$ rpki-client -vvf rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft File: qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft (raw, json) Hash identifier: t/hCumTnJsnI9pt9HB7qrpWtGylLucwtGUOeJX5cg50= Subject key identifier: 8A:8D:B1:30:2D:89:AB:55:9A:CB:F2:12:CF:82:26:86:0F:D8:8E:D8 Authority key identifier: A9:BC:CA:6D:34:D3:D5:F1:EF:F8:BB:E7:83:D4:97:73:81:3E:5E:F8 Certificate issuer: /CN=A9186E8A/serialNumber=A9BCCA6D34D3D5F1EFF8BBE783D49773813E5EF8 Certificate serial: 088A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft Manifest number: 083C Signing time: Wed 25 Mar 2026 02:26:19 +0000 Manifest this update: Wed 25 Mar 2026 02:26:19 +0000 Manifest next update: Wed 01 Apr 2026 02:26:19 +0000 Files and hashes: 1: qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl (hash: gi9jb1AdRkh6p+2PGh33d5AKGRyfyNzK7PHsSW2V/r8=) 2: 66C1BA862FBB11EB9B861059C4F9AE02.roa (hash: azCvE0MXDPIZCtICB6ofLTQq6LREywUXev2jJIJ9EIU=) 3: 8554A0A86A8A11F0BBF66881C4F9AE02.roa (hash: jG2eCQQta7MNjU1JK1KYAfsYHPf3A4prUFHK/JzlfnI=) 4: 26E184C2B56D11F0939EAE46C4F9AE02.roa (hash: azCbrnSmOuKDp+iW9o/dWdbmL/D2BIUAZALDZgMZy1k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2186 (0x88a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186E8A, serialNumber=A9BCCA6D34D3D5F1EFF8BBE783D49773813E5EF8 Validity Not Before: Mar 25 02:26:19 2026 GMT Not After : Apr 1 02:26:19 2026 GMT Subject: CN=69c347cb-df54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:3b:09:a6:c4:1f:98:53:01:0c:e6:d3:73:2e: 9d:a8:b9:2d:b4:3d:43:03:97:47:c1:32:9a:9e:39: 75:3e:8a:54:b0:71:58:82:43:70:ea:87:5e:a1:95: d5:04:72:09:c2:52:e1:b8:36:cf:47:41:47:db:41: 19:fc:1d:ce:74:6e:9f:2c:41:6f:4d:a9:09:79:14: 36:58:99:64:ee:e6:18:9e:10:b6:31:be:79:f1:87: 72:ba:c4:17:84:fb:21:4e:f8:81:32:89:9e:76:53: ac:88:a6:2e:9e:f9:6c:f9:8b:b6:a7:14:0f:d2:75: f3:8d:9a:f5:a3:9d:72:a6:0e:c2:87:eb:44:24:60: 86:fd:ec:6a:09:9c:84:e2:e2:76:38:66:30:f0:42: da:e9:ea:03:dc:70:f0:1b:42:1b:61:fe:f8:94:c4: 07:ba:3e:40:09:84:78:58:f2:7c:c4:17:b3:dd:a9: f1:69:d8:69:42:f0:fd:e5:e1:8f:9a:cb:84:b0:15: b0:70:44:71:66:ed:22:40:f4:98:20:68:c3:74:a5: c6:42:19:c7:b5:b5:20:1d:91:0f:de:58:ea:5a:bc: 8c:c9:11:e2:3f:c8:25:65:9e:4e:4f:75:e8:90:47: 9f:b9:ee:2e:56:ff:73:b8:65:bb:6a:e2:23:02:ac: a0:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:8D:B1:30:2D:89:AB:55:9A:CB:F2:12:CF:82:26:86:0F:D8:8E:D8 X509v3 Authority Key Identifier: keyid:A9:BC:CA:6D:34:D3:D5:F1:EF:F8:BB:E7:83:D4:97:73:81:3E:5E:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:9a:03:78:1b:ea:10:66:61:b2:74:87:fd:6d:22:76:5b:8d: 62:24:54:46:9b:02:6d:38:60:0e:de:3c:60:e6:fa:d8:1c:3e: 01:29:5b:e5:57:67:b7:1d:89:0d:28:56:db:64:bf:8c:27:09: 3f:a9:06:c5:dd:5b:53:26:f4:5c:fc:00:f0:2d:21:d2:62:9d: d4:6d:79:f0:00:e1:76:ff:0d:db:dc:74:f0:e5:31:df:6c:0a: da:71:2f:14:da:2a:70:9d:4a:a1:89:18:d3:8f:0a:5e:50:b6: e1:d8:3e:36:52:64:6d:c5:5b:34:a7:1d:94:ff:fb:b2:2e:8f: 1d:2a:0d:87:d6:08:01:0b:75:ca:1c:cb:f8:1b:69:df:94:7f: cb:47:b4:fb:eb:a1:95:45:ef:c5:42:24:4f:e7:d9:6a:c2:f1: d6:b5:43:9f:ce:d7:2d:af:3f:a0:cb:ae:c3:15:45:f5:0a:56: 98:51:3f:45:7e:90:db:73:c8:43:de:09:f5:c5:15:eb:af:8a: bf:a1:bd:09:4c:0b:08:41:3e:c1:d7:70:bf:79:93:a5:fe:9b: 57:d2:4d:5d:4b:64:8a:a7:be:90:a2:5b:da:f3:6d:45:fb:b1: 64:92:dc:18:a8:3a:73:33:91:df:bc:d3:da:a7:2a:9f:ef:09: 85:b5:66:69 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZFOEExMTAvBgNVBAUTKEE5QkNDQTZEMzREM0Q1RjFFRkY4QkJFNzgzRDQ5Nzcz ODEzRTVFRjgwHhcNMjYwMzI1MDIyNjE5WhcNMjYwNDAxMDIyNjE5WjAYMRYwFAYD VQQDEw02OWMzNDdjYi1kZjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1jsJpsQfmFMBDObTcy6dqLkttD1DA5dHwTKanjl1PopUsHFYgkNw6odeoZXV BHIJwlLhuDbPR0FH20EZ/B3OdG6fLEFvTakJeRQ2WJlk7uYYnhC2Mb558YdyusQX hPshTviBMomedlOsiKYunvls+Yu2pxQP0nXzjZr1o51ypg7Ch+tEJGCG/exqCZyE 4uJ2OGYw8ELa6eoD3HDwG0IbYf74lMQHuj5ACYR4WPJ8xBez3anxadhpQvD95eGP msuEsBWwcERxZu0iQPSYIGjDdKXGQhnHtbUgHZEP3ljqWryMyRHiP8glZZ5OT3Xo kEefue4uVv9zuGW7auIjAqygUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIqNsTAt iatVmsvyEs+CJoYP2I7YMB8GA1UdIwQYMBaAFKm8ym0009Xx7/i754PUl3OBPl74 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkU4QS8zQjQ3NkU3QzJE RkYxMUVCODY4QTkxMzVDNEY5QUUwMi9xYnpLYlRUVDFmSHYtTHZuZzlTWGM0RS1Y dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FiektiVFRUMWZIdi1Mdm5nOVNYYzRFLVh2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkU4QS8zQjQ3NkU3QzJERkYxMUVCODY4QTkxMzVDNEY5QUUwMi9xYnpLYlRUVDFm SHYtTHZuZzlTWGM0RS1YdmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAzJoDeBvqEGZhsnSH/W0idluNYiRURpsCbThgDt48YOb62Bw+ASlb5Vdntx2J DShW22S/jCcJP6kGxd1bUyb0XPwA8C0h0mKd1G158ADhdv8N29x08OUx32wK2nEv FNoqcJ1KoYkY048KXlC24dg+NlJkbcVbNKcdlP/7si6PHSoNh9YIAQt1yhzL+Btp 35R/y0e0++uhlUXvxUIkT+fZasLx1rVDn87XLa8/oMuuwxVF9QpWmFE/RX6Q23PI Q94J9cUV66+Kv6G9CUwLCEE+wddwv3mTpf6bV9JNXUtkiqe+kKJb2vNtRfuxZJLc GKg6czOR37zT2qcqn+8JhbVmaQ== -----END CERTIFICATE-----Generated at Thu Mar 26 13:06:31 2026 by rpki-client