$ rpki-client -vvf rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.mft File: Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.mft (raw, json) Hash identifier: GVpu6Kry7Pcpp552owNI4vNaY5rJnv8JCDi7C69610s= Subject key identifier: F5:E1:7C:89:F1:6E:61:31:1C:ED:AB:2D:33:C4:FA:8A:AE:48:D7:3F Authority key identifier: 43:8D:82:3E:C3:34:4B:4B:F1:C9:9E:11:DE:0F:56:F8:42:EF:D9:8E Certificate issuer: /CN=A9199885/serialNumber=438D823EC3344B4BF1C99E11DE0F56F842EFD98E Certificate serial: 214F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.mft Manifest number: 564C Signing time: Mon 02 Mar 2026 02:55:09 +0000 Manifest this update: Mon 02 Mar 2026 02:55:07 +0000 Manifest next update: Mon 09 Mar 2026 02:55:07 +0000 Files and hashes: 1: Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.crl (hash: qHFX/RCXjR3sC/ZzemKIhY8akDAXBx+VOBYq24zKcHE=) 2: 0211478AB48E11EF81F55F3CC4F9AE02.roa (hash: eXbj2/2PGJubPsuJy/6g3AgLU0HNFQl847an+DeMHhU=) 3: 01804686B48E11EF81F55F3CC4F9AE02.roa (hash: N4+8fycTDr0KyyL1T8BnM1QnlOy4E1P+9kvY0kSTWus=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.crl rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:55:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8527 (0x214f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199885, serialNumber=438D823EC3344B4BF1C99E11DE0F56F842EFD98E Validity Not Before: Mar 2 02:55:07 2026 GMT Not After : Mar 9 02:55:07 2026 GMT Subject: CN=69a4fc0c-f18a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:58:2d:c4:41:ca:72:a9:38:d1:8a:95:2b:2f: c7:a3:e2:7e:68:9c:bf:69:9f:59:73:06:77:cc:3e: bd:79:97:94:7d:d9:da:9e:ee:68:ab:eb:72:05:90: bb:09:4f:52:2f:04:9c:e7:6b:eb:e6:ae:95:72:3c: 4b:5d:7b:26:a8:b6:66:f5:7a:69:12:81:01:a8:f0: 36:a1:3f:0a:6b:63:33:24:a4:7e:77:ae:78:68:77: 0c:7f:3b:93:65:1d:a5:0e:dd:2e:70:df:f0:fa:fe: a8:b1:bb:41:12:c2:e2:94:69:82:da:50:3a:46:53: 1d:67:bf:b0:78:13:cc:b1:67:8d:82:1a:3d:55:8a: 55:22:a3:94:1e:a9:93:87:55:f3:11:cf:c9:8c:3b: b3:38:50:84:b9:92:d7:09:cb:6c:ac:9d:5b:f1:ee: bc:80:5a:94:53:92:31:db:38:d6:ea:b2:ca:12:48: cf:ea:78:a5:25:2c:a4:6e:d6:1a:9f:13:57:d9:62: dc:79:39:96:18:ea:7e:86:a0:3b:86:2a:c8:50:d9: 5f:af:42:4b:10:64:6d:4c:65:5f:fa:fc:6f:98:74: c3:39:18:65:4a:46:10:2e:85:b1:93:37:4b:d4:1c: 8b:d9:1e:69:9e:6e:d5:c4:0f:07:7f:89:ae:61:9c: d5:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:E1:7C:89:F1:6E:61:31:1C:ED:AB:2D:33:C4:FA:8A:AE:48:D7:3F X509v3 Authority Key Identifier: