$ rpki-client -vvf rpki.apnic.net/member_repository/A916E9E3/4E0E3714A3A411F092013E29C4F9AE02/QRX9yGsnZiNgOztkXUcIQLgDm8g.mft File: QRX9yGsnZiNgOztkXUcIQLgDm8g.mft (raw, json) Hash identifier: uWKtIAYiHMob1kEBzfJOCcQWIxzCSWPWrGFUnOjUbjw= Subject key identifier: B4:95:14:2E:95:87:86:CB:99:F6:36:32:7F:75:40:19:6F:67:83:48 Authority key identifier: 41:15:FD:C8:6B:27:66:23:60:3B:3B:64:5D:47:08:40:B8:03:9B:C8 Certificate issuer: /CN=A916E9E3/serialNumber=4115FDC86B276623603B3B645D470840B8039BC8 Certificate serial: 4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRX9yGsnZiNgOztkXUcIQLgDm8g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E9E3/4E0E3714A3A411F092013E29C4F9AE02/QRX9yGsnZiNgOztkXUcIQLgDm8g.mft Manifest number: 4B Signing time: Sun 01 Mar 2026 09:41:03 +0000 Manifest this update: Sun 01 Mar 2026 09:41:02 +0000 Manifest next update: Sun 08 Mar 2026 09:41:02 +0000 Files and hashes: 1: QRX9yGsnZiNgOztkXUcIQLgDm8g.crl (hash: op4MqDeVLDYr2AllZdbcBFJh4fsdh9aVLPXdDevdg4U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E9E3/4E0E3714A3A411F092013E29C4F9AE02/QRX9yGsnZiNgOztkXUcIQLgDm8g.crl rsync://rpki.apnic.net/member_repository/A916E9E3/4E0E3714A3A411F092013E29C4F9AE02/QRX9yGsnZiNgOztkXUcIQLgDm8g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRX9yGsnZiNgOztkXUcIQLgDm8g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:41:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75 (0x4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E9E3, serialNumber=4115FDC86B276623603B3B645D470840B8039BC8 Validity Not Before: Mar 1 09:41:02 2026 GMT Not After : Mar 8 09:41:02 2026 GMT Subject: CN=69a409ae-abb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:73:05:e1:f6:87:fc:43:9b:9e:48:bb:bd:79: ce:cd:3d:be:75:52:0e:e8:e0:62:ab:fe:0a:1e:0f: cf:7f:07:85:d8:09:76:c6:95:c1:38:66:f6:52:b4: bc:5a:a9:64:63:8c:e6:65:b0:99:71:3a:9f:a3:b4: 58:a5:42:06:8d:1c:f6:82:19:f9:a6:09:c7:fd:7a: 48:fe:4e:7b:12:64:1b:69:82:2b:ac:d1:c0:95:bc: bd:76:a0:89:79:18:9d:55:1f:39:96:0f:75:3d:11: ba:1a:7c:ab:fc:ec:95:dd:ef:4d:a6:45:48:22:24: 7a:fb:56:1b:ac:4c:c7:76:a3:9b:d7:26:73:69:32: 55:28:ce:c8:8d:9e:43:82:36:53:58:8a:f8:a8:36: 54:97:34:2a:d8:b3:52:bf:cc:c6:8c:1e:51:b3:9f: 94:e4:28:b2:7e:5b:63:22:aa:30:11:12:98:ec:be: 7c:6e:6d:4b:ef:7f:83:2b:8d:d2:c0:f5:3f:ba:c7: 96:b1:09:72:59:33:8b:94:60:12:a1:00:52:eb:33: e8:04:e5:fe:4f:4b:a8:d1:72:e6:0b:82:3f:95:6f: 8f:15:1f:b9:78:d2:7f:9c:42:08:01:92:f6:3c:d3: b5:8f:f3:e7:81:e8:13:d4:b1:17:96:69:a1:f1:da: 5a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:95:14:2E:95:87:86:CB:99:F6:36:32:7F:75:40:19:6F:67:83:48 X509v3 Authority Key Identifier: keyid:41:15:FD:C8:6B:27:66:23:60:3B:3B:64:5D:47:08:40:B8:03:9B:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E9E3/4E0E3714A3A411F092013E29C4F9AE02/QRX9yGsnZiNgOztkXUcIQLgDm8g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRX9yGsnZiNgOztkXUcIQLgDm8g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E9E3/4E0E3714A3A411F092013E29C4F9AE02/QRX9yGsnZiNgOztkXUcIQLgDm8g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:f6:7a:31:c6:17:73:7d:2a:b9:bb:82:3e:6c:31:01:a2:fa: 33:3d:db:c3:a6:b0:a5:91:a1:8f:c6:8b:ea:0b:ba:85:dd:14: 4b:29:f4:b2:bc:38:87:98:28:1b:5a:b8:44:52:b6:12:4a:5e: b7:dd:ed:6c:b3:6f:ed:e8:22:91:96:ad:17:2f:02:e4:1e:89: 2c:9e:fa:81:d6:36:57:8d:5e:86:ee:d8:e4:e5:7d:ea:b8:7c: 3d:a1:63:ee:64:73:52:0c:10:5b:ea:e0:b0:19:09:a0:1b:54: 68:b5:de:f8:b5:35:83:49:f6:30:35:89:31:0e:82:aa:13:8b: 29:b6:e6:60:34:2a:17:4f:25:cf:6f:0c:71:ba:04:46:74:d4: 72:43:cb:21:c6:6f:85:74:9c:81:f6:9a:45:e3:d2:60:1c:98: 37:94:91:2d:37:d4:0d:d4:2a:98:66:ef:76:0e:1c:f3:af:b3: 46:c1:fc:e1:e0:59:d2:1e:15:b4:63:8a:91:91:a9:ff:e1:be: af:63:d3:04:dd:28:8c:e2:a4:6e:65:ca:5a:25:92:b8:e6:01: d8:f3:be:85:a1:9d:5e:58:24:ae:06:fd:79:b2:e4:8d:04:63: 66:85:1f:53:78:08:95:21:28:96:5a:4e:cc:ce:1d:fd:02:e1: 13:51:1c:a8 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBSzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 RTlFMzExMC8GA1UEBRMoNDExNUZEQzg2QjI3NjYyMzYwM0IzQjY0NUQ0NzA4NDBC ODAzOUJDODAeFw0yNjAzMDEwOTQxMDJaFw0yNjAzMDgwOTQxMDJaMBgxFjAUBgNV BAMTDTY5YTQwOWFlLWFiYjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCdcwXh9of8Q5ueSLu9ec7NPb51Ug7o4GKr/goeD89/B4XYCXbGlcE4ZvZStLxa qWRjjOZlsJlxOp+jtFilQgaNHPaCGfmmCcf9ekj+TnsSZBtpgius0cCVvL12oIl5 GJ1VHzmWD3U9EboafKv87JXd702mRUgiJHr7VhusTMd2o5vXJnNpMlUozsiNnkOC NlNYivioNlSXNCrYs1K/zMaMHlGzn5TkKLJ+W2MiqjAREpjsvnxubUvvf4MrjdLA 9T+6x5axCXJZM4uUYBKhAFLrM+gE5f5PS6jRcuYLgj+Vb48VH7l40n+cQggBkvY8 07WP8+eB6BPUsReWaaHx2lopAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUtJUULpWH hsuZ9jYyf3VAGW9ng0gwHwYDVR0jBBgwFoAUQRX9yGsnZiNgOztkXUcIQLgDm8gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZFOUUzLzRFMEUzNzE0QTNB NDExRjA5MjAxM0UyOUM0RjlBRTAyL1FSWDl5R3NuWmlOZ096dGtYVWNJUUxnRG04 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUVJYOXlHc25aaU5nT3p0a1hVY0lRTGdEbThnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZF OUUzLzRFMEUzNzE0QTNBNDExRjA5MjAxM0UyOUM0RjlBRTAyL1FSWDl5R3NuWmlO Z096dGtYVWNJUUxnRG04Zy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCB9noxxhdzfSq5u4I+bDEBovozPdvDprClkaGPxovqC7qF3RRLKfSyvDiHmCgb WrhEUrYSSl633e1ss2/t6CKRlq0XLwLkHoksnvqB1jZXjV6G7tjk5X3quHw9oWPu ZHNSDBBb6uCwGQmgG1Rotd74tTWDSfYwNYkxDoKqE4sptuZgNCoXTyXPbwxxugRG dNRyQ8shxm+FdJyB9ppF49JgHJg3lJEtN9QN1CqYZu92Dhzzr7NGwfzh4FnSHhW0 Y4qRkan/4b6vY9ME3SiM4qRuZcpaJZK45gHY876FoZ1eWCSuBv15suSNBGNmhR9T eAiVISiWWk7Mzh39AuETURyo -----END CERTIFICATE-----Generated at Sun Mar 1 22:42:47 2026 by rpki-client