$ rpki-client -vvf rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft File: QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft (raw, json) Hash identifier: fiAasyglJ3qnPTreRy+IpWBfOc6COaRZVc+B7fO0Ozc= Subject key identifier: D4:0A:29:CD:54:69:87:74:99:7E:33:E5:E4:F9:65:9E:1F:E7:72:31 Authority key identifier: 42:B7:49:E1:EC:DB:E0:30:74:7F:8C:B5:74:7F:2D:73:A5:E4:24:54 Certificate issuer: /CN=A915D6C2/serialNumber=42B749E1ECDBE030747F8CB5747F2D73A5E42454 Certificate serial: 04FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft Manifest number: 04E9 Signing time: Mon 02 Mar 2026 00:44:28 +0000 Manifest this update: Mon 02 Mar 2026 00:44:25 +0000 Manifest next update: Mon 09 Mar 2026 00:44:25 +0000 Files and hashes: 1: QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.crl (hash: 0BGL3yvlwMZoEAB+KCZa/Q30gmOJELiTmaQsomTwaXc=) 2: 5808B946B73A11ED8A2A8964C4F9AE02.roa (hash: l82fYq1x4u49vmBmNnG130HVCjkEDSzOMLfbwYG7C8U=) 3: 58A4A3E2B73A11ED8A2A8964C4F9AE02.roa (hash: yq/8yNnq6a4ASHoRBlMWzxoMD3auQ65vuNtbtSiVuBA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.crl rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1274 (0x4fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D6C2, serialNumber=42B749E1ECDBE030747F8CB5747F2D73A5E42454 Validity Not Before: Mar 2 00:44:25 2026 GMT Not After : Mar 9 00:44:25 2026 GMT Subject: CN=69a4dd6c-24dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:74:60:2a:c4:45:1b:f3:c1:23:e7:d4:6b:67: b3:57:b0:36:3e:c4:93:d9:3d:50:52:22:f1:3e:b4: fa:24:c5:cc:b5:e8:ce:9b:0f:9e:d2:c8:c0:f8:1b: e5:23:31:b5:4c:84:2c:30:4c:ba:7d:de:49:fe:67: 6d:05:f4:d2:7d:7c:df:c1:3b:76:d1:49:05:4e:db: 48:c7:9e:3e:88:71:37:cf:3a:cb:15:17:ab:77:c9: 30:d5:90:3d:35:70:9e:d4:2b:b4:3d:9c:5b:0c:8c: 88:a2:7e:02:a7:f0:1b:7e:d4:28:3e:84:f9:56:5a: 3f:92:e8:c0:dc:47:ff:49:3f:a3:78:03:aa:2b:0b: 36:35:6d:2c:fd:02:a9:99:57:3d:80:3b:38:16:2d: da:3b:fc:4c:02:0e:85:30:58:e0:a4:64:7f:78:c0: dd:cd:71:c6:48:4d:ff:88:d5:04:ed:02:85:c7:5c: df:3d:6d:9a:e9:6b:fe:eb:7f:95:07:85:c2:2d:74: 34:c0:91:6a:be:85:f8:51:13:85:5d:d7:85:69:64: 59:37:0f:c9:d0:ba:23:21:1c:c7:60:ce:19:5a:b3: ab:38:8a:b1:2e:8c:16:b2:55:01:38:28:98:b2:4d: 8a:f3:71:94:c4:6b:b8:fe:83:d7:c2:88:7c:dc:f4: 38:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:0A:29:CD:54:69:87:74:99:7E:33:E5:E4:F9:65:9E:1F:E7:72:31 X509v3 Authority Key Identifier: keyid:42:B7:49:E1:EC:DB:E0:30:74:7F:8C:B5:74:7F:2D:73:A5:E4:24:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:7e:6a:40:d0:9f:ae:75:85:df:73:e2:aa:e9:6a:13:2a:b3: fb:81:7f:65:45:74:ce:7b:dc:fd:34:50:b2:ae:35:25:36:21: 31:6a:32:36:d6:3e:cd:3a:68:bc:47:c7:aa:c7:99:f4:14:fa: e7:13:b2:96:7b:9f:51:fe:b7:aa:d1:49:0b:25:78:8b:87:9f: a4:3b:9a:2b:30:5a:10:2f:8d:69:12:db:31:48:13:44:db:f9: 99:40:97:8b:0c:0d:58:70:bd:e1:81:f5:09:2f:8d:b8:95:ac: 51:94:5a:3e:65:50:da:b0:13:50:a9:39:ce:62:72:b4:99:b9: 14:05:d6:96:ca:05:4b:ec:d7:ee:34:e7:f3:09:38:20:ff:74: f3:a7:46:8c:67:de:61:12:0d:5a:8e:bc:ba:6d:36:a3:df:6c: f9:a5:bc:c7:f9:bb:71:1a:20:7a:87:92:57:f9:5e:8b:94:77: 23:bd:f7:8f:0a:79:fa:83:09:be:ef:64:ce:48:ed:5f:02:c9: d3:bc:40:06:b6:b9:0c:bf:55:a7:42:aa:12:a3:93:0a:b8:ca: 62:60:f2:55:a9:2f:08:f5:de:4d:37:63:90:79:99:8f:35:d8: ac:c5:fb:5c:69:c6:04:01:0d:d6:fc:27:0a:99:c1:a1:b2:48: 72:02:83:07 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ2QzIxMTAvBgNVBAUTKDQyQjc0OUUxRUNEQkUwMzA3NDdGOENCNTc0N0YyRDcz QTVFNDI0NTQwHhcNMjYwMzAyMDA0NDI1WhcNMjYwMzA5MDA0NDI1WjAYMRYwFAYD VQQDEw02OWE0ZGQ2Yy0yNGRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqHRgKsRFG/PBI+fUa2ezV7A2PsST2T1QUiLxPrT6JMXMtejOmw+e0sjA+Bvl IzG1TIQsMEy6fd5J/mdtBfTSfXzfwTt20UkFTttIx54+iHE3zzrLFRerd8kw1ZA9 NXCe1Cu0PZxbDIyIon4Cp/AbftQoPoT5Vlo/kujA3Ef/ST+jeAOqKws2NW0s/QKp mVc9gDs4Fi3aO/xMAg6FMFjgpGR/eMDdzXHGSE3/iNUE7QKFx1zfPW2a6Wv+63+V B4XCLXQ0wJFqvoX4UROFXdeFaWRZNw/J0LojIRzHYM4ZWrOrOIqxLowWslUBOCiY sk2K83GUxGu4/oPXwoh83PQ4GQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNQKKc1U aYd0mX4z5eT5ZZ4f53IxMB8GA1UdIwQYMBaAFEK3SeHs2+AwdH+MtXR/LXOl5CRU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDZDMi9GOUM0NkZBQzUz QTIxMUVDOUQ1RTYxNURDNEY5QUUwMi9RcmRKNGV6YjREQjBmNHkxZEg4dGM2WGtK RlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FyZEo0ZXpiNERCMGY0eTFkSDh0YzZYa0pGUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDZDMi9GOUM0NkZBQzUzQTIxMUVDOUQ1RTYxNURDNEY5QUUwMi9RcmRKNGV6YjRE QjBmNHkxZEg4dGM2WGtKRlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAp35qQNCfrnWF33PiqulqEyqz+4F/ZUV0znvc/TRQsq41JTYhMWoyNtY+zTpo vEfHqseZ9BT65xOylnufUf63qtFJCyV4i4efpDuaKzBaEC+NaRLbMUgTRNv5mUCX iwwNWHC94YH1CS+NuJWsUZRaPmVQ2rATUKk5zmJytJm5FAXWlsoFS+zX7jTn8wk4 IP9086dGjGfeYRINWo68um02o99s+aW8x/m7cRogeoeSV/lei5R3I733jwp5+oMJ vu9kzkjtXwLJ07xABra5DL9Vp0KqEqOTCrjKYmDyVakvCPXeTTdjkHmZjzXYrMX7 XGnGBAEN1vwnCpnBobJIcgKDBw== -----END CERTIFICATE-----Generated at Mon Mar 2 03:56:58 2026 by rpki-client