$ rpki-client -vvf rpki.apnic.net/member_repository/A9174FE8/322AAB4CCC4C11F080480B40C4F9AE02/qEozZepSO9pPIzph5Qd_MRjWP3g.mft File: qEozZepSO9pPIzph5Qd_MRjWP3g.mft (raw, json) Hash identifier: VrVNRdNCElauunL+ICLxLUnjjZiCQieB5imOyS25aOs= Subject key identifier: DA:98:A5:53:79:0A:43:A3:91:96:4B:54:BE:A0:AC:01:F0:F1:52:CE Authority key identifier: A8:4A:33:65:EA:52:3B:DA:4F:23:3A:61:E5:07:7F:31:18:D6:3F:78 Certificate issuer: /CN=A9174FE8/serialNumber=A84A3365EA523BDA4F233A61E5077F3118D63F78 Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qEozZepSO9pPIzph5Qd_MRjWP3g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174FE8/322AAB4CCC4C11F080480B40C4F9AE02/qEozZepSO9pPIzph5Qd_MRjWP3g.mft Manifest number: 40 Signing time: Fri 27 Mar 2026 08:00:38 +0000 Manifest this update: Fri 27 Mar 2026 08:00:38 +0000 Manifest next update: Fri 03 Apr 2026 08:00:38 +0000 Files and hashes: 1: qEozZepSO9pPIzph5Qd_MRjWP3g.crl (hash: ElydcH1j72Y5faotp9BYiZm53L3YmKOnU+Llp1/6GBc=) 2: F5B1147ACC4C11F0B2EE7944C4F9AE02.roa (hash: rthVEOzl3I+Nrh1/x+VYyq3xjzoN6lgAA50smRMa7oE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174FE8/322AAB4CCC4C11F080480B40C4F9AE02/qEozZepSO9pPIzph5Qd_MRjWP3g.crl rsync://rpki.apnic.net/member_repository/A9174FE8/322AAB4CCC4C11F080480B40C4F9AE02/qEozZepSO9pPIzph5Qd_MRjWP3g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qEozZepSO9pPIzph5Qd_MRjWP3g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 08:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174FE8, serialNumber=A84A3365EA523BDA4F233A61E5077F3118D63F78 Validity Not Before: Mar 27 08:00:38 2026 GMT Not After : Apr 3 08:00:38 2026 GMT Subject: CN=69c63926-e867 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ff:98:b4:df:c7:44:10:8a:34:75:7b:e6:cd: 42:ff:dd:27:22:73:0c:42:75:4a:d7:51:22:02:41: b8:1e:5e:74:10:02:e2:20:27:b0:f5:71:ab:e0:df: 73:13:3d:91:ce:86:60:ad:c9:c8:e0:fb:e4:7c:62: f6:b4:d8:4b:f8:a9:7f:d5:e2:e8:9a:54:36:98:51: 84:12:ff:f3:88:15:df:c5:3d:2f:96:5d:9a:ed:79: 6c:82:f2:f6:14:34:09:46:bd:80:20:8c:05:0b:1a: 1f:d9:b0:e1:52:f8:16:9b:40:d5:e6:56:00:ff:41: 1d:a9:20:d3:47:ae:9c:06:86:48:77:db:14:a5:bf: d6:1e:a4:47:31:0e:86:f0:c8:27:0e:bf:2a:50:62: c4:28:ac:4e:44:70:98:20:6e:18:be:dc:02:62:a7: af:0e:04:1e:35:85:9f:1f:08:15:be:4e:a9:a0:50: ea:01:98:53:9c:eb:c9:02:9d:3a:d7:b4:56:72:cd: 5e:0a:77:24:b5:27:f5:ae:30:30:b3:e2:2a:2e:a3: 50:14:9f:35:61:ec:5f:7a:11:03:9c:79:8f:1f:24: ec:44:12:19:eb:95:0a:2d:ac:cc:a1:c9:53:d3:cb: 9d:cb:38:9c:b2:af:1e:66:74:9d:4c:bc:39:a8:28: e9:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:98:A5:53:79:0A:43:A3:91:96:4B:54:BE:A0:AC:01:F0:F1:52:CE X509v3 Authority Key Identifier: