$ rpki-client -vvf rpki.apnic.net/member_repository/A9198D20/3F7703C21CE911EA98897487C4F9AE02/Q8PPEXS9crQ0xpKLir6_BdYxP0A.mft File: Q8PPEXS9crQ0xpKLir6_BdYxP0A.mft (raw, json) Hash identifier: geNY6xFEAj2wOr1Q9l4LquAxiKmCkUWldwU6OBTv/7s= Subject key identifier: 9C:A4:BE:ED:71:72:76:1A:0E:75:7F:84:00:EB:9D:34:F1:6E:51:EB Authority key identifier: 43:C3:CF:11:74:BD:72:B4:34:C6:92:8B:8A:BE:BF:05:D6:31:3F:40 Certificate issuer: /CN=A9198D20/serialNumber=43C3CF1174BD72B434C6928B8ABEBF05D6313F40 Certificate serial: 0C5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q8PPEXS9crQ0xpKLir6_BdYxP0A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198D20/3F7703C21CE911EA98897487C4F9AE02/Q8PPEXS9crQ0xpKLir6_BdYxP0A.mft Manifest number: 0C55 Signing time: Sun 01 Mar 2026 23:19:57 +0000 Manifest this update: Sun 01 Mar 2026 23:19:55 +0000 Manifest next update: Sun 08 Mar 2026 23:19:55 +0000 Files and hashes: 1: Q8PPEXS9crQ0xpKLir6_BdYxP0A.crl (hash: pwCzjeab4ZT6ucEnfdjcUmq2dSX0Xy8pf7UBE2nhaSU=) 2: EE985C561CEA11EA8B382C0BC4F9AE02.roa (hash: diYWHRcynFoZNmpx96scFvi/2rL0ZDdh90uxb6XZ5ZY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198D20/3F7703C21CE911EA98897487C4F9AE02/Q8PPEXS9crQ0xpKLir6_BdYxP0A.crl rsync://rpki.apnic.net/member_repository/A9198D20/3F7703C21CE911EA98897487C4F9AE02/Q8PPEXS9crQ0xpKLir6_BdYxP0A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q8PPEXS9crQ0xpKLir6_BdYxP0A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:19:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3165 (0xc5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198D20, serialNumber=43C3CF1174BD72B434C6928B8ABEBF05D6313F40 Validity Not Before: Mar 1 23:19:55 2026 GMT Not After : Mar 8 23:19:55 2026 GMT Subject: CN=69a4c99c-3446 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:9f:4f:30:56:0d:93:97:e8:c5:9a:80:c6:c1: ad:4d:3f:6c:35:3f:98:eb:96:bb:7c:5a:bf:19:9e: fc:5b:fe:91:eb:06:3a:07:ca:44:20:a5:02:ff:2b: 40:f6:b3:ee:1b:dc:c6:f8:11:7b:fc:bd:93:ac:7a: 98:ce:8d:54:6b:27:46:3a:3d:4f:d7:b3:16:15:92: bc:11:d3:72:e8:bc:99:8c:52:68:af:f1:06:50:68: c6:ee:6b:4c:43:73:0f:b3:bc:84:3c:5b:a9:25:e8: 69:9c:e6:d1:4c:bf:ee:ca:aa:d9:3f:e8:94:aa:40: 9e:62:1b:91:60:2d:13:8c:69:5e:93:0e:05:8a:f9: 78:8f:fc:63:dd:b8:bb:c9:a3:0b:d3:99:27:63:d7: d3:ec:54:ba:20:07:d2:63:b9:b3:18:15:f4:2f:30: 46:4c:e3:8d:bc:b0:9b:e0:8e:c6:b7:aa:7b:52:40: 47:fb:ca:fe:f4:3f:9a:d3:7a:fb:18:a2:b6:9f:a6: 3b:35:c0:1c:80:d2:59:dd:62:44:db:66:21:4b:c9: ff:34:a3:41:86:ac:0e:a0:ab:ed:7a:2e:75:b8:0b: 95:86:c8:bd:8e:7a:70:47:c1:f3:a8:37:f3:04:5b: a6:cb:b2:55:4d:65:b9:b2:a1:43:a1:1f:e0:6d:16: b7:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:A4:BE:ED:71:72:76:1A:0E:75:7F:84:00:EB:9D:34:F1:6E:51:EB X509v3 Authority Key Identifier: