$ rpki-client -vvf rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft File: QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft (raw, json) Hash identifier: WOamMzLxWQtxPgULvhfsQQvNckLQzDpZ1qAFOb45kDo= Subject key identifier: B7:F8:E7:A7:3D:65:85:33:17:8C:05:89:D7:CD:99:5A:39:18:63:D5 Authority key identifier: 42:B7:49:E1:EC:DB:E0:30:74:7F:8C:B5:74:7F:2D:73:A5:E4:24:54 Certificate issuer: /CN=A915D6C2/serialNumber=42B749E1ECDBE030747F8CB5747F2D73A5E42454 Certificate serial: 0506 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft Manifest number: 04F5 Signing time: Tue 24 Mar 2026 23:25:17 +0000 Manifest this update: Tue 24 Mar 2026 23:25:17 +0000 Manifest next update: Tue 31 Mar 2026 23:25:17 +0000 Files and hashes: 1: QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.crl (hash: IAgikM1s2mSrJDsT6YrmXHwOigUy8Q+4fFtCgzzrqlg=) 2: 5808B946B73A11ED8A2A8964C4F9AE02.roa (hash: l82fYq1x4u49vmBmNnG130HVCjkEDSzOMLfbwYG7C8U=) 3: 58A4A3E2B73A11ED8A2A8964C4F9AE02.roa (hash: yq/8yNnq6a4ASHoRBlMWzxoMD3auQ65vuNtbtSiVuBA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.crl rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:25:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1286 (0x506) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D6C2, serialNumber=42B749E1ECDBE030747F8CB5747F2D73A5E42454 Validity Not Before: Mar 24 23:25:17 2026 GMT Not After : Mar 31 23:25:17 2026 GMT Subject: CN=69c31d5d-5008 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e5:00:8f:bd:e1:e0:be:83:3f:82:07:5e:09: eb:68:b8:ce:6c:08:73:be:99:de:38:8f:80:70:31: b6:fd:dd:04:78:c6:36:c5:d3:cc:d3:9d:3d:eb:db: 25:b3:10:9b:84:25:c1:1d:5d:11:93:ac:29:78:3c: 2c:58:1f:67:d7:44:2d:6c:e8:c7:87:19:cb:be:bc: ef:33:47:71:87:4d:45:3e:31:3f:6a:6a:d0:fa:78: 77:9f:5e:02:7c:4a:e3:fc:a4:7b:3e:d0:2c:a3:de: 76:37:3d:57:a6:11:92:09:21:db:a5:1b:59:87:09: 87:03:0d:c0:c9:c2:be:57:dd:06:96:a9:8f:09:98: 14:7c:71:b7:38:f8:ce:64:4c:18:f4:7a:b0:49:ba: dd:18:23:ad:7d:1e:b2:18:36:d4:58:14:09:5e:f6: 5b:32:37:db:fd:14:e7:cd:2e:72:9c:fd:9f:3c:22: 9b:c6:87:59:19:d5:8c:72:19:79:b8:40:a3:34:4d: a9:a8:ff:ae:3a:c7:6c:f1:74:28:89:21:20:2d:3a: 21:6f:8b:36:65:4c:fb:0a:1a:30:10:f8:20:9d:2f: e3:f4:17:b2:ac:14:73:fa:6a:75:b7:ba:eb:84:fd: 26:77:88:fe:0b:df:35:4c:66:15:1f:10:f6:78:fc: f3:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:F8:E7:A7:3D:65:85:33:17:8C:05:89:D7:CD:99:5A:39:18:63:D5 X509v3 Authority Key Identifier: