$ rpki-client -vvf rpki.apnic.net/member_repository/A917C09A/B2966D9EEAD711F0B9CBFBE6646F56BC/Qe0RfxoN1CRX1JR491zcsoZTpx8.mft File: Qe0RfxoN1CRX1JR491zcsoZTpx8.mft (raw, json) Hash identifier: jq60f4zwwSNxdAS2gsvhI44hdgdeltktcv8vcFIUE4A= Subject key identifier: 04:6B:BD:40:4D:AC:8F:D4:1A:4A:59:FB:9C:AE:35:EC:CB:BE:05:4D Authority key identifier: 41:ED:11:7F:1A:0D:D4:24:57:D4:94:78:F7:5C:DC:B2:86:53:A7:1F Certificate issuer: /CN=A917C09A/serialNumber=41ED117F1A0DD42457D49478F75CDCB28653A71F Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qe0RfxoN1CRX1JR491zcsoZTpx8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C09A/B2966D9EEAD711F0B9CBFBE6646F56BC/Qe0RfxoN1CRX1JR491zcsoZTpx8.mft Manifest number: 20 Signing time: Sun 01 Mar 2026 10:20:01 +0000 Manifest this update: Sun 01 Mar 2026 10:20:01 +0000 Manifest next update: Sun 08 Mar 2026 10:20:01 +0000 Files and hashes: 1: Qe0RfxoN1CRX1JR491zcsoZTpx8.crl (hash: 7+CwCzz+7DQb280R97OD8Pj9lpRhNz935BvYD1dC/LM=) 2: 0C544A5EEAD811F0B5BDA80D656F56BC.roa (hash: CiRm4DIYsmYYVk9ph7+Qrr/TAwJAj6FY/60x7MRfKDY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C09A/B2966D9EEAD711F0B9CBFBE6646F56BC/Qe0RfxoN1CRX1JR491zcsoZTpx8.crl rsync://rpki.apnic.net/member_repository/A917C09A/B2966D9EEAD711F0B9CBFBE6646F56BC/Qe0RfxoN1CRX1JR491zcsoZTpx8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qe0RfxoN1CRX1JR491zcsoZTpx8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:20:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C09A, serialNumber=41ED117F1A0DD42457D49478F75CDCB28653A71F Validity Not Before: Mar 1 10:20:01 2026 GMT Not After : Mar 8 10:20:01 2026 GMT Subject: CN=69a412d1-781f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e6:19:24:6c:51:35:f8:b8:8c:e2:bd:3b:18: 9a:ba:97:97:4a:44:69:6e:18:b8:e3:6b:00:22:c8: e4:fa:24:60:77:af:76:7e:db:69:c9:86:3b:da:7c: d3:34:91:b5:20:a5:01:89:97:72:1e:00:60:22:a6: a4:34:c5:b8:fe:2d:26:97:d5:3b:7e:15:69:d0:e5: 04:16:7a:18:10:b3:48:00:cb:2e:a9:86:02:11:0b: 78:f4:60:61:2b:b6:0e:bf:8b:c2:53:06:9a:f5:db: fc:b1:cb:33:20:cb:f1:4b:1b:0d:c9:3d:41:82:29: ac:79:6b:cb:0c:f0:d6:77:c7:9d:fe:bb:87:9e:b1: c1:16:51:08:fa:ce:81:ba:78:13:ce:4a:0a:3f:0a: e4:c1:7c:17:48:af:7b:ba:12:4b:52:76:fc:87:b5: 41:ab:2a:a7:33:aa:e9:fa:c3:a3:33:10:06:98:ba: ac:e5:19:12:b3:ba:71:1b:a0:da:51:84:18:da:f7: 13:67:f7:60:57:32:bd:9c:72:e0:46:de:67:58:ab: 72:ac:da:94:36:ee:2e:33:b9:51:ec:76:3b:b0:ed: 2c:b9:09:86:d8:a4:f1:f7:a6:a5:13:d2:91:cf:0d: e8:f4:c7:33:a2:87:b6:4d:54:b4:40:b1:a9:18:57: 4a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:6B:BD:40:4D:AC:8F:D4:1A:4A:59:FB:9C:AE:35:EC:CB:BE:05:4D X509v3 Authority Key Identifier: keyid:41:ED:11:7F:1A:0D:D4:24:57:D4:94:78:F7:5C:DC:B2:86:53:A7:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C09A/B2966D9EEAD711F0B9CBFBE6646F56BC/Qe0RfxoN1CRX1JR491zcsoZTpx8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qe0RfxoN1CRX1JR491zcsoZTpx8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C09A/B2966D9EEAD711F0B9CBFBE6646F56BC/Qe0RfxoN1CRX1JR491zcsoZTpx8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:61:0b:05:62:5a:2d:3d:1d:a4:fc:9b:66:0e:8a:b1:86:24: b6:ea:bf:02:59:7b:59:b5:39:2d:d4:55:31:ef:c5:7c:3a:4d: 11:14:7e:a9:a8:1d:d1:f0:1d:31:bf:a4:57:ef:10:98:57:71: 3b:2a:ef:dc:be:a3:a7:cd:12:d6:75:1e:70:a2:5e:9d:27:03: 69:00:0a:b1:d1:e5:28:32:5c:66:7e:34:21:8f:90:6e:09:bb: a5:e1:3b:eb:55:83:8b:6a:ea:43:8b:ab:f0:21:dd:16:4f:96: 8b:f9:16:0a:35:a5:06:05:f3:dc:fb:13:be:91:45:63:27:cb: e5:8a:19:de:6d:e1:af:a9:84:4e:d8:bb:c4:1d:fe:62:69:2c: ef:1d:25:f0:cb:6c:41:93:85:a2:09:ad:bb:b6:f6:f6:b5:7e: a1:05:34:59:88:de:83:13:33:88:e6:50:f5:24:71:b6:bf:be: 51:44:aa:e8:3d:2e:f4:b8:aa:f7:fa:44:fe:3b:d2:1e:93:ab: e0:04:de:02:2c:c2:03:50:03:e6:e2:39:cc:03:34:50:1e:4e: be:49:8f:26:d1:ac:4d:8a:9a:d6:f5:82:a5:e6:98:c1:34:36: a7:91:16:f9:c8:b1:e2:82:ce:fb:b0:18:b9:23:49:48:b9:f9: 28:b3:34:da -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QzA5QTExMC8GA1UEBRMoNDFFRDExN0YxQTBERDQyNDU3RDQ5NDc4Rjc1Q0RDQjI4 NjUzQTcxRjAeFw0yNjAzMDExMDIwMDFaFw0yNjAzMDgxMDIwMDFaMBgxFjAUBgNV BAMTDTY5YTQxMmQxLTc4MWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCq5hkkbFE1+LiM4r07GJq6l5dKRGluGLjjawAiyOT6JGB3r3Z+22nJhjvafNM0 kbUgpQGJl3IeAGAipqQ0xbj+LSaX1Tt+FWnQ5QQWehgQs0gAyy6phgIRC3j0YGEr tg6/i8JTBpr12/yxyzMgy/FLGw3JPUGCKax5a8sM8NZ3x53+u4eescEWUQj6zoG6 eBPOSgo/CuTBfBdIr3u6EktSdvyHtUGrKqczqun6w6MzEAaYuqzlGRKzunEboNpR hBja9xNn92BXMr2ccuBG3mdYq3Ks2pQ27i4zuVHsdjuw7Sy5CYbYpPH3pqUT0pHP Dej0xzOih7ZNVLRAsakYV0pFAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUBGu9QE2s j9QaSln7nK417Mu+BU0wHwYDVR0jBBgwFoAUQe0RfxoN1CRX1JR491zcsoZTpx8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdDMDlBL0IyOTY2RDlFRUFE NzExRjBCOUNCRkJFNjY0NkY1NkJDL1FlMFJmeG9OMUNSWDFKUjQ5MXpjc29aVHB4 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUWUwUmZ4b04xQ1JYMUpSNDkxemNzb1pUcHg4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdD MDlBL0IyOTY2RDlFRUFENzExRjBCOUNCRkJFNjY0NkY1NkJDL1FlMFJmeG9OMUNS WDFKUjQ5MXpjc29aVHB4OC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBPYQsFYlotPR2k/JtmDoqxhiS26r8CWXtZtTkt1FUx78V8Ok0RFH6pqB3R8B0x v6RX7xCYV3E7Ku/cvqOnzRLWdR5wol6dJwNpAAqx0eUoMlxmfjQhj5BuCbul4Tvr VYOLaupDi6vwId0WT5aL+RYKNaUGBfPc+xO+kUVjJ8vlihnebeGvqYRO2LvEHf5i aSzvHSXwy2xBk4WiCa27tvb2tX6hBTRZiN6DEzOI5lD1JHG2v75RRKroPS70uKr3 +kT+O9Iek6vgBN4CLMIDUAPm4jnMAzRQHk6+SY8m0axNiprW9YKl5pjBNDankRb5 yLHigs77sBi5I0lIufkoszTa -----END CERTIFICATE-----Generated at Mon Mar 2 00:49:58 2026 by rpki-client