$ rpki-client -vvf rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.mft File: QgBM9ryh-lZCT17qJPYqkrJc3s8.mft (raw, json) Hash identifier: oy4RNQhRxkzN0NJWGml2lQX/2jevg5bbxanVSf9ptv0= Subject key identifier: 8B:96:DB:CC:D1:0E:D6:D9:B9:20:2D:9E:17:7D:2A:F5:9C:27:3E:4B Authority key identifier: 42:00:4C:F6:BC:A1:FA:56:42:4F:5E:EA:24:F6:2A:92:B2:5C:DE:CF Certificate issuer: /CN=A919960D/serialNumber=42004CF6BCA1FA56424F5EEA24F62A92B25CDECF Certificate serial: 025B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgBM9ryh-lZCT17qJPYqkrJc3s8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.mft Manifest number: 0253 Signing time: Mon 02 Mar 2026 01:47:31 +0000 Manifest this update: Mon 02 Mar 2026 01:47:28 +0000 Manifest next update: Mon 09 Mar 2026 01:47:28 +0000 Files and hashes: 1: QgBM9ryh-lZCT17qJPYqkrJc3s8.crl (hash: /e+bTMT2uTKtNCosQu0/+Hlhs/3lpx6Crdr4nnR/sV0=) 2: BE9174768DDE11ED97AFDA82C4F9AE02.roa (hash: lWqXr9OCi9y8igTWAmlmDXkw3mBGBTPXv9Xm5W9NawI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.crl rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgBM9ryh-lZCT17qJPYqkrJc3s8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:47:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 603 (0x25b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919960D, serialNumber=42004CF6BCA1FA56424F5EEA24F62A92B25CDECF Validity Not Before: Mar 2 01:47:28 2026 GMT Not After : Mar 9 01:47:28 2026 GMT Subject: CN=69a4ec33-1e96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:db:29:bb:71:b2:84:6b:3f:30:dd:b6:dc:37: 03:16:71:b0:62:9d:76:20:e6:95:9b:ff:cf:ef:a8: 80:68:c8:0a:c2:6e:84:3f:6a:df:fe:1c:59:5d:7f: 1e:0d:94:bf:ad:6c:1f:fa:23:eb:9b:a1:14:ab:e1: 7b:66:27:a9:03:cf:f4:11:98:51:8b:9f:2f:f6:57: ec:cc:16:b3:4d:4c:bd:49:f6:9c:9f:21:08:e6:e3: 88:bd:0e:21:6c:ce:24:56:32:aa:6c:21:75:b0:67: 46:59:b6:3f:27:6a:6b:30:bb:e2:01:24:10:11:70: cd:48:84:b8:5a:b4:e3:df:f0:fe:a1:72:ba:73:e6: 22:03:0a:bd:37:6c:8f:62:19:a9:61:16:07:2f:dd: 79:b4:72:8b:be:cb:20:f7:23:09:8a:ee:eb:73:0d: a0:6e:56:eb:0a:2e:47:1d:8f:de:d1:f2:a8:7c:e6: 9c:2d:27:6f:bb:4c:50:3b:23:e3:37:4a:d6:f8:18: d0:30:e0:44:f3:d7:e6:7e:87:25:83:3f:88:b8:e3: 9f:cb:5d:5f:94:6d:dc:44:e3:74:00:0d:0d:87:62: c1:fc:a7:2b:51:e0:8b:31:9e:33:64:58:39:2c:8b: 08:23:94:cf:67:a4:45:57:90:30:a1:b6:9d:32:db: 6c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:96:DB:CC:D1:0E:D6:D9:B9:20:2D:9E:17:7D:2A:F5:9C:27:3E:4B X509v3 Authority Key Identifier: