$ rpki-client -vvf rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft File: qXEsy37uAkrriHZ7di4Qk7FA_24.mft (raw, json) Hash identifier: PHUTsi3SFe3CMefDwcMp7mVGcN2i5w4FhngzD3LbTUY= Subject key identifier: F6:D2:D6:8E:8E:F9:E6:AC:96:EA:D5:29:B0:A2:FF:45:FD:37:78:32 Authority key identifier: A9:71:2C:CB:7E:EE:02:4A:EB:88:76:7B:76:2E:10:93:B1:40:FF:6E Certificate issuer: /CN=A9148B6A/serialNumber=A9712CCB7EEE024AEB88767B762E1093B140FF6E Certificate serial: 1099 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXEsy37uAkrriHZ7di4Qk7FA_24.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft Manifest number: 1085 Signing time: Sat 28 Feb 2026 17:28:10 +0000 Manifest this update: Sat 28 Feb 2026 17:28:10 +0000 Manifest next update: Sat 07 Mar 2026 17:28:10 +0000 Files and hashes: 1: qXEsy37uAkrriHZ7di4Qk7FA_24.crl (hash: 8m/LLqO8UAHeqpNjGzk91JtgpU+i5mIb+bo9s4OUHiY=) 2: 07FF4ABC5A1011EAA8B1B456C4F9AE02.roa (hash: IUlp+gDqr57RNOajUBGFHWRBVgY+RKfJ4rWS/pMC4Tc=) 3: 1BCA5982656311ECA4E81323C4F9AE02.roa (hash: sZSppAngvswKy+MC+ed/ihAoI4UmVi4rfOBl63CnJSc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.crl rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXEsy37uAkrriHZ7di4Qk7FA_24.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 17:28:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4249 (0x1099) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148B6A, serialNumber=A9712CCB7EEE024AEB88767B762E1093B140FF6E Validity Not Before: Feb 28 17:28:10 2026 GMT Not After : Mar 7 17:28:10 2026 GMT Subject: CN=69a325aa-a871 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:de:56:aa:8f:27:27:9d:8b:76:ac:f0:58:8e: 98:17:28:6c:f6:46:64:e5:25:33:7c:a3:58:06:23: 2e:36:0f:3d:1b:7f:0d:f1:8a:70:25:de:7a:1b:fb: 76:b1:12:7b:09:d7:64:a6:65:79:e3:b4:7a:e4:b9: db:c8:cb:5b:52:f9:8e:94:d0:5d:0f:4b:a2:e1:b5: d9:5b:e5:c6:cd:1d:f6:4e:d9:37:41:9e:71:b3:ed: 74:67:2d:2b:8a:9b:69:c6:ad:0e:d7:51:9f:14:dd: 48:bd:c3:71:1b:98:6c:db:4c:d3:53:f7:8f:ea:c0: 06:7a:84:08:21:05:b5:67:c0:0f:11:35:9f:6b:f2: 3f:c6:9e:d6:be:76:69:7c:4a:18:71:50:e6:c3:82: 46:b7:e6:99:35:38:94:e8:44:c4:6e:0d:37:06:d5: 1f:f0:8a:7a:14:bf:96:9d:1b:5d:b9:23:18:c1:4d: 77:53:82:4b:4a:3a:73:ef:56:c6:c6:25:15:85:8b: f1:ab:bc:a2:83:1a:5a:ec:f2:8c:54:c0:7f:18:5d: be:73:73:5a:81:87:fd:04:4a:84:08:87:b7:ed:e7: fa:ad:a5:a3:dd:1f:fe:e2:c4:6a:8c:71:32:f5:50: 1b:14:30:68:e9:2a:19:eb:a0:82:69:a9:4e:fc:b6: b0:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:D2:D6:8E:8E:F9:E6:AC:96:EA:D5:29:B0:A2:FF:45:FD:37:78:32 X509v3 Authority Key Identifier: keyid:A9:71:2C:CB:7E:EE:02:4A:EB:88:76:7B:76:2E:10:93:B1:40:FF:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXEsy37uAkrriHZ7di4Qk7FA_24.