$ rpki-client -vvf rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.mft File: qo4b42JCQNwzAgR_tBp9TkeAjvg.mft (raw, json) Hash identifier: JxscqQxdbMfs8e7PuQu1jBoAq5Do3mtft4gm04xW/sw= Subject key identifier: 7A:69:8B:C1:6A:08:1C:AE:4B:9E:A4:08:EF:75:5C:BF:D7:A3:79:A8 Authority key identifier: AA:8E:1B:E3:62:42:40:DC:33:02:04:7F:B4:1A:7D:4E:47:80:8E:F8 Certificate issuer: /CN=A911E509/serialNumber=AA8E1BE3624240DC3302047FB41A7D4E47808EF8 Certificate serial: 0A20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qo4b42JCQNwzAgR_tBp9TkeAjvg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.mft Manifest number: 09E5 Signing time: Sun 01 Mar 2026 23:36:33 +0000 Manifest this update: Sun 01 Mar 2026 23:36:32 +0000 Manifest next update: Sun 08 Mar 2026 23:36:32 +0000 Files and hashes: 1: qo4b42JCQNwzAgR_tBp9TkeAjvg.crl (hash: mUHrKWl9uSSVVkRK+lZVmqI5vzoXP8OE24IsPxVdSmY=) 2: 35E2088CDEDC11F09573FB8A516F56BC.roa (hash: 3kA5OpKU9eHVzOskyos+lpBrFtE0p99oVGBf4/jqZSE=) 3: C2A410D4ADA011F08E990C1DC4F9AE02.roa (hash: qwwYep7qRlTP8X6SrltD3/DTpF9H98KfUFFBA+dvWXU=) 4: 0FD0ED72DEDF11F085D204E3526F56BC.roa (hash: GXMx3T0wzMeQ5SqXIqTQB1NCcmuAlbTIQgesXA5F2WA=) 5: 2E18EB105D0C11EE873B1C2AC4F9AE02.roa (hash: ffDUuM9X2orV7o+aInsG+5suQOvozRrFfEYtHJPj+tI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.crl rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qo4b42JCQNwzAgR_tBp9TkeAjvg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2592 (0xa20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E509, serialNumber=AA8E1BE3624240DC3302047FB41A7D4E47808EF8 Validity Not Before: Mar 1 23:36:32 2026 GMT Not After : Mar 8 23:36:32 2026 GMT Subject: CN=69a4cd81-6dda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b6:c1:ef:e7:b2:cb:56:f0:d4:41:40:d8:8e: e6:2e:5c:ac:3a:77:d3:60:44:b8:22:87:0f:db:7d: 26:74:9e:88:8b:9f:d2:ba:69:f8:2f:22:22:bd:56: dc:e9:c4:47:63:3a:5d:5f:b4:5a:46:a4:11:2b:f0: 82:b9:e2:e8:00:2e:11:c8:bd:35:bc:82:c3:98:c7: 99:0e:58:c3:57:e4:69:86:d7:07:d9:1f:f9:03:4f: 64:2a:b6:67:5b:c3:c6:ff:bc:c6:e8:57:c4:d6:cf: 23:e3:f5:8c:f8:75:cf:de:74:53:cc:44:34:f5:0a: 37:74:78:1c:99:7b:06:4b:21:9c:f1:ee:36:4c:32: 99:20:d3:1f:24:89:0a:cf:ae:0b:39:0c:ed:fd:ad: a6:32:b0:80:77:9e:5b:60:f2:16:83:33:4e:56:81: d2:58:13:73:05:f8:2f:4e:9c:52:11:39:cf:41:7f: ca:9a:92:24:d5:1d:1f:aa:ff:a0:d5:16:23:66:09: e3:73:1b:6c:d5:b6:8c:73:84:73:46:47:ae:25:6c: b8:ca:0e:a7:cb:4c:11:b4:ab:aa:4b:a9:5d:36:4f: 01:79:a4:79:f8:2d:49:be:26:c7:98:20:cd:d0:e9: f4:1f:c0:59:8e:79:0b:33:e0:ea:c9:ea:32:3b:c9: 23:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:69:8B:C1:6A:08:1C:AE:4B:9E:A4:08:EF:75:5C:BF:D7:A3:79:A8 