$ rpki-client -vvf rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft File: QJmwCEN2qeBM7XxnirxoWN2fhRo.mft (raw, json) Hash identifier: EYmNnuADmTG/AiwPG+0xOgIsDLz9yfJsfWGdQABXodg= Subject key identifier: BA:E9:08:65:0B:3B:24:8E:AF:FE:DC:ED:4E:79:4A:98:CE:E8:40:7F Authority key identifier: 40:99:B0:08:43:76:A9:E0:4C:ED:7C:67:8A:BC:68:58:DD:9F:85:1A Certificate issuer: /CN=A919BCD9/serialNumber=4099B0084376A9E04CED7C678ABC6858DD9F851A Certificate serial: 0D1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJmwCEN2qeBM7XxnirxoWN2fhRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft Manifest number: 0D09 Signing time: Thu 16 Apr 2026 18:02:09 +0000 Manifest this update: Thu 16 Apr 2026 18:02:09 +0000 Manifest next update: Thu 23 Apr 2026 18:02:09 +0000 Files and hashes: 1: QJmwCEN2qeBM7XxnirxoWN2fhRo.crl (hash: qdJ8LGhnZj2QkLovRIMgrn4bTaWsN5jTAU5nd/0ffp0=) 2: E4B59AA2FF8311E9B1B99628C4F9AE02.roa (hash: y4vcTjeolSMrmAigiZozXMraZgaOak5oYF52X7KfAMI=) 3: E56CD3E8FF8311E9B1B99628C4F9AE02.roa (hash: yk+S2an59M1qblQEC/oVwNcQBVVUiZw+ShOuw7y2Rac=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.crl rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJmwCEN2qeBM7XxnirxoWN2fhRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 18:02:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3357 (0xd1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919BCD9, serialNumber=4099B0084376A9E04CED7C678ABC6858DD9F851A Validity Not Before: Apr 16 18:02:09 2026 GMT Not After : Apr 23 18:02:09 2026 GMT Subject: CN=69e12421-361f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e3:88:a0:5d:20:57:c0:65:fa:cf:db:2d:1f: 9f:82:3e:ce:e8:5e:3a:cd:0e:2d:b2:cc:93:5c:80: df:88:43:63:c4:02:c5:52:c3:4c:66:7a:cf:6e:bf: 37:6c:b2:f7:36:38:cd:68:49:bc:85:b9:4e:a6:39: e3:ce:78:7c:86:fa:04:25:ee:04:8d:57:ed:bf:2c: b7:4d:0c:2a:b1:89:d1:09:69:65:23:6e:36:4b:ce: c4:41:0b:08:b4:b0:b7:ef:b6:fd:54:10:cc:07:8f: 91:6c:81:58:d5:d4:10:5e:6f:37:64:a3:f3:5d:49: 3e:1c:df:80:a5:77:ec:d6:c3:0b:07:77:96:fe:e9: 4e:64:87:78:b6:33:a1:71:ef:4e:16:16:85:8b:b3: f9:51:d6:07:f0:39:93:1a:d6:05:a5:dc:df:fc:eb: 6c:e6:8a:cc:31:d5:41:47:76:ef:2f:0a:20:99:21: 85:3c:54:8d:9a:c4:f3:8f:d7:a8:0b:f5:8d:1c:9f: 9e:f2:cd:af:d3:7e:02:0d:04:c1:ca:ee:76:97:26: 8d:82:30:50:25:85:ed:1c:ab:ac:d3:71:3b:56:ea: 73:df:2e:75:91:d9:16:26:42:28:be:6d:39:86:88: 89:cd:03:9d:42:b5:ea:b1:9e:de:b6:fd:df:ed:d2: 64:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:E9:08:65:0B:3B:24:8E:AF:FE:DC:ED:4E:79:4A:98:CE:E8:40:7F X509v3 Authority Key Identifier: keyid:40:99:B0:08:43:76:A9:E0:4C:ED:7C:67:8A:BC:68:58:DD:9F:85:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJmwCEN2qeBM7XxnirxoWN2fhRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:6c:1a:75:2d:31:31:ef:96:70:b2:7b:d1:91:93:8c:4e:4f: 3f:d2:ec:06:3c:24:4e:4f:e9:05:66:04:77:46:fb:05:f0:97: bb:a2:f7:f2:69:57:0c:63:4b:72:d3:a3:7b:19:eb:31:5a:be: a5:06:de:70:a2:09:14:cf:af:9f:9d:46:94:dc:a4:ff:86:7c: 27:2f:26:ee:70:ce:47:41:39:d4:e2:67:b0:db:f1:cc:03:9f: 52:4a:84:e7:db:0f:b8:3a:27:ec:9d:66:aa:44:53:fc:ca:44: 3f:aa:4f:40:39:50:24:03:c1:1f:4c:82:23:3a:95:98:49:71: 74:d7:c0:b4:ed:b3:ab:e7:d2:48:9d:03:3a:7d:7d:f6:61:49: 4c:59:70:fe:9b:01:57:8d:82:ac:9c:7a:2d:01:bf:f6:8e:16: 96:b0:9d:0e:28:d3:4d:f9:cc:86:cb:a6:67:1f:a8:87:30:a9: 0b:e7:f7:72:c0:48:f1:c1:a2:7a:32:0a:8e:f2:0d:34:95:31: 8e:c9:ce:0b:6d:bb:53:87:e4:97:3e:1e:22:30:09:81:6f:6b: 93:04:c8:38:e3:ab:7a:4c:aa:b3:d3:d3:d4:e2:6e:86:10:58: 89:de:3a:9c:be:91:8e:0e:01:2c:bc:9a:70:c0:67:8b:79:b1: 5d:71:c2:59 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUJDRDkxMTAvBgNVBAUTKDQwOTlCMDA4NDM3NkE5RTA0Q0VEN0M2NzhBQkM2ODU4 REQ5Rjg1MUEwHhcNMjYwNDE2MTgwMjA5WhcNMjYwNDIzMTgwMjA5WjAYMRYwFAYD VQQDEw02OWUxMjQyMS0zNjFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyuOIoF0gV8Bl+s/bLR+fgj7O6F46zQ4tssyTXIDfiENjxALFUsNMZnrPbr83 bLL3NjjNaEm8hblOpjnjznh8hvoEJe4EjVftvyy3TQwqsYnRCWllI242S87EQQsI tLC377b9VBDMB4+RbIFY1dQQXm83ZKPzXUk+HN+ApXfs1sMLB3eW/ulOZId4tjOh ce9OFhaFi7P5UdYH8DmTGtYFpdzf/Ots5orMMdVBR3bvLwogmSGFPFSNmsTzj9eo C/WNHJ+e8s2v034CDQTByu52lyaNgjBQJYXtHKus03E7Vupz3y51kdkWJkIovm05 hoiJzQOdQrXqsZ7etv3f7dJkVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLrpCGUL OySOr/7c7U55SpjO6EB/MB8GA1UdIwQYMBaAFECZsAhDdqngTO18Z4q8aFjdn4Ua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QkNEOS8xN0I3OEYxNkZG ODIxMUU5QjQwMkZDMjRDNEY5QUUwMi9RSm13Q0VOMnFlQk03WHhuaXJ4b1dOMmZo Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FKbXdDRU4ycWVCTTdYeG5pcnhvV04yZmhSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QkNEOS8xN0I3OEYxNkZGODIxMUU5QjQwMkZDMjRDNEY5QUUwMi9RSm13Q0VOMnFl Qk03WHhuaXJ4b1dOMmZoUm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQmwadS0xMe+WcLJ70ZGTjE5PP9LsBjwkTk/pBWYEd0b7BfCXu6L38mlXDGNL ctOjexnrMVq+pQbecKIJFM+vn51GlNyk/4Z8Jy8m7nDOR0E51OJnsNvxzAOfUkqE 59sPuDon7J1mqkRT/MpEP6pPQDlQJAPBH0yCIzqVmElxdNfAtO2zq+fSSJ0DOn19 9mFJTFlw/psBV42CrJx6LQG/9o4WlrCdDijTTfnMhsumZx+ohzCpC+f3csBI8cGi ejIKjvINNJUxjsnOC227U4fklz4eIjAJgW9rkwTIOOOrekyqs9PT1OJuhhBYid46 nL6Rjg4BLLyacMBni3mxXXHCWQ== -----END CERTIFICATE-----Generated at Fri Apr 17 04:20:26 2026 by rpki-client