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:83:2e:31:4a:8d:4d:68:53:ec:bb:dc:cb:ac:03:04:47:53: 04:1c:46:e3:6c:13:0c:e3:80:2a:cf:23:bb:4c:7d:d9:82:c9: 41:69:4f:03:1a:d4:b3:d8:fc:83:fc:d1:28:40:1a:df:78:ec: f2:49:17:e8:d5:29:fb:83:ab:bb:b6:48:2f:12:08:7b:f8:df: 33:e6:82:1d:5e:8f:2d:df:76:e2:2d:cf:1b:36:19:73:0c:d9: 85:5d:4d:7b:f0:22:df:dc:db:c9:07:f4:73:fd:83:82:4f:74: 7d:25:d9:17:f6:ff:30:df:29:f4:e3:dc:ab:4d:cf:92:1e:ef: fa:6f:a2:54:b5:e9:e7:44:5c:46:84:25:f8:6b:39:e5:ce:eb: da:1d:e9:45:e4:a6:82:3b:ba:ac:0d:4f:22:46:5b:ad:cf:cb: 99:fe:bb:fb:a7:f6:1d:0b:46:13:96:b4:45:a4:2a:ed:d6:e2: 2f:e2:2f:71:bd:53:99:f0:9d:f6:ec:95:41:96:a4:3c:d3:22: 5b:4e:08:3d:03:99:e6:14:a2:1f:27:85:78:7f:14:05:e1:3c: 49:82:e9:42:00:af:26:c9:55:23:36:0f:23:a0:82:6a:d8:ab: df:52:6c:4b:64:f7:a5:ca:82:5e:36:33:2c:03:df:7f:e5:0e: 6a:4d:0d:6a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhCNkExMTAvBgNVBAUTKEE5NzEyQ0NCN0VFRTAyNEFFQjg4NzY3Qjc2MkUxMDkz QjE0MEZGNkUwHhcNMjYwMjI4MTcyODEwWhcNMjYwMzA3MTcyODEwWjAYMRYwFAYD VQQDDA02OWEzMjVhYS1hODcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6t5Wqo8nJ52LdqzwWI6YFyhs9kZk5SUzfKNYBiMuNg89G38N8YpwJd56G/t2 sRJ7CddkpmV547R65LnbyMtbUvmOlNBdD0ui4bXZW+XGzR32Ttk3QZ5xs+10Zy0r iptpxq0O11GfFN1IvcNxG5hs20zTU/eP6sAGeoQIIQW1Z8APETWfa/I/xp7WvnZp fEoYcVDmw4JGt+aZNTiU6ETEbg03BtUf8Ip6FL+WnRtduSMYwU13U4JLSjpz71bG xiUVhYvxq7yigxpa7PKMVMB/GF2+c3NagYf9BEqECIe37ef6raWj3R/+4sRqjHEy 9VAbFDBo6SoZ66CCaalO/LawwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPbS1o6O +easlurVKbCi/0X9N3gyMB8GA1UdIwQYMBaAFKlxLMt+7gJK64h2e3YuEJOxQP9u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEI2QS8wODc1RjQ5NjRD NzQxMUU5OTc5MDBGNTVDNEY5QUUwMi9xWEVzeTM3dUFrcnJpSFo3ZGk0UWs3RkFf MjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FYRXN5Mzd1QWtycmlIWjdkaTRRazdGQV8yNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEI2QS8wODc1RjQ5NjRDNzQxMUU5OTc5MDBGNTVDNEY5QUUwMi9xWEVzeTM3dUFr cnJpSFo3ZGk0UWs3RkFfMjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAc4MuMUqNTWhT7Lvcy6wDBEdTBBxG42wTDOOAKs8ju0x92YLJQWlPAxrUs9j8 g/zRKEAa33js8kkX6NUp+4Oru7ZILxIIe/jfM+aCHV6PLd924i3PGzYZcwzZhV1N e/Ai39zbyQf0c/2Dgk90fSXZF/b/MN8p9OPcq03Pkh7v+m+iVLXp50RcRoQl+Gs5 5c7r2h3pReSmgju6rA1PIkZbrc/Lmf67+6f2HQtGE5a0RaQq7dbiL+Ivcb1TmfCd 9uyVQZakPNMiW04IPQOZ5hSiHyeFeH8UBeE8SYLpQgCvJslVIzYPI6CCatir31Js S2T3pcqCXjYzLAPff+UOak0Nag== -----END CERTIFICATE-----Generated at Sun Mar 1 21:09:49 2026 by rpki-client