$ rpki-client -vvf rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft File: qXEsy37uAkrriHZ7di4Qk7FA_24.mft (raw, json) Hash identifier: sWNr26haYrDoZemkz1lUlWHqx84ApVHSWQ2yaETc9tg= Subject key identifier: ED:E7:B3:53:1D:1F:64:72:3A:D5:08:23:9C:D2:BE:0B:1E:5A:6F:D4 Authority key identifier: A9:71:2C:CB:7E:EE:02:4A:EB:88:76:7B:76:2E:10:93:B1:40:FF:6E Certificate issuer: /CN=A9148B6A/serialNumber=A9712CCB7EEE024AEB88767B762E1093B140FF6E Certificate serial: 10AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXEsy37uAkrriHZ7di4Qk7FA_24.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft Manifest number: 1094 Signing time: Thu 26 Mar 2026 17:18:52 +0000 Manifest this update: Thu 26 Mar 2026 17:18:51 +0000 Manifest next update: Thu 02 Apr 2026 17:18:51 +0000 Files and hashes: 1: qXEsy37uAkrriHZ7di4Qk7FA_24.crl (hash: j0qIjd4YTspxEkCaiyX32NokgC0PpfJWr0qmvnQECjY=) 2: 07FF4ABC5A1011EAA8B1B456C4F9AE02.roa (hash: na3agWbpkvvPPGYrDAzu2fpB/eIpBQi6AGL/7SLQlTY=) 3: 1BCA5982656311ECA4E81323C4F9AE02.roa (hash: IT79Hkoa22EueYUEPb7uUMkBxRjft5NtH+6nYpQUQTE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.crl rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXEsy37uAkrriHZ7di4Qk7FA_24.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4268 (0x10ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148B6A, serialNumber=A9712CCB7EEE024AEB88767B762E1093B140FF6E Validity Not Before: Mar 26 17:18:51 2026 GMT Not After : Apr 2 17:18:51 2026 GMT Subject: CN=69c56a7c-bfb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d7:e3:cb:fb:b2:28:70:5f:b7:ad:d9:3b:a0: a7:44:89:c0:45:0a:41:ac:ca:77:d6:b3:a7:ea:7d: b6:aa:95:29:40:0f:6e:b4:18:bc:79:b4:e6:4d:6a: b9:7f:fe:88:31:1f:8e:c1:af:55:27:49:da:ad:7f: 7a:17:65:0e:cc:b8:23:44:05:c3:d0:9f:49:c2:cc: 7f:9d:b7:e6:27:44:a7:4f:e8:80:49:67:5e:8f:6d: e0:70:6b:69:3a:6f:32:79:3c:c5:eb:f7:5c:0f:8e: 22:84:4f:43:9b:b3:96:21:72:6f:a5:78:82:4e:23: 82:24:2f:a5:b9:b2:c5:11:25:64:98:3d:4e:55:d9: bf:1f:84:d9:5b:04:2b:5e:59:41:74:37:dd:28:77: 17:74:b3:18:0c:ea:64:e9:0e:58:b6:45:cc:c4:a3: da:33:d2:20:9c:ec:57:18:5e:b5:0d:8f:5b:01:55: 9c:78:8b:a0:c9:89:2b:c8:55:27:f2:9d:1a:dc:c1: 21:f5:18:4e:c4:18:bc:b3:8c:7d:b3:37:4c:9c:2b: bf:f4:1f:ff:cf:2b:02:e5:88:37:a5:9f:a1:97:93: 8b:06:2f:9d:ae:44:2a:96:ae:1a:80:8d:54:cb:09: 93:94:93:4e:7d:16:7e:8c:e2:20:ce:bb:55:b7:68: aa:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:E7:B3:53:1D:1F:64:72:3A:D5:08:23:9C:D2:BE:0B:1E:5A:6F:D4 X509v3 Authority Key Identifier: keyid:A9:71:2C:CB:7E:EE:02:4A:EB:88:76:7B:76:2E:10:93:B1:40:FF:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXEsy37uAkrriHZ7di4Qk7FA_24.