$ rpki-client -vvf rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft File: QJmwCEN2qeBM7XxnirxoWN2fhRo.mft (raw, json) Hash identifier: HjAYiuTt8QOW1srFSvzns8le+HYK+WH1Xe9Zwkdza2s= Subject key identifier: 6B:A1:43:60:8C:3C:EC:39:8A:82:1C:FC:84:A5:96:48:C6:FD:57:80 Authority key identifier: 40:99:B0:08:43:76:A9:E0:4C:ED:7C:67:8A:BC:68:58:DD:9F:85:1A Certificate issuer: /CN=A919BCD9/serialNumber=4099B0084376A9E04CED7C678ABC6858DD9F851A Certificate serial: 0D05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJmwCEN2qeBM7XxnirxoWN2fhRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft Manifest number: 0CF1 Signing time: Sun 01 Mar 2026 23:45:49 +0000 Manifest this update: Sun 01 Mar 2026 23:45:47 +0000 Manifest next update: Sun 08 Mar 2026 23:45:47 +0000 Files and hashes: 1: QJmwCEN2qeBM7XxnirxoWN2fhRo.crl (hash: eTYRzOMoY1pnfFiW7piZ2JeOY297fFdBYTNrptUlyEc=) 2: E4B59AA2FF8311E9B1B99628C4F9AE02.roa (hash: y4vcTjeolSMrmAigiZozXMraZgaOak5oYF52X7KfAMI=) 3: E56CD3E8FF8311E9B1B99628C4F9AE02.roa (hash: yk+S2an59M1qblQEC/oVwNcQBVVUiZw+ShOuw7y2Rac=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.crl rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJmwCEN2qeBM7XxnirxoWN2fhRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:45:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3333 (0xd05) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919BCD9, serialNumber=4099B0084376A9E04CED7C678ABC6858DD9F851A Validity Not Before: Mar 1 23:45:47 2026 GMT Not After : Mar 8 23:45:47 2026 GMT Subject: CN=69a4cfac-a609 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c4:8e:57:1a:00:3c:d7:bd:19:cd:8e:86:b3: 09:c7:4a:1d:c7:d9:e5:e1:1a:cd:ef:3b:8e:d7:ba: da:a6:df:30:4a:07:98:a0:be:89:2b:55:fc:99:bc: 75:0d:9a:b8:2d:e9:93:b6:b7:04:4d:00:ec:a9:25: 01:bc:9d:56:2b:78:20:d8:77:9e:66:8a:c7:45:79: 32:96:45:6f:4c:86:33:3f:ef:a5:9b:1d:87:b8:05: d3:93:8b:d3:0c:15:ea:d2:fa:57:43:5b:15:16:ea: a0:42:6b:ae:1b:86:c9:a0:ed:33:e1:30:68:aa:4f: c9:d3:9d:8d:32:09:02:e4:3c:d8:9a:f8:93:8d:97: 6b:2d:c6:a8:53:3a:39:ef:6d:a2:ca:7f:2a:39:82: e9:6d:31:82:e4:dc:94:67:f3:57:38:73:6d:8d:4a: d8:68:bb:d2:51:d9:ac:40:8c:21:c3:0c:34:3e:21: 8a:ee:4f:04:ce:ed:95:77:93:81:5b:72:63:16:a3: 26:5b:eb:e7:2f:42:6d:62:41:d1:a4:bb:1b:42:75: b6:7b:4d:77:91:23:89:e8:1f:af:63:ef:32:56:b3: cf:38:d8:21:8e:96:02:37:de:0c:48:b7:9c:60:f4: 6f:ba:33:1e:18:70:17:b7:04:fb:74:ef:0c:87:9d: 98:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:A1:43:60:8C:3C:EC:39:8A:82:1C:FC:84:A5:96:48:C6:FD:57:80 X509v3 Authority Key Identifier: