$ rpki-client -vvf rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft File: sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft (raw, json) Hash identifier: bAn/GzOmaF9jz4kphj/7ShYr1+OiuGD90OpbYS1cPUU= Subject key identifier: BA:78:51:BE:5D:41:90:D2:3B:89:A2:9B:7C:1B:85:46:9C:C8:7D:43 Authority key identifier: B2:A7:84:EE:85:F5:53:83:67:29:7B:51:C0:86:8F:8F:1C:02:F9:11 Certificate issuer: /CN=A9158F08/serialNumber=B2A784EE85F5538367297B51C0868F8F1C02F911 Certificate serial: 09DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqeE7oX1U4NnKXtRwIaPjxwC-RE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft Manifest number: 168F Signing time: Tue 24 Mar 2026 18:10:49 +0000 Manifest this update: Tue 24 Mar 2026 18:10:49 +0000 Manifest next update: Tue 31 Mar 2026 18:10:49 +0000 Files and hashes: 1: sqeE7oX1U4NnKXtRwIaPjxwC-RE.crl (hash: sURQ3ozHIvJxd/mPPgpqGBGJ2CIv5lHTCjFpU1XNBew=) 2: DCDFB82CA17B11EAB16F4954C4F9AE02.roa (hash: kTqCbZKUtBsFFXpPj9uO/YMS3jJEQ+u1QwW8st6ZqAs=) 3: DC4BD210A17B11EAB16F4954C4F9AE02.roa (hash: eIAHLPD+G1WHeALpmNDjCvEhWTMycfos5yNXip7qHSk=) 4: DD70B00CA17B11EAB16F4954C4F9AE02.roa (hash: r3oax/+V4q+jPioRQnTYAoCLL+EoLljtLzFVV7hSq0M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.crl rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqeE7oX1U4NnKXtRwIaPjxwC-RE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2526 (0x9de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158F08, serialNumber=B2A784EE85F5538367297B51C0868F8F1C02F911 Validity Not Before: Mar 24 18:10:49 2026 GMT Not After : Mar 31 18:10:49 2026 GMT Subject: CN=69c2d3a9-9749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a4:e0:c6:83:e0:21:05:d5:59:4a:11:62:8e: d8:c9:3e:e8:ce:65:fb:26:7b:d6:d8:be:7a:71:88: c8:2b:88:b1:d1:b4:44:92:db:39:46:18:50:c8:e8: 58:4d:9c:e6:7c:f0:68:83:db:59:e8:c8:e5:c1:c2: 2f:37:9d:9f:70:9e:19:b5:32:8b:97:f5:b1:8f:05: bd:aa:f9:9c:52:7d:9c:41:45:31:52:34:de:42:8a: ea:cd:5c:86:bc:61:eb:2a:c1:eb:21:82:a1:eb:16: 1d:91:e3:da:4a:84:21:2f:c6:9a:44:4f:76:77:a8: df:56:2d:3d:31:e3:86:b3:05:25:c2:5a:ba:e9:55: a6:ab:91:2a:8d:e0:10:05:d1:f5:ec:1a:20:a9:c6: 17:9b:56:71:35:9a:15:80:26:90:6e:0b:d2:09:fb: fe:5f:1c:48:75:0c:1a:c0:84:14:64:66:dd:ef:47: ed:3e:df:6f:49:e1:89:7e:e4:86:c8:8f:e2:92:63: f8:e1:e9:02:d5:9a:92:8d:26:c6:b0:54:be:85:a4: b4:3c:28:fc:fe:57:fd:ef:e6:5e:8f:8d:04:7f:c9: 95:10:b8:71:59:5b:8d:28:8a:a5:1a:b1:52:eb:6e: 7b:8e:62:6d:0f:74:02:78:14:4e:d9:c8:5e:08:ac: ae:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:78:51:BE:5D:41:90:D2:3B:89:A2:9B:7C:1B:85:46:9C:C8:7D:43 X509v3 Authority