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:4d:06:8d:15:8d:e9:1e:3b:d4:1e:18:db:e3:68:fb:5c:5e: af:18:e9:6b:e7:7b:e1:90:98:ba:60:e3:86:09:27:73:e4:54: 01:29:6a:8e:18:7f:1a:75:8d:2a:83:e1:bb:de:0a:66:fb:47: 50:c6:6d:02:9c:3f:68:23:af:50:a4:d4:68:72:45:55:52:ec: 3f:e5:89:d3:2f:ed:8a:a1:fc:f2:ef:c1:95:68:6d:9f:bb:f3: 70:c5:a6:fb:21:78:7e:ee:00:88:a9:32:e5:e1:d1:f7:6c:b8: 0c:93:dd:67:29:8f:84:ce:d5:8c:cb:0a:5d:f0:b2:01:dc:20: bb:d2:ec:90:1c:18:52:86:3d:04:74:c9:36:4e:3d:ac:05:d0: e5:29:c8:82:fc:1c:4a:48:53:4b:95:92:28:07:ef:25:1b:10: 7d:af:27:92:ba:8f:f0:7f:a9:81:f2:41:d6:f2:71:78:f2:ef: 7f:39:fe:17:cb:d2:50:ae:fe:82:bd:49:77:11:83:44:07:c6: e0:e1:09:77:d0:96:80:4e:85:9c:34:76:2f:25:53:72:b1:4f: 2d:c5:0f:15:9d:e6:37:9b:2f:5c:21:bc:66:cd:41:69:e8:25: 07:d4:59:e7:b2:1d:1f:7d:17:98:db:7a:cf:17:77:e5:e7:6b: a1:2a:c3:a1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhCNkExMTAvBgNVBAUTKEE5NzEyQ0NCN0VFRTAyNEFFQjg4NzY3Qjc2MkUxMDkz QjE0MEZGNkUwHhcNMjYwMzI2MTcxODUxWhcNMjYwNDAyMTcxODUxWjAYMRYwFAYD VQQDEw02OWM1NmE3Yy1iZmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArNfjy/uyKHBft63ZO6CnRInARQpBrMp31rOn6n22qpUpQA9utBi8ebTmTWq5 f/6IMR+Owa9VJ0narX96F2UOzLgjRAXD0J9Jwsx/nbfmJ0SnT+iASWdej23gcGtp Om8yeTzF6/dcD44ihE9Dm7OWIXJvpXiCTiOCJC+lubLFESVkmD1OVdm/H4TZWwQr XllBdDfdKHcXdLMYDOpk6Q5YtkXMxKPaM9IgnOxXGF61DY9bAVWceIugyYkryFUn 8p0a3MEh9RhOxBi8s4x9szdMnCu/9B//zysC5Yg3pZ+hl5OLBi+drkQqlq4agI1U ywmTlJNOfRZ+jOIgzrtVt2iq7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO3ns1Md H2RyOtUII5zSvgseWm/UMB8GA1UdIwQYMBaAFKlxLMt+7gJK64h2e3YuEJOxQP9u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEI2QS8wODc1RjQ5NjRD NzQxMUU5OTc5MDBGNTVDNEY5QUUwMi9xWEVzeTM3dUFrcnJpSFo3ZGk0UWs3RkFf MjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FYRXN5Mzd1QWtycmlIWjdkaTRRazdGQV8yNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEI2QS8wODc1RjQ5NjRDNzQxMUU5OTc5MDBGNTVDNEY5QUUwMi9xWEVzeTM3dUFr cnJpSFo3ZGk0UWs3RkFfMjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkE0GjRWN6R471B4Y2+No+1xerxjpa+d74ZCYumDjhgknc+RUASlqjhh/GnWN KoPhu94KZvtHUMZtApw/aCOvUKTUaHJFVVLsP+WJ0y/tiqH88u/BlWhtn7vzcMWm +yF4fu4AiKky5eHR92y4DJPdZymPhM7VjMsKXfCyAdwgu9LskBwYUoY9BHTJNk49 rAXQ5SnIgvwcSkhTS5WSKAfvJRsQfa8nkrqP8H+pgfJB1vJxePLvfzn+F8vSUK7+ gr1JdxGDRAfG4OEJd9CWgE6FnDR2LyVTcrFPLcUPFZ3mN5svXCG8Zs1BaeglB9RZ 57IdH30XmNt6zxd35edroSrDoQ== -----END CERTIFICATE-----Generated at Thu Mar 26 21:11:37 2026 by rpki-client