$ rpki-client -vvf rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft File: QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft (raw, json) Hash identifier: iacZe1M0GOrdYfJP7oBR7p7kfLyLTTP5svnxAxBK5dM= Subject key identifier: 92:DD:A2:DA:13:83:24:64:41:CA:66:B9:56:D1:F3:7F:24:32:31:31 Authority key identifier: 42:75:8D:E0:CC:0C:F6:2C:2A:EE:E9:3E:0E:EE:67:90:3A:50:2C:CC Certificate issuer: /CN=A918DB4E/serialNumber=42758DE0CC0CF62C2AEEE93E0EEE67903A502CCC Certificate serial: 0CFF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnWN4MwM9iwq7uk-Du5nkDpQLMw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft Manifest number: 0CD7 Signing time: Sat 28 Feb 2026 18:38:09 +0000 Manifest this update: Sat 28 Feb 2026 18:38:09 +0000 Manifest next update: Sat 07 Mar 2026 18:38:09 +0000 Files and hashes: 1: QnWN4MwM9iwq7uk-Du5nkDpQLMw.crl (hash: kLUiYoN3uU6lu1mNB5ZqqnS8KwTl9F9o/lgj6fAcFTM=) 2: CF3CF4A2DECD11EFA34A7C66C4F9AE02.roa (hash: F380vpOPofocBjRftATvo9zddeY6Bmha6wqzogd2g+4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.crl rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnWN4MwM9iwq7uk-Du5nkDpQLMw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 18:38:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3327 (0xcff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918DB4E, serialNumber=42758DE0CC0CF62C2AEEE93E0EEE67903A502CCC Validity Not Before: Feb 28 18:38:09 2026 GMT Not After : Mar 7 18:38:09 2026 GMT Subject: CN=69a33611-893d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d0:ab:5c:87:1e:b4:eb:da:f2:06:f4:9e:a3: ad:d4:85:15:1d:c7:30:77:3d:70:fd:dd:bd:de:5b: b3:6b:7c:b4:7d:e8:5b:84:11:c0:f9:b6:6c:12:01: 5f:f0:31:a2:dd:22:ad:7d:00:fb:48:1b:96:90:97: 39:bd:60:f9:63:53:b6:c9:43:b7:f1:db:b2:f2:df: f5:95:43:52:84:3f:5c:04:21:56:de:e7:81:fb:35: 87:6b:3a:82:a8:7d:1d:a1:a2:b1:88:a1:86:45:f3: 44:a7:2a:6d:be:5b:74:31:60:d0:73:65:48:84:3a: 1d:38:0f:52:88:17:a8:9f:23:05:34:c6:6b:7c:27: f0:e7:21:b7:22:4b:63:8a:81:61:84:04:2a:fd:1b: a3:24:a9:6c:1e:a5:5c:06:8a:9a:6e:4b:d5:39:56: 2c:9d:28:0f:72:e0:69:e8:b5:c5:ce:72:2d:d0:20: 32:be:fa:ca:01:d8:69:50:b7:99:3c:5e:e1:41:e1: 65:49:c5:04:3f:c3:a0:dc:90:3e:d1:7d:26:1b:4b: 89:5d:d6:18:5b:69:c3:9b:b5:ae:c5:97:99:a4:fd: 91:fc:f9:5a:bb:c0:08:d0:c5:c5:df:57:5f:a3:5d: b2:bd:f1:69:fb:75:ba:a9:13:ef:6a:6b:40:a1:0a: 7f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:DD:A2:DA:13:83:24:64:41:CA:66:B9:56:D1:F3:7F:24:32:31:31 X509v3 Authority Key Identifier: