$ rpki-client -vvf rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft File: QX1X3RxCy0uksVLTbbBby3iBM98.mft (raw, json) Hash identifier: +fTrldJ+NmgyxK7WdY/jEz20wC3ghuN+Q3XFegDPZtg= Subject key identifier: DA:C7:34:AA:B7:71:4D:91:6C:0A:0B:09:2F:D2:97:93:1D:85:75:AC Authority key identifier: 41:7D:57:DD:1C:42:CB:4B:A4:B1:52:D3:6D:B0:5B:CB:78:81:33:DF Certificate issuer: /CN=A9148848/serialNumber=417D57DD1C42CB4BA4B152D36DB05BCB788133DF Certificate serial: 027C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QX1X3RxCy0uksVLTbbBby3iBM98.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft Manifest number: 027A Signing time: Wed 25 Mar 2026 01:18:33 +0000 Manifest this update: Wed 25 Mar 2026 01:18:32 +0000 Manifest next update: Wed 01 Apr 2026 01:18:32 +0000 Files and hashes: 1: QX1X3RxCy0uksVLTbbBby3iBM98.crl (hash: IcuemEAAtqO4n58Bbk6QBhp4I3+sbwCUcAWygCYyUTo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.crl rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QX1X3RxCy0uksVLTbbBby3iBM98.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:18:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 636 (0x27c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148848, serialNumber=417D57DD1C42CB4BA4B152D36DB05BCB788133DF Validity Not Before: Mar 25 01:18:32 2026 GMT Not After : Apr 1 01:18:32 2026 GMT Subject: CN=69c337e9-58a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:2a:c2:1d:b5:4b:68:74:17:6d:70:26:c3:6a: 69:78:e3:0c:bb:8b:84:8f:87:30:e5:92:e9:a7:78: ff:ff:68:b7:bc:50:25:81:32:83:b1:ab:0f:46:07: db:00:63:09:b1:d1:03:01:ff:49:b2:18:e1:55:e2: e6:48:c7:0a:40:34:c7:50:21:27:27:1f:31:82:fc: 13:91:3c:10:b0:17:d0:b4:b9:d3:f1:e4:d1:0b:3a: 36:0b:f7:2e:e5:d5:07:b4:8a:52:3f:c8:4c:f0:61: c3:ee:a9:ef:54:eb:4c:ea:fc:71:8b:af:08:68:b3: ac:ce:69:03:cd:d5:95:53:14:85:ae:b0:e6:d3:b2: f5:31:0c:b2:27:e7:46:bd:13:f4:e8:9f:62:2a:0c: da:ec:4a:81:76:2c:d9:06:9a:75:f2:3d:55:27:e7: 46:be:f6:81:7c:ef:d9:ad:77:a5:44:70:27:12:77: 69:5a:31:bc:e3:ac:36:d7:71:2e:b6:fe:b9:d2:fe: be:2e:01:4d:9a:42:82:02:d5:27:86:8d:a9:2e:ec: 01:dc:dd:83:0f:bf:b5:ad:84:02:bd:80:4a:cb:6a: 6a:1e:bd:c7:36:3f:40:3d:95:55:06:04:18:35:ec: 2e:55:2f:51:66:19:10:d4:55:55:b6:3d:d4:46:92: c5:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:C7:34:AA:B7:71:4D:91:6C:0A:0B:09:2F:D2:97:93:1D:85:75:AC X509v3 Authority Key Identifier: keyid:41:7D:57:DD:1C:42:CB:4B:A4:B1:52:D3:6D:B0:5B:CB:78:81:33:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QX1X3RxCy0uksVLTbbBby3iBM98.