$ rpki-client -vvf rpki.apnic.net/member_repository/A9172989/EFFDD714D6D511F0B06384B581D3641D/q2nHQCVImv1hdH_5M1sUfiC7JdQ.mft File: q2nHQCVImv1hdH_5M1sUfiC7JdQ.mft (raw, json) Hash identifier: apdQta7/hn72pVeZ0zHV/oOmuEKmpCx7gmiHQEIE1nw= Subject key identifier: 27:DF:15:1F:77:C0:7A:D5:AE:87:75:D5:4F:A3:AD:39:0A:54:A8:C8 Authority key identifier: AB:69:C7:40:25:48:9A:FD:61:74:7F:F9:33:5B:14:7E:20:BB:25:D4 Certificate issuer: /CN=A9172989/serialNumber=AB69C74025489AFD61747FF9335B147E20BB25D4 Certificate serial: 3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2nHQCVImv1hdH_5M1sUfiC7JdQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172989/EFFDD714D6D511F0B06384B581D3641D/q2nHQCVImv1hdH_5M1sUfiC7JdQ.mft Manifest number: 39 Signing time: Fri 27 Mar 2026 08:06:52 +0000 Manifest this update: Fri 27 Mar 2026 08:06:52 +0000 Manifest next update: Fri 03 Apr 2026 08:06:52 +0000 Files and hashes: 1: q2nHQCVImv1hdH_5M1sUfiC7JdQ.crl (hash: lev+xXChkvxlG0VFDgg0BKwOFpWgnLOXfKAUfcdik1w=) 2: 3CBCF5BED6D911F0B064CD5C85D3641D.roa (hash: IXLvInf2Y0MEbEfDAQVICvkTqoIWfV2KIzIJmKaveIA=) 3: 0FB60AEED6D711F085B1D0E884D3641D.roa (hash: zu2J1LZYT0w/3iHjLznZWECGOhdsg6myGC2fCgr+ku8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172989/EFFDD714D6D511F0B06384B581D3641D/q2nHQCVImv1hdH_5M1sUfiC7JdQ.crl rsync://rpki.apnic.net/member_repository/A9172989/EFFDD714D6D511F0B06384B581D3641D/q2nHQCVImv1hdH_5M1sUfiC7JdQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2nHQCVImv1hdH_5M1sUfiC7JdQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 08:06:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172989, serialNumber=AB69C74025489AFD61747FF9335B147E20BB25D4 Validity Not Before: Mar 27 08:06:52 2026 GMT Not After : Apr 3 08:06:52 2026 GMT Subject: CN=69c63a9c-e5a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:98:52:1d:04:aa:fa:dd:c5:e6:52:e9:3a:c1: 9d:d6:7d:91:c0:cf:1e:1c:67:cb:c3:d3:e8:74:8e: 19:68:fa:c1:76:b8:f4:2e:21:e5:7f:e6:c0:15:85: bf:10:e6:c7:bc:75:f2:24:5a:a0:3d:90:0d:df:15: 5e:28:13:2b:2d:d6:e3:76:67:26:06:da:c8:48:e0: 73:55:f0:4b:96:a1:b3:03:c6:7d:30:25:8b:c4:be: e1:86:18:00:d3:3d:f1:dd:56:19:a5:0b:36:52:05: a2:bd:41:30:70:c2:89:d1:9e:ae:87:e5:0a:94:9d: 75:85:13:51:30:a3:ab:c9:bc:ba:2e:50:08:89:9c: 0d:fb:25:26:6e:05:e4:6e:7f:59:c2:3f:08:e2:86: a8:ee:6e:cd:c8:73:69:19:ca:0c:37:f1:ec:09:4b: cb:a9:64:02:39:b6:54:ea:95:0c:8d:0c:15:55:74: 8c:5d:97:a5:c2:f4:f6:11:19:9e:97:7f:30:eb:3c: b3:70:06:74:03:c8:93:4f:9a:9a:3b:13:fa:67:4a: e4:3d:0e:02:27:84:ad:f5:5d:cf:a4:47:d0:26:28: 98:dc:06:86:28:ec:c9:b5:a1:aa:4b:4a:e3:b3:e2: 69:09:4e:69:e2:c9:dc:02:3c:65:20:12:e3:9e:c8: f0:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:DF:15:1F:77:C0:7A:D5:AE:87:75:D5:4F:A3:AD:39:0A:54:A8:C8 X509v3 Authority Key Identifier: