$ rpki-client -vvf rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.mft File: Q2NMcBuh8e_Oj1aqatHbKUWh258.mft (raw, json) Hash identifier: U3d1b3b9r1dhel+KWT8nh/30Adst+TOIdl29ScyAkwo= Subject key identifier: 0B:05:6A:7A:B7:4D:49:A7:D9:28:C6:85:4D:ED:10:6F:8D:62:4F:44 Authority key identifier: 43:63:4C:70:1B:A1:F1:EF:CE:8F:56:AA:6A:D1:DB:29:45:A1:DB:9F Certificate issuer: /CN=A918549C/serialNumber=43634C701BA1F1EFCE8F56AA6AD1DB2945A1DB9F Certificate serial: 0154 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q2NMcBuh8e_Oj1aqatHbKUWh258.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.mft Manifest number: 0149 Signing time: Fri 17 Apr 2026 04:57:37 +0000 Manifest this update: Fri 17 Apr 2026 04:57:36 +0000 Manifest next update: Fri 24 Apr 2026 04:57:36 +0000 Files and hashes: 1: Q2NMcBuh8e_Oj1aqatHbKUWh258.crl (hash: 5RjyjDssAr9Gpiw/EAXYmI1BFq3zSQ7UlkGZ4LPA9BE=) 2: 9C6F77784A3211EFBDBCEB2FC4F9AE02.roa (hash: POI2gtWNO02fmkeuPIBgEnMpIQB9HpbIZTb9ltFjGKA=) 3: ABA45B1A740611F0B304387CC4F9AE02.roa (hash: NoRAYMKDz7ruenjU4EI/k6TTzNlrpDAvnAEzcechXd0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.crl rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q2NMcBuh8e_Oj1aqatHbKUWh258.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 04:57:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 340 (0x154) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918549C, serialNumber=43634C701BA1F1EFCE8F56AA6AD1DB2945A1DB9F Validity Not Before: Apr 17 04:57:36 2026 GMT Not After : Apr 24 04:57:36 2026 GMT Subject: CN=69e1bdc1-316d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:70:de:52:8e:72:81:0e:05:a0:96:27:29:e6: a0:2f:a2:32:ea:b2:a2:91:12:fa:19:a2:7f:d4:b7: 10:89:0a:06:b6:77:1f:6c:51:b9:6d:57:e2:a4:5f: b8:5e:de:e6:de:8e:e5:23:4e:32:4c:78:f6:43:98: c7:71:a0:54:1b:cf:80:18:e5:e4:0c:63:ef:10:bc: 83:7a:3c:7f:98:dc:65:5b:24:dd:e5:ad:e9:ec:b9: 90:fc:8c:c0:7d:c2:40:2c:42:a7:bf:5d:78:5f:71: f5:5f:15:af:28:92:53:9d:5c:45:8e:bc:21:ec:e7: 3d:79:ee:d2:81:65:dc:ce:98:19:0b:74:31:e3:17: 24:12:3a:9a:47:b7:cb:5e:b9:e9:0d:4a:31:85:b4: 70:cb:3d:c4:fe:72:f3:4a:16:72:2e:6b:d8:33:f5: 6d:68:1f:de:29:7d:d6:68:92:46:02:f9:ce:2e:f9: 4a:1e:f3:b5:f1:ed:58:ff:f4:45:ca:61:62:81:0a: 9d:29:80:ba:5a:22:0f:f3:27:09:50:e7:8a:7e:1c: 70:b3:d4:db:73:d2:20:a9:99:f2:f8:1b:31:b0:82: c4:0f:38:42:e6:93:c1:6c:18:45:f7:ba:a0:f1:0b: 90:dd:64:2b:23:82:2a:a9:7f:a0:0e:e1:1b:4f:3e: d5:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:05:6A:7A:B7:4D:49:A7:D9:28:C6:85:4D:ED:10:6F:8D:62:4F:44 X509v3 Authority Key Identifier: keyid:43:63:4C:70:1B:A1:F1:EF:CE:8F:56:AA:6A:D1:DB:29:45:A1:DB:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q2NMcBuh8e_Oj1aqatHbKUWh258.