$ rpki-client -vvf rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft File: sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft (raw, json) Hash identifier: LRLWsmNIzl6sEek9zR12bu71N/v/fpRKoORZ7+saY90= Subject key identifier: AD:8F:E3:17:19:1C:CF:85:E4:01:AB:C2:DB:1B:BE:F3:B8:A5:92:CB Authority key identifier: B2:A7:84:EE:85:F5:53:83:67:29:7B:51:C0:86:8F:8F:1C:02:F9:11 Certificate issuer: /CN=A9158F08/serialNumber=B2A784EE85F5538367297B51C0868F8F1C02F911 Certificate serial: 09CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqeE7oX1U4NnKXtRwIaPjxwC-RE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft Manifest number: 1674 Signing time: Mon 02 Mar 2026 02:02:16 +0000 Manifest this update: Mon 02 Mar 2026 02:02:14 +0000 Manifest next update: Mon 09 Mar 2026 02:02:14 +0000 Files and hashes: 1: sqeE7oX1U4NnKXtRwIaPjxwC-RE.crl (hash: ri6VN2dNxfeBE0JoX+Y+9x65C7HEtx8S+JI+rpiuGrI=) 2: DCDFB82CA17B11EAB16F4954C4F9AE02.roa (hash: K1jzPXMo39Xj7AzoB3EyKPNdogzapSK80Nthg5o1aHY=) 3: DC4BD210A17B11EAB16F4954C4F9AE02.roa (hash: 6TPmegHt1AjpFvO8G0V6HPeTiea1yCSK8Hn4TAgtC7M=) 4: DD70B00CA17B11EAB16F4954C4F9AE02.roa (hash: ZZmQHUw3TTN+bbSECc35E7vWbU+hDUGHOpstVPhjmQY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.crl rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqeE7oX1U4NnKXtRwIaPjxwC-RE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2509 (0x9cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158F08, serialNumber=B2A784EE85F5538367297B51C0868F8F1C02F911 Validity Not Before: Mar 2 02:02:14 2026 GMT Not After : Mar 9 02:02:14 2026 GMT Subject: CN=69a4efa7-782f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:35:25:e9:b2:33:60:f2:72:dc:94:33:45:56: 95:77:31:ee:ec:62:75:37:20:06:3a:70:e0:e4:01: f3:71:74:2b:b7:8d:2b:03:fb:7d:15:36:21:98:0a: 74:43:c0:8b:a2:ca:d3:94:90:d4:06:40:84:d1:dd: 17:1e:21:ba:40:32:0e:76:45:5f:4a:e6:34:ad:7f: 59:f9:92:33:32:96:de:c8:ac:80:3d:05:32:73:cb: ab:45:fd:41:88:ce:da:a3:17:71:84:94:3b:9e:6c: c9:be:70:b0:c1:de:ae:af:cb:0a:a3:41:01:01:e0: 9f:ad:ff:d8:c2:df:64:69:26:4d:d7:1a:e2:77:1e: 0a:a7:d0:71:b5:91:d3:85:26:4a:8c:81:8e:93:67: 1b:48:59:df:12:4f:88:99:43:57:00:46:43:bf:bc: e6:cf:d6:d0:2b:97:f8:ed:2a:9a:36:e3:22:70:22: 00:51:27:95:fe:27:0f:ce:2d:9e:a6:66:e0:d0:df: 44:66:a3:83:bd:18:ee:39:bc:60:c6:4b:8f:d1:c3: cb:9e:eb:3d:7e:5f:5a:78:92:82:01:25:fc:29:a0: ae:4b:e9:4e:e0:04:1a:34:82:47:62:18:d9:50:68: 17:f9:7f:79:1b:be:0f:ee:27:3b:fe:c0:ed:12:15: 09:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:8F:E3:17:19:1C:CF:85:E4:01:AB:C2:DB:1B:BE:F3:B8:A5:92:CB X509v3 Authority