$ rpki-client -vvf rpki.apnic.net/member_repository/A917C09A/B2966D9EEAD711F0B9CBFBE6646F56BC/Qe0RfxoN1CRX1JR491zcsoZTpx8.mft File: Qe0RfxoN1CRX1JR491zcsoZTpx8.mft (raw, json) Hash identifier: KRsUwbWPRK31BriN/PFZ5WYxv6RxF64cQ13WSm1wuUo= Subject key identifier: 1E:9D:A1:57:98:F7:71:2F:CA:8C:29:50:39:49:9E:A8:6B:52:F7:55 Authority key identifier: 41:ED:11:7F:1A:0D:D4:24:57:D4:94:78:F7:5C:DC:B2:86:53:A7:1F Certificate issuer: /CN=A917C09A/serialNumber=41ED117F1A0DD42457D49478F75CDCB28653A71F Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qe0RfxoN1CRX1JR491zcsoZTpx8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C09A/B2966D9EEAD711F0B9CBFBE6646F56BC/Qe0RfxoN1CRX1JR491zcsoZTpx8.mft Manifest number: 2C Signing time: Wed 25 Mar 2026 07:53:28 +0000 Manifest this update: Wed 25 Mar 2026 07:53:27 +0000 Manifest next update: Wed 01 Apr 2026 07:53:27 +0000 Files and hashes: 1: Qe0RfxoN1CRX1JR491zcsoZTpx8.crl (hash: BNrL5VLqxP9B8Sg5S7MCIW+p3x3QnVlFBiVybaWrVFg=) 2: 0C544A5EEAD811F0B5BDA80D656F56BC.roa (hash: CiRm4DIYsmYYVk9ph7+Qrr/TAwJAj6FY/60x7MRfKDY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C09A/B2966D9EEAD711F0B9CBFBE6646F56BC/Qe0RfxoN1CRX1JR491zcsoZTpx8.crl rsync://rpki.apnic.net/member_repository/A917C09A/B2966D9EEAD711F0B9CBFBE6646F56BC/Qe0RfxoN1CRX1JR491zcsoZTpx8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qe0RfxoN1CRX1JR491zcsoZTpx8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:53:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C09A, serialNumber=41ED117F1A0DD42457D49478F75CDCB28653A71F Validity Not Before: Mar 25 07:53:27 2026 GMT Not After : Apr 1 07:53:27 2026 GMT Subject: CN=69c39478-7e71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:89:36:08:58:41:0f:4e:ff:a8:cd:d2:82:d3: 74:ef:12:63:13:87:a0:17:18:0f:18:2d:86:3f:48: 2f:fd:0c:c3:59:f5:40:61:18:b2:4c:5b:28:75:d1: e6:6e:23:9b:55:11:65:d0:db:ea:21:f3:a2:7f:32: 47:2e:e0:a9:b1:cb:a9:04:7c:a0:17:14:01:f4:4c: 42:ed:8e:bc:8d:27:95:c7:d4:b7:9b:e0:d6:66:eb: a8:4e:b5:48:b4:94:84:de:cd:d0:42:b6:e5:b8:e5: 75:05:a7:9e:1f:b4:6e:22:9d:84:d2:c7:74:05:3f: 45:2c:cb:c7:8f:a3:36:56:0f:c6:d2:ca:48:d2:29: 7a:ee:ac:8b:b9:18:6e:ed:e7:5c:96:b3:5b:82:1f: 0a:04:8d:90:7c:58:ff:46:f4:a7:78:99:bc:b3:ae: 48:bc:13:53:d5:e3:4e:e8:82:55:1a:51:c7:72:3c: 69:eb:4d:55:ae:23:6a:1d:2b:54:92:ea:3b:f0:ce: 37:46:2a:93:17:e9:ae:a9:78:0d:da:fc:d6:d4:18: a7:46:87:16:35:12:32:24:87:bd:44:07:bd:8d:c0: 09:b4:de:23:a5:f0:90:3d:80:6e:f6:96:63:c9:45: 1b:e8:66:7c:81:4d:b7:8a:a0:2a:2d:f3:37:1b:aa: 3d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:9D:A1:57:98:F7:71:2F:CA:8C:29:50:39:49:9E:A8:6B:52:F7:55 X509v3 Authority Key Identifier: keyid:41:ED:11:7F:1A:0D:D4:24:57:D4:94:78:F7:5C:DC:B2:86:53:A7:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C09A/B2966D9EEAD711F0B9CBFBE6646F56BC/Qe0RfxoN1CRX1JR491zcsoZTpx8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qe0RfxoN1CRX1JR491zcsoZTpx8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C09A/B2966D9EEAD711F0B9CBFBE6646F56BC/Qe0RfxoN1CRX1JR491zcsoZTpx8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:1a:7f:40:11:c4:38:c5:42:ac:e0:bb:93:fb:81:ca:78:33: 15:91:b2:33:8d:a4:c2:94:27:26:dd:cc:67:80:48:57:53:fc: 89:5a:a6:32:1d:61:a4:e4:1a:b0:fc:09:b6:62:e3:ff:3c:78: 8c:da:ac:10:73:09:82:c8:37:0b:f6:8e:ff:32:ae:c1:a5:be: ec:fb:be:a5:c5:fc:81:6c:b5:0a:9b:98:27:9e:bc:a7:72:2b: ff:d0:fe:77:88:e1:a4:80:ef:8d:80:79:b9:c0:dd:0e:26:d7: 10:78:15:77:6e:94:0d:07:c9:cd:76:76:6a:99:56:67:c0:9a: dc:65:01:9f:47:de:9b:61:a4:35:2d:31:90:0d:bb:02:01:d9: 7a:46:ff:ea:c7:92:ba:22:7a:fa:8b:16:cb:b9:bd:2c:aa:45: f6:51:2b:5a:f6:9c:06:af:57:ec:04:90:6e:44:0b:8d:5b:1e: 48:f3:b9:dd:02:d6:3b:96:23:31:48:bd:0e:a3:46:d4:56:71: bd:cf:0a:9b:d5:f3:c5:cd:8e:9c:6f:84:f7:04:75:c7:19:8b: cb:e2:78:05:31:6e:69:47:71:c3:09:43:49:09:ed:cd:5c:1c: 83:8e:f0:9e:6e:53:c6:a2:06:60:28:d9:cd:26:06:8d:14:64: f5:b3:d8:30 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QzA5QTExMC8GA1UEBRMoNDFFRDExN0YxQTBERDQyNDU3RDQ5NDc4Rjc1Q0RDQjI4 NjUzQTcxRjAeFw0yNjAzMjUwNzUzMjdaFw0yNjA0MDEwNzUzMjdaMBgxFjAUBgNV BAMTDTY5YzM5NDc4LTdlNzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCaiTYIWEEPTv+ozdKC03TvEmMTh6AXGA8YLYY/SC/9DMNZ9UBhGLJMWyh10eZu I5tVEWXQ2+oh86J/Mkcu4Kmxy6kEfKAXFAH0TELtjryNJ5XH1Leb4NZm66hOtUi0 lITezdBCtuW45XUFp54ftG4inYTSx3QFP0Usy8ePozZWD8bSykjSKXrurIu5GG7t 51yWs1uCHwoEjZB8WP9G9Kd4mbyzrki8E1PV407oglUaUcdyPGnrTVWuI2odK1SS 6jvwzjdGKpMX6a6peA3a/NbUGKdGhxY1EjIkh71EB72NwAm03iOl8JA9gG72lmPJ RRvoZnyBTbeKoCot8zcbqj3pAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUHp2hV5j3 cS/KjClQOUmeqGtS91UwHwYDVR0jBBgwFoAUQe0RfxoN1CRX1JR491zcsoZTpx8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdDMDlBL0IyOTY2RDlFRUFE NzExRjBCOUNCRkJFNjY0NkY1NkJDL1FlMFJmeG9OMUNSWDFKUjQ5MXpjc29aVHB4 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUWUwUmZ4b04xQ1JYMUpSNDkxemNzb1pUcHg4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdD MDlBL0IyOTY2RDlFRUFENzExRjBCOUNCRkJFNjY0NkY1NkJDL1FlMFJmeG9OMUNS WDFKUjQ5MXpjc29aVHB4OC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCZGn9AEcQ4xUKs4LuT+4HKeDMVkbIzjaTClCcm3cxngEhXU/yJWqYyHWGk5Bqw /Am2YuP/PHiM2qwQcwmCyDcL9o7/Mq7Bpb7s+76lxfyBbLUKm5gnnrynciv/0P53 iOGkgO+NgHm5wN0OJtcQeBV3bpQNB8nNdnZqmVZnwJrcZQGfR96bYaQ1LTGQDbsC Adl6Rv/qx5K6Inr6ixbLub0sqkX2USta9pwGr1fsBJBuRAuNWx5I87ndAtY7liMx SL0Oo0bUVnG9zwqb1fPFzY6cb4T3BHXHGYvL4ngFMW5pR3HDCUNJCe3NXByDjvCe blPGogZgKNnNJgaNFGT1s9gw -----END CERTIFICATE-----Generated at Thu Mar 26 13:00:56 2026 by rpki-client