keyid:42:00:4C:F6:BC:A1:FA:56:42:4F:5E:EA:24:F6:2A:92:B2:5C:DE:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgBM9ryh-lZCT17qJPYqkrJc3s8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:d3:d5:cb:b3:b7:2d:ff:18:87:3f:16:ed:7a:53:78:1b:3e: 0d:f4:9f:5b:05:95:0a:1b:24:0e:f3:ba:03:be:92:c5:73:ec: ce:e8:12:a3:93:55:2e:e6:c5:65:d9:ae:35:3f:06:f7:83:82: 0e:5f:b1:42:62:50:d6:fc:e8:75:31:7c:b5:11:c4:b7:ce:4b: 9b:60:50:ac:50:6d:15:46:bc:21:c9:18:6e:31:46:d5:ce:7a: 77:d5:6c:89:9b:eb:51:85:a7:fd:da:d3:c5:8b:8a:50:72:7c: 4b:fd:53:d8:f2:4b:55:bb:02:0b:92:3d:de:ce:3b:dd:27:ae: 8d:c6:78:77:96:11:e6:cc:d9:27:31:5f:a5:2d:75:6a:2e:34: f8:56:f5:1a:48:45:73:82:eb:16:b6:3d:1a:e1:c6:e0:37:32: fb:c0:52:36:95:b1:ac:36:0e:a8:7a:0a:07:c8:23:5b:ab:0c: 5c:25:f5:02:56:a3:5b:94:c9:80:5a:d7:d7:37:f9:31:c0:cb: 0c:0e:bb:f9:14:bf:54:72:89:d4:32:0d:ff:fe:80:85:af:83: 7c:be:4b:0c:af:9f:0c:e5:c4:b5:5c:d5:88:cf:71:65:ed:ef: 81:87:7d:5b:05:6c:5c:3d:56:57:db:99:36:84:cf:68:37:ce: bb:ed:53:1b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk2MEQxMTAvBgNVBAUTKDQyMDA0Q0Y2QkNBMUZBNTY0MjRGNUVFQTI0RjYyQTky QjI1Q0RFQ0YwHhcNMjYwMzAyMDE0NzI4WhcNMjYwMzA5MDE0NzI4WjAYMRYwFAYD VQQDEw02OWE0ZWMzMy0xZTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAttspu3GyhGs/MN223DcDFnGwYp12IOaVm//P76iAaMgKwm6EP2rf/hxZXX8e DZS/rWwf+iPrm6EUq+F7ZiepA8/0EZhRi58v9lfszBazTUy9SfacnyEI5uOIvQ4h bM4kVjKqbCF1sGdGWbY/J2prMLviASQQEXDNSIS4WrTj3/D+oXK6c+YiAwq9N2yP YhmpYRYHL915tHKLvssg9yMJiu7rcw2gblbrCi5HHY/e0fKofOacLSdvu0xQOyPj N0rW+BjQMOBE89fmfoclgz+IuOOfy11flG3cRON0AA0Nh2LB/KcrUeCLMZ4zZFg5 LIsII5TPZ6RFV5AwobadMttsywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIuW28zR DtbZuSAtnhd9KvWcJz5LMB8GA1UdIwQYMBaAFEIATPa8ofpWQk9e6iT2KpKyXN7P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTYwRC9CRDBCNjRDNjhE REExMUVEODczQTc0ODdDNEY5QUUwMi9RZ0JNOXJ5aC1sWkNUMTdxSlBZcWtySmMz czguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FnQk05cnloLWxaQ1QxN3FKUFlxa3JKYzNzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTYwRC9CRDBCNjRDNjhEREExMUVEODczQTc0ODdDNEY5QUUwMi9RZ0JNOXJ5aC1s WkNUMTdxSlBZcWtySmMzczgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPtPVy7O3Lf8Yhz8W7XpTeBs+DfSfWwWVChskDvO6A76SxXPszugSo5NVLubF ZdmuNT8G94OCDl+xQmJQ1vzodTF8tRHEt85Lm2BQrFBtFUa8IckYbjFG1c56d9Vs iZvrUYWn/drTxYuKUHJ8S/1T2PJLVbsCC5I93s473SeujcZ4d5YR5szZJzFfpS11 ai40+Fb1GkhFc4LrFrY9GuHG4Dcy+8BSNpWxrDYOqHoKB8gjW6sMXCX1AlajW5TJ gFrX1zf5McDLDA67+RS/VHKJ1DIN//6Aha+DfL5LDK+fDOXEtVzViM9xZe3vgYd9 WwVsXD1WV9uZNoTPaDfOu+1TGw== -----END CERTIFICATE-----Generated at Mon Mar 2 18:36:25 2026 by rpki-client