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:23:61:39:f5:b0:3f:5a:98:04:5b:1f:cb:5e:f9:d6:f9:f8: 30:3c:15:4d:a1:5e:96:5f:e7:a9:54:d8:11:df:d0:0d:f4:29: ee:92:d5:c7:39:9c:9c:ee:d3:d8:83:88:86:22:c5:ee:43:08: a6:dd:2b:29:e8:bc:bc:4d:84:e8:12:0c:dd:a8:dd:73:70:69: 72:9f:a2:33:85:56:d4:f0:ce:29:1b:5d:d2:72:7c:49:72:87: cd:90:8e:c7:67:5b:d3:2e:49:ea:35:78:a4:5f:9b:77:51:21: 8e:4a:ce:70:fb:96:72:43:0a:39:95:ab:92:0a:e5:30:d1:db: 5f:06:d6:29:3e:97:d0:bd:b5:73:b0:01:4c:c1:d6:79:53:e2: ab:28:2d:fc:4d:ef:cf:8c:66:09:4b:8f:ac:22:bf:d3:07:61: 54:6f:97:21:51:8e:ec:09:cc:b4:bd:f5:5d:b9:95:6b:ba:91: 7f:aa:fd:af:22:3b:07:13:ec:96:60:c4:60:31:df:88:22:9a: 36:a9:b3:aa:e9:3e:c7:c9:aa:be:52:af:2f:1e:78:cd:c1:e4: b6:02:17:94:73:41:42:d5:bc:9c:bc:6f:f9:f1:08:1c:10:ed: 08:7f:45:88:12:6d:73:23:20:b3:e5:02:82:a9:18:11:29:cf: 0d:35:46:ab -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU0OUMxMTAvBgNVBAUTKDQzNjM0QzcwMUJBMUYxRUZDRThGNTZBQTZBRDFEQjI5 NDVBMURCOUYwHhcNMjYwNDE3MDQ1NzM2WhcNMjYwNDI0MDQ1NzM2WjAYMRYwFAYD VQQDEw02OWUxYmRjMS0zMTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoXDeUo5ygQ4FoJYnKeagL6Iy6rKikRL6GaJ/1LcQiQoGtncfbFG5bVfipF+4 Xt7m3o7lI04yTHj2Q5jHcaBUG8+AGOXkDGPvELyDejx/mNxlWyTd5a3p7LmQ/IzA fcJALEKnv114X3H1XxWvKJJTnVxFjrwh7Oc9ee7SgWXczpgZC3Qx4xckEjqaR7fL XrnpDUoxhbRwyz3E/nLzShZyLmvYM/VtaB/eKX3WaJJGAvnOLvlKHvO18e1Y//RF ymFigQqdKYC6WiIP8ycJUOeKfhxws9Tbc9IgqZny+BsxsILEDzhC5pPBbBhF97qg 8QuQ3WQrI4IqqX+gDuEbTz7VJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAsFanq3 TUmn2SjGhU3tEG+NYk9EMB8GA1UdIwQYMBaAFENjTHAbofHvzo9WqmrR2ylFoduf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTQ5Qy9ERTg3MThDNDRB MzExMUVGQjdCQkQ1MUNDNEY5QUUwMi9RMk5NY0J1aDhlX09qMWFxYXRIYktVV2gy NTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1EyTk1jQnVoOGVfT2oxYXFhdEhiS1VXaDI1OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTQ5Qy9ERTg3MThDNDRBMzExMUVGQjdCQkQ1MUNDNEY5QUUwMi9RMk5NY0J1aDhl X09qMWFxYXRIYktVV2gyNTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHSNhOfWwP1qYBFsfy1751vn4MDwVTaFell/nqVTYEd/QDfQp7pLVxzmcnO7T 2IOIhiLF7kMIpt0rKei8vE2E6BIM3ajdc3Bpcp+iM4VW1PDOKRtd0nJ8SXKHzZCO x2db0y5J6jV4pF+bd1EhjkrOcPuWckMKOZWrkgrlMNHbXwbWKT6X0L21c7ABTMHW eVPiqygt/E3vz4xmCUuPrCK/0wdhVG+XIVGO7AnMtL31XbmVa7qRf6r9ryI7BxPs lmDEYDHfiCKaNqmzquk+x8mqvlKvLx54zcHktgIXlHNBQtW8nLxv+fEIHBDtCH9F iBJtcyMgs+UCgqkYESnPDTVGqw== -----END CERTIFICATE-----Generated at Fri Apr 17 20:36:16 2026 by rpki-client