keyid:AB:69:C7:40:25:48:9A:FD:61:74:7F:F9:33:5B:14:7E:20:BB:25:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172989/EFFDD714D6D511F0B06384B581D3641D/q2nHQCVImv1hdH_5M1sUfiC7JdQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2nHQCVImv1hdH_5M1sUfiC7JdQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172989/EFFDD714D6D511F0B06384B581D3641D/q2nHQCVImv1hdH_5M1sUfiC7JdQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:cb:b0:df:95:34:34:49:43:be:25:28:1e:d2:2d:b9:f9:85: ed:3d:7f:cb:ec:fb:0d:dd:7b:70:99:3e:e8:9f:31:34:4b:a2: 62:a0:ee:08:c9:99:30:a1:91:9b:47:7d:3c:1e:57:c7:b2:0b: 7e:6e:27:81:07:63:5f:82:77:03:e0:76:49:69:e6:14:c1:a1: 7d:07:95:d3:fa:ce:73:2e:28:b8:9d:ad:3e:5f:29:0d:dc:92: 77:ba:ad:3e:81:42:68:b8:cf:bb:8b:8f:f0:e5:29:5f:fa:92: 78:af:63:d2:ae:af:eb:0e:f6:74:2b:b1:6d:41:33:6f:67:5a: b1:3b:1a:1e:64:ad:ed:fc:cd:e0:d3:83:3a:f9:93:d5:e5:bc: 89:ce:bd:ee:e0:b6:83:46:3a:81:ee:63:4d:0a:5c:ce:a2:60: ac:e2:2c:20:da:dd:8c:e4:09:66:57:a9:59:9b:06:3a:81:61: c3:c6:80:97:67:d4:21:73:40:3d:9d:1f:b8:a2:cd:97:36:27: b1:cb:0e:13:fa:95:79:7f:cc:c2:97:e1:a8:15:f9:43:97:ca: 9e:53:57:7f:74:6b:d5:58:e9:70:c7:4b:de:ca:08:d4:31:40: 0f:12:dc:ca:11:4b:af:fc:6a:d5:6d:15:3c:0c:55:7d:22:bc: 92:3d:27:37 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 Mjk4OTExMC8GA1UEBRMoQUI2OUM3NDAyNTQ4OUFGRDYxNzQ3RkY5MzM1QjE0N0Uy MEJCMjVENDAeFw0yNjAzMjcwODA2NTJaFw0yNjA0MDMwODA2NTJaMBgxFjAUBgNV BAMTDTY5YzYzYTljLWU1YTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3mFIdBKr63cXmUuk6wZ3WfZHAzx4cZ8vD0+h0jhlo+sF2uPQuIeV/5sAVhb8Q 5se8dfIkWqA9kA3fFV4oEyst1uN2ZyYG2shI4HNV8EuWobMDxn0wJYvEvuGGGADT PfHdVhmlCzZSBaK9QTBwwonRnq6H5QqUnXWFE1Ewo6vJvLouUAiJnA37JSZuBeRu f1nCPwjihqjubs3Ic2kZygw38ewJS8upZAI5tlTqlQyNDBVVdIxdl6XC9PYRGZ6X fzDrPLNwBnQDyJNPmpo7E/pnSuQ9DgInhK31Xc+kR9AmKJjcBoYo7Mm1oapLSuOz 4mkJTmniydwCPGUgEuOeyPB7AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUJ98VH3fA etWuh3XVT6OtOQpUqMgwHwYDVR0jBBgwFoAUq2nHQCVImv1hdH/5M1sUfiC7JdQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcyOTg5L0VGRkRENzE0RDZE NTExRjBCMDYzODRCNTgxRDM2NDFEL3EybkhRQ1ZJbXYxaGRIXzVNMXNVZmlDN0pk US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcTJuSFFDVkltdjFoZEhfNU0xc1VmaUM3SmRRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcy OTg5L0VGRkRENzE0RDZENTExRjBCMDYzODRCNTgxRDM2NDFEL3EybkhRQ1ZJbXYx aGRIXzVNMXNVZmlDN0pkUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBHy7DflTQ0SUO+JSge0i25+YXtPX/L7PsN3XtwmT7onzE0S6JioO4IyZkwoZGb R308HlfHsgt+bieBB2NfgncD4HZJaeYUwaF9B5XT+s5zLii4na0+XykN3JJ3uq0+ gUJouM+7i4/w5Slf+pJ4r2PSrq/rDvZ0K7FtQTNvZ1qxOxoeZK3t/M3g04M6+ZPV 5byJzr3u4LaDRjqB7mNNClzOomCs4iwg2t2M5AlmV6lZmwY6gWHDxoCXZ9Qhc0A9 nR+4os2XNiexyw4T+pV5f8zCl+GoFflDl8qeU1d/dGvVWOlwx0veygjUMUAPEtzK EUuv/GrVbRU8DFV9IrySPSc3 -----END CERTIFICATE-----Generated at Sat Mar 28 10:42:32 2026 by rpki-client