$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.mft File: QxsKSDX89paz7NM1klqOE2EM0Tc.mft (raw, json) Hash identifier: dqYdYdR5tBnH0YCJJF3AgiSa7HGhylCPJsY7tN04iE0= Subject key identifier: 95:12:48:D0:3B:1A:A1:BF:D0:83:31:B6:F6:C9:41:85:7C:BD:C0:D0 Authority key identifier: 43:1B:0A:48:35:FC:F6:96:B3:EC:D3:35:92:5A:8E:13:61:0C:D1:37 Certificate issuer: /CN=A91BE89F/serialNumber=431B0A4835FCF696B3ECD335925A8E13610CD137 Certificate serial: 011F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QxsKSDX89paz7NM1klqOE2EM0Tc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.mft Manifest number: 011A Signing time: Sun 01 Mar 2026 23:50:39 +0000 Manifest this update: Sun 01 Mar 2026 23:50:38 +0000 Manifest next update: Sun 08 Mar 2026 23:50:38 +0000 Files and hashes: 1: QxsKSDX89paz7NM1klqOE2EM0Tc.crl (hash: M5Q4ynknRz+Zn0ddeM8Yad95uyjrtCwSDbrqZ58YHr0=) 2: 49ADB44C6DCC11EF8BE2A566C4F9AE02.roa (hash: /4+lF6tlUt2UR6b5tRfzTFnRtlIHVlDaWV39Y4Dm8cI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.crl rsync://rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QxsKSDX89paz7NM1klqOE2EM0Tc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:50:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 287 (0x11f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE89F, serialNumber=431B0A4835FCF696B3ECD335925A8E13610CD137 Validity Not Before: Mar 1 23:50:38 2026 GMT Not After : Mar 8 23:50:38 2026 GMT Subject: CN=69a4d0cf-4885 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:8d:5d:8c:ca:ac:6e:69:20:7e:ab:90:c1:6b: 19:72:53:e4:95:35:87:76:17:ab:aa:6d:59:08:f4: 67:a7:c2:05:12:85:6f:df:40:35:30:6f:1c:95:9d: 97:ef:37:21:3e:cc:15:10:e4:ea:55:eb:91:99:c5: 58:fd:60:a3:65:e2:37:59:7b:54:fb:be:45:e2:08: b7:f9:55:f5:c3:08:b0:5a:3e:9e:f3:78:5b:44:91: c5:26:71:09:0a:c8:e7:2f:ab:34:fe:bc:a7:2a:3e: 71:99:d2:57:f2:08:2f:4e:5c:ab:6d:11:a5:28:87: 96:5e:63:f5:1a:75:ec:65:e0:90:c3:af:e4:3a:b1: ae:f7:48:85:5e:61:32:f6:8e:a8:be:58:dc:6b:96: 8d:1e:d2:37:c3:0f:6c:12:a1:fc:18:04:c4:48:b6: a2:ec:34:04:a2:3a:25:98:b1:15:10:d4:32:4f:bc: 04:e0:fa:00:12:de:f7:96:fa:3e:4e:f8:be:0c:ea: f7:ff:1e:9c:74:16:19:82:fd:d4:57:f0:44:0c:c7: 72:da:83:59:9c:77:bd:d6:78:b8:05:3e:ca:bd:e3: 13:9e:ae:78:25:f9:44:2f:c2:67:d5:76:bd:5d:19: b3:af:21:a7:46:f1:ef:59:12:7d:95:66:d7:5d:39: bf:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:12:48:D0:3B:1A:A1:BF:D0:83:31:B6:F6:C9:41:85:7C:BD:C0:D0 X509v3 Authority Key Identifier: keyid:43:1B:0A:48:35:FC:F6:96:B3:EC:D3:35:92:5A:8E:13:61:0C:D1:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QxsKSDX89paz7NM1klqOE2EM0Tc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:7f:28:c1:28:88:bc:d0:32:22:d1:03:ca:1c:19:76:09:e3: 14:e3:0b:1e:46:0f:29:60:9a:77:4f:e2:f8:f0:3e:75:c7:33: 31:49:20:ca:eb:e4:da:1f:c9:fd:e7:46:4c:2d:3b:a8:38:2f: 9b:24:cb:3c:a2:f8:d7:3b:96:3f:8f:b3:f6:81:4b:08:95:c8: ec:a3:53:bd:4d:d8:87:a7:bc:b2:49:75:c1:93:c5:f3:fa:b0: ce:70:7c:2d:2b:10:1c:39:b1:8d:e7:5d:ec:38:1d:a6:d1:29: e4:23:12:d6:cc:6f:11:c1:94:26:90:9c:3c:79:e0:33:02:a4: 5d:62:13:8e:ea:d0:8d:a9:03:95:97:5d:19:0f:87:73:cd:95: b2:23:f7:fa:b0:58:08:96:9d:8c:60:1f:72:3b:27:70:66:14: c0:f1:f0:48:b2:e3:20:68:64:00:d3:ff:3a:2c:ed:87:39:f2: 48:7b:9d:d1:a1:8d:43:29:69:36:c9:70:93:8d:5a:ca:ff:87: 64:ed:a2:a7:94:97:27:23:5c:83:c3:45:ca:43:ab:3e:38:2f: 86:41:2c:cd:44:0b:e4:fa:20:d1:cc:03:8e:e3:ea:55:19:ee: 06:4d:3e:b9:7b:b1:0d:ff:a5:9d:ea:f9:36:5a:88:4c:fe:5e: 3e:36:7e:5b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkU4OUYxMTAvBgNVBAUTKDQzMUIwQTQ4MzVGQ0Y2OTZCM0VDRDMzNTkyNUE4RTEz NjEwQ0QxMzcwHhcNMjYwMzAxMjM1MDM4WhcNMjYwMzA4MjM1MDM4WjAYMRYwFAYD VQQDEw02OWE0ZDBjZi00ODg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnY1djMqsbmkgfquQwWsZclPklTWHdherqm1ZCPRnp8IFEoVv30A1MG8clZ2X 7zchPswVEOTqVeuRmcVY/WCjZeI3WXtU+75F4gi3+VX1wwiwWj6e83hbRJHFJnEJ CsjnL6s0/rynKj5xmdJX8ggvTlyrbRGlKIeWXmP1GnXsZeCQw6/kOrGu90iFXmEy 9o6ovljca5aNHtI3ww9sEqH8GATESLai7DQEojolmLEVENQyT7wE4PoAEt73lvo+ Tvi+DOr3/x6cdBYZgv3UV/BEDMdy2oNZnHe91ni4BT7KveMTnq54JflEL8Jn1Xa9 XRmzryGnRvHvWRJ9lWbXXTm/wwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJUSSNA7 GqG/0IMxtvbJQYV8vcDQMB8GA1UdIwQYMBaAFEMbCkg1/PaWs+zTNZJajhNhDNE3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTg5Ri9BRkZEMjE3MDZE Q0IxMUVGOUIzOUI4NjVDNEY5QUUwMi9ReHNLU0RYODlwYXo3Tk0xa2xxT0UyRU0w VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1F4c0tTRFg4OXBhejdOTTFrbHFPRTJFTTBUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTg5Ri9BRkZEMjE3MDZEQ0IxMUVGOUIzOUI4NjVDNEY5QUUwMi9ReHNLU0RYODlw YXo3Tk0xa2xxT0UyRU0wVGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWH8owSiIvNAyItEDyhwZdgnjFOMLHkYPKWCad0/i+PA+dcczMUkgyuvk2h/J /edGTC07qDgvmyTLPKL41zuWP4+z9oFLCJXI7KNTvU3Yh6e8skl1wZPF8/qwznB8 LSsQHDmxjedd7DgdptEp5CMS1sxvEcGUJpCcPHngMwKkXWITjurQjakDlZddGQ+H c82VsiP3+rBYCJadjGAfcjsncGYUwPHwSLLjIGhkANP/OizthznySHud0aGNQylp Nslwk41ayv+HZO2ip5SXJyNcg8NFykOrPjgvhkEszUQL5Pog0cwDjuPqVRnuBk0+ uXuxDf+lner5NlqITP5ePjZ+Ww== -----END CERTIFICATE-----Generated at Mon Mar 2 12:43:48 2026 by rpki-client