$ rpki-client -vvf rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/1Q7mk8tIRN0udgNL7L02qIHDeJc.mft File: 1Q7mk8tIRN0udgNL7L02qIHDeJc.mft (raw, json) Hash identifier: 6afaIB7pYiYwnwN6rP4JlJ/7hjQQ3OOVyVi+QyZvtxo= Subject key identifier: 92:74:C5:74:CD:EE:83:24:8E:5C:49:17:E5:48:76:D6:E1:F2:EC:F3 Authority key identifier: D5:0E:E6:93:CB:48:44:DD:2E:76:03:4B:EC:BD:36:A8:81:C3:78:97 Certificate issuer: /CN=A9199CE9/serialNumber=D50EE693CB4844DD2E76034BECBD36A881C37897 Certificate serial: 112E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Q7mk8tIRN0udgNL7L02qIHDeJc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/1Q7mk8tIRN0udgNL7L02qIHDeJc.mft Manifest number: 1112 Signing time: Tue 24 Mar 2026 17:08:31 +0000 Manifest this update: Tue 24 Mar 2026 17:08:31 +0000 Manifest next update: Tue 31 Mar 2026 17:08:31 +0000 Files and hashes: 1: 1Q7mk8tIRN0udgNL7L02qIHDeJc.crl (hash: BA2jqvG3e44hl9cZVcLxXURcWD2tSMBHsrD09kOv0kU=) 2: 0FC30B10264211EEB9FAAA43C4F9AE02.roa (hash: UCrkOXVRMtwb9HPSDYLXpNIsYybf7IjBNg+gpiSCRpk=) 3: B0790AC83AB511E9A79AA42DC4F9AE02.roa (hash: EL6T9zw/SjmDr3o/cP3xUZjmR45HDY2yIGZTsNFI2x8=) 4: AFDA40003AB511E9A79AA42DC4F9AE02.roa (hash: 56EKgLc289CWCDjAbc+739CAo2AEeIbXhwaJ6sVW/sQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/1Q7mk8tIRN0udgNL7L02qIHDeJc.crl rsync://rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/1Q7mk8tIRN0udgNL7L02qIHDeJc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Q7mk8tIRN0udgNL7L02qIHDeJc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:08:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4398 (0x112e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199CE9, serialNumber=D50EE693CB4844DD2E76034BECBD36A881C37897 Validity Not Before: Mar 24 17:08:31 2026 GMT Not After : Mar 31 17:08:31 2026 GMT Subject: CN=69c2c50f-6ef6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8f:e8:8f:f0:22:8e:1f:fa:ef:df:78:78:e9: 50:e5:dc:5c:55:02:96:a5:a4:32:88:88:cc:25:34: 4e:3b:00:e1:9a:6b:97:f0:ae:d6:4d:e1:43:98:23: 00:c0:2e:e0:9b:1e:67:fb:ce:d3:6e:df:9c:e4:f9: 2e:44:2f:03:15:4e:f8:96:82:a9:59:da:eb:1c:48: f3:96:29:ce:03:bb:7b:08:7a:64:da:7c:f4:fd:16: a5:33:ac:e5:42:d5:5b:08:01:8d:a8:d6:a2:f1:f6: d3:15:50:1f:a2:13:37:54:a1:0a:6f:9a:f9:ec:f8: 62:00:4f:28:74:dc:a5:fe:f7:7d:bb:2d:0e:3c:7a: 27:00:b0:05:65:35:9b:c6:09:d3:22:e8:50:06:3e: b5:f3:50:62:4d:32:77:45:3e:41:3d:f2:05:d9:00: 66:40:41:63:94:6a:c8:08:46:c1:06:1c:3e:9c:bc: cb:0a:aa:60:7c:92:cf:db:4e:68:7d:6f:ef:9d:84: b9:91:20:28:7d:fa:39:8b:8c:25:b4:0a:20:77:5c: 9c:c1:11:00:96:44:23:5e:45:f3:f6:e0:aa:0c:24: 01:f4:5a:c1:84:03:e2:42:34:8b:f0:2f:e4:b1:50: da:8c:47:de:89:ad:1b:4c:de:ec:1b:3f:41:cf:ee: 62:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:74:C5:74:CD:EE:83:24:8E:5C:49:17:E5:48:76:D6:E1:F2:EC:F3 X509v3 Authority