keyid:42:B7:49:E1:EC:DB:E0:30:74:7F:8C:B5:74:7F:2D:73:A5:E4:24:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:80:cf:0c:60:a4:3c:c8:19:1e:37:92:20:03:3b:46:6c:9f: 72:85:2c:bb:f3:57:3b:12:7f:48:28:5b:97:6a:f0:75:7f:b1: f2:08:1d:6f:ca:3e:31:08:0c:8a:11:75:6f:0c:48:b7:23:39: 9b:c8:7d:cb:45:12:b0:4d:85:90:c4:cd:ac:ba:e2:34:cc:75: 2d:da:50:a7:d7:23:26:3f:79:ea:1a:98:90:92:b5:8e:ec:3c: a2:76:fd:d4:e9:db:d8:5b:f9:38:20:48:60:f6:05:a3:d3:79: 2f:14:4d:a1:93:48:64:f4:79:ef:b1:d0:e2:e1:d0:23:f4:76: f6:36:40:b2:75:6b:b3:2d:c7:d0:42:9a:ff:89:be:0e:2b:48: ca:a0:48:8b:e0:da:6d:2b:67:ae:4c:0e:06:ba:44:7c:ca:94: 72:19:81:99:cd:e8:5f:33:78:c3:10:76:5b:62:db:e7:14:d3: 2d:56:c2:64:26:cf:44:13:2c:49:76:86:f9:10:86:a5:5f:81: 7f:ad:8c:19:c3:7e:7b:a6:0f:09:53:e5:e5:c4:73:27:59:6b: 0f:0c:0c:81:b2:0f:9e:1e:30:11:ac:58:37:53:62:99:91:ad: a3:bc:53:1c:bc:94:40:63:96:89:dd:34:a2:3c:52:9c:a1:7c: 02:60:0f:b0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ2QzIxMTAvBgNVBAUTKDQyQjc0OUUxRUNEQkUwMzA3NDdGOENCNTc0N0YyRDcz QTVFNDI0NTQwHhcNMjYwMzI0MjMyNTE3WhcNMjYwMzMxMjMyNTE3WjAYMRYwFAYD VQQDEw02OWMzMWQ1ZC01MDA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAouUAj73h4L6DP4IHXgnraLjObAhzvpneOI+AcDG2/d0EeMY2xdPM050969sl sxCbhCXBHV0Rk6wpeDwsWB9n10QtbOjHhxnLvrzvM0dxh01FPjE/amrQ+nh3n14C fErj/KR7PtAso952Nz1XphGSCSHbpRtZhwmHAw3AycK+V90GlqmPCZgUfHG3OPjO ZEwY9HqwSbrdGCOtfR6yGDbUWBQJXvZbMjfb/RTnzS5ynP2fPCKbxodZGdWMchl5 uECjNE2pqP+uOsds8XQoiSEgLTohb4s2ZUz7ChowEPggnS/j9BeyrBRz+mp1t7rr hP0md4j+C981TGYVHxD2ePzz2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLf456c9 ZYUzF4wFidfNmVo5GGPVMB8GA1UdIwQYMBaAFEK3SeHs2+AwdH+MtXR/LXOl5CRU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDZDMi9GOUM0NkZBQzUz QTIxMUVDOUQ1RTYxNURDNEY5QUUwMi9RcmRKNGV6YjREQjBmNHkxZEg4dGM2WGtK RlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FyZEo0ZXpiNERCMGY0eTFkSDh0YzZYa0pGUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDZDMi9GOUM0NkZBQzUzQTIxMUVDOUQ1RTYxNURDNEY5QUUwMi9RcmRKNGV6YjRE QjBmNHkxZEg4dGM2WGtKRlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAE4DPDGCkPMgZHjeSIAM7RmyfcoUsu/NXOxJ/SChbl2rwdX+x8ggdb8o+MQgM ihF1bwxItyM5m8h9y0USsE2FkMTNrLriNMx1LdpQp9cjJj956hqYkJK1juw8onb9 1Onb2Fv5OCBIYPYFo9N5LxRNoZNIZPR577HQ4uHQI/R29jZAsnVrsy3H0EKa/4m+ DitIyqBIi+DabStnrkwOBrpEfMqUchmBmc3oXzN4wxB2W2Lb5xTTLVbCZCbPRBMs SXaG+RCGpV+Bf62MGcN+e6YPCVPl5cRzJ1lrDwwMgbIPnh4wEaxYN1NimZGto7xT HLyUQGOWid00ojxSnKF8AmAPsA== -----END CERTIFICATE-----Generated at Thu Mar 26 06:51:13 2026 by rpki-client