$ rpki-client -vvf rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft File: qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft (raw, json) Hash identifier: GNcPQnqEqSDnC3xWtt2Gn6aYnSD/P3rQdxx1eR+F6pE= Subject key identifier: 0D:D1:63:6A:F6:71:C5:43:A1:B4:B1:D4:8E:1C:BD:95:48:C7:19:29 Authority key identifier: AB:0D:87:97:C5:8A:83:A5:B4:9C:07:7A:32:EF:67:32:87:24:E4:12 Certificate issuer: /CN=A914E026/serialNumber=AB0D8797C58A83A5B49C077A32EF67328724E412 Certificate serial: 0D24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qw2Hl8WKg6W0nAd6Mu9nMock5BI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft Manifest number: 0D24 Signing time: Sat 28 Feb 2026 18:12:54 +0000 Manifest this update: Sat 28 Feb 2026 18:12:54 +0000 Manifest next update: Sat 07 Mar 2026 18:12:54 +0000 Files and hashes: 1: qw2Hl8WKg6W0nAd6Mu9nMock5BI.crl (hash: HGbA2hPSD03iuGdAKSZhLNWEsphBwCb8GR2//o0O9JI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.crl rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qw2Hl8WKg6W0nAd6Mu9nMock5BI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 18:12:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3364 (0xd24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E026, serialNumber=AB0D8797C58A83A5B49C077A32EF67328724E412 Validity Not Before: Feb 28 18:12:54 2026 GMT Not After : Mar 7 18:12:54 2026 GMT Subject: CN=69a33026-a6f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4a:34:26:35:c4:99:93:19:99:e0:a9:18:62: 43:e5:80:ca:ee:b7:4b:75:c0:8a:db:19:e6:05:1e: 3b:6a:39:f6:7d:ef:69:87:de:91:49:cb:68:be:c8: aa:a9:90:d4:4e:25:16:63:cf:2c:e3:0b:b4:f8:9a: 55:79:28:20:ff:e0:17:f8:d5:bb:e3:2a:d8:24:8c: 4f:ba:84:89:89:d8:6d:64:10:ae:60:2a:ff:dd:27: 9a:a4:04:ea:0d:eb:43:49:36:2c:ef:62:5c:6a:5f: 65:1c:88:41:a4:23:54:ea:f4:eb:6b:96:b8:47:72: f4:e7:3d:52:c9:9e:4e:85:22:fb:2c:5f:1d:6d:c0: af:8d:24:94:af:ac:8d:c5:0c:67:96:43:a2:ec:7e: f7:96:12:30:e6:20:8e:a0:96:6f:af:91:24:68:0d: 5b:f8:ba:5e:64:7a:1a:ce:8d:5c:a5:dc:72:70:fe: 30:1d:0d:10:0d:9d:e1:9a:f3:83:30:7b:95:d5:fb: 06:69:f4:87:88:77:fd:d9:b2:46:4c:a3:90:d5:f6: ea:aa:e7:c1:f4:a0:f8:d5:a7:ce:1f:1c:9e:eb:43: e1:48:b9:ee:e7:ac:dc:d4:7d:4e:0f:65:2a:28:a5: 46:9f:82:ce:82:01:75:14:82:8e:b8:4d:27:e5:06: 75:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:D1:63:6A:F6:71:C5:43:A1:B4:B1:D4:8E:1C:BD:95:48:C7:19:29 X509v3 Authority Key Identifier: