$ rpki-client -vvf rpki.apnic.net/member_repository/A9148465/D60F027228BB11EDA59C3081C4F9AE02/QELW5jee2AQkizYN7Zhe9_VlIBE.mft File: QELW5jee2AQkizYN7Zhe9_VlIBE.mft (raw, json) Hash identifier: K2ckvaZ6VGW1MU0mswLc3PjppnUeMi4MbdAQCSdGHGU= Subject key identifier: 6E:34:AE:25:43:B8:7E:37:9C:C9:53:87:08:AE:A9:18:12:6E:C5:4F Authority key identifier: 40:42:D6:E6:37:9E:D8:04:24:8B:36:0D:ED:98:5E:F7:F5:65:20:11 Certificate issuer: /CN=A9148465/serialNumber=4042D6E6379ED804248B360DED985EF7F5652011 Certificate serial: 02DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QELW5jee2AQkizYN7Zhe9_VlIBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148465/D60F027228BB11EDA59C3081C4F9AE02/QELW5jee2AQkizYN7Zhe9_VlIBE.mft Manifest number: 02D9 Signing time: Fri 17 Apr 2026 01:15:22 +0000 Manifest this update: Fri 17 Apr 2026 01:15:22 +0000 Manifest next update: Fri 24 Apr 2026 01:15:22 +0000 Files and hashes: 1: QELW5jee2AQkizYN7Zhe9_VlIBE.crl (hash: d5BEggyu499mx83yEK/5SzRcO8iBJJfBD61EhhmdYA0=) 2: 7777513828C011EDBEC6D287C4F9AE02.roa (hash: uZ2kWd7kpQaiTAnnZXgkNaCLyHsmkWGjAKTYejP6cVI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148465/D60F027228BB11EDA59C3081C4F9AE02/QELW5jee2AQkizYN7Zhe9_VlIBE.crl rsync://rpki.apnic.net/member_repository/A9148465/D60F027228BB11EDA59C3081C4F9AE02/QELW5jee2AQkizYN7Zhe9_VlIBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QELW5jee2AQkizYN7Zhe9_VlIBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:15:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 734 (0x2de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148465, serialNumber=4042D6E6379ED804248B360DED985EF7F5652011 Validity Not Before: Apr 17 01:15:22 2026 GMT Not After : Apr 24 01:15:22 2026 GMT Subject: CN=69e189aa-5c1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:15:cb:76:29:55:89:a7:ac:46:25:b0:2d:71: c1:1f:91:8d:dd:85:16:d6:ad:aa:b1:b7:b1:32:62: 62:64:88:29:e1:30:64:a9:05:e1:8a:e0:9a:93:a9: ce:d2:9b:ac:e5:98:26:bb:4a:fb:5d:da:bb:8c:a6: 7a:13:cd:56:0e:97:d8:81:91:e0:4c:ce:69:c1:ec: 4b:f8:ed:a9:4c:87:55:52:dc:3a:70:ca:9b:61:19: 30:6a:7b:ff:f8:e0:89:03:5b:d2:7e:8c:ea:5a:6e: a6:22:f6:fc:69:65:b3:40:4a:a0:5c:6b:69:46:ab: e4:3a:3b:36:32:2a:3f:59:71:3d:d9:c0:fd:96:fa: 2f:5d:40:87:e3:88:97:ad:3e:56:99:ff:91:76:77: bf:34:5c:be:0f:c5:aa:41:16:fb:88:ea:6e:9d:af: c7:04:56:2f:ab:cd:5c:4d:b7:88:50:fc:ec:3a:2f: 77:5c:77:68:3a:05:08:7a:7a:97:8c:33:a0:2c:67: 7d:ce:26:a1:6d:06:57:85:c9:06:88:85:58:3a:91: a9:39:94:e7:0f:3e:4e:41:b1:b6:df:23:2d:ea:ff: 59:eb:ae:6e:03:97:0c:b4:a6:b9:6b:64:32:e5:c1: ee:b6:bc:e3:f8:74:aa:c7:38:82:0d:56:47:47:0d: 50:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:34:AE:25:43:B8:7E:37:9C:C9:53:87:08:AE:A9:18:12:6E:C5:4F X509v3 Authority Key Identifier: