$ rpki-client -vvf rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.mft File: q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.mft (raw, json) Hash identifier: Stc+LvnFZ+nsEEyv2D3NexL4WuFezTr1rTSoN5YZgo4= Subject key identifier: 19:9F:30:9D:B3:B6:7F:E1:7E:A1:56:C9:80:53:BB:1C:11:F7:C8:2E Authority key identifier: AB:90:5D:DC:0A:FB:BD:15:49:F6:6E:FE:81:17:AE:15:00:0A:5E:0F Certificate issuer: /CN=A918B5FE/serialNumber=AB905DDC0AFBBD1549F66EFE8117AE15000A5E0F Certificate serial: 075C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.mft Manifest number: 0741 Signing time: Tue 24 Mar 2026 21:29:25 +0000 Manifest this update: Tue 24 Mar 2026 21:29:24 +0000 Manifest next update: Tue 31 Mar 2026 21:29:24 +0000 Files and hashes: 1: q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.crl (hash: euQvnAI/2iWtImsYgQEt2Lo8Q2G5Aqq0fNOD7YTk2tU=) 2: DAE15A7248F911EC9F04C439C4F9AE02.roa (hash: yll6EleWhluFREKT8NzETIGMZoAw4Is6iNKhftN9k0s=) 3: DCC969B048F911EC9F04C439C4F9AE02.roa (hash: ja+InHtGIgo82Asz/+ZVF2gnztVHMmOvkEj/+OfWSAc=) 4: DBB4BB6A48F911EC9F04C439C4F9AE02.roa (hash: TW3Yzr4nVCh6fw/bwk2DNXvw9C9/OVS9zcojLveOPlk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.crl rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 21:29:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1884 (0x75c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B5FE, serialNumber=AB905DDC0AFBBD1549F66EFE8117AE15000A5E0F Validity Not Before: Mar 24 21:29:24 2026 GMT Not After : Mar 31 21:29:24 2026 GMT Subject: CN=69c30235-e709 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a3:2d:0c:d9:1b:5a:dc:12:a7:0b:20:20:7e: fd:0e:76:3b:bb:4f:ee:56:c0:0d:47:b3:ef:1e:e8: b2:0c:63:26:e1:98:5e:80:1f:df:75:4e:4e:d8:40: 99:a7:99:9d:1b:c2:23:bc:f1:97:a3:f7:48:d0:76: 27:22:48:ea:e4:8e:4e:a1:ef:58:b1:47:ee:52:95: bf:95:3e:76:1e:c7:06:ab:a7:b0:50:e8:7e:7c:a7: e3:2e:d6:c2:49:28:6c:79:a7:57:dc:a9:88:3f:a0: cb:d5:31:39:da:7a:0c:87:48:81:ea:40:ca:d1:02: f7:7b:2e:27:90:1f:28:26:a8:5b:f0:34:e0:77:c1: 1a:9c:b1:74:16:ef:a5:c4:b9:77:6a:1d:ef:8c:a6: c5:dc:10:c6:db:15:6d:be:bb:51:54:2b:cc:31:0f: e8:19:b6:95:f4:78:90:40:8e:6e:a9:33:36:d9:29: 29:af:bf:70:71:26:51:03:7d:06:37:c9:8c:f3:3d: 5c:92:0c:9e:78:e6:1a:06:36:42:e8:60:b3:53:25: 54:7e:72:60:31:fb:78:be:03:98:bb:d5:55:c2:2c: 07:ed:c5:c1:e9:16:43:05:fa:07:60:59:9d:70:b4: 38:1a:fb:9d:dd:3a:04:7c:51:95:96:62:6d:f2:cf: d3:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:9F:30:9D:B3:B6:7F:E1:7E:A1:56:C9:80:53:BB:1C:11:F7:C8:2E X509v3 Authority Key Identifier: