$ rpki-client -vvf rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft File: QOWCY5crniQUK6qbWvoFNIGjcZ4.mft (raw, json) Hash identifier: qkfud/Bf49L4Vl29mt/TDVKR4zoPPLskPccjExxscvs= Subject key identifier: A1:46:12:72:92:2B:65:CE:F7:8D:43:5B:CD:19:A9:79:18:FC:28:B6 Authority key identifier: 40:E5:82:63:97:2B:9E:24:14:2B:AA:9B:5A:FA:05:34:81:A3:71:9E Certificate issuer: /CN=A91C31A2/serialNumber=40E58263972B9E24142BAA9B5AFA053481A3719E Certificate serial: 02E0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft Manifest number: 02C4 Signing time: Mon 02 Mar 2026 02:49:48 +0000 Manifest this update: Mon 02 Mar 2026 02:49:47 +0000 Manifest next update: Mon 09 Mar 2026 02:49:47 +0000 Files and hashes: 1: QOWCY5crniQUK6qbWvoFNIGjcZ4.crl (hash: l4fsQOGZBilfjtQlzmFkDv1AC3bTqWD1jW1O4O/PmM0=) 2: 94855EA0357711EDB81B8A34C4F9AE02.roa (hash: WEQNjKUUarvWFek2QKEOk5VWDSS6XlisXMiNSu5mDsg=) 3: 4F9ACB7461F511F0A6467D40C4F9AE02.roa (hash: Kp6nhlIWiSEv3o8kjtdJQRQ6WBFrZkqBEq1j7bnbEso=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.crl rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:49:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 736 (0x2e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C31A2, serialNumber=40E58263972B9E24142BAA9B5AFA053481A3719E Validity Not Before: Mar 2 02:49:47 2026 GMT Not After : Mar 9 02:49:47 2026 GMT Subject: CN=69a4facc-9ffa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:91:b5:54:b0:7b:9d:01:06:37:2c:11:e7:01: af:95:d7:42:1f:a4:47:eb:8b:fe:e2:c9:f8:f9:38: 0c:9a:8c:fd:aa:49:4e:f9:f7:96:ee:95:f8:fb:6f: 1f:cf:fa:64:6b:45:bf:59:c1:04:4c:cf:c5:b4:8e: b4:ca:3e:6b:ed:83:eb:0f:f0:61:a7:e1:2e:74:7e: ec:a0:ce:c2:30:df:97:ac:fe:82:3e:12:d8:92:78: e8:40:fc:63:80:b1:f4:1c:8e:42:5e:94:fc:2e:69: 5b:77:66:ea:ad:cb:43:20:70:53:ea:da:f6:7e:03: a8:fc:a7:a3:88:bd:bb:ae:4c:1e:42:5d:a2:74:3e: 69:39:4d:7c:d1:73:04:3d:f9:67:a1:a0:e5:4e:41: 1d:36:38:f6:ee:4c:e0:86:fb:6e:38:b2:85:6e:ac: 6d:8c:63:49:67:0b:89:4b:a8:f9:69:a1:5d:91:df: bc:83:b6:c3:75:39:92:23:00:c2:83:cf:e8:46:6b: 40:4c:f9:90:8c:bf:d5:54:49:0a:cd:7b:78:7b:fe: d6:31:e5:76:40:e9:2e:8c:65:d0:ce:f3:27:de:8e: c6:d6:5f:a0:d6:26:a8:9b:76:61:e2:7c:65:52:09: c2:23:8e:26:d2:04:b4:e8:ce:3d:64:ce:71:4d:e1: 28:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:46:12:72:92:2B:65:CE:F7:8D:43:5B:CD:19:A9:79:18:FC:28:B6 X509v3 Authority Key Identifier: keyid:40:E5:82:63:97:2B:9E:24:14:2B:AA:9B:5A:FA:05:34:81:A3:71:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:c8:66:31:e1:07:b8:f2:80:12:55:b9:0a:61:e1:ae:30:48: 30:60:7d:fb:a8:36:91:3f:34:b6:a1:44:a5:1b:a9:63:22:63: 4b:1c:02:bd:72:c7:70:01:91:ea:f6:75:bd:05:6e:03:17:ec: b9:1a:e0:32:8c:0a:85:45:ee:88:29:d9:43:3c:25:cc:f5:b1: e6:79:a1:2b:bb:3b:87:da:4a:09:21:5a:cb:6e:f8:a4:af:3e: e7:b0:07:ef:4c:b4:03:c6:5a:b8:82:1a:62:2e:8d:16:0b:84: f7:23:f4:50:44:06:aa:42:a4:ca:c3:3c:6d:73:19:34:b2:7c: d5:f7:e1:a7:9f:3a:ab:4f:0d:12:7d:4d:c3:b6:99:2c:23:e9: af:e7:8f:94:45:57:d4:fa:44:19:06:91:7f:86:a0:0f:43:67: 04:a3:2c:72:d1:5e:40:53:1d:13:3c:68:f0:88:6a:16:c6:7e: c8:b2:c4:bc:0c:54:31:ec:8f:97:82:8c:f8:04:02:c5:f3:a2: 2c:ae:23:d0:fb:cb:33:35:fc:1b:5b:a8:5e:93:cf:e6:aa:af: 68:b2:2c:82:27:82:ee:24:b5:c6:be:51:21:5d:7a:ea:bd:ec: 30:2f:62:10:3f:09:34:48:67:a5:46:9d:d8:dd:b8:b2:1d:a5: ae:29:d3:b7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAuAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzMxQTIxMTAvBgNVBAUTKDQwRTU4MjYzOTcyQjlFMjQxNDJCQUE5QjVBRkEwNTM0 ODFBMzcxOUUwHhcNMjYwMzAyMDI0OTQ3WhcNMjYwMzA5MDI0OTQ3WjAYMRYwFAYD VQQDEw02OWE0ZmFjYy05ZmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApJG1VLB7nQEGNywR5wGvlddCH6RH64v+4sn4+TgMmoz9qklO+feW7pX4+28f z/pka0W/WcEETM/FtI60yj5r7YPrD/Bhp+EudH7soM7CMN+XrP6CPhLYknjoQPxj gLH0HI5CXpT8Lmlbd2bqrctDIHBT6tr2fgOo/KejiL27rkweQl2idD5pOU180XME PflnoaDlTkEdNjj27kzghvtuOLKFbqxtjGNJZwuJS6j5aaFdkd+8g7bDdTmSIwDC g8/oRmtATPmQjL/VVEkKzXt4e/7WMeV2QOkujGXQzvMn3o7G1l+g1iaom3Zh4nxl UgnCI44m0gS06M49ZM5xTeEoCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKFGEnKS K2XO941DW80ZqXkY/Ci2MB8GA1UdIwQYMBaAFEDlgmOXK54kFCuqm1r6BTSBo3Ge MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzFBMi9ENDc2RUQ3NjM1 NzIxMUVEQUU5Nzc4MzlDNEY5QUUwMi9RT1dDWTVjcm5pUVVLNnFiV3ZvRk5JR2pj WjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FPV0NZNWNybmlRVUs2cWJXdm9GTklHamNaNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzFBMi9ENDc2RUQ3NjM1NzIxMUVEQUU5Nzc4MzlDNEY5QUUwMi9RT1dDWTVjcm5p UVVLNnFiV3ZvRk5JR2pjWjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZchmMeEHuPKAElW5CmHhrjBIMGB9+6g2kT80tqFEpRupYyJjSxwCvXLHcAGR 6vZ1vQVuAxfsuRrgMowKhUXuiCnZQzwlzPWx5nmhK7s7h9pKCSFay274pK8+57AH 70y0A8ZauIIaYi6NFguE9yP0UEQGqkKkysM8bXMZNLJ81ffhp586q08NEn1Nw7aZ LCPpr+ePlEVX1PpEGQaRf4agD0NnBKMsctFeQFMdEzxo8IhqFsZ+yLLEvAxUMeyP l4KM+AQCxfOiLK4j0PvLMzX8G1uoXpPP5qqvaLIsgieC7iS1xr5RIV166r3sMC9i ED8JNEhnpUad2N24sh2lrinTtw== -----END CERTIFICATE-----Generated at Mon Mar 2 07:42:44 2026 by rpki-client