keyid:43:C3:CF:11:74:BD:72:B4:34:C6:92:8B:8A:BE:BF:05:D6:31:3F:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198D20/3F7703C21CE911EA98897487C4F9AE02/Q8PPEXS9crQ0xpKLir6_BdYxP0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q8PPEXS9crQ0xpKLir6_BdYxP0A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198D20/3F7703C21CE911EA98897487C4F9AE02/Q8PPEXS9crQ0xpKLir6_BdYxP0A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:2c:b9:16:54:34:47:b5:a4:ef:e2:72:ca:16:92:b7:70:3c: 8b:0c:b4:4d:7d:54:0e:76:d1:8f:a9:5c:7e:50:06:18:53:02: 43:6f:fa:c3:29:fa:9b:22:6e:56:80:8a:cd:b7:f4:d1:ec:6f: 67:c6:f8:e6:95:0e:3b:e7:5f:5d:e3:e9:a2:27:13:34:eb:b4: 4f:04:d9:8e:bd:ba:69:12:89:36:0a:1f:15:e0:4c:cd:b3:9b: d1:89:e5:ac:99:e1:64:5c:88:aa:56:63:ba:3d:0e:54:48:03: 8b:6a:4c:14:f1:86:40:6c:87:c4:e2:e6:84:a3:d7:7f:af:7d: 6e:f0:aa:72:5b:92:b2:9c:52:d9:68:0f:d7:d0:05:de:b7:a2: e1:f7:c8:90:60:2e:2e:8f:18:2d:d8:6f:50:1c:08:9b:1f:da: 92:e6:ab:df:d6:03:a1:7c:f6:0e:51:90:55:e1:66:94:ec:30: 5f:55:57:59:04:fc:c3:0f:76:63:e3:fa:ff:49:00:59:6c:a0: 5d:76:50:ae:8a:c4:3d:75:37:59:af:30:5d:6a:1f:c2:0c:41: 50:52:e4:30:27:09:72:f5:50:be:06:39:7d:55:a1:74:f3:eb: 80:f5:f5:fb:8a:7b:ef:63:7c:d6:d1:2e:03:c4:68:36:a7:48: e4:76:a1:5b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDF0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OThEMjAxMTAvBgNVBAUTKDQzQzNDRjExNzRCRDcyQjQzNEM2OTI4QjhBQkVCRjA1 RDYzMTNGNDAwHhcNMjYwMzAxMjMxOTU1WhcNMjYwMzA4MjMxOTU1WjAYMRYwFAYD VQQDEw02OWE0Yzk5Yy0zNDQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl59PMFYNk5foxZqAxsGtTT9sNT+Y65a7fFq/GZ78W/6R6wY6B8pEIKUC/ytA 9rPuG9zG+BF7/L2TrHqYzo1UaydGOj1P17MWFZK8EdNy6LyZjFJor/EGUGjG7mtM Q3MPs7yEPFupJehpnObRTL/uyqrZP+iUqkCeYhuRYC0TjGlekw4Fivl4j/xj3bi7 yaML05knY9fT7FS6IAfSY7mzGBX0LzBGTOONvLCb4I7Gt6p7UkBH+8r+9D+a03r7 GKK2n6Y7NcAcgNJZ3WJE22YhS8n/NKNBhqwOoKvtei51uAuVhsi9jnpwR8HzqDfz BFumy7JVTWW5sqFDoR/gbRa3KwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJykvu1x cnYaDnV/hADrnTTxblHrMB8GA1UdIwQYMBaAFEPDzxF0vXK0NMaSi4q+vwXWMT9A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OEQyMC8zRjc3MDNDMjFD RTkxMUVBOTg4OTc0ODdDNEY5QUUwMi9ROFBQRVhTOWNyUTB4cEtMaXI2X0JkWXhQ MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1E4UFBFWFM5Y3JRMHhwS0xpcjZfQmRZeFAwQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OEQyMC8zRjc3MDNDMjFDRTkxMUVBOTg4OTc0ODdDNEY5QUUwMi9ROFBQRVhTOWNy UTB4cEtMaXI2X0JkWXhQMEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATSy5FlQ0R7Wk7+JyyhaSt3A8iwy0TX1UDnbRj6lcflAGGFMCQ2/6wyn6myJu VoCKzbf00exvZ8b45pUOO+dfXePpoicTNOu0TwTZjr26aRKJNgofFeBMzbOb0Ynl rJnhZFyIqlZjuj0OVEgDi2pMFPGGQGyHxOLmhKPXf699bvCqcluSspxS2WgP19AF 3rei4ffIkGAuLo8YLdhvUBwImx/akuar39YDoXz2DlGQVeFmlOwwX1VXWQT8ww92 Y+P6/0kAWWygXXZQrorEPXU3Wa8wXWofwgxBUFLkMCcJcvVQvgY5fVWhdPPrgPX1 +4p772N81tEuA8RoNqdI5HahWw== -----END CERTIFICATE-----Generated at Mon Mar 2 07:47:57 2026 by rpki-client