$ rpki-client -vvf rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft File: QJmwCEN2qeBM7XxnirxoWN2fhRo.mft (raw, json) Hash identifier: xoVmG9aNjtnkDs/gUBuGBQSeZKch1jr5nq+lEoksKOw= Subject key identifier: EB:B6:21:F8:E3:29:1A:49:F2:E9:62:33:1E:F9:38:EC:E6:67:F2:BD Authority key identifier: 40:99:B0:08:43:76:A9:E0:4C:ED:7C:67:8A:BC:68:58:DD:9F:85:1A Certificate issuer: /CN=A919BCD9/serialNumber=4099B0084376A9E04CED7C678ABC6858DD9F851A Certificate serial: 0D11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJmwCEN2qeBM7XxnirxoWN2fhRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft Manifest number: 0CFD Signing time: Tue 24 Mar 2026 17:58:27 +0000 Manifest this update: Tue 24 Mar 2026 17:58:26 +0000 Manifest next update: Tue 31 Mar 2026 17:58:26 +0000 Files and hashes: 1: QJmwCEN2qeBM7XxnirxoWN2fhRo.crl (hash: 8FDwM1Gxo+yr+OYHTRMXQUKqzas0/SD99cCj1aq/brQ=) 2: E56CD3E8FF8311E9B1B99628C4F9AE02.roa (hash: yk+S2an59M1qblQEC/oVwNcQBVVUiZw+ShOuw7y2Rac=) 3: E4B59AA2FF8311E9B1B99628C4F9AE02.roa (hash: y4vcTjeolSMrmAigiZozXMraZgaOak5oYF52X7KfAMI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.crl rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJmwCEN2qeBM7XxnirxoWN2fhRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:58:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3345 (0xd11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919BCD9, serialNumber=4099B0084376A9E04CED7C678ABC6858DD9F851A Validity Not Before: Mar 24 17:58:26 2026 GMT Not After : Mar 31 17:58:26 2026 GMT Subject: CN=69c2d0c2-ba3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ea:af:40:27:31:02:23:33:52:35:14:1a:9e: e1:0b:91:5c:60:67:f4:ce:42:d6:cd:5f:71:92:ce: c1:02:86:b3:08:8a:73:86:d0:e8:c3:ab:22:0f:46: d2:ba:76:ed:b8:95:cd:45:15:71:d4:bd:ce:c8:04: 4a:af:ae:65:7d:5d:43:2c:0f:7c:97:a9:e8:4b:b0: b5:ef:25:8c:ea:2d:b2:25:30:bb:02:da:b8:a5:64: 15:15:ff:63:5e:4f:a1:ff:96:68:ad:0e:ff:ce:f2: 2a:74:ec:57:48:7a:16:e8:0c:29:90:53:9f:30:04: 20:60:6b:2c:84:d1:1c:04:9b:be:c3:19:b5:26:04: 34:0e:4b:04:33:f8:37:03:9d:5c:5a:df:e4:75:b9: 89:53:90:ac:7d:56:77:f6:37:9a:2d:16:e8:78:09: c1:d8:f7:88:02:74:58:cd:67:0f:fd:88:b2:c8:95: 9e:c5:27:5a:34:fe:6f:51:aa:0f:e6:b0:81:f4:3e: b3:22:f0:75:c1:ae:a3:3b:76:9d:3d:4d:70:5d:af: 81:c4:7d:3f:17:72:32:40:ba:7f:18:c4:8a:37:8c: 8a:6b:28:a4:97:66:c0:90:3a:c3:17:d3:cf:07:6c: 82:6f:a4:7e:ad:f4:ed:e8:d3:f9:8d:71:71:9f:ea: 8f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:B6:21:F8:E3:29:1A:49:F2:E9:62:33:1E:F9:38:EC:E6:67:F2:BD X509v3 Authority Key Identifier: