$ rpki-client -vvf rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft File: _QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft (raw, json) Hash identifier: azZm+AynKcCglB0ClS8XjpzELurzNS9NjVXEfIkdpvs= Subject key identifier: 65:24:BD:38:C5:E9:34:76:08:74:F4:F9:B9:F2:75:D5:54:75:51:E2 Authority key identifier: FD:06:B1:50:85:57:F6:5F:68:CC:BA:3C:20:3E:CA:AD:07:5D:D1:9B Certificate issuer: /CN=A9188F6D/serialNumber=FD06B1508557F65F68CCBA3C203ECAAD075DD19B Certificate serial: 0DDC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft Manifest number: 0D8F Signing time: Thu 16 Apr 2026 17:57:46 +0000 Manifest this update: Thu 16 Apr 2026 17:57:46 +0000 Manifest next update: Thu 23 Apr 2026 17:57:46 +0000 Files and hashes: 1: _QaxUIVX9l9ozLo8ID7KrQdd0Zs.crl (hash: NR8j76pxY+DUCN0aV5N4/h5+kzj7CRTeQn2yPkXM3i8=) 2: C22B92AA081011EDBC3C4374C4F9AE02.roa (hash: WD74/2XgeAz/XgGtt1zWIcisMorpjdxcCpl+RUcYgd4=) 3: BA4B6EF2FFC611EEBEC2A923C4F9AE02.roa (hash: rSNRm7Q4WMCIBH8hkTL3prpi5y8Vemq3QMOyN8boMh0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.crl rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 17:57:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3548 (0xddc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188F6D, serialNumber=FD06B1508557F65F68CCBA3C203ECAAD075DD19B Validity Not Before: Apr 16 17:57:46 2026 GMT Not After : Apr 23 17:57:46 2026 GMT Subject: CN=69e1231a-f433 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d9:b1:7f:d0:4f:60:e2:12:02:83:1e:06:1d: 07:74:dd:a0:57:df:8d:a3:95:1d:f0:35:50:40:8f: 06:94:08:a0:c4:c1:83:43:e6:8c:2c:9a:ad:d8:3e: bc:80:d5:18:cc:ef:28:a1:4a:86:7d:70:fa:25:0b: 3a:00:78:c3:85:4e:cb:57:e9:31:97:ea:a5:f8:e2: 4a:c9:22:89:2e:23:32:56:a4:15:9e:36:1b:fc:98: 76:b5:36:a5:9a:5f:f4:44:1f:7d:5a:d6:e8:0c:d9: c7:43:eb:01:39:a7:48:62:66:bb:5a:ac:69:6d:cd: 90:fa:d8:9a:5f:3e:e3:b0:00:5d:a3:90:8d:58:67: 4b:6e:55:d6:51:c5:fc:f4:52:ae:1e:54:57:86:69: 1a:dd:f6:ac:0e:d4:fc:1a:f3:ea:ce:0f:c0:a6:39: 99:7e:e8:01:5a:d7:1b:34:14:51:9b:18:70:85:a0: f5:99:b0:ab:9e:40:e4:df:94:d0:54:be:61:f8:88: 6e:08:8c:4a:27:f4:96:34:8d:ff:7f:52:68:5a:bf: 4d:1e:b6:46:6e:2a:0b:75:a9:ce:b2:0e:7f:ea:90: 0a:e2:32:b3:5a:8d:2d:bc:e9:de:4d:7c:30:17:a5: 58:ad:7f:fa:0c:0a:71:ae:4e:9b:ab:1d:69:d1:ab: 2b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:24:BD:38:C5:E9:34:76:08:74:F4:F9:B9:F2:75:D5:54:75:51:E2 X509v3 Authority Key Identifier: keyid:FD:06:B1:50:85:57:F6:5F:68:CC:BA:3C:20:3E:CA:AD:07:5D:D1:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:bb:60:c1:6f:8a:b9:3a:4b:d7:b4:94:38:d8:df:43:ea:0b: ee:8a:c2:28:5a:e3:89:ba:1a:32:9e:ef:e0:f0:09:d2:e1:02: af:6f:6d:83:dd:ec:1d:99:da:e5:08:fd:5c:19:48:f2:4a:a7: 97:1b:9f:31:a5:87:f9:32:d2:a7:34:d1:dd:05:38:6d:ee:ad: 21:5d:e9:35:9c:03:74:06:ed:2c:5b:a2:e7:c0:bb:d4:29:95: 19:77:0a:f8:dc:b1:0b:eb:10:4d:34:c8:6a:6c:90:03:37:46: 38:a3:b6:c9:5e:a5:69:a7:25:8c:c1:1e:0f:d6:e5:24:55:1c: 05:aa:71:4b:3e:79:7d:02:4c:b8:2e:3d:2a:ce:f9:52:6a:fa: 32:87:0c:4a:48:56:fa:37:40:cb:54:26:3f:9a:75:6e:ef:aa: 1d:91:b9:8a:09:8f:e9:3d:f1:c2:a9:9f:17:dd:63:d4:14:7c: 31:a5:60:36:a5:1d:b4:2f:ed:42:b6:86:74:4c:93:6d:7c:d5: f2:d5:0d:88:96:f4:8f:f6:b8:da:90:df:d7:2b:4e:e8:5a:da: e8:6e:e5:6f:73:6c:3b:82:d9:e1:8a:97:8a:db:a0:1a:40:eb: 1d:5f:59:1f:52:41:6b:e9:d1:8f:5a:c5:66:80:62:b7:90:70: 74:9b:80:1f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhGNkQxMTAvBgNVBAUTKEZEMDZCMTUwODU1N0Y2NUY2OENDQkEzQzIwM0VDQUFE MDc1REQxOUIwHhcNMjYwNDE2MTc1NzQ2WhcNMjYwNDIzMTc1NzQ2WjAYMRYwFAYD VQQDEw02OWUxMjMxYS1mNDMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsdmxf9BPYOISAoMeBh0HdN2gV9+No5Ud8DVQQI8GlAigxMGDQ+aMLJqt2D68 gNUYzO8ooUqGfXD6JQs6AHjDhU7LV+kxl+ql+OJKySKJLiMyVqQVnjYb/Jh2tTal ml/0RB99WtboDNnHQ+sBOadIYma7Wqxpbc2Q+tiaXz7jsABdo5CNWGdLblXWUcX8 9FKuHlRXhmka3fasDtT8GvPqzg/ApjmZfugBWtcbNBRRmxhwhaD1mbCrnkDk35TQ VL5h+IhuCIxKJ/SWNI3/f1JoWr9NHrZGbioLdanOsg5/6pAK4jKzWo0tvOneTXww F6VYrX/6DApxrk6bqx1p0asroQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGUkvTjF 6TR2CHT0+bnyddVUdVHiMB8GA1UdIwQYMBaAFP0GsVCFV/ZfaMy6PCA+yq0HXdGb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEY2RC85QTVCMUE5RUY2 NkExMUU5QkY1MDY5N0FDNEY5QUUwMi9fUWF4VUlWWDlsOW96TG84SUQ3S3JRZGQw WnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19RYXhVSVZYOWw5b3pMbzhJRDdLclFkZDBacy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OEY2RC85QTVCMUE5RUY2NkExMUU5QkY1MDY5N0FDNEY5QUUwMi9fUWF4VUlWWDls OW96TG84SUQ3S3JRZGQwWnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAE7tgwW+KuTpL17SUONjfQ+oL7orCKFrjiboaMp7v4PAJ0uECr29tg93sHZna 5Qj9XBlI8kqnlxufMaWH+TLSpzTR3QU4be6tIV3pNZwDdAbtLFui58C71CmVGXcK +NyxC+sQTTTIamyQAzdGOKO2yV6laacljMEeD9blJFUcBapxSz55fQJMuC49Ks75 Umr6MocMSkhW+jdAy1QmP5p1bu+qHZG5igmP6T3xwqmfF91j1BR8MaVgNqUdtC/t QraGdEyTbXzV8tUNiJb0j/a42pDf1ytO6Fra6G7lb3NsO4LZ4YqXitugGkDrHV9Z H1JBa+nRj1rFZoBit5BwdJuAHw== -----END CERTIFICATE-----Generated at Fri Apr 17 13:16:58 2026 by rpki-client