keyid:AB:0D:87:97:C5:8A:83:A5:B4:9C:07:7A:32:EF:67:32:87:24:E4:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qw2Hl8WKg6W0nAd6Mu9nMock5BI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:65:7a:b2:cf:7d:7f:e7:d4:d9:b8:ad:5f:b8:c6:a4:82:30: 2e:9d:23:89:96:9f:6b:ae:59:b1:bc:85:5c:e8:5b:cf:64:5a: 42:2c:50:fd:e1:b2:19:3e:eb:4b:5e:56:ad:27:e2:38:f3:44: 07:81:2d:0d:70:5c:d7:04:4d:63:69:fa:7f:5f:41:c9:9e:aa: 7d:48:13:67:ce:36:07:9c:22:14:be:f4:44:c6:62:84:0f:31: b0:d0:51:96:bd:5c:21:3a:d0:54:8a:b5:0b:7b:ab:78:40:16: c6:2c:d0:be:49:c2:09:8b:2f:b2:53:ce:03:ef:ed:b8:95:e8: b3:fc:f4:d0:0e:35:48:10:2e:8a:8c:a2:3d:48:be:88:4b:04: 59:b4:4f:3a:88:46:61:c8:fc:09:f5:1f:60:20:88:ef:59:1d: 2c:16:02:65:59:75:1e:39:f5:54:a0:4b:00:00:55:27:08:89: ad:04:80:a0:60:46:c3:fd:c3:e3:10:8a:6d:70:d6:97:0b:09: b7:d8:ef:fe:dc:6a:34:17:38:94:e5:56:a7:ac:92:96:6b:c9: 5d:bf:31:21:b1:df:81:9a:e0:93:63:2c:df:d5:69:28:d5:87: ed:7e:bb:25:5e:81:04:4e:f9:eb:af:3b:16:9f:5f:1a:10:31: 1d:7d:9a:5b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDSQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUwMjYxMTAvBgNVBAUTKEFCMEQ4Nzk3QzU4QTgzQTVCNDlDMDc3QTMyRUY2NzMy ODcyNEU0MTIwHhcNMjYwMjI4MTgxMjU0WhcNMjYwMzA3MTgxMjU0WjAYMRYwFAYD VQQDEw02OWEzMzAyNi1hNmY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwEo0JjXEmZMZmeCpGGJD5YDK7rdLdcCK2xnmBR47ajn2fe9ph96RSctovsiq qZDUTiUWY88s4wu0+JpVeSgg/+AX+NW74yrYJIxPuoSJidhtZBCuYCr/3SeapATq DetDSTYs72Jcal9lHIhBpCNU6vTra5a4R3L05z1SyZ5OhSL7LF8dbcCvjSSUr6yN xQxnlkOi7H73lhIw5iCOoJZvr5EkaA1b+LpeZHoazo1cpdxycP4wHQ0QDZ3hmvOD MHuV1fsGafSHiHf92bJGTKOQ1fbqqufB9KD41afOHxye60PhSLnu56zc1H1OD2Uq KKVGn4LOggF1FIKOuE0n5QZ1WwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA3RY2r2 ccVDobSx1I4cvZVIxxkpMB8GA1UdIwQYMBaAFKsNh5fFioOltJwHejLvZzKHJOQS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTAyNi9ENkIyNjMwNEY1 NkExMUU5QkYyQUU2ODRDNEY5QUUwMi9xdzJIbDhXS2c2VzBuQWQ2TXU5bk1vY2s1 QkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F3MkhsOFdLZzZXMG5BZDZNdTluTW9jazVCSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTAyNi9ENkIyNjMwNEY1NkExMUU5QkYyQUU2ODRDNEY5QUUwMi9xdzJIbDhXS2c2 VzBuQWQ2TXU5bk1vY2s1QkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAImV6ss99f+fU2bitX7jGpIIwLp0jiZafa65ZsbyFXOhbz2RaQixQ/eGyGT7r S15WrSfiOPNEB4EtDXBc1wRNY2n6f19ByZ6qfUgTZ842B5wiFL70RMZihA8xsNBR lr1cITrQVIq1C3ureEAWxizQvknCCYsvslPOA+/tuJXos/z00A41SBAuioyiPUi+ iEsEWbRPOohGYcj8CfUfYCCI71kdLBYCZVl1Hjn1VKBLAABVJwiJrQSAoGBGw/3D 4xCKbXDWlwsJt9jv/txqNBc4lOVWp6ySlmvJXb8xIbHfgZrgk2Ms39VpKNWH7X67 JV6BBE756687Fp9fGhAxHX2aWw== -----END CERTIFICATE-----Generated at Mon Mar 2 09:24:15 2026 by rpki-client