Key Identifier: keyid:B2:A7:84:EE:85:F5:53:83:67:29:7B:51:C0:86:8F:8F:1C:02:F9:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqeE7oX1U4NnKXtRwIaPjxwC-RE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:cb:0c:0d:0d:4a:1f:b6:70:e2:55:e7:17:79:54:de:3f:9e: 49:f6:d1:f3:51:b3:d0:fd:3d:4c:22:62:36:5b:01:63:7d:14: cb:6c:29:64:40:16:53:6c:72:d3:8b:79:8e:17:ae:e3:68:6b: e7:b0:6e:01:a2:65:60:9e:06:1b:a3:14:60:e0:56:32:80:5d: c4:a4:49:95:ea:24:ad:2e:bc:bc:f1:c6:e7:44:c8:15:e4:08: 60:8e:88:91:11:97:fa:9f:39:2d:6a:c4:42:0f:01:cd:7d:ba: 95:c1:ba:b9:39:55:3a:6f:a8:eb:f6:c8:1a:39:13:d4:22:e9: 9b:90:38:4a:b2:a6:d1:5d:32:48:38:de:51:52:97:dd:ba:cd: 6f:9c:83:35:0d:a2:33:f1:e8:58:26:64:fb:66:48:c8:a0:44: 4d:81:49:ca:cb:bb:82:2d:f0:0e:2c:87:c6:69:4a:6e:05:9a: 9c:ce:42:4e:3b:65:40:89:ac:ed:5e:b2:b4:7f:93:26:9e:c8: 6f:59:ed:b5:40:31:c2:38:1d:3e:e6:60:dd:44:81:34:2e:35: 23:02:a0:03:f7:37:df:b5:99:38:09:28:be:72:74:2d:da:f2: 3c:64:05:8d:ca:99:94:95:8c:54:a6:8c:cc:a7:be:73:17:c6: 96:97:b5:16 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThGMDgxMTAvBgNVBAUTKEIyQTc4NEVFODVGNTUzODM2NzI5N0I1MUMwODY4RjhG MUMwMkY5MTEwHhcNMjYwMzAyMDIwMjE0WhcNMjYwMzA5MDIwMjE0WjAYMRYwFAYD VQQDEw02OWE0ZWZhNy03ODJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAujUl6bIzYPJy3JQzRVaVdzHu7GJ1NyAGOnDg5AHzcXQrt40rA/t9FTYhmAp0 Q8CLosrTlJDUBkCE0d0XHiG6QDIOdkVfSuY0rX9Z+ZIzMpbeyKyAPQUyc8urRf1B iM7aoxdxhJQ7nmzJvnCwwd6ur8sKo0EBAeCfrf/Ywt9kaSZN1xridx4Kp9BxtZHT hSZKjIGOk2cbSFnfEk+ImUNXAEZDv7zmz9bQK5f47SqaNuMicCIAUSeV/icPzi2e pmbg0N9EZqODvRjuObxgxkuP0cPLnus9fl9aeJKCASX8KaCuS+lO4AQaNIJHYhjZ UGgX+X95G74P7ic7/sDtEhUJ2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK2P4xcZ HM+F5AGrwtsbvvO4pZLLMB8GA1UdIwQYMBaAFLKnhO6F9VODZyl7UcCGj48cAvkR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEYwOC81QjE3RjZEMjA3 RDAxMUVBQTQ4NDg2NDRDNEY5QUUwMi9zcWVFN29YMVU0Tm5LWHRSd0lhUGp4d0Mt UkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NxZUU3b1gxVTRObktYdFJ3SWFQanh3Qy1SRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEYwOC81QjE3RjZEMjA3RDAxMUVBQTQ4NDg2NDRDNEY5QUUwMi9zcWVFN29YMVU0 Tm5LWHRSd0lhUGp4d0MtUkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEssMDQ1KH7Zw4lXnF3lU3j+eSfbR81Gz0P09TCJiNlsBY30Uy2wpZEAWU2xy 04t5jheu42hr57BuAaJlYJ4GG6MUYOBWMoBdxKRJleokrS68vPHG50TIFeQIYI6I kRGX+p85LWrEQg8BzX26lcG6uTlVOm+o6/bIGjkT1CLpm5A4SrKm0V0ySDjeUVKX 3brNb5yDNQ2iM/HoWCZk+2ZIyKBETYFJysu7gi3wDiyHxmlKbgWanM5CTjtlQIms 7V6ytH+TJp7Ib1nttUAxwjgdPuZg3USBNC41IwKgA/c337WZOAkovnJ0LdryPGQF jcqZlJWMVKaMzKe+cxfGlpe1Fg== -----END CERTIFICATE-----Generated at Mon Mar 2 14:43:52 2026 by rpki-client