X509v3 Authority Key Identifier: keyid:AA:8E:1B:E3:62:42:40:DC:33:02:04:7F:B4:1A:7D:4E:47:80:8E:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qo4b42JCQNwzAgR_tBp9TkeAjvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:8c:9c:23:70:5a:d9:89:3a:ee:5e:ef:e5:cf:f8:a8:ea:53: e4:82:e2:97:a7:0b:3c:c1:d4:9d:d9:30:c8:37:f7:5c:6c:97: ce:9e:00:30:41:e8:ff:72:c0:ad:f8:ab:a6:93:3e:7e:23:e7: ce:69:3d:e1:93:c6:0f:6a:d1:70:1b:31:8c:b4:7b:1d:84:76: 3c:28:af:fb:f0:8a:50:82:3d:0e:97:7b:dc:40:c2:4b:6f:ad: 09:d9:34:48:90:a9:18:4a:3d:a0:5c:32:76:66:76:87:91:c9: 78:1e:9b:b7:f2:7d:49:10:23:74:fa:eb:6d:bd:dc:9c:06:ea: cb:b3:1d:1f:f0:23:0e:88:50:f2:68:31:df:50:4b:c4:d3:5d: 5c:9f:4d:6f:40:6d:98:c0:c8:80:21:c3:6f:f2:c8:0f:61:ba: cd:8e:06:ab:5b:37:97:5a:02:92:9a:23:a1:14:02:d4:21:d2: a5:1c:b9:96:64:ab:49:43:b8:40:32:0f:91:e7:bd:6d:d9:30: 4c:76:0e:03:45:af:0e:d7:97:91:d1:24:89:3f:80:58:87:9a: 88:29:d0:77:f9:d8:18:15:8d:90:3a:83:f3:b0:4f:2a:66:8b: ca:f3:f7:dc:78:a3:d8:38:d6:2e:e2:0d:62:c7:8c:03:71:73: 4d:e8:af:a5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU1MDkxMTAvBgNVBAUTKEFBOEUxQkUzNjI0MjQwREMzMzAyMDQ3RkI0MUE3RDRF NDc4MDhFRjgwHhcNMjYwMzAxMjMzNjMyWhcNMjYwMzA4MjMzNjMyWjAYMRYwFAYD VQQDEw02OWE0Y2Q4MS02ZGRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsLbB7+eyy1bw1EFA2I7mLlysOnfTYES4IocP230mdJ6Ii5/Sumn4LyIivVbc 6cRHYzpdX7RaRqQRK/CCueLoAC4RyL01vILDmMeZDljDV+RphtcH2R/5A09kKrZn W8PG/7zG6FfE1s8j4/WM+HXP3nRTzEQ09Qo3dHgcmXsGSyGc8e42TDKZINMfJIkK z64LOQzt/a2mMrCAd55bYPIWgzNOVoHSWBNzBfgvTpxSETnPQX/KmpIk1R0fqv+g 1RYjZgnjcxts1baMc4RzRkeuJWy4yg6ny0wRtKuqS6ldNk8BeaR5+C1JvibHmCDN 0On0H8BZjnkLM+DqyeoyO8kj9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHppi8Fq CByuS56kCO91XL/Xo3moMB8GA1UdIwQYMBaAFKqOG+NiQkDcMwIEf7QafU5HgI74 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTUwOS83OUVBNTkxRUE3 QkQxMUVBQUFBNjI5NDhDNEY5QUUwMi9xbzRiNDJKQ1FOd3pBZ1JfdEJwOVRrZUFq dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FvNGI0MkpDUU53ekFnUl90QnA5VGtlQWp2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTUwOS83OUVBNTkxRUE3QkQxMUVBQUFBNjI5NDhDNEY5QUUwMi9xbzRiNDJKQ1FO d3pBZ1JfdEJwOVRrZUFqdmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAP4ycI3Ba2Yk67l7v5c/4qOpT5ILil6cLPMHUndkwyDf3XGyXzp4AMEHo/3LA rfirppM+fiPnzmk94ZPGD2rRcBsxjLR7HYR2PCiv+/CKUII9Dpd73EDCS2+tCdk0 SJCpGEo9oFwydmZ2h5HJeB6bt/J9SRAjdPrrbb3cnAbqy7MdH/AjDohQ8mgx31BL xNNdXJ9Nb0BtmMDIgCHDb/LID2G6zY4Gq1s3l1oCkpojoRQC1CHSpRy5lmSrSUO4 QDIPkee9bdkwTHYOA0WvDteXkdEkiT+AWIeaiCnQd/nYGBWNkDqD87BPKmaLyvP3 3Hij2DjWLuINYseMA3FzTeivpQ== -----END CERTIFICATE-----Generated at Mon Mar 2 21:26:30 2026 by rpki-client