$ rpki-client -vvf rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft File: qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft (raw, json) Hash identifier: x/pXigBvs1QdTRPyP0yECiw/TTzQQJEadpwOPXRO8lQ= Subject key identifier: F6:86:A7:56:90:3C:60:55:4F:60:47:8C:92:39:E0:B3:F5:12:F0:EF Authority key identifier: A8:56:8F:52:79:3C:C3:48:57:85:0C:4F:2E:D3:8A:E0:B1:89:70:F8 Certificate issuer: /CN=A9184324/serialNumber=A8568F52793CC34857850C4F2ED38AE0B18970F8 Certificate serial: 0136 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qFaPUnk8w0hXhQxPLtOK4LGJcPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft Manifest number: 0121 Signing time: Wed 25 Mar 2026 05:00:21 +0000 Manifest this update: Wed 25 Mar 2026 05:00:21 +0000 Manifest next update: Wed 01 Apr 2026 05:00:21 +0000 Files and hashes: 1: qFaPUnk8w0hXhQxPLtOK4LGJcPg.crl (hash: M0kNvbptBm9izxsjLVVgmd2XoF9P+ZDqT57SKTb0DDY=) 2: 49AD69BAB97A11F082553162C4F9AE02.roa (hash: u+AOQs7swlbtyTKzbGqH0JVVjQoXfbRTN0aGMPHqYwM=) 3: 48C56FF2B97A11F082553162C4F9AE02.roa (hash: OtWdgE0NfWAtdp3sq2GPul7fJB1+qypIA/v5t4925Qw=) 4: 5C8F63FE7C4911EF81434A2DC4F9AE02.roa (hash: FTfGtoGrUVwrnxaveaM8/TkkP8CeSjEWf8+UAR8ONdk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.crl rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qFaPUnk8w0hXhQxPLtOK4LGJcPg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 310 (0x136) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184324, serialNumber=A8568F52793CC34857850C4F2ED38AE0B18970F8 Validity Not Before: Mar 25 05:00:21 2026 GMT Not After : Apr 1 05:00:21 2026 GMT Subject: CN=69c36be5-5b96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:97:5f:7b:78:2a:6a:7c:b5:d7:9a:c6:a4:e4: 1d:ac:cb:3f:77:06:ed:c1:3c:65:f4:26:cf:8b:75: e3:07:1f:b7:03:d1:ef:f8:fe:19:a5:a0:27:7c:fc: a3:ee:b3:a0:f3:c0:89:ac:f9:26:71:bf:c0:29:c4: a0:6a:0e:e1:29:c3:ad:7d:80:76:94:74:7b:f7:de: 0d:55:b0:c2:22:c8:85:ba:a2:14:73:67:05:66:05: dd:47:7c:33:03:12:d8:b4:94:e2:be:37:d6:89:6b: ae:11:3e:ed:82:1e:53:c7:aa:bd:e0:a6:cf:0f:d5: 35:22:2b:9f:89:bc:b1:f7:4e:a9:f3:7b:bb:fb:a7: 95:72:23:d3:a5:25:19:37:72:bc:d9:17:a4:26:1c: 3b:e8:7f:19:74:b0:93:4a:75:53:56:90:35:b5:e3: 3a:f4:00:d7:f2:ea:7b:07:ba:25:5c:7b:f3:e3:b3: 65:8a:0a:d2:ba:86:de:48:67:d6:8a:93:e7:df:c0: c1:ee:3c:02:08:8c:1a:42:9e:5e:33:2b:ef:4f:da: b9:ff:42:7a:4a:e2:f6:01:02:c9:f6:18:a5:09:57: c1:4b:7e:68:37:85:44:b1:be:19:76:f0:dc:eb:16: 77:de:83:19:ad:5e:07:3a:24:a9:67:0f:fa:75:dc: a9:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:86:A7:56:90:3C:60:55:4F:60:47:8C:92:39:E0:B3:F5:12:F0:EF X509v3 Authority