keyid:40:42:D6:E6:37:9E:D8:04:24:8B:36:0D:ED:98:5E:F7:F5:65:20:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148465/D60F027228BB11EDA59C3081C4F9AE02/QELW5jee2AQkizYN7Zhe9_VlIBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QELW5jee2AQkizYN7Zhe9_VlIBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148465/D60F027228BB11EDA59C3081C4F9AE02/QELW5jee2AQkizYN7Zhe9_VlIBE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:a9:a1:ce:f7:d6:5a:b6:19:5c:d0:83:91:2e:7d:a0:1e:7d: 34:7f:c4:11:42:69:32:58:50:a4:30:32:5d:b2:e0:57:d4:27: 24:6e:10:cf:19:a6:ee:d3:dc:fb:d5:fe:31:c8:a6:17:15:f4: 58:0d:bd:b2:54:01:cc:e5:f5:fe:b0:98:f5:5d:fb:0e:c8:d6: e3:c7:6a:2a:d3:86:d4:7a:06:32:8e:52:d0:7d:72:a3:76:36: 77:0c:03:e5:13:d8:37:c0:14:46:d3:9d:d5:86:e5:74:46:86: a7:6a:f4:af:80:1f:99:12:6c:f4:c5:93:32:5f:d1:01:50:23: 01:ee:a7:2d:c3:ad:3f:88:4c:20:f0:10:1e:78:28:bd:2f:bc: 91:f9:7b:bd:41:62:b5:74:60:2a:6c:74:b4:ca:09:69:05:6d: 39:8f:b8:62:88:bc:b9:42:b9:09:74:3e:fd:88:a2:fc:3a:f7: 24:76:eb:9e:05:cb:b6:4d:9f:63:80:cb:32:60:1b:dd:6d:63: bc:c3:5b:1d:40:18:36:b6:38:bc:3c:44:82:44:7e:21:2a:d0: 90:9e:ad:5d:51:38:70:d4:74:21:e1:77:d5:7b:1b:f4:c6:e5: 90:3c:f6:10:6c:f8:16:bd:cb:ca:4f:51:1e:ea:90:ab:0a:5f: ce:99:c2:19 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAt4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg0NjUxMTAvBgNVBAUTKDQwNDJENkU2Mzc5RUQ4MDQyNDhCMzYwREVEOTg1RUY3 RjU2NTIwMTEwHhcNMjYwNDE3MDExNTIyWhcNMjYwNDI0MDExNTIyWjAYMRYwFAYD VQQDEw02OWUxODlhYS01YzFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvhXLdilViaesRiWwLXHBH5GN3YUW1q2qsbexMmJiZIgp4TBkqQXhiuCak6nO 0pus5Zgmu0r7Xdq7jKZ6E81WDpfYgZHgTM5pwexL+O2pTIdVUtw6cMqbYRkwanv/ +OCJA1vSfozqWm6mIvb8aWWzQEqgXGtpRqvkOjs2Mio/WXE92cD9lvovXUCH44iX rT5Wmf+Rdne/NFy+D8WqQRb7iOpuna/HBFYvq81cTbeIUPzsOi93XHdoOgUIenqX jDOgLGd9ziahbQZXhckGiIVYOpGpOZTnDz5OQbG23yMt6v9Z665uA5cMtKa5a2Qy 5cHutrzj+HSqxziCDVZHRw1QjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG40riVD uH43nMlThwiuqRgSbsVPMB8GA1UdIwQYMBaAFEBC1uY3ntgEJIs2De2YXvf1ZSAR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODQ2NS9ENjBGMDI3MjI4 QkIxMUVEQTU5QzMwODFDNEY5QUUwMi9RRUxXNWplZTJBUWtpellON1poZTlfVmxJ QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FFTFc1amVlMkFRa2l6WU43WmhlOV9WbElCRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODQ2NS9ENjBGMDI3MjI4QkIxMUVEQTU5QzMwODFDNEY5QUUwMi9RRUxXNWplZTJB UWtpellON1poZTlfVmxJQkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiamhzvfWWrYZXNCDkS59oB59NH/EEUJpMlhQpDAyXbLgV9QnJG4Qzxmm7tPc +9X+McimFxX0WA29slQBzOX1/rCY9V37DsjW48dqKtOG1HoGMo5S0H1yo3Y2dwwD 5RPYN8AURtOd1YbldEaGp2r0r4AfmRJs9MWTMl/RAVAjAe6nLcOtP4hMIPAQHngo vS+8kfl7vUFitXRgKmx0tMoJaQVtOY+4Yoi8uUK5CXQ+/Yii/Dr3JHbrngXLtk2f Y4DLMmAb3W1jvMNbHUAYNrY4vDxEgkR+ISrQkJ6tXVE4cNR0IeF31Xsb9MblkDz2 EGz4Fr3Lyk9RHuqQqwpfzpnCGQ== -----END CERTIFICATE-----Generated at Fri Apr 17 15:49:39 2026 by rpki-client