$ rpki-client -vvf rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft File: Qb--vmNSH7BO2BI8aOXAza9dBc0.mft (raw, json) Hash identifier: DsHWMM5tKEu2yYAfipfhW9tpS2GUOiQ09/Y+sTIub3M= Subject key identifier: 9A:87:70:67:57:0E:93:E1:9E:CE:2D:AF:B2:67:2C:10:83:5D:2A:1D Authority key identifier: 41:BF:BE:BE:63:52:1F:B0:4E:D8:12:3C:68:E5:C0:CD:AF:5D:05:CD Certificate issuer: /CN=A9170982/serialNumber=41BFBEBE63521FB04ED8123C68E5C0CDAF5D05CD Certificate serial: 0436 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qb--vmNSH7BO2BI8aOXAza9dBc0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft Manifest number: 0421 Signing time: Wed 25 Mar 2026 00:05:07 +0000 Manifest this update: Wed 25 Mar 2026 00:05:07 +0000 Manifest next update: Wed 01 Apr 2026 00:05:07 +0000 Files and hashes: 1: Qb--vmNSH7BO2BI8aOXAza9dBc0.crl (hash: lOokicPoqqjzOtRLCEzGOwtEB2mxMy3vPHiyHfawkJE=) 2: 332B4C6ABA7011F088893F1DC4F9AE02.roa (hash: 0Sm54IRiiNJRyYTIMOY3l4XXUfmKddVszLFvgn4oy1g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.crl rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qb--vmNSH7BO2BI8aOXAza9dBc0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:05:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1078 (0x436) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170982, serialNumber=41BFBEBE63521FB04ED8123C68E5C0CDAF5D05CD Validity Not Before: Mar 25 00:05:07 2026 GMT Not After : Apr 1 00:05:07 2026 GMT Subject: CN=69c326b3-fc8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:44:0b:73:05:3e:7f:5b:3f:be:9a:ef:fc:96: 39:7b:26:8e:49:83:5c:b5:49:b1:ec:33:7d:41:21: 5f:4f:af:c6:a9:6a:3d:9b:2f:cc:e2:40:61:4e:65: c8:f4:8b:37:85:f6:de:1b:37:89:6f:5e:fb:68:75: 56:44:83:c0:60:e0:c8:6f:9a:cd:2f:1f:ac:07:f7: 5f:3b:3a:44:72:3e:c1:03:50:e1:b3:e3:7a:8a:96: 3a:92:59:68:54:b6:5c:21:2e:22:e1:b2:d4:6b:66: 5a:e4:a1:17:2a:f5:90:43:02:20:4e:bb:f7:e8:3b: 99:90:2a:77:f1:58:f2:2f:54:85:50:e2:24:dc:ff: c4:05:25:97:72:62:fb:23:67:c7:83:29:7d:b8:f4: dd:51:04:43:e7:d6:bf:8e:da:8a:07:c8:fe:c3:c4: 60:bc:62:e3:3b:93:ce:ba:8e:bc:5b:3e:ff:30:9a: 9d:bc:eb:bd:8d:b6:90:49:5c:65:16:2a:17:0f:27: 2e:bc:41:c5:5a:4b:fb:36:50:21:b8:26:58:12:67: 35:c4:81:5c:3a:ce:9b:59:2c:62:b0:f5:40:55:10: 88:3d:f7:61:d6:b6:d1:96:b8:72:15:a2:79:fc:a7: 15:e4:96:31:9f:1b:57:9f:02:9c:30:0c:2f:d1:84: 57:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:87:70:67:57:0E:93:E1:9E:CE:2D:AF:B2:67:2C:10:83:5D:2A:1D X509v3 Authority Key Identifier: keyid:41:BF:BE:BE:63:52:1F:B0:4E:D8:12:3C:68:E5:C0:CD:AF:5D:05:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qb--vmNSH7BO2BI8aOXAza9dBc0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:12:86:52:bf:0c:73:be:e7:90:9f:97:56:4a:de:37:54:3f: 8d:cd:5e:37:7a:8b:4f:f3:d4:9b:af:0c:59:89:04:ef:e2:8c: 32:01:48:6a:13:8f:59:da:bc:f3:06:79:56:2c:48:47:09:df: 9a:33:65:59:f3:1b:87:da:5b:3f:88:9a:1f:a0:90:96:35:f7: d2:c1:ad:69:a1:65:64:1d:b3:ca:ce:68:0c:94:a9:79:aa:73: ec:d7:75:94:34:9a:98:31:3b:71:92:1a:a6:8f:61:98:8f:54: 76:3f:e8:11:64:e0:33:9c:c2:44:de:a2:86:50:22:a6:de:cf: 8e:97:8b:52:2b:e8:2c:d2:c0:e2:6e:e6:fe:24:06:26:3b:f2: a9:d9:e1:4c:fb:cd:de:0b:23:a1:8f:bc:1a:69:61:02:0d:d1: c1:22:cc:3a:f2:d5:e1:17:46:63:6b:f9:8f:df:a8:37:b1:ef: e9:6b:56:5e:09:b3:f0:32:ea:29:34:aa:13:1c:07:d5:e2:3b: c7:c2:dd:db:59:1e:85:08:a2:e9:7b:63:3b:a4:dd:64:5d:14: 1c:06:ad:e1:fd:18:89:be:9d:64:74:29:60:93:ef:91:de:4c: e3:83:60:fb:ca:94:80:07:7d:d9:a5:39:46:39:c1:4e:ee:eb: 9d:2d:cd:63 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBDYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA5ODIxMTAvBgNVBAUTKDQxQkZCRUJFNjM1MjFGQjA0RUQ4MTIzQzY4RTVDMENE QUY1RDA1Q0QwHhcNMjYwMzI1MDAwNTA3WhcNMjYwNDAxMDAwNTA3WjAYMRYwFAYD VQQDEw02OWMzMjZiMy1mYzhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyUQLcwU+f1s/vprv/JY5eyaOSYNctUmx7DN9QSFfT6/GqWo9my/M4kBhTmXI 9Is3hfbeGzeJb177aHVWRIPAYODIb5rNLx+sB/dfOzpEcj7BA1Dhs+N6ipY6kllo VLZcIS4i4bLUa2Za5KEXKvWQQwIgTrv36DuZkCp38VjyL1SFUOIk3P/EBSWXcmL7 I2fHgyl9uPTdUQRD59a/jtqKB8j+w8RgvGLjO5POuo68Wz7/MJqdvOu9jbaQSVxl FioXDycuvEHFWkv7NlAhuCZYEmc1xIFcOs6bWSxisPVAVRCIPfdh1rbRlrhyFaJ5 /KcV5JYxnxtXnwKcMAwv0YRXbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJqHcGdX DpPhns4tr7JnLBCDXSodMB8GA1UdIwQYMBaAFEG/vr5jUh+wTtgSPGjlwM2vXQXN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDk4Mi9DRjIwNUM2MEFD MTMxMUVDQjc3NkIyMDlDNEY5QUUwMi9RYi0tdm1OU0g3Qk8yQkk4YU9YQXphOWRC YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FiLS12bU5TSDdCTzJCSThhT1hBemE5ZEJjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDk4Mi9DRjIwNUM2MEFDMTMxMUVDQjc3NkIyMDlDNEY5QUUwMi9RYi0tdm1OU0g3 Qk8yQkk4YU9YQXphOWRCYzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeBKGUr8Mc77nkJ+XVkreN1Q/jc1eN3qLT/PUm68MWYkE7+KMMgFIahOPWdq8 8wZ5VixIRwnfmjNlWfMbh9pbP4iaH6CQljX30sGtaaFlZB2zys5oDJSpeapz7Nd1 lDSamDE7cZIapo9hmI9Udj/oEWTgM5zCRN6ihlAipt7PjpeLUivoLNLA4m7m/iQG JjvyqdnhTPvN3gsjoY+8GmlhAg3RwSLMOvLV4RdGY2v5j9+oN7Hv6WtWXgmz8DLq KTSqExwH1eI7x8Ld21kehQii6XtjO6TdZF0UHAat4f0Yib6dZHQpYJPvkd5M44Ng +8qUgAd92aU5RjnBTu7rnS3NYw== -----END CERTIFICATE-----Generated at Thu Mar 26 20:23:05 2026 by rpki-client