Key Identifier: keyid:A8:56:8F:52:79:3C:C3:48:57:85:0C:4F:2E:D3:8A:E0:B1:89:70:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qFaPUnk8w0hXhQxPLtOK4LGJcPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:1e:9e:92:46:f4:a6:ff:b6:38:29:17:f3:05:6c:1f:d6:ff: 01:5e:62:1f:8f:a5:a9:66:45:fb:9e:da:46:71:25:95:cf:4d: b7:37:b0:fd:cf:27:91:2e:d8:a7:d8:7c:39:76:5a:b0:70:d0: b8:21:fc:d2:e4:ec:39:20:41:40:2d:d6:ac:a5:81:00:81:1e: af:4d:0c:f1:41:3c:13:fd:13:0f:6b:42:2e:79:03:c3:ee:b1: bd:26:ac:28:81:51:24:7c:f0:82:0c:40:fe:34:0f:82:c1:7b: 80:db:a0:45:44:46:de:9e:9b:16:40:8e:6d:59:00:6c:18:a7: ae:46:4c:99:c9:46:00:73:37:24:c0:7e:72:b4:ed:77:45:f6: 8a:75:47:c5:d9:5e:3c:fc:03:22:45:d2:27:53:5a:eb:b1:e1: 6b:28:77:bb:f8:ed:be:41:ff:1a:dd:0c:4d:2c:f1:f4:52:35: ae:a9:d5:3a:b4:41:fa:64:1e:80:aa:9e:d9:9c:f1:27:fc:e6: e9:6d:50:32:70:a6:37:88:95:b9:ae:ae:0f:aa:d9:a6:54:bd: 22:78:16:80:9d:8c:66:0a:82:e1:47:55:ec:1e:07:0e:ac:0f: c0:a5:6b:51:f0:bd:ae:2c:ff:d1:78:3f:4a:cd:6f:a3:1b:4f: 47:8f:70:76 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQzMjQxMTAvBgNVBAUTKEE4NTY4RjUyNzkzQ0MzNDg1Nzg1MEM0RjJFRDM4QUUw QjE4OTcwRjgwHhcNMjYwMzI1MDUwMDIxWhcNMjYwNDAxMDUwMDIxWjAYMRYwFAYD VQQDEw02OWMzNmJlNS01Yjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp5dfe3gqany115rGpOQdrMs/dwbtwTxl9CbPi3XjBx+3A9Hv+P4ZpaAnfPyj 7rOg88CJrPkmcb/AKcSgag7hKcOtfYB2lHR7994NVbDCIsiFuqIUc2cFZgXdR3wz AxLYtJTivjfWiWuuET7tgh5Tx6q94KbPD9U1Iiufibyx906p83u7+6eVciPTpSUZ N3K82RekJhw76H8ZdLCTSnVTVpA1teM69ADX8up7B7olXHvz47NligrSuobeSGfW ipPn38DB7jwCCIwaQp5eMyvvT9q5/0J6SuL2AQLJ9hilCVfBS35oN4VEsb4ZdvDc 6xZ33oMZrV4HOiSpZw/6ddypnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPaGp1aQ PGBVT2BHjJI54LP1EvDvMB8GA1UdIwQYMBaAFKhWj1J5PMNIV4UMTy7TiuCxiXD4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDMyNC9FQUE5Q0NENDdC MUMxMUVGQUMxMDk0MTZDNEY5QUUwMi9xRmFQVW5rOHcwaFhoUXhQTHRPSzRMR0pj UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3FGYVBVbms4dzBoWGhReFBMdE9LNExHSmNQZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDMyNC9FQUE5Q0NENDdCMUMxMUVGQUMxMDk0MTZDNEY5QUUwMi9xRmFQVW5rOHcw aFhoUXhQTHRPSzRMR0pjUGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAox6ekkb0pv+2OCkX8wVsH9b/AV5iH4+lqWZF+57aRnEllc9Ntzew/c8nkS7Y p9h8OXZasHDQuCH80uTsOSBBQC3WrKWBAIEer00M8UE8E/0TD2tCLnkDw+6xvSas KIFRJHzwggxA/jQPgsF7gNugRURG3p6bFkCObVkAbBinrkZMmclGAHM3JMB+crTt d0X2inVHxdlePPwDIkXSJ1Na67Hhayh3u/jtvkH/Gt0MTSzx9FI1rqnVOrRB+mQe gKqe2ZzxJ/zm6W1QMnCmN4iVua6uD6rZplS9IngWgJ2MZgqC4UdV7B4HDqwPwKVr UfC9riz/0Xg/Ss1voxtPR49wdg== -----END CERTIFICATE-----Generated at Thu Mar 26 15:21:29 2026 by rpki-client