$ rpki-client -vvf rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.mft File: qjJWJCn4lsCly95WRDFIAzm-upc.mft (raw, json) Hash identifier: vY2oqT4UE7cjN1ag3rCPpMHBxwED0lYj0o03qFdb7Bo= Subject key identifier: 4F:A5:7C:CA:01:5A:F9:BD:A1:39:D8:78:C8:6F:43:01:9C:05:1E:25 Authority key identifier: AA:32:56:24:29:F8:96:C0:A5:CB:DE:56:44:31:48:03:39:BE:BA:97 Certificate issuer: /CN=A9150F66/serialNumber=AA32562429F896C0A5CBDE564431480339BEBA97 Certificate serial: 1B43 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjJWJCn4lsCly95WRDFIAzm-upc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.mft Manifest number: 1B2C Signing time: Tue 24 Mar 2026 15:35:07 +0000 Manifest this update: Tue 24 Mar 2026 15:35:06 +0000 Manifest next update: Tue 31 Mar 2026 15:35:06 +0000 Files and hashes: 1: qjJWJCn4lsCly95WRDFIAzm-upc.crl (hash: UiDzW1el7JlCaTWNV3aq/EoFvxoRfhU96QZ03AQOME8=) 2: 7A1D009C0EB611ECB5408277C4F9AE02.roa (hash: O5gqS4NNOI05UQqMR9lNiHVk+hGRQCkED61BdghCLKA=) 3: 753F0A48CFB611EE83724A58C4F9AE02.roa (hash: QIeEwJm55ZcZzI7KhRs53tpp9RHw/dtleQOxkrbNGvg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.crl rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjJWJCn4lsCly95WRDFIAzm-upc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 15:35:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6979 (0x1b43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150F66, serialNumber=AA32562429F896C0A5CBDE564431480339BEBA97 Validity Not Before: Mar 24 15:35:06 2026 GMT Not After : Mar 31 15:35:06 2026 GMT Subject: CN=69c2af2b-0daa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:de:09:f8:71:89:e5:10:e8:18:57:88:cd:f1: aa:d2:d2:49:41:6f:01:fe:78:77:75:e6:04:89:bf: ed:76:a7:42:5d:c6:2e:c3:00:ea:f2:61:4e:bb:19: e4:61:30:7d:ea:72:08:c1:6d:e3:e5:39:62:9a:e7: b1:c2:da:04:1e:af:fa:51:bf:2b:d4:0a:3f:10:80: 30:40:89:c7:f1:49:fc:f0:6d:42:a2:61:c2:be:90: e5:ac:d3:cd:ae:1b:be:cd:d6:3e:0f:a4:e9:9c:38: 72:c4:dc:3e:3f:0e:17:06:d4:e9:e1:3b:35:8f:c1: 43:60:da:64:11:f5:54:63:96:30:06:c6:f9:aa:32: 13:a6:b8:e2:54:ae:3c:0d:21:1a:78:02:cc:1f:21: b1:d3:54:21:30:c4:79:d8:cb:71:3f:c2:f9:27:3e: 8d:9f:fe:af:fe:15:bb:c4:40:1b:68:1c:18:6b:e8: d0:d5:ab:7c:31:c9:bf:ba:c9:89:8a:b3:7c:19:06: 16:d8:a2:b9:a8:25:6e:4b:72:8a:bc:48:c0:95:77: 8c:6e:a2:24:e3:3c:db:94:11:aa:15:cb:16:06:b5: 80:8f:58:02:ff:28:f4:84:59:d9:c0:c8:70:bb:7b: 80:b2:b3:87:6d:55:e8:81:cc:a0:8b:b8:7b:77:a0: 6f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:A5:7C:CA:01:5A:F9:BD:A1:39:D8:78:C8:6F:43:01:9C:05:1E:25 X509v3 Authority Key Identifier: