$ rpki-client -vvf rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.mft File: Q2NMcBuh8e_Oj1aqatHbKUWh258.mft (raw, json) Hash identifier: HcSUZR8YZAkDoetGmENzncPzwk+WHzZ3hecADB9UXe8= Subject key identifier: 7E:A7:8C:A9:FC:C8:73:64:68:F7:C7:B4:68:8E:8D:E0:D2:4C:18:36 Authority key identifier: 43:63:4C:70:1B:A1:F1:EF:CE:8F:56:AA:6A:D1:DB:29:45:A1:DB:9F Certificate issuer: /CN=A918549C/serialNumber=43634C701BA1F1EFCE8F56AA6AD1DB2945A1DB9F Certificate serial: 0138 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q2NMcBuh8e_Oj1aqatHbKUWh258.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.mft Manifest number: 012F Signing time: Mon 02 Mar 2026 12:41:33 +0000 Manifest this update: Mon 02 Mar 2026 12:41:32 +0000 Manifest next update: Mon 09 Mar 2026 12:41:32 +0000 Files and hashes: 1: Q2NMcBuh8e_Oj1aqatHbKUWh258.crl (hash: 6sPBvenofpQhBZgDrtr0MnYDi7i0HHzCx6veMywPUtw=) 2: 9C6F77784A3211EFBDBCEB2FC4F9AE02.roa (hash: Nc9DSQfoP8lp71rB/yIzwnzaLGPXE+pUgVZdrBLN3aQ=) 3: ABA45B1A740611F0B304387CC4F9AE02.roa (hash: OVfLZckoEpK3JGWInUECPDQGk+Xrfp3yDMbbqPgOgYU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.crl rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q2NMcBuh8e_Oj1aqatHbKUWh258.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 12:41:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 312 (0x138) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918549C, serialNumber=43634C701BA1F1EFCE8F56AA6AD1DB2945A1DB9F Validity Not Before: Mar 2 12:41:32 2026 GMT Not After : Mar 9 12:41:32 2026 GMT Subject: CN=69a5857d-9254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7e:67:18:91:d9:d5:79:2c:df:49:24:85:dd: ec:c6:fc:da:19:91:62:5f:9b:ea:c4:e5:be:1a:74: f8:3c:ea:cd:74:8c:52:1d:df:f6:05:9a:db:e9:e4: 81:a6:2a:d3:db:38:48:3c:da:8a:8d:fd:ce:f3:13: 2b:c9:83:6a:01:ba:51:8d:d3:66:d1:7b:b4:53:02: 6e:36:a9:e0:82:5c:e4:db:c4:fd:a2:30:51:b7:d0: 42:b0:f4:af:cc:27:17:25:f8:29:28:9a:28:80:10: 96:d8:5c:0c:45:05:f5:f4:cb:27:b6:7a:01:98:8e: 6c:41:5f:33:f5:45:e5:3e:9b:10:59:15:cc:49:9e: eb:91:dd:5f:20:65:d6:f0:e7:8a:f3:33:c7:16:2e: b3:48:42:af:eb:6e:6c:61:1b:50:54:a5:b0:18:bd: 06:ef:78:3a:2d:28:7d:b7:11:23:6e:c5:29:e9:d0: 77:d0:3d:8f:ba:43:f0:b5:32:aa:cb:8f:df:bd:75: 41:ad:19:49:b3:b1:93:9d:9b:e5:98:4b:e8:0c:39: 68:d2:83:db:15:17:2a:45:0c:10:f3:22:f0:53:b5: c3:31:09:7e:e7:a1:dc:c7:b6:cf:97:d0:fa:6c:1a: 5d:80:2d:e3:68:7c:d1:4a:54:4d:89:35:31:c3:bb: cf:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:A7:8C:A9:FC:C8:73:64:68:F7:C7:B4:68:8E:8D:E0:D2:4C:18:36 X509v3 Authority Key Identifier: keyid:43:63:4C:70:1B:A1:F1:EF:CE:8F:56:AA:6A:D1:DB:29:45:A1:DB:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q2NMcBuh8e_Oj1aqatHbKUWh258.