keyid:40:99:B0:08:43:76:A9:E0:4C:ED:7C:67:8A:BC:68:58:DD:9F:85:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJmwCEN2qeBM7XxnirxoWN2fhRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:77:b6:57:bc:6a:d3:71:13:eb:16:f5:39:96:15:84:34:71: f5:1d:26:66:fb:31:bb:3a:56:8f:65:32:1d:b8:b6:99:fb:99: 70:ec:3c:74:a2:5a:d3:ab:27:7b:7a:14:2e:57:7b:0c:9f:a0: d1:f1:a8:94:7d:21:43:92:c9:8d:f0:7d:8c:77:52:a0:28:6f: b4:5a:76:8a:92:e9:a4:6c:07:99:19:26:cf:e9:cf:8c:15:78: d7:f0:76:55:4c:2b:6d:a1:d5:a4:97:e9:a2:c6:84:03:b5:02: 8d:da:00:db:21:96:49:95:38:10:9d:15:73:c6:ae:1e:01:cc: d6:ed:39:da:60:cb:ea:68:a4:60:c6:51:25:c8:e0:9a:d8:77: 4a:fd:37:7d:d9:b3:04:44:ff:b7:d0:cf:29:ad:3a:c5:e2:52: 17:95:93:b4:f6:ac:02:0f:e0:e7:38:73:31:04:01:97:2d:bc: 60:62:43:b5:3d:e1:b0:df:8a:75:b5:a0:13:c1:d5:c9:48:0b: b3:af:c0:0b:f7:ae:3c:07:b7:ff:c6:ac:5b:51:15:bf:08:f8: 71:6a:fb:e0:bb:b7:ed:21:66:f4:4a:ab:5c:6f:a0:25:df:08: fa:78:1a:91:3b:ea:45:e7:41:17:cc:fb:3e:dd:99:e8:a3:d6: 38:e7:2a:a8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUJDRDkxMTAvBgNVBAUTKDQwOTlCMDA4NDM3NkE5RTA0Q0VEN0M2NzhBQkM2ODU4 REQ5Rjg1MUEwHhcNMjYwMzAxMjM0NTQ3WhcNMjYwMzA4MjM0NTQ3WjAYMRYwFAYD VQQDEw02OWE0Y2ZhYy1hNjA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn8SOVxoAPNe9Gc2OhrMJx0odx9nl4RrN7zuO17rapt8wSgeYoL6JK1X8mbx1 DZq4LemTtrcETQDsqSUBvJ1WK3gg2HeeZorHRXkylkVvTIYzP++lmx2HuAXTk4vT DBXq0vpXQ1sVFuqgQmuuG4bJoO0z4TBoqk/J052NMgkC5DzYmviTjZdrLcaoUzo5 722iyn8qOYLpbTGC5NyUZ/NXOHNtjUrYaLvSUdmsQIwhwww0PiGK7k8Ezu2Vd5OB W3JjFqMmW+vnL0JtYkHRpLsbQnW2e013kSOJ6B+vY+8yVrPPONghjpYCN94MSLec YPRvujMeGHAXtwT7dO8Mh52Y3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGuhQ2CM POw5ioIc/ISllkjG/VeAMB8GA1UdIwQYMBaAFECZsAhDdqngTO18Z4q8aFjdn4Ua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QkNEOS8xN0I3OEYxNkZG ODIxMUU5QjQwMkZDMjRDNEY5QUUwMi9RSm13Q0VOMnFlQk03WHhuaXJ4b1dOMmZo Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FKbXdDRU4ycWVCTTdYeG5pcnhvV04yZmhSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QkNEOS8xN0I3OEYxNkZGODIxMUU5QjQwMkZDMjRDNEY5QUUwMi9RSm13Q0VOMnFl Qk03WHhuaXJ4b1dOMmZoUm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfHe2V7xq03ET6xb1OZYVhDRx9R0mZvsxuzpWj2UyHbi2mfuZcOw8dKJa06sn e3oULld7DJ+g0fGolH0hQ5LJjfB9jHdSoChvtFp2ipLppGwHmRkmz+nPjBV41/B2 VUwrbaHVpJfposaEA7UCjdoA2yGWSZU4EJ0Vc8auHgHM1u052mDL6mikYMZRJcjg mth3Sv03fdmzBET/t9DPKa06xeJSF5WTtPasAg/g5zhzMQQBly28YGJDtT3hsN+K dbWgE8HVyUgLs6/AC/euPAe3/8asW1EVvwj4cWr74Lu37SFm9EqrXG+gJd8I+nga kTvqRedBF8z7Pt2Z6KPWOOcqqA== -----END CERTIFICATE-----Generated at Mon Mar 2 07:26:34 2026 by rpki-client