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:2f:21:52:04:59:98:f0:48:13:b2:20:34:ac:4f:d6:7e:ea: 49:78:cb:b6:f6:66:6e:d1:75:4b:69:bd:66:c3:90:4e:dc:93: 91:ba:42:73:5d:43:de:16:ad:86:b9:47:7f:76:6d:a2:05:4f: 58:b2:fc:e2:0c:87:c0:be:d1:29:6b:1a:e3:fc:ed:0a:59:0e: 1d:58:1d:90:c8:ee:20:5d:84:85:44:d1:8d:e4:2a:cf:e7:0b: bf:f5:0c:31:a2:e0:51:ae:0e:f6:9d:29:9d:41:3e:6c:ff:89: be:5e:02:de:10:92:f9:1f:eb:b5:dd:3b:e2:d9:1b:45:96:24: 07:16:f5:ef:29:6f:48:36:96:69:99:ef:41:58:d8:26:e8:87: 16:bb:e3:51:2b:ba:bb:5d:36:09:6c:99:38:2b:a4:69:07:32: 9a:66:9b:a4:f5:6d:2e:a0:0b:91:2f:d0:b0:1e:16:de:b7:db: f0:52:51:1c:d7:49:dc:c4:3b:37:4e:62:95:c4:a4:e7:c3:e4: bf:f4:ba:58:93:0b:92:07:b0:7b:58:15:b3:4e:0e:99:82:02: da:90:a7:8f:f6:08:50:9b:87:b6:dd:9e:22:94:1a:c4:d2:de: de:1a:fb:26:38:4e:77:0b:d3:e3:d1:47:89:d6:b0:12:41:02: c6:ec:44:f5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAnwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg4NDgxMTAvBgNVBAUTKDQxN0Q1N0REMUM0MkNCNEJBNEIxNTJEMzZEQjA1QkNC Nzg4MTMzREYwHhcNMjYwMzI1MDExODMyWhcNMjYwNDAxMDExODMyWjAYMRYwFAYD VQQDEw02OWMzMzdlOS01OGE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqSrCHbVLaHQXbXAmw2ppeOMMu4uEj4cw5ZLpp3j//2i3vFAlgTKDsasPRgfb AGMJsdEDAf9JshjhVeLmSMcKQDTHUCEnJx8xgvwTkTwQsBfQtLnT8eTRCzo2C/cu 5dUHtIpSP8hM8GHD7qnvVOtM6vxxi68IaLOszmkDzdWVUxSFrrDm07L1MQyyJ+dG vRP06J9iKgza7EqBdizZBpp18j1VJ+dGvvaBfO/ZrXelRHAnEndpWjG846w213Eu tv650v6+LgFNmkKCAtUnho2pLuwB3N2DD7+1rYQCvYBKy2pqHr3HNj9APZVVBgQY NewuVS9RZhkQ1FVVtj3URpLFNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNrHNKq3 cU2RbAoLCS/Sl5MdhXWsMB8GA1UdIwQYMBaAFEF9V90cQstLpLFS022wW8t4gTPf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODg0OC83ODcwRTNDODVE N0QxMUVEQjEyRjhENUFDNEY5QUUwMi9RWDFYM1J4Q3kwdWtzVkxUYmJCYnkzaUJN OTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FYMVgzUnhDeTB1a3NWTFRiYkJieTNpQk05OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODg0OC83ODcwRTNDODVEN0QxMUVEQjEyRjhENUFDNEY5QUUwMi9RWDFYM1J4Q3kw dWtzVkxUYmJCYnkzaUJNOTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMi8hUgRZmPBIE7IgNKxP1n7qSXjLtvZmbtF1S2m9ZsOQTtyTkbpCc11D3hat hrlHf3ZtogVPWLL84gyHwL7RKWsa4/ztClkOHVgdkMjuIF2EhUTRjeQqz+cLv/UM MaLgUa4O9p0pnUE+bP+Jvl4C3hCS+R/rtd074tkbRZYkBxb17ylvSDaWaZnvQVjY JuiHFrvjUSu6u102CWyZOCukaQcymmabpPVtLqALkS/QsB4W3rfb8FJRHNdJ3MQ7 N05ilcSk58Pkv/S6WJMLkgewe1gVs04OmYIC2pCnj/YIUJuHtt2eIpQaxNLe3hr7 JjhOdwvT49FHidawEkECxuxE9Q== -----END CERTIFICATE-----Generated at Thu Mar 26 14:30:57 2026 by rpki-client