keyid:A8:4A:33:65:EA:52:3B:DA:4F:23:3A:61:E5:07:7F:31:18:D6:3F:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174FE8/322AAB4CCC4C11F080480B40C4F9AE02/qEozZepSO9pPIzph5Qd_MRjWP3g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qEozZepSO9pPIzph5Qd_MRjWP3g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174FE8/322AAB4CCC4C11F080480B40C4F9AE02/qEozZepSO9pPIzph5Qd_MRjWP3g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:13:62:80:34:33:47:98:87:f8:64:d8:64:df:57:c0:52:1c: 08:58:ee:b9:61:a5:79:65:c4:be:1a:b4:74:c9:82:7e:bb:ef: 5b:d9:e2:c1:ed:63:1d:d0:15:a5:98:01:24:a0:3b:e0:ee:87: 56:90:74:4a:c2:98:65:60:c9:dc:e2:23:87:f3:9c:10:3f:84: 1c:4d:17:ce:e2:55:27:55:0d:cf:84:bf:bb:d5:a3:a2:6d:6f: 92:d2:5e:26:22:5b:f5:7b:72:08:71:9c:14:83:bb:13:7f:a1: 46:08:d2:9f:18:98:4b:0a:b0:18:45:15:f6:de:33:fd:e7:a5: 08:dc:1f:4f:32:77:4b:82:ef:c9:52:74:6c:0a:14:11:ee:e4: f3:bf:9e:9c:5c:37:19:fb:83:dd:4b:30:a9:ab:b9:99:56:9a: da:48:17:11:cb:11:99:94:5e:6d:f9:32:56:79:bc:ed:27:cd: 25:3a:c0:d1:bc:ad:16:9d:54:3f:a1:1f:5e:25:e8:07:84:26: 5b:d4:5b:e5:61:ce:d2:22:f8:1c:f5:c3:52:3d:5a:9a:7d:10: da:fc:4f:e5:70:93:ad:aa:3b:e4:3c:e9:32:8e:bd:c9:73:e4: a0:b2:16:35:b3:3c:ff:6b:e6:e1:86:f6:c6:1c:11:16:06:33: ae:d1:b4:7c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NEZFODExMC8GA1UEBRMoQTg0QTMzNjVFQTUyM0JEQTRGMjMzQTYxRTUwNzdGMzEx OEQ2M0Y3ODAeFw0yNjAzMjcwODAwMzhaFw0yNjA0MDMwODAwMzhaMBgxFjAUBgNV BAMTDTY5YzYzOTI2LWU4NjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCi/5i038dEEIo0dXvmzUL/3ScicwxCdUrXUSICQbgeXnQQAuIgJ7D1cavg33MT PZHOhmCtycjg++R8Yva02Ev4qX/V4uiaVDaYUYQS//OIFd/FPS+WXZrteWyC8vYU NAlGvYAgjAULGh/ZsOFS+BabQNXmVgD/QR2pINNHrpwGhkh32xSlv9YepEcxDobw yCcOvypQYsQorE5EcJggbhi+3AJip68OBB41hZ8fCBW+TqmgUOoBmFOc68kCnTrX tFZyzV4KdyS1J/WuMDCz4iouo1AUnzVh7F96EQOceY8fJOxEEhnrlQotrMyhyVPT y53LOJyyrx5mdJ1MvDmoKOntAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU2pilU3kK Q6ORlktUvqCsAfDxUs4wHwYDVR0jBBgwFoAUqEozZepSO9pPIzph5Qd/MRjWP3gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc0RkU4LzMyMkFBQjRDQ0M0 QzExRjA4MDQ4MEI0MEM0RjlBRTAyL3FFb3paZXBTTzlwUEl6cGg1UWRfTVJqV1Az Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcUVvelplcFNPOXBQSXpwaDVRZF9NUmpXUDNnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc0 RkU4LzMyMkFBQjRDQ0M0QzExRjA4MDQ4MEI0MEM0RjlBRTAyL3FFb3paZXBTTzlw UEl6cGg1UWRfTVJqV1AzZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCqE2KANDNHmIf4ZNhk31fAUhwIWO65YaV5ZcS+GrR0yYJ+u+9b2eLB7WMd0BWl mAEkoDvg7odWkHRKwphlYMnc4iOH85wQP4QcTRfO4lUnVQ3PhL+71aOibW+S0l4m Ilv1e3IIcZwUg7sTf6FGCNKfGJhLCrAYRRX23jP956UI3B9PMndLgu/JUnRsChQR 7uTzv56cXDcZ+4PdSzCpq7mZVpraSBcRyxGZlF5t+TJWebztJ80lOsDRvK0WnVQ/ oR9eJegHhCZb1FvlYc7SIvgc9cNSPVqafRDa/E/lcJOtqjvkPOkyjr3Jc+SgshY1 szz/a+bhhvbGHBEWBjOu0bR8 -----END CERTIFICATE-----Generated at Sat Mar 28 10:27:55 2026 by rpki-client