keyid:43:8D:82:3E:C3:34:4B:4B:F1:C9:9E:11:DE:0F:56:F8:42:EF:D9:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:84:a8:0a:a2:f7:26:bb:b5:48:28:49:01:7d:41:0e:55:0a: 41:94:60:7d:85:c2:77:2a:72:5e:0b:e4:b4:f8:a6:5f:76:d7: 83:43:f2:19:d5:a1:0e:08:b7:01:39:5b:5d:0e:49:86:c7:47: 30:db:2d:cf:1f:30:80:90:f0:64:f4:59:b5:3e:35:27:78:13: af:de:9c:94:3b:de:b3:2a:4b:88:1f:49:7a:6f:d7:33:81:c4: 71:73:bd:a4:36:ab:48:df:98:61:3a:5c:6c:e7:e6:6f:c8:f4: 97:e5:76:d3:e3:49:22:15:3d:fe:d8:c0:b2:75:06:f1:41:f4: cb:c3:37:59:5e:25:75:8c:65:41:fa:0e:f6:79:4e:61:19:84: d9:ec:da:35:88:71:4b:f3:f2:d7:95:8d:92:aa:27:1b:fe:00: 1e:b8:fc:f3:ce:3b:97:db:19:43:47:91:3b:fe:2f:ff:f7:ef: ed:b8:8e:ce:02:66:d5:b1:c3:80:db:1f:32:21:5f:69:2a:3e: ef:a5:6f:c4:55:e3:d2:86:27:1c:7b:f9:49:ea:71:3a:82:2e: 15:54:33:f8:6f:f1:d3:3e:31:af:a6:53:a6:9d:cb:0a:05:30: d0:7b:bc:6f:e0:aa:cc:94:06:4d:81:f8:e7:34:b9:9c:80:71: a6:61:ff:5d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICIU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk4ODUxMTAvBgNVBAUTKDQzOEQ4MjNFQzMzNDRCNEJGMUM5OUUxMURFMEY1NkY4 NDJFRkQ5OEUwHhcNMjYwMzAyMDI1NTA3WhcNMjYwMzA5MDI1NTA3WjAYMRYwFAYD VQQDEw02OWE0ZmMwYy1mMThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAi1gtxEHKcqk40YqVKy/Ho+J+aJy/aZ9ZcwZ3zD69eZeUfdnanu5oq+tyBZC7 CU9SLwSc52vr5q6VcjxLXXsmqLZm9XppEoEBqPA2oT8Ka2MzJKR+d654aHcMfzuT ZR2lDt0ucN/w+v6osbtBEsLilGmC2lA6RlMdZ7+weBPMsWeNgho9VYpVIqOUHqmT h1XzEc/JjDuzOFCEuZLXCctsrJ1b8e68gFqUU5Ix2zjW6rLKEkjP6nilJSykbtYa nxNX2WLceTmWGOp+hqA7hirIUNlfr0JLEGRtTGVf+vxvmHTDORhlSkYQLoWxkzdL 1ByL2R5pnm7VxA8Hf4muYZzVYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPXhfInx bmExHO2rLTPE+oquSNc/MB8GA1UdIwQYMBaAFEONgj7DNEtL8cmeEd4PVvhC79mO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTg4NS9EMDUwNjg1QTFE OTgxMUUyQUU2QjFGODMwOEIwMkNEMi9RNDJDUHNNMFMwdnh5WjRSM2c5Vy1FTHYy WTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1E0MkNQc00wUzB2eHlaNFIzZzlXLUVMdjJZNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTg4NS9EMDUwNjg1QTFEOTgxMUUyQUU2QjFGODMwOEIwMkNEMi9RNDJDUHNNMFMw dnh5WjRSM2c5Vy1FTHYyWTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJoSoCqL3Jru1SChJAX1BDlUKQZRgfYXCdypyXgvktPimX3bXg0PyGdWhDgi3 ATlbXQ5JhsdHMNstzx8wgJDwZPRZtT41J3gTr96clDvesypLiB9Jem/XM4HEcXO9 pDarSN+YYTpcbOfmb8j0l+V20+NJIhU9/tjAsnUG8UH0y8M3WV4ldYxlQfoO9nlO YRmE2ezaNYhxS/Py15WNkqonG/4AHrj88847l9sZQ0eRO/4v//fv7biOzgJm1bHD gNsfMiFfaSo+76VvxFXj0oYnHHv5SepxOoIuFVQz+G/x0z4xr6ZTpp3LCgUw0Hu8 b+CqzJQGTYH45zS5nIBxpmH/XQ== -----END CERTIFICATE-----Generated at Mon Mar 2 13:52:00 2026 by rpki-client