keyid:40:99:B0:08:43:76:A9:E0:4C:ED:7C:67:8A:BC:68:58:DD:9F:85:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJmwCEN2qeBM7XxnirxoWN2fhRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:40:33:71:01:99:61:44:74:b7:5e:17:2d:29:ce:7b:c1:4a: 8b:97:71:58:7a:68:d0:11:97:5b:31:23:3c:4e:3c:4e:17:ee: 19:2c:af:15:e7:e7:9b:fc:aa:84:42:27:29:7e:d9:96:79:8a: 2a:d5:b7:33:58:f8:76:fe:a8:06:eb:dc:19:7f:64:0f:68:b3: c9:a4:0a:f2:3b:c3:39:5d:11:7e:57:33:6c:b3:97:75:0b:a4: e8:ba:0d:74:ca:bc:de:87:fc:78:1d:3f:eb:c4:b0:f7:ab:a1: 9f:b4:82:6d:da:ec:ab:81:f7:3d:ff:9c:d1:41:cd:a6:fc:b0: fd:55:69:c1:86:48:8d:67:08:04:44:c7:34:c8:37:97:d2:4a: d8:50:7d:2e:8d:d1:23:e9:89:17:c9:b9:36:f4:f3:15:14:66: 35:fe:0b:78:3c:bf:b3:87:83:ce:55:d7:aa:31:4a:cd:f3:72: 8d:40:65:5d:93:86:40:38:b5:0e:b4:36:85:f1:d4:4a:19:14: 5e:39:c0:ac:a7:2f:00:78:51:dd:e8:a4:60:43:f2:fe:aa:10: de:b1:83:07:aa:28:3b:ea:11:b6:52:47:ff:64:7b:9c:9a:f7: c1:dc:c7:ee:e8:92:7a:38:2f:57:9a:8b:bb:d1:d0:fc:df:b3: a2:8e:58:70 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUJDRDkxMTAvBgNVBAUTKDQwOTlCMDA4NDM3NkE5RTA0Q0VEN0M2NzhBQkM2ODU4 REQ5Rjg1MUEwHhcNMjYwMzI0MTc1ODI2WhcNMjYwMzMxMTc1ODI2WjAYMRYwFAYD VQQDEw02OWMyZDBjMi1iYTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqeqvQCcxAiMzUjUUGp7hC5FcYGf0zkLWzV9xks7BAoazCIpzhtDow6siD0bS unbtuJXNRRVx1L3OyARKr65lfV1DLA98l6noS7C17yWM6i2yJTC7Atq4pWQVFf9j Xk+h/5ZorQ7/zvIqdOxXSHoW6AwpkFOfMAQgYGsshNEcBJu+wxm1JgQ0DksEM/g3 A51cWt/kdbmJU5CsfVZ39jeaLRboeAnB2PeIAnRYzWcP/YiyyJWexSdaNP5vUaoP 5rCB9D6zIvB1wa6jO3adPU1wXa+BxH0/F3IyQLp/GMSKN4yKayikl2bAkDrDF9PP B2yCb6R+rfTt6NP5jXFxn+qPKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOu2Ifjj KRpJ8uliMx75OOzmZ/K9MB8GA1UdIwQYMBaAFECZsAhDdqngTO18Z4q8aFjdn4Ua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QkNEOS8xN0I3OEYxNkZG ODIxMUU5QjQwMkZDMjRDNEY5QUUwMi9RSm13Q0VOMnFlQk03WHhuaXJ4b1dOMmZo Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FKbXdDRU4ycWVCTTdYeG5pcnhvV04yZmhSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QkNEOS8xN0I3OEYxNkZGODIxMUU5QjQwMkZDMjRDNEY5QUUwMi9RSm13Q0VOMnFl Qk03WHhuaXJ4b1dOMmZoUm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGEAzcQGZYUR0t14XLSnOe8FKi5dxWHpo0BGXWzEjPE48ThfuGSyvFefnm/yq hEInKX7ZlnmKKtW3M1j4dv6oBuvcGX9kD2izyaQK8jvDOV0RflczbLOXdQuk6LoN dMq83of8eB0/68Sw96uhn7SCbdrsq4H3Pf+c0UHNpvyw/VVpwYZIjWcIBETHNMg3 l9JK2FB9Lo3RI+mJF8m5NvTzFRRmNf4LeDy/s4eDzlXXqjFKzfNyjUBlXZOGQDi1 DrQ2hfHUShkUXjnArKcvAHhR3eikYEPy/qoQ3rGDB6ooO+oRtlJH/2R7nJr3wdzH 7uiSejgvV5qLu9HQ/N+zoo5YcA== -----END CERTIFICATE-----Generated at Thu Mar 26 06:51:48 2026 by rpki-client