$ rpki-client -vvf rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft File: qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft (raw, json) Hash identifier: YedFmhOitXqFSFxxHkU5saVavrHyq0m76yLvXSl4VO4= Subject key identifier: 05:55:20:9A:AA:62:D8:0E:CE:A9:99:46:70:7C:AD:6E:5F:44:29:DA Authority key identifier: A8:56:8F:52:79:3C:C3:48:57:85:0C:4F:2E:D3:8A:E0:B1:89:70:F8 Certificate issuer: /CN=A9184324/serialNumber=A8568F52793CC34857850C4F2ED38AE0B18970F8 Certificate serial: 0142 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qFaPUnk8w0hXhQxPLtOK4LGJcPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft Manifest number: 012D Signing time: Fri 17 Apr 2026 05:20:24 +0000 Manifest this update: Fri 17 Apr 2026 05:20:24 +0000 Manifest next update: Fri 24 Apr 2026 05:20:24 +0000 Files and hashes: 1: qFaPUnk8w0hXhQxPLtOK4LGJcPg.crl (hash: khyeNiYx4MJcZPzYx29/e5OFbbwxsT8H1zLiKZZF2jA=) 2: 49AD69BAB97A11F082553162C4F9AE02.roa (hash: u+AOQs7swlbtyTKzbGqH0JVVjQoXfbRTN0aGMPHqYwM=) 3: 5C8F63FE7C4911EF81434A2DC4F9AE02.roa (hash: FTfGtoGrUVwrnxaveaM8/TkkP8CeSjEWf8+UAR8ONdk=) 4: 48C56FF2B97A11F082553162C4F9AE02.roa (hash: OtWdgE0NfWAtdp3sq2GPul7fJB1+qypIA/v5t4925Qw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.crl rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qFaPUnk8w0hXhQxPLtOK4LGJcPg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 05:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 322 (0x142) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184324, serialNumber=A8568F52793CC34857850C4F2ED38AE0B18970F8 Validity Not Before: Apr 17 05:20:24 2026 GMT Not After : Apr 24 05:20:24 2026 GMT Subject: CN=69e1c318-9358 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:52:53:50:2c:22:4f:a9:4c:1f:fe:f2:d8:42: 61:98:47:fd:97:97:b1:9a:4d:5a:4e:df:76:06:66: fc:d4:48:b6:ff:6b:40:87:21:4d:c2:b2:cd:49:8b: 8f:45:15:91:bc:f5:ed:49:96:4c:5c:ad:2d:5a:67: d6:67:85:e1:7e:8a:f5:fc:a6:66:f8:c9:4a:9b:c8: dd:9f:01:1d:f5:a8:62:e7:12:13:4c:1e:7a:a6:d2: 59:cc:87:ee:28:6e:02:2e:9d:fd:fc:2c:d7:bc:65: 53:0f:03:11:57:43:1b:e9:b6:1e:79:4f:5e:7f:9b: a1:5f:09:59:34:2a:52:cc:ed:aa:59:82:81:dd:d1: 9e:86:11:cb:e1:fb:60:cd:ef:90:2c:b3:30:40:fb: 53:4e:cf:15:9f:ba:52:d0:a5:cc:9d:6a:81:87:86: 5b:68:18:92:ef:a9:b5:9b:11:fd:a2:c1:3b:d7:c9: 3c:cd:0f:91:88:5a:7d:fa:30:6e:cf:7c:3d:b3:ca: 81:42:b6:5d:3e:b0:c3:28:51:a7:1d:8a:63:37:3a: 0d:8d:d4:f6:df:c2:42:d6:10:38:7b:51:8b:89:4f: a3:a7:af:72:d6:4c:d9:c9:be:87:db:86:19:97:c3: a9:fe:64:0a:51:33:f5:a1:7e:01:2f:55:c2:77:dd: 47:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:55:20:9A:AA:62:D8:0E:CE:A9:99:46:70:7C:AD:6E:5F:44:29:DA