$ rpki-client -vvf rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft File: qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft (raw, json) Hash identifier: duy+4KXA4iU7xVrngqAewdjfPZdGMjB+Kvpq1fcPals= Subject key identifier: C5:50:BA:42:1F:0E:F1:E0:99:73:5D:3B:2F:8F:9E:F0:82:3B:1E:FD Authority key identifier: A9:BC:CA:6D:34:D3:D5:F1:EF:F8:BB:E7:83:D4:97:73:81:3E:5E:F8 Certificate issuer: /CN=A9186E8A/serialNumber=A9BCCA6D34D3D5F1EFF8BBE783D49773813E5EF8 Certificate serial: 0896 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft Manifest number: 0848 Signing time: Thu 16 Apr 2026 21:12:09 +0000 Manifest this update: Thu 16 Apr 2026 21:12:08 +0000 Manifest next update: Thu 23 Apr 2026 21:12:08 +0000 Files and hashes: 1: qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl (hash: CyjPP7WoRn8NYc7islvXD7lW4c/76ZX3nGHYuWwHYTQ=) 2: 66C1BA862FBB11EB9B861059C4F9AE02.roa (hash: azCvE0MXDPIZCtICB6ofLTQq6LREywUXev2jJIJ9EIU=) 3: 26E184C2B56D11F0939EAE46C4F9AE02.roa (hash: azCbrnSmOuKDp+iW9o/dWdbmL/D2BIUAZALDZgMZy1k=) 4: 8554A0A86A8A11F0BBF66881C4F9AE02.roa (hash: jG2eCQQta7MNjU1JK1KYAfsYHPf3A4prUFHK/JzlfnI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 21:12:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2198 (0x896) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186E8A, serialNumber=A9BCCA6D34D3D5F1EFF8BBE783D49773813E5EF8 Validity Not Before: Apr 16 21:12:08 2026 GMT Not After : Apr 23 21:12:08 2026 GMT Subject: CN=69e150a8-428e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:51:39:69:84:ad:78:99:d1:83:e8:33:6a:17: 98:da:48:7f:b4:c1:1e:71:cf:c2:18:90:e6:b0:01: 4a:0b:08:00:d6:af:0d:b8:89:25:6d:36:e6:ae:53: 23:c2:ce:5b:e0:8c:33:11:91:d9:50:c4:8e:84:7b: b2:fe:28:85:73:9f:99:6d:e4:76:81:b7:72:06:ae: 0f:7e:5d:0b:52:ed:26:18:c0:00:74:56:a1:d3:43: 15:45:03:d8:1f:1e:ab:94:b3:17:6d:5d:31:11:0b: cd:69:a1:c4:5c:82:bf:7e:48:0b:57:41:86:bb:b7: 1a:4f:f9:3f:9a:e6:f0:cb:6a:00:82:6a:26:54:3f: 9f:31:68:a4:be:36:38:81:09:b1:b3:3f:62:e8:cd: 91:93:dc:d5:c0:4c:1b:b2:26:cc:d5:76:22:01:28: 1b:56:09:41:54:84:52:35:96:49:89:60:e2:02:82: f2:b3:61:c6:66:4c:3e:34:a4:d6:8b:80:28:3d:7b: e3:94:8d:95:e2:60:2f:46:07:d9:75:d6:e3:ed:ee: 0c:8b:14:be:aa:2c:78:e7:14:e6:fd:e0:4d:2c:fd: 27:18:bd:5a:3e:63:f3:e0:ea:4a:13:46:6f:d5:2c: 14:a4:68:6c:3e:2b:3e:c7:83:ce:c0:6a:7a:7b:af: 94:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:50:BA:42:1F:0E:F1:E0:99:73:5D:3B:2F:8F:9E:F0:82:3B:1E:FD X509v3 Authority Key Identifier: