$ rpki-client -vvf rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.mft File: qafXPj7Y1cRm3LxsIJzUNTzemM8.mft (raw, json) Hash identifier: twZzmETrwGOtrmlPreQy9rnrSsHCarkDhbvrqnAklIw= Subject key identifier: 24:A8:34:09:BC:50:15:FA:17:A8:DF:59:DD:30:D3:78:BE:D9:22:94 Authority key identifier: A9:A7:D7:3E:3E:D8:D5:C4:66:DC:BC:6C:20:9C:D4:35:3C:DE:98:CF Certificate issuer: /CN=A9143FC4/serialNumber=A9A7D73E3ED8D5C466DCBC6C209CD4353CDE98CF Certificate serial: 34E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qafXPj7Y1cRm3LxsIJzUNTzemM8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.mft Manifest number: 34E3 Signing time: Tue 24 Mar 2026 15:16:31 +0000 Manifest this update: Tue 24 Mar 2026 15:16:31 +0000 Manifest next update: Tue 31 Mar 2026 15:16:31 +0000 Files and hashes: 1: qafXPj7Y1cRm3LxsIJzUNTzemM8.crl (hash: mftzyRp5qiLcjEknY/385iUjXiF/fkcSX92+z8p6F+U=) 2: FE96F04256EE11F09D243832C4F9AE02.roa (hash: oojYcBMoonELSfe45pkI581LosRHOK0/3Xt8Hp4n/PY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.crl rsync://rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qafXPj7Y1cRm3LxsIJzUNTzemM8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 15:16:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13542 (0x34e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143FC4, serialNumber=A9A7D73E3ED8D5C466DCBC6C209CD4353CDE98CF Validity Not Before: Mar 24 15:16:31 2026 GMT Not After : Mar 31 15:16:31 2026 GMT Subject: CN=69c2aacf-41cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:96:26:00:67:52:14:8f:9a:dd:61:0b:93:c4: 6a:c5:75:01:01:00:14:2d:0e:41:7a:36:cf:a2:e9: d0:88:f7:6d:66:3d:25:d4:8c:f2:f3:c6:bc:30:c6: e5:b3:af:37:48:6c:3d:de:ab:29:07:38:e2:be:71: 68:18:70:d7:e5:20:45:be:74:4f:04:9f:b3:f0:cd: d9:e5:9b:f0:95:5c:e1:e7:5b:2c:44:41:03:7b:10: f4:b0:2d:37:25:cb:c9:20:c6:81:29:e0:c3:4f:a3: df:98:41:97:85:e2:31:c9:8a:1b:7c:44:f1:c4:45: 0f:4b:8e:b9:93:d7:77:f4:ec:f3:fa:fb:51:a1:2b: cd:8e:0f:63:93:5a:f4:53:f0:61:f4:3e:c1:00:96: d2:c6:e2:fa:f4:00:9f:68:0e:c0:fd:bb:4d:5e:3d: 57:1c:73:32:f6:17:26:ef:1f:65:13:89:a0:ed:a5: 40:c1:21:c9:47:10:3b:04:7b:51:81:f3:1d:a4:c5: 9e:54:88:41:c3:95:f4:53:b3:0c:a0:1f:fa:56:0e: d3:e8:2f:ca:49:34:9d:78:ae:ca:35:f9:3d:32:fa: 8f:73:9d:58:bd:bf:a2:4f:ae:0e:92:2c:a5:38:ea: 23:2d:a8:1e:1b:f5:31:0c:31:fc:e2:90:fd:cc:30: b4:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:A8:34:09:BC:50:15:FA:17:A8:DF:59:DD:30:D3:78:BE:D9:22:94 X509v3 Authority Key Identifier: keyid:A9:A7:D7:3E:3E:D8:D5:C4:66:DC:BC:6C:20:9C:D4:35:3C:DE:98:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qafXPj7Y1cRm3LxsIJzUNTzemM8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:d7:72:aa:5d:23:d1:0a:c5:d6:1c:b0:e9:86:6e:d8:43:45: be:e4:dc:49:f4:f5:99:a9:fb:0e:f3:a6:7a:81:82:5f:6b:61: 2d:26:b1:0a:8d:df:d5:11:cf:48:13:ff:e9:a8:aa:b7:2e:98: 6e:09:b6:d3:3e:2f:29:fe:98:81:e8:21:9a:3a:7d:c5:cd:ee: fc:fd:1b:b9:38:3d:f1:0d:82:ee:54:38:b4:6a:1f:8a:3f:55: 67:f5:08:ca:47:5c:0c:aa:20:0b:ad:0b:f1:e3:10:da:5c:79: ff:14:f2:c1:8a:dd:b8:6a:af:68:51:06:dd:5b:bd:66:46:9b: 29:55:65:67:52:b7:aa:61:be:d4:3f:3f:a2:b9:5b:ea:17:81: 81:2e:de:4c:40:05:58:8b:f3:42:0e:c9:86:b6:54:38:7a:d5: 87:1d:93:a7:07:e2:0e:1f:60:97:91:ab:7e:16:11:08:fe:dc: f3:ae:7a:55:1b:e7:b7:c7:85:e8:5e:d8:49:ea:cc:e4:47:a0: 4e:a3:50:e8:05:72:e2:36:20:e4:0b:0d:c7:0d:83:f8:44:a2: 0a:b0:51:7b:0e:50:4f:70:35:92:4e:ba:e0:f9:eb:0e:7e:60: c9:3d:2c:cd:ff:45:64:b3:56:55:ba:c2:70:39:25:f7:9c:31: f5:74:56:8c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNGQzQxMTAvBgNVBAUTKEE5QTdENzNFM0VEOEQ1QzQ2NkRDQkM2QzIwOUNENDM1 M0NERTk4Q0YwHhcNMjYwMzI0MTUxNjMxWhcNMjYwMzMxMTUxNjMxWjAYMRYwFAYD VQQDEw02OWMyYWFjZi00MWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnZYmAGdSFI+a3WELk8RqxXUBAQAULQ5BejbPounQiPdtZj0l1Izy88a8MMbl s683SGw93qspBzjivnFoGHDX5SBFvnRPBJ+z8M3Z5ZvwlVzh51ssREEDexD0sC03 JcvJIMaBKeDDT6PfmEGXheIxyYobfETxxEUPS465k9d39Ozz+vtRoSvNjg9jk1r0 U/Bh9D7BAJbSxuL69ACfaA7A/btNXj1XHHMy9hcm7x9lE4mg7aVAwSHJRxA7BHtR gfMdpMWeVIhBw5X0U7MMoB/6Vg7T6C/KSTSdeK7KNfk9MvqPc51Yvb+iT64Okiyl OOojLageG/UxDDH84pD9zDC0ZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCSoNAm8 UBX6F6jfWd0w03i+2SKUMB8GA1UdIwQYMBaAFKmn1z4+2NXEZty8bCCc1DU83pjP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0ZDNC9CMTY1QTNBODI5 NTgxMUUyQjM4RDU4RkIwOEIwMkNEMi9xYWZYUGo3WTFjUm0zTHhzSUp6VU5UemVt TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FhZlhQajdZMWNSbTNMeHNJSnpVTlR6ZW1NOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0ZDNC9CMTY1QTNBODI5NTgxMUUyQjM4RDU4RkIwOEIwMkNEMi9xYWZYUGo3WTFj Um0zTHhzSUp6VU5UemVtTTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkNdyql0j0QrF1hyw6YZu2ENFvuTcSfT1man7DvOmeoGCX2thLSaxCo3f1RHP SBP/6aiqty6Ybgm20z4vKf6Ygeghmjp9xc3u/P0buTg98Q2C7lQ4tGofij9VZ/UI ykdcDKogC60L8eMQ2lx5/xTywYrduGqvaFEG3Vu9ZkabKVVlZ1K3qmG+1D8/orlb 6heBgS7eTEAFWIvzQg7JhrZUOHrVhx2TpwfiDh9gl5GrfhYRCP7c8656VRvnt8eF 6F7YSerM5EegTqNQ6AVy4jYg5AsNxw2D+ESiCrBRew5QT3A1kk664PnrDn5gyT0s zf9FZLNWVbrCcDkl95wx9XRWjA== -----END CERTIFICATE-----Generated at Thu Mar 26 02:37:06 2026 by rpki-client