X509v3 Authority Key Identifier: keyid:A8:56:8F:52:79:3C:C3:48:57:85:0C:4F:2E:D3:8A:E0:B1:89:70:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qFaPUnk8w0hXhQxPLtOK4LGJcPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:bc:9f:55:97:a5:2b:f4:1e:fe:c2:01:a2:2e:f2:1f:60:6b: bd:a3:5c:13:af:77:1c:3b:a5:4c:58:e3:40:31:c0:27:2c:f3: d4:d8:31:34:3e:43:37:f8:ec:14:f3:91:da:30:a3:26:66:e0: ad:2e:4c:3d:95:6a:b1:5c:86:e5:7a:28:2b:28:7b:8a:6a:20: 98:ac:17:16:f6:29:c4:c0:ae:5b:7e:df:4c:18:0d:f3:19:8f: 5e:57:43:a2:5d:44:99:94:81:98:ed:72:a8:1b:79:91:55:2a: 4f:5f:87:d2:81:f0:95:62:25:7a:83:e8:8c:c4:44:18:dd:91: 96:43:1d:a5:72:af:0f:96:e4:56:00:b8:7c:68:e6:c9:db:06: 26:b0:ed:4e:23:2b:74:7b:71:a9:ba:b5:67:fb:f4:45:85:b0: 70:9c:2f:37:ea:51:1e:7e:4c:f2:d4:e9:f7:3a:85:08:6d:17: f2:a5:c9:b9:4b:86:69:25:53:c7:e4:31:1d:76:81:88:b0:a1: de:bb:44:11:eb:46:0a:1f:f4:a7:9a:85:1a:e5:d4:10:33:e7: f7:fb:02:5b:67:d9:8a:24:09:35:ab:a6:07:41:5d:a5:71:b1: f7:82:1d:e0:01:f7:8f:46:78:a9:ea:fd:26:97:44:13:4c:75: a9:52:f9:d7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQzMjQxMTAvBgNVBAUTKEE4NTY4RjUyNzkzQ0MzNDg1Nzg1MEM0RjJFRDM4QUUw QjE4OTcwRjgwHhcNMjYwNDE3MDUyMDI0WhcNMjYwNDI0MDUyMDI0WjAYMRYwFAYD VQQDEw02OWUxYzMxOC05MzU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvFJTUCwiT6lMH/7y2EJhmEf9l5exmk1aTt92Bmb81Ei2/2tAhyFNwrLNSYuP RRWRvPXtSZZMXK0tWmfWZ4Xhfor1/KZm+MlKm8jdnwEd9ahi5xITTB56ptJZzIfu KG4CLp39/CzXvGVTDwMRV0Mb6bYeeU9ef5uhXwlZNCpSzO2qWYKB3dGehhHL4ftg ze+QLLMwQPtTTs8Vn7pS0KXMnWqBh4ZbaBiS76m1mxH9osE718k8zQ+RiFp9+jBu z3w9s8qBQrZdPrDDKFGnHYpjNzoNjdT238JC1hA4e1GLiU+jp69y1kzZyb6H24YZ l8Op/mQKUTP1oX4BL1XCd91HMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAVVIJqq YtgOzqmZRnB8rW5fRCnaMB8GA1UdIwQYMBaAFKhWj1J5PMNIV4UMTy7TiuCxiXD4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDMyNC9FQUE5Q0NENDdC MUMxMUVGQUMxMDk0MTZDNEY5QUUwMi9xRmFQVW5rOHcwaFhoUXhQTHRPSzRMR0pj UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3FGYVBVbms4dzBoWGhReFBMdE9LNExHSmNQZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDMyNC9FQUE5Q0NENDdCMUMxMUVGQUMxMDk0MTZDNEY5QUUwMi9xRmFQVW5rOHcw aFhoUXhQTHRPSzRMR0pjUGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASryfVZelK/Qe/sIBoi7yH2BrvaNcE693HDulTFjjQDHAJyzz1NgxND5DN/js FPOR2jCjJmbgrS5MPZVqsVyG5XooKyh7imogmKwXFvYpxMCuW37fTBgN8xmPXldD ol1EmZSBmO1yqBt5kVUqT1+H0oHwlWIleoPojMREGN2RlkMdpXKvD5bkVgC4fGjm ydsGJrDtTiMrdHtxqbq1Z/v0RYWwcJwvN+pRHn5M8tTp9zqFCG0X8qXJuUuGaSVT x+QxHXaBiLCh3rtEEetGCh/0p5qFGuXUEDPn9/sCW2fZiiQJNaumB0FdpXGx94Id 4AH3j0Z4qer9JpdEE0x1qVL51w== -----END CERTIFICATE-----Generated at Fri Apr 17 20:51:12 2026 by rpki-client