keyid:A9:BC:CA:6D:34:D3:D5:F1:EF:F8:BB:E7:83:D4:97:73:81:3E:5E:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:a7:45:00:dc:11:20:1a:96:60:5d:c1:37:49:01:61:8d:a0: d3:e8:0b:fd:ab:a7:b3:4d:5b:d7:58:72:53:32:5e:71:62:b5: bb:69:8f:59:0a:45:9b:be:03:e6:f4:82:3d:32:9a:45:44:90: dd:b5:1a:c4:0f:5c:11:a4:ce:79:ab:4b:3e:c5:e2:ff:90:12: c8:4a:bd:f7:bd:59:02:b6:31:1e:9e:35:72:ec:1f:fb:a2:90: 1b:8d:99:27:ad:04:bb:cf:5d:73:bd:cc:4e:e3:a7:c8:d3:cc: 32:be:f0:8d:a2:c4:f6:52:ea:97:63:ef:79:1b:1a:df:88:73: a3:b3:4d:35:e4:2a:68:a1:4f:f7:56:4f:fe:a2:5c:91:27:8c: 75:55:fa:82:5d:c9:a9:a8:15:45:20:9b:bf:21:cc:51:2c:be: 57:12:de:3d:ba:c2:26:76:64:c6:f9:de:d1:bf:db:63:b6:d2: c8:87:06:80:e3:42:a5:01:11:5d:99:ca:5d:d5:6b:44:aa:0d: 5d:2f:c1:d0:da:20:c2:d2:26:ca:a5:76:c3:5f:68:5b:c3:f4: d7:b2:62:6b:11:b0:8a:30:40:1a:82:80:9c:d7:db:27:66:58: 14:39:08:bb:d0:0c:2d:dc:9a:ab:cb:74:f0:10:58:5b:f9:f2: 97:e5:06:5c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZFOEExMTAvBgNVBAUTKEE5QkNDQTZEMzREM0Q1RjFFRkY4QkJFNzgzRDQ5Nzcz ODEzRTVFRjgwHhcNMjYwNDE2MjExMjA4WhcNMjYwNDIzMjExMjA4WjAYMRYwFAYD VQQDEw02OWUxNTBhOC00MjhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzlE5aYSteJnRg+gzaheY2kh/tMEecc/CGJDmsAFKCwgA1q8NuIklbTbmrlMj ws5b4IwzEZHZUMSOhHuy/iiFc5+ZbeR2gbdyBq4Pfl0LUu0mGMAAdFah00MVRQPY Hx6rlLMXbV0xEQvNaaHEXIK/fkgLV0GGu7caT/k/mubwy2oAgmomVD+fMWikvjY4 gQmxsz9i6M2Rk9zVwEwbsibM1XYiASgbVglBVIRSNZZJiWDiAoLys2HGZkw+NKTW i4AoPXvjlI2V4mAvRgfZddbj7e4MixS+qix45xTm/eBNLP0nGL1aPmPz4OpKE0Zv 1SwUpGhsPis+x4POwGp6e6+U8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMVQukIf DvHgmXNdOy+PnvCCOx79MB8GA1UdIwQYMBaAFKm8ym0009Xx7/i754PUl3OBPl74 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkU4QS8zQjQ3NkU3QzJE RkYxMUVCODY4QTkxMzVDNEY5QUUwMi9xYnpLYlRUVDFmSHYtTHZuZzlTWGM0RS1Y dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FiektiVFRUMWZIdi1Mdm5nOVNYYzRFLVh2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkU4QS8zQjQ3NkU3QzJERkYxMUVCODY4QTkxMzVDNEY5QUUwMi9xYnpLYlRUVDFm SHYtTHZuZzlTWGM0RS1YdmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnadFANwRIBqWYF3BN0kBYY2g0+gL/auns01b11hyUzJecWK1u2mPWQpFm74D 5vSCPTKaRUSQ3bUaxA9cEaTOeatLPsXi/5ASyEq9971ZArYxHp41cuwf+6KQG42Z J60Eu89dc73MTuOnyNPMMr7wjaLE9lLql2PveRsa34hzo7NNNeQqaKFP91ZP/qJc kSeMdVX6gl3JqagVRSCbvyHMUSy+VxLePbrCJnZkxvne0b/bY7bSyIcGgONCpQER XZnKXdVrRKoNXS/B0NogwtImyqV2w19oW8P017JiaxGwijBAGoKAnNfbJ2ZYFDkI u9AMLdyaq8t08BBYW/nyl+UGXA== -----END CERTIFICATE-----Generated at Fri Apr 17 19:38:52 2026 by rpki-client