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:ba:45:28:87:ae:35:53:0e:7a:36:6a:2e:06:5d:ec:2b:b3: cb:45:ea:a2:20:4c:13:82:83:b7:b5:83:3a:dd:ef:26:39:4c: 95:2d:36:d1:58:ac:67:bf:d3:9e:66:0b:cd:50:1d:53:c5:db: 35:84:88:b8:1f:ea:7c:88:de:57:5d:78:33:dc:5f:0c:50:51: e2:d7:51:2d:d2:61:9d:74:47:7a:e8:1a:27:7d:0d:0f:40:29: b3:af:70:4a:da:4c:23:f2:b1:6c:de:43:32:af:8b:31:ad:9e: 16:bd:b1:ef:76:9e:33:e8:29:f8:9c:ac:9c:b6:f9:ed:ac:2d: 80:55:25:a8:a9:78:a8:3e:1b:4b:56:4c:a4:b7:cf:0b:63:bb: 8c:38:b9:f8:55:ee:34:52:33:98:b3:22:09:05:d7:33:6f:60: eb:19:3e:5e:24:69:83:fa:66:e7:a1:8e:5e:70:6e:8f:9d:dc: 26:3b:60:e5:87:4a:b0:af:1f:8a:c1:cc:79:97:e7:d1:43:7a: 1e:76:bd:98:68:fe:40:92:9a:f6:49:49:6d:15:d3:c7:4f:88: 3e:8c:eb:16:38:ca:34:5b:08:78:88:d3:ce:ab:aa:90:b2:5c: ba:b4:1e:73:0a:62:ea:1b:57:c3:fb:d1:9a:c3:15:23:ad:64: 4a:9d:02:c5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU0OUMxMTAvBgNVBAUTKDQzNjM0QzcwMUJBMUYxRUZDRThGNTZBQTZBRDFEQjI5 NDVBMURCOUYwHhcNMjYwMzAyMTI0MTMyWhcNMjYwMzA5MTI0MTMyWjAYMRYwFAYD VQQDEw02OWE1ODU3ZC05MjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy35nGJHZ1Xks30kkhd3sxvzaGZFiX5vqxOW+GnT4POrNdIxSHd/2BZrb6eSB pirT2zhIPNqKjf3O8xMryYNqAbpRjdNm0Xu0UwJuNqngglzk28T9ojBRt9BCsPSv zCcXJfgpKJoogBCW2FwMRQX19MsntnoBmI5sQV8z9UXlPpsQWRXMSZ7rkd1fIGXW 8OeK8zPHFi6zSEKv625sYRtQVKWwGL0G73g6LSh9txEjbsUp6dB30D2PukPwtTKq y4/fvXVBrRlJs7GTnZvlmEvoDDlo0oPbFRcqRQwQ8yLwU7XDMQl+56Hcx7bPl9D6 bBpdgC3jaHzRSlRNiTUxw7vPbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH6njKn8 yHNkaPfHtGiOjeDSTBg2MB8GA1UdIwQYMBaAFENjTHAbofHvzo9WqmrR2ylFoduf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTQ5Qy9ERTg3MThDNDRB MzExMUVGQjdCQkQ1MUNDNEY5QUUwMi9RMk5NY0J1aDhlX09qMWFxYXRIYktVV2gy NTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1EyTk1jQnVoOGVfT2oxYXFhdEhiS1VXaDI1OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTQ5Qy9ERTg3MThDNDRBMzExMUVGQjdCQkQ1MUNDNEY5QUUwMi9RMk5NY0J1aDhl X09qMWFxYXRIYktVV2gyNTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhLpFKIeuNVMOejZqLgZd7Cuzy0XqoiBME4KDt7WDOt3vJjlMlS020VisZ7/T nmYLzVAdU8XbNYSIuB/qfIjeV114M9xfDFBR4tdRLdJhnXRHeugaJ30ND0Aps69w StpMI/KxbN5DMq+LMa2eFr2x73aeM+gp+JysnLb57awtgFUlqKl4qD4bS1ZMpLfP C2O7jDi5+FXuNFIzmLMiCQXXM29g6xk+XiRpg/pm56GOXnBuj53cJjtg5YdKsK8f isHMeZfn0UN6Hna9mGj+QJKa9klJbRXTx0+IPozrFjjKNFsIeIjTzquqkLJcurQe cwpi6htXw/vRmsMVI61kSp0CxQ== -----END CERTIFICATE-----Generated at Mon Mar 2 17:17:03 2026 by rpki-client