjgyRjZGOTA2NzY0RkI2 RDY1RjIzQ0YwHhcNMjYwMzI1MDQxNzI2WhcNMjYwNDAxMDQxNzI2WjAYMRYwFAYD VQQDEw02OWMzNjFkNi1lZjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx+4YvkcwxZrnEof7SHC7sjz6Rte1b5IkkfdvU8P5DBUT5079KYCDmeLpMQMv sogN0U905dDzBgMwts6T2KKqY9epFbTeBBisJLa0kvHjthYBLySKULpnU5eT6SmS S3nbvy5thknfDA9qcjMM4fJGkrt2vDM+gQJ6EBlCwVTZAkCEb7wVm2WmfjW22X7t 1wku6payK0XUKpjTZj9XkzVJLJNSYiEzuYR48AqL0a+OA1e2zP4pg8C+48IViAjk 7PL3iOfrstdPsfNPOUJToAEPV5PUEDzrzwSEDZ3B0bokMoZzgdRrVepD09YBEkrf vAAABN4SE1tcZkxZQEYrsSE3OQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB1yYVjs Vv8RgTu/kSkdCqf0dypVMB8GA1UdIwQYMBaAFEGfJ6TP7PRh24L2+QZ2T7bWXyPP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEJFRC8wOEUwRTA2NjFG MzgxMUVGQjA1OUI2NjVDNEY5QUUwMi9RWjhucE1fczlHSGJndmI1Qm5aUHR0WmZJ ODguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FaOG5wTV9zOUdIYmd2YjVCblpQdHRaZkk4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEJFRC8wOEUwRTA2NjFGMzgxMUVGQjA1OUI2NjVDNEY5QUUwMi9RWjhucE1fczlH SGJndmI1Qm5aUHR0WmZJODgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeZbZ1SrSjbH2voEgS0WbquKVCEjhxZ4Ab5W/WHfXt1qylbXzpmBimChHMzAS LCFgiIW6AYQDHMkpFZbQqeYMzAOhrtwSEUGA4+sQFVEZ1NGEfVxjJMiFO+nBbyOp FVM5NJah9G6OByxY2EJpiwcufQofTXt0PIZvg/mIzkB0RTBmpqBtwGyoy0IrYili Qb+oWADD94ILjHZ6rQbk//lhi+fnQMdUxhPiYlo9HGjM9kaFruYZAwkrIBcycJj2 b4Ugo+dCljjWLO8WhBdnjWwvNd3cTD4sCT99FZKfvGRHWoaML89UER//vp7JedFV IbFfp2+ZabFKbrQfcXUYrp/g3g== -----END CERTIFICATE-----Generated at Thu Mar 26 03:36:36 2026 by rpki-client