keyid:AA:32:56:24:29:F8:96:C0:A5:CB:DE:56:44:31:48:03:39:BE:BA:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjJWJCn4lsCly95WRDFIAzm-upc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:e4:48:c8:78:e6:6e:ab:b3:9b:e4:7b:0f:f2:93:b1:bd:93: 4c:81:54:94:ca:5e:d1:3c:e6:fb:cb:58:a6:d9:e0:63:99:b9: 9b:bc:33:96:2a:31:1c:ef:16:b2:ea:68:8b:97:95:6b:93:b3: 10:fa:d0:6b:7a:44:5a:19:16:da:c0:ef:a8:b3:cf:78:fb:1c: f6:ad:c6:6f:bc:e1:8e:de:ca:c9:1d:0c:3e:f4:91:1e:23:78: d5:e2:15:11:a6:5b:1d:35:f2:a0:5a:f8:9c:6e:d4:eb:07:59: 14:ad:28:ba:b8:9e:5e:24:4c:a2:6a:8a:ca:c3:14:a5:eb:8d: 82:1f:48:6b:e0:61:e3:32:23:1f:de:34:c0:f8:44:c6:88:f5: de:68:66:11:9c:04:d6:cd:3c:9c:07:a5:45:4a:e4:3b:59:00: 25:d4:3b:16:cc:31:15:69:43:b6:61:2d:5b:81:48:17:b4:3f: f3:36:19:33:b3:40:4c:4a:8d:a1:4e:69:19:93:75:52:63:a6: 82:be:31:b9:73:38:dd:85:eb:7c:e5:ff:52:21:1a:54:8d:3c: 69:ce:39:5f:72:74:ab:e6:99:ec:3f:40:3e:ec:51:86:c5:99: ad:80:52:1a:7d:b4:0c:5b:bd:ff:67:4c:bd:5d:e3:65:bb:ce: 40:4d:7b:57 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICG0MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBGNjYxMTAvBgNVBAUTKEFBMzI1NjI0MjlGODk2QzBBNUNCREU1NjQ0MzE0ODAz MzlCRUJBOTcwHhcNMjYwMzI0MTUzNTA2WhcNMjYwMzMxMTUzNTA2WjAYMRYwFAYD VQQDEw02OWMyYWYyYi0wZGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArd4J+HGJ5RDoGFeIzfGq0tJJQW8B/nh3deYEib/tdqdCXcYuwwDq8mFOuxnk YTB96nIIwW3j5TlimuexwtoEHq/6Ub8r1Ao/EIAwQInH8Un88G1ComHCvpDlrNPN rhu+zdY+D6TpnDhyxNw+Pw4XBtTp4Ts1j8FDYNpkEfVUY5YwBsb5qjITprjiVK48 DSEaeALMHyGx01QhMMR52MtxP8L5Jz6Nn/6v/hW7xEAbaBwYa+jQ1at8Mcm/usmJ irN8GQYW2KK5qCVuS3KKvEjAlXeMbqIk4zzblBGqFcsWBrWAj1gC/yj0hFnZwMhw u3uAsrOHbVXogcygi7h7d6BvaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE+lfMoB Wvm9oTnYeMhvQwGcBR4lMB8GA1UdIwQYMBaAFKoyViQp+JbApcveVkQxSAM5vrqX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEY2Ni8zRDk4MUNDQzNB MUUxMUU3OUFBMEQ1MUNDNEY5QUUwMi9xakpXSkNuNGxzQ2x5OTVXUkRGSUF6bS11 cGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3FqSldKQ240bHNDbHk5NVdSREZJQXptLXVwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MEY2Ni8zRDk4MUNDQzNBMUUxMUU3OUFBMEQ1MUNDNEY5QUUwMi9xakpXSkNuNGxz Q2x5OTVXUkRGSUF6bS11cGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPeRIyHjmbquzm+R7D/KTsb2TTIFUlMpe0Tzm+8tYptngY5m5m7wzlioxHO8W supoi5eVa5OzEPrQa3pEWhkW2sDvqLPPePsc9q3Gb7zhjt7KyR0MPvSRHiN41eIV EaZbHTXyoFr4nG7U6wdZFK0ourieXiRMomqKysMUpeuNgh9Ia+Bh4zIjH940wPhE xoj13mhmEZwE1s08nAelRUrkO1kAJdQ7FswxFWlDtmEtW4FIF7Q/8zYZM7NATEqN oU5pGZN1UmOmgr4xuXM43YXrfOX/UiEaVI08ac45X3J0q+aZ7D9APuxRhsWZrYBS Gn20DFu9/2dMvV3jZbvOQE17Vw== -----END CERTIFICATE-----Generated at Thu Mar 26 14:11:05 2026 by rpki-client