keyid:AB:90:5D:DC:0A:FB:BD:15:49:F6:6E:FE:81:17:AE:15:00:0A:5E:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:c1:6b:e3:b9:80:fc:19:13:40:2a:19:2b:79:1c:36:17:40: 97:0c:11:f7:18:38:98:fa:d1:c6:a3:04:54:72:af:5c:59:86: 2f:64:2a:58:b1:c0:b8:f2:b9:ed:6e:2b:b0:50:b4:3d:f5:a4: 8a:28:26:d9:55:78:e8:5c:37:e5:ad:1b:ce:54:14:d4:d4:8b: 49:4a:21:80:33:a8:ff:c1:5e:fe:a6:24:a1:6a:5f:83:a1:45: 34:24:8f:66:cc:f2:70:d2:fa:22:ed:bf:44:46:18:18:2d:c8: 62:26:4f:0a:a5:f1:03:8e:c0:a6:bb:d4:cd:16:45:1c:27:02: e5:92:92:19:d3:f9:ec:e9:bb:6e:17:26:0f:16:7a:a8:c0:1b: f3:ca:a5:a3:4a:20:7a:38:48:6b:19:c3:73:23:e9:cc:16:af: f3:e7:69:4b:a6:2f:23:cc:f3:3d:7b:30:8b:ab:67:b1:67:53: 8c:bc:c6:01:16:e3:49:e1:f8:99:59:98:12:03:10:7f:31:e4: 57:6b:33:76:7b:ea:92:18:a2:0d:d0:1e:cd:ba:f9:33:3b:aa: c3:4c:1b:63:4e:71:34:d6:a3:65:74:e4:b4:12:83:ee:ba:17: e8:e7:1d:01:fd:8e:29:f4:61:d3:5f:88:0a:43:58:52:a9:60: 61:af:1a:9d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB1wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEI1RkUxMTAvBgNVBAUTKEFCOTA1RERDMEFGQkJEMTU0OUY2NkVGRTgxMTdBRTE1 MDAwQTVFMEYwHhcNMjYwMzI0MjEyOTI0WhcNMjYwMzMxMjEyOTI0WjAYMRYwFAYD VQQDEw02OWMzMDIzNS1lNzA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsaMtDNkbWtwSpwsgIH79DnY7u0/uVsANR7PvHuiyDGMm4ZhegB/fdU5O2ECZ p5mdG8IjvPGXo/dI0HYnIkjq5I5Ooe9YsUfuUpW/lT52HscGq6ewUOh+fKfjLtbC SShseadX3KmIP6DL1TE52noMh0iB6kDK0QL3ey4nkB8oJqhb8DTgd8EanLF0Fu+l xLl3ah3vjKbF3BDG2xVtvrtRVCvMMQ/oGbaV9HiQQI5uqTM22Skpr79wcSZRA30G N8mM8z1ckgyeeOYaBjZC6GCzUyVUfnJgMft4vgOYu9VVwiwH7cXB6RZDBfoHYFmd cLQ4Gvud3ToEfFGVlmJt8s/TfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBmfMJ2z tn/hfqFWyYBTuxwR98guMB8GA1UdIwQYMBaAFKuQXdwK+70VSfZu/oEXrhUACl4P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjVGRS8zMkMzMDAyODZB OUUxMUVCQjY3NjIzMThDNEY5QUUwMi9xNUJkM0FyN3ZSVko5bTctZ1JldUZRQUtY ZzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3E1QmQzQXI3dlJWSjltNy1nUmV1RlFBS1hnOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjVGRS8zMkMzMDAyODZBOUUxMUVCQjY3NjIzMThDNEY5QUUwMi9xNUJkM0FyN3ZS Vko5bTctZ1JldUZRQUtYZzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIsFr47mA/BkTQCoZK3kcNhdAlwwR9xg4mPrRxqMEVHKvXFmGL2QqWLHAuPK5 7W4rsFC0PfWkiigm2VV46Fw35a0bzlQU1NSLSUohgDOo/8Fe/qYkoWpfg6FFNCSP ZszycNL6Iu2/REYYGC3IYiZPCqXxA47AprvUzRZFHCcC5ZKSGdP57Om7bhcmDxZ6 qMAb88qlo0ogejhIaxnDcyPpzBav8+dpS6YvI8zzPXswi6tnsWdTjLzGARbjSeH4 mVmYEgMQfzHkV2szdnvqkhiiDdAezbr5Mzuqw0wbY05xNNajZXTktBKD7roX6Ocd Af2OKfRh01+ICkNYUqlgYa8anQ== -----END CERTIFICATE-----Generated at Thu Mar 26 19:27:45 2026 by rpki-client