$ rpki-client -vvf rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft File: Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft (raw, json) Hash identifier: Z1D9/3Kp0GP+wnbGSzj0nJEQ0Sr+q6laCVz4L4NmnZo= Subject key identifier: EA:0F:35:B6:31:FA:37:34:E1:A5:2D:F3:03:62:B0:5A:A7:39:BC:E1 Authority key identifier: 43:F7:42:3F:93:D6:BA:09:69:40:59:FB:23:DE:F8:52:8D:26:49:9D Certificate issuer: /CN=A9186D9F/serialNumber=43F7423F93D6BA09694059FB23DEF8528D26499D Certificate serial: 015A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q_dCP5PWuglpQFn7I974Uo0mSZ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft Manifest number: 014D Signing time: Wed 25 Mar 2026 04:22:47 +0000 Manifest this update: Wed 25 Mar 2026 04:22:47 +0000 Manifest next update: Wed 01 Apr 2026 04:22:47 +0000 Files and hashes: 1: Q_dCP5PWuglpQFn7I974Uo0mSZ0.crl (hash: t84BhDUbfPedgXcyLvMYv/3fnUXXsHjlbz6AlNvvfOU=) 2: A63A2DFA2F5411EF9A12027FC4F9AE02.roa (hash: vZ2S+w3GcPa+h6MU9zMiF5RlRO5/+gC76nWMxy6HcwM=) 3: 17EA0C7A38DF11EF8EEDB25EC4F9AE02.roa (hash: qO2Q3Q5zR4BZKw3pBS7JR4NiTCN8t4Ujvg2GOjsbNkA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.crl rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q_dCP5PWuglpQFn7I974Uo0mSZ0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:22:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 346 (0x15a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186D9F, serialNumber=43F7423F93D6BA09694059FB23DEF8528D26499D Validity Not Before: Mar 25 04:22:47 2026 GMT Not After : Apr 1 04:22:47 2026 GMT Subject: CN=69c36317-2f14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:40:09:78:ac:4b:1f:13:2c:d9:50:ce:88:d2: 6f:4d:23:7e:1b:b1:2b:1f:68:60:d8:84:78:99:2a: ab:f5:97:60:f0:cc:b8:34:81:b6:f3:73:57:91:47: 0e:3a:a7:92:71:87:b5:bb:54:ed:2f:34:05:0a:c4: 67:47:6a:ba:1c:d3:f3:ba:ed:a6:26:de:fb:da:af: a1:b6:88:49:0e:97:26:73:65:3d:07:38:68:db:2a: db:a6:3c:40:b6:4d:5a:7e:ea:dd:81:fc:f6:16:c0: 8f:06:e2:5b:ae:bb:4f:d0:a7:82:00:d0:9c:e2:46: cb:e7:d4:23:48:8e:f0:10:39:f0:d8:c8:af:cb:4c: 4f:ff:43:a9:c1:25:b7:bb:44:f4:e8:ad:08:bb:85: 87:4d:76:c5:95:71:8a:84:0b:ea:d0:fe:dc:f5:70: 61:dc:77:75:22:d2:8b:7e:76:36:71:07:a4:ee:57: 4c:cb:c2:9d:b0:ac:03:7f:44:fb:bb:90:cd:c6:e3: c6:ca:b7:3c:e7:54:9a:c4:ef:f6:e8:db:30:1c:87: 6b:28:d8:53:2d:5a:58:52:56:e0:c1:b7:68:17:f7: 8c:c4:89:a5:d3:0e:7e:cb:d0:76:8b:00:b8:d1:3e: 48:a1:e2:5b:a9:4b:f5:55:93:df:da:de:96:16:2b: cd:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:0F:35:B6:31:FA:37:34:E1:A5:2D:F3:03:62:B0:5A:A7:39:BC:E1 X509v3 Authority Key Identifier: keyid:43:F7:42:3F:93:D6:BA:09:69:40:59:FB:23:DE:F8:52:8D:26:49:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q_dCP5PWuglpQFn7I974Uo0mSZ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:00:dc:a7:6c:74:d4:b7:76:c3:c1:58:c1:43:f2:d4:96:27: 50:00:cc:c0:e1:9e:34:fe:d8:4c:5c:c9:f1:fa:f4:46:d4:60: 9f:fd:56:e5:23:b0:48:d0:0d:61:61:54:86:60:cf:2d:9e:10: 9b:d9:4d:b4:2f:93:9e:5f:01:22:13:0d:34:ba:28:03:93:6b: 6c:2e:61:c5:67:9e:d5:37:36:88:23:1b:7f:81:8d:31:77:bc: 2a:53:02:ba:19:97:51:dd:77:b1:42:ae:f3:81:6b:33:88:eb: 4d:42:d1:10:3b:6b:87:31:ce:d6:80:5c:06:7c:d6:df:3b:b8: 87:45:9a:2f:37:a6:0c:7f:6c:4a:d8:f4:7f:c2:2a:eb:31:50: 79:94:81:53:06:4b:87:2c:88:e5:f1:16:2f:d3:aa:e9:c5:a9: 59:84:1c:32:84:3b:1c:79:49:62:14:b4:13:bb:dc:67:ea:28: ab:ad:65:b1:bc:00:94:4d:a3:0f:30:ae:bd:f0:59:18:c5:19: fa:92:8e:47:68:96:8c:b0:52:c0:74:ac:81:87:2d:ed:48:f2: 92:5c:83:66:7a:a7:5d:7d:1d:aa:0f:77:82:0e:87:34:e2:85: cb:b8:39:da:ad:97:0b:a3:5d:1d:aa:ce:96:c5:65:c8:2b:86: 91:9a:93:dc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZEOUYxMTAvBgNVBAUTKDQzRjc0MjNGOTNENkJBMDk2OTQwNTlGQjIzREVGODUy OEQyNjQ5OUQwHhcNMjYwMzI1MDQyMjQ3WhcNMjYwNDAxMDQyMjQ3WjAYMRYwFAYD VQQDEw02OWMzNjMxNy0yZjE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtkAJeKxLHxMs2VDOiNJvTSN+G7ErH2hg2IR4mSqr9Zdg8My4NIG283NXkUcO OqeScYe1u1TtLzQFCsRnR2q6HNPzuu2mJt772q+htohJDpcmc2U9Bzho2yrbpjxA tk1afurdgfz2FsCPBuJbrrtP0KeCANCc4kbL59QjSI7wEDnw2Mivy0xP/0OpwSW3 u0T06K0Iu4WHTXbFlXGKhAvq0P7c9XBh3Hd1ItKLfnY2cQek7ldMy8KdsKwDf0T7 u5DNxuPGyrc851SaxO/26NswHIdrKNhTLVpYUlbgwbdoF/eMxIml0w5+y9B2iwC4 0T5IoeJbqUv1VZPf2t6WFivNIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOoPNbYx +jc04aUt8wNisFqnObzhMB8GA1UdIwQYMBaAFEP3Qj+T1roJaUBZ+yPe+FKNJkmd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkQ5Ri9BOTM2RTQ0MDJF MDQxMUVGODZGMjlENzlDNEY5QUUwMi9RX2RDUDVQV3VnbHBRRm43STk3NFVvMG1T WjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FfZENQNVBXdWdscFFGbjdJOTc0VW8wbVNaMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkQ5Ri9BOTM2RTQ0MDJFMDQxMUVGODZGMjlENzlDNEY5QUUwMi9RX2RDUDVQV3Vn bHBRRm43STk3NFVvMG1TWjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJQDcp2x01Ld2w8FYwUPy1JYnUADMwOGeNP7YTFzJ8fr0RtRgn/1W5SOwSNAN YWFUhmDPLZ4Qm9lNtC+Tnl8BIhMNNLooA5NrbC5hxWee1Tc2iCMbf4GNMXe8KlMC uhmXUd13sUKu84FrM4jrTULREDtrhzHO1oBcBnzW3zu4h0WaLzemDH9sStj0f8Iq 6zFQeZSBUwZLhyyI5fEWL9Oq6cWpWYQcMoQ7HHlJYhS0E7vcZ+ooq61lsbwAlE2j DzCuvfBZGMUZ+pKOR2iWjLBSwHSsgYct7UjyklyDZnqnXX0dqg93gg6HNOKFy7g5 2q2XC6NdHarOlsVlyCuGkZqT3A== -----END CERTIFICATE-----Generated at Thu Mar 26 17:27:02 2026 by rpki-client