Key Identifier: keyid:B2:A7:84:EE:85:F5:53:83:67:29:7B:51:C0:86:8F:8F:1C:02:F9:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqeE7oX1U4NnKXtRwIaPjxwC-RE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:5e:e6:85:75:d9:2d:16:4b:a0:71:8e:96:81:54:df:7d:2c: d6:58:ad:2d:65:eb:e2:66:88:b2:79:ae:fb:58:e4:cb:54:82: c5:86:a2:17:5b:c7:4f:af:0f:c5:5f:eb:6b:dc:df:1e:92:a8: 35:a9:c2:4f:6b:ab:34:7f:67:57:68:11:74:ed:9f:e8:e9:e3: a9:f5:8a:0f:2d:1d:9a:be:29:c5:a9:b4:a9:88:49:6b:f4:0f: 9b:56:24:86:2f:ec:c7:ea:2e:35:94:c3:dc:06:ee:72:29:1f: 57:d5:06:de:d3:cc:60:a1:d5:63:07:99:ad:be:85:70:c3:ca: 39:0d:45:81:cc:75:9d:c5:cf:67:ce:f0:90:3a:aa:7f:bf:fd: 2c:1f:be:e4:aa:42:34:f1:b8:9f:c4:c2:c1:01:bb:f8:fc:a0: 62:aa:45:a6:7e:d9:c1:83:0c:63:5d:ed:43:44:3e:b4:fa:aa: 7a:c4:72:47:68:02:b1:3e:74:0c:70:7f:e0:14:c1:7a:e5:77: 4e:64:53:e1:1f:ff:6d:92:14:f0:52:1e:9d:9d:d5:d7:2e:92: 0e:74:ce:b7:fa:a9:7e:51:22:93:c3:27:ef:4f:ca:ec:75:6a: 19:4c:2a:02:5b:c2:80:7a:82:f9:e6:b6:42:6e:70:a3:c9:e5: f8:3b:0d:61 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThGMDgxMTAvBgNVBAUTKEIyQTc4NEVFODVGNTUzODM2NzI5N0I1MUMwODY4RjhG MUMwMkY5MTEwHhcNMjYwMzI0MTgxMDQ5WhcNMjYwMzMxMTgxMDQ5WjAYMRYwFAYD VQQDEw02OWMyZDNhOS05NzQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm6TgxoPgIQXVWUoRYo7YyT7ozmX7JnvW2L56cYjIK4ix0bREkts5RhhQyOhY TZzmfPBog9tZ6MjlwcIvN52fcJ4ZtTKLl/WxjwW9qvmcUn2cQUUxUjTeQorqzVyG vGHrKsHrIYKh6xYdkePaSoQhL8aaRE92d6jfVi09MeOGswUlwlq66VWmq5EqjeAQ BdH17BogqcYXm1ZxNZoVgCaQbgvSCfv+XxxIdQwawIQUZGbd70ftPt9vSeGJfuSG yI/ikmP44ekC1ZqSjSbGsFS+haS0PCj8/lf97+Zej40Ef8mVELhxWVuNKIqlGrFS 6257jmJtD3QCeBRO2cheCKyupQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLp4Ub5d QZDSO4mim3wbhUacyH1DMB8GA1UdIwQYMBaAFLKnhO6F9VODZyl7UcCGj48cAvkR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEYwOC81QjE3RjZEMjA3 RDAxMUVBQTQ4NDg2NDRDNEY5QUUwMi9zcWVFN29YMVU0Tm5LWHRSd0lhUGp4d0Mt UkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NxZUU3b1gxVTRObktYdFJ3SWFQanh3Qy1SRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEYwOC81QjE3RjZEMjA3RDAxMUVBQTQ4NDg2NDRDNEY5QUUwMi9zcWVFN29YMVU0 Tm5LWHRSd0lhUGp4d0MtUkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADV7mhXXZLRZLoHGOloFU330s1litLWXr4maIsnmu+1jky1SCxYaiF1vHT68P xV/ra9zfHpKoNanCT2urNH9nV2gRdO2f6OnjqfWKDy0dmr4pxam0qYhJa/QPm1Yk hi/sx+ouNZTD3AbucikfV9UG3tPMYKHVYweZrb6FcMPKOQ1Fgcx1ncXPZ87wkDqq f7/9LB++5KpCNPG4n8TCwQG7+PygYqpFpn7ZwYMMY13tQ0Q+tPqqesRyR2gCsT50 DHB/4BTBeuV3TmRT4R//bZIU8FIenZ3V1y6SDnTOt/qpflEik8Mn70/K7HVqGUwq AlvCgHqC+ea2Qm5wo8nl+DsNYQ== -----END CERTIFICATE-----Generated at Thu Mar 26 21:13:13 2026 by rpki-client