Key Identifier: keyid:D5:0E:E6:93:CB:48:44:DD:2E:76:03:4B:EC:BD:36:A8:81:C3:78:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/1Q7mk8tIRN0udgNL7L02qIHDeJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Q7mk8tIRN0udgNL7L02qIHDeJc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/1Q7mk8tIRN0udgNL7L02qIHDeJc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:9a:cc:a5:aa:2c:06:fb:60:ea:96:53:69:89:06:2e:4d:33: 1b:0d:7d:ba:5f:bc:62:12:f8:05:4f:62:9f:bb:bb:a1:39:d2: c5:f9:e6:bf:6f:6b:3d:74:c0:1b:1e:05:74:b7:24:a0:61:cf: bd:50:14:af:18:da:9f:0b:bb:44:52:64:7d:74:69:cc:ac:45: 7e:ec:d6:1a:59:44:18:6a:7b:2a:30:c3:9f:28:a5:5b:84:74: a7:27:65:14:87:b3:08:1a:1c:e8:54:7e:3c:6c:f2:ab:d0:9a: 9f:f4:64:b6:11:f4:52:08:79:d4:27:97:75:ff:a9:15:f6:41: 1a:fd:5b:51:ae:26:81:14:cc:a7:b3:b9:54:32:91:5b:b6:e0: cc:ce:7b:f9:e9:36:d2:43:b0:29:f0:5a:11:ef:4e:26:d3:76: 19:99:03:43:06:1e:e3:53:52:02:8f:a1:d3:c0:27:44:f3:bd: 6c:78:25:b8:a3:44:74:8a:92:f6:79:b9:44:7c:0f:fe:76:26: fb:2c:d7:16:c0:08:70:17:ec:58:bf:ea:18:ad:6f:5f:72:d8: 37:88:b6:c8:1b:1e:3a:3e:30:48:0f:4c:21:33:5f:f9:0f:c7: 4c:1f:cf:65:20:fd:11:3e:27:e5:8b:8b:30:20:05:93:76:4d: e6:21:37:97 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICES4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlDRTkxMTAvBgNVBAUTKEQ1MEVFNjkzQ0I0ODQ0REQyRTc2MDM0QkVDQkQzNkE4 ODFDMzc4OTcwHhcNMjYwMzI0MTcwODMxWhcNMjYwMzMxMTcwODMxWjAYMRYwFAYD VQQDEw02OWMyYzUwZi02ZWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwI/oj/Aijh/67994eOlQ5dxcVQKWpaQyiIjMJTROOwDhmmuX8K7WTeFDmCMA wC7gmx5n+87Tbt+c5PkuRC8DFU74loKpWdrrHEjzlinOA7t7CHpk2nz0/RalM6zl QtVbCAGNqNai8fbTFVAfohM3VKEKb5r57PhiAE8odNyl/vd9uy0OPHonALAFZTWb xgnTIuhQBj6181BiTTJ3RT5BPfIF2QBmQEFjlGrICEbBBhw+nLzLCqpgfJLP205o fW/vnYS5kSAoffo5i4wltAogd1ycwREAlkQjXkXz9uCqDCQB9FrBhAPiQjSL8C/k sVDajEfeia0bTN7sGz9Bz+5iJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJJ0xXTN 7oMkjlxJF+VIdtbh8uzzMB8GA1UdIwQYMBaAFNUO5pPLSETdLnYDS+y9NqiBw3iX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUNFOS82Q0JCODRGNDMx RjExMUU5OEE3QjkzMTdDNEY5QUUwMi8xUTdtazh0SVJOMHVkZ05MN0wwMnFJSERl SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFRN21rOHRJUk4wdWRnTkw3TDAycUlIRGVKYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUNFOS82Q0JCODRGNDMxRjExMUU5OEE3QjkzMTdDNEY5QUUwMi8xUTdtazh0SVJO MHVkZ05MN0wwMnFJSERlSmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJ5rMpaosBvtg6pZTaYkGLk0zGw19ul+8YhL4BU9in7u7oTnSxfnmv29rPXTA Gx4FdLckoGHPvVAUrxjanwu7RFJkfXRpzKxFfuzWGllEGGp7KjDDnyilW4R0pydl FIezCBoc6FR+PGzyq9Can/RkthH0Ugh51CeXdf+pFfZBGv1bUa4mgRTMp7O5VDKR W7bgzM57+ek20kOwKfBaEe9OJtN2GZkDQwYe41NSAo+h08AnRPO9bHgluKNEdIqS 9nm5RHwP/nYm+yzXFsAIcBfsWL/qGK1vX3LYN4i2yBseOj4wSA9MITNf+Q/HTB/P ZSD9ET4n5YuLMCAFk3ZN5iE3lw== -----END CERTIFICATE-----Generated at Thu Mar 26 15:52:08 2026 by rpki-client