keyid:42:75:8D:E0:CC:0C:F6:2C:2A:EE:E9:3E:0E:EE:67:90:3A:50:2C:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnWN4MwM9iwq7uk-Du5nkDpQLMw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:e7:8f:90:de:78:6a:cf:c2:1a:d1:69:c7:b7:b4:85:6c:5e: a6:eb:eb:f7:d3:05:62:30:49:bc:bd:c2:74:d8:69:a4:0f:c7: ea:b7:fd:38:19:2e:a0:a0:83:90:18:12:5c:70:36:5f:a9:db: 84:bd:99:d7:0d:4d:de:5d:40:01:d5:6f:be:8c:f8:b0:68:3d: 5b:2b:94:14:76:ea:81:78:a8:e7:a4:81:21:64:cf:fe:ed:04: 9b:7f:69:54:3d:7c:4c:41:86:47:5c:c9:ed:b2:09:80:3b:83: a1:5c:6c:72:0a:e3:d0:80:ba:83:94:74:33:ec:a7:36:db:80: 64:5b:26:f1:03:10:3e:64:7f:c7:c4:5f:79:60:06:5b:15:f0: 30:30:40:3b:8a:08:b2:75:46:e4:55:63:22:e6:48:8d:ae:1f: 9a:5e:90:1a:63:d8:29:79:5f:cb:c7:39:d5:31:75:e0:b9:6c: a3:7d:f1:2c:c8:3f:94:ab:a2:57:44:0d:00:dc:c8:0b:ed:a1: 26:db:8d:2e:f0:c5:0d:af:57:8b:49:e4:5f:b8:b6:a1:c9:2e: e5:d9:a1:37:95:ba:48:4e:ab:cb:57:9a:e0:d6:66:e6:da:ae: 5f:72:ad:27:ec:d4:02:83:dc:f3:3a:ad:60:14:73:9a:ff:38: e6:d1:17:cb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OERCNEUxMTAvBgNVBAUTKDQyNzU4REUwQ0MwQ0Y2MkMyQUVFRTkzRTBFRUU2Nzkw M0E1MDJDQ0MwHhcNMjYwMjI4MTgzODA5WhcNMjYwMzA3MTgzODA5WjAYMRYwFAYD VQQDDA02OWEzMzYxMS04OTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAotCrXIcetOva8gb0nqOt1IUVHccwdz1w/d293luza3y0fehbhBHA+bZsEgFf 8DGi3SKtfQD7SBuWkJc5vWD5Y1O2yUO38duy8t/1lUNShD9cBCFW3ueB+zWHazqC qH0doaKxiKGGRfNEpyptvlt0MWDQc2VIhDodOA9SiBeonyMFNMZrfCfw5yG3Iktj ioFhhAQq/RujJKlsHqVcBoqabkvVOVYsnSgPcuBp6LXFznIt0CAyvvrKAdhpULeZ PF7hQeFlScUEP8Og3JA+0X0mG0uJXdYYW2nDm7WuxZeZpP2R/Plau8AI0MXF31df o12yvfFp+3W6qRPvamtAoQp/EwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJLdotoT gyRkQcpmuVbR838kMjExMB8GA1UdIwQYMBaAFEJ1jeDMDPYsKu7pPg7uZ5A6UCzM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4REI0RS83N0U3RjlBMDBD RTUxMUVBQTIwREREODJDNEY5QUUwMi9RbldONE13TTlpd3E3dWstRHU1bmtEcFFM TXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FuV040TXdNOWl3cTd1ay1EdTVua0RwUUxNdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 REI0RS83N0U3RjlBMDBDRTUxMUVBQTIwREREODJDNEY5QUUwMi9RbldONE13TTlp d3E3dWstRHU1bmtEcFFMTXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAe+ePkN54as/CGtFpx7e0hWxepuvr99MFYjBJvL3CdNhppA/H6rf9OBkuoKCD kBgSXHA2X6nbhL2Z1w1N3l1AAdVvvoz4sGg9WyuUFHbqgXio56SBIWTP/u0Em39p VD18TEGGR1zJ7bIJgDuDoVxscgrj0IC6g5R0M+ynNtuAZFsm8QMQPmR/x8RfeWAG WxXwMDBAO4oIsnVG5FVjIuZIja4fml6QGmPYKXlfy8c51TF14Llso33xLMg/lKui V0QNANzIC+2hJtuNLvDFDa9Xi0nkX7i2ocku5dmhN5W6SE6ry1ea4NZm5tquX3Kt J+zUAoPc8zqtYBRzmv845tEXyw== -----END CERTIFICATE-----Generated at Sun Mar 1 20:24:24 2026 by rpki-client