$ rpki-client -vvf rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.mft File: QIWuE0tjOKEnZXKD67wWwS8guGI.mft (raw, json) Hash identifier: wtQmSPmfRjncATNnMTv5Wv4AFkVTlFbwJ6vuaxx/5js= Subject key identifier: 9C:18:6F:4E:A2:A5:A2:21:1F:E2:DB:D0:78:03:E0:EF:72:A8:65:57 Authority key identifier: 40:85:AE:13:4B:63:38:A1:27:65:72:83:EB:BC:16:C1:2F:20:B8:62 Certificate issuer: /CN=A91E80FB/serialNumber=4085AE134B6338A127657283EBBC16C12F20B862 Certificate serial: 0461 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIWuE0tjOKEnZXKD67wWwS8guGI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.mft Manifest number: 0453 Signing time: Sun 01 Mar 2026 23:57:54 +0000 Manifest this update: Sun 01 Mar 2026 23:57:52 +0000 Manifest next update: Sun 08 Mar 2026 23:57:52 +0000 Files and hashes: 1: QIWuE0tjOKEnZXKD67wWwS8guGI.crl (hash: TyCGvDkHhJ+P6mEmApaL+q2R3EctsKCOb+q+gv+Zg/c=) 2: 9FBFD358C0F911EFA63F3E64C4F9AE02.roa (hash: 4TV8BQvGQOPCjwu1hfuKhiPEYBr7ZdB7aG0hWWk1nqQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.crl rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIWuE0tjOKEnZXKD67wWwS8guGI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:57:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1121 (0x461) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E80FB, serialNumber=4085AE134B6338A127657283EBBC16C12F20B862 Validity Not Before: Mar 1 23:57:52 2026 GMT Not After : Mar 8 23:57:52 2026 GMT Subject: CN=69a4d281-9b62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c8:d5:b2:ad:2c:19:f0:09:6d:a6:b3:89:98: 05:e6:46:0b:d2:4c:ce:ea:76:36:e1:48:6d:64:af: 95:aa:6a:39:7d:4a:22:d6:04:f2:79:04:96:2a:a4: e7:d9:4e:cb:9f:62:a2:ee:33:9e:40:8b:a2:c4:20: e2:e0:6d:fa:6f:09:31:7e:87:8f:00:b6:1e:25:43: 94:34:e7:d1:0a:e6:93:46:5e:61:35:09:a3:32:b1: 64:40:a7:a7:5d:db:7e:d0:8c:a5:27:8e:38:68:db: f4:69:0f:82:0a:ab:d6:c5:4e:24:d1:5c:c7:e3:8e: f0:6e:da:39:f0:2e:9e:a8:15:87:17:ee:be:fb:ea: ef:19:90:13:17:23:db:dd:48:9b:76:41:d8:19:33: ac:86:eb:1f:a0:5f:f9:c4:85:44:fa:e3:1c:a7:ed: 8f:c0:d2:19:11:0c:38:2a:7e:84:a6:d5:6d:01:99: 6c:60:ad:b5:46:aa:41:9b:e6:2f:68:78:63:64:9f: 15:50:93:95:ac:de:0c:cc:ad:15:b1:39:86:e9:7d: 1b:5c:dc:27:69:e0:09:f1:c2:61:4a:3e:90:6c:ce: ce:d3:8e:50:c0:40:d3:7e:0c:8a:3e:b6:b7:eb:b9: 3b:59:a6:7d:c1:5c:b7:2e:36:63:05:ab:ee:26:32: a2:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:18:6F:4E:A2:A5:A2:21:1F:E2:DB:D0:78:03:E0:EF:72:A8:65:57 X509v3 Authority Key Identifier: keyid:40:85:AE:13:4B:63:38:A1:27:65:72:83:EB:BC:16:C1:2F:20:B8:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIWuE0tjOKEnZXKD67wWwS8guGI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:32:e1:4c:bb:6c:b3:cd:88:03:03:6b:a9:2d:52:a3:ab:1d: 75:17:74:be:3d:21:cb:30:8e:04:95:ed:f8:e0:c1:e9:21:27: 9c:50:2d:05:0c:91:da:0a:67:22:ab:bd:8d:0e:30:10:9a:c5: 76:4a:ed:40:cd:32:41:98:49:53:48:01:33:9e:f0:02:cd:91: e9:5d:ca:7a:32:a7:b3:f2:d7:3f:8f:91:21:72:c8:f2:1c:c6: 86:22:b8:32:8e:13:ae:57:9d:65:b7:0a:67:64:d4:31:27:b8: 9a:37:43:9b:ab:e3:03:a1:de:05:da:3f:a7:10:c6:1e:32:3d: 3c:8d:e7:77:cf:a1:d8:e7:07:e4:0f:9a:1a:b4:06:44:8a:b0: e5:b4:b2:af:78:93:05:95:7e:6d:35:dc:16:99:91:ba:81:04: e3:10:fe:0c:8c:29:27:4d:a4:41:c3:18:d3:cb:fc:03:a6:1f: 9a:45:ee:f4:98:23:c4:8b:3d:a4:70:a5:c2:ac:56:43:a9:25: a9:ff:6b:09:86:94:61:5c:af:8e:55:e7:c5:50:af:d8:eb:ae: 09:19:14:50:21:24:06:9d:c2:21:29:c3:de:ed:83:0c:43:33: 0a:de:ea:0f:64:4f:f4:ab:6f:10:58:8e:c0:0e:fd:d1:ab:3d: b1:1a:65:eb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBGEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTgwRkIxMTAvBgNVBAUTKDQwODVBRTEzNEI2MzM4QTEyNzY1NzI4M0VCQkMxNkMx MkYyMEI4NjIwHhcNMjYwMzAxMjM1NzUyWhcNMjYwMzA4MjM1NzUyWjAYMRYwFAYD VQQDEw02OWE0ZDI4MS05YjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxcjVsq0sGfAJbaaziZgF5kYL0kzO6nY24UhtZK+Vqmo5fUoi1gTyeQSWKqTn 2U7Ln2Ki7jOeQIuixCDi4G36bwkxfoePALYeJUOUNOfRCuaTRl5hNQmjMrFkQKen Xdt+0IylJ444aNv0aQ+CCqvWxU4k0VzH447wbto58C6eqBWHF+6+++rvGZATFyPb 3UibdkHYGTOshusfoF/5xIVE+uMcp+2PwNIZEQw4Kn6EptVtAZlsYK21RqpBm+Yv aHhjZJ8VUJOVrN4MzK0VsTmG6X0bXNwnaeAJ8cJhSj6QbM7O045QwEDTfgyKPra3 67k7WaZ9wVy3LjZjBavuJjKiyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJwYb06i paIhH+Lb0HgD4O9yqGVXMB8GA1UdIwQYMBaAFECFrhNLYzihJ2Vyg+u8FsEvILhi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODBGQi82MjhENTIwQzhG QjYxMUVDOTJCRDI1MTBDNEY5QUUwMi9RSVd1RTB0ak9LRW5aWEtENjd3V3dTOGd1 R0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FJV3VFMHRqT0tFblpYS0Q2N3dXd1M4Z3VHSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODBGQi82MjhENTIwQzhGQjYxMUVDOTJCRDI1MTBDNEY5QUUwMi9RSVd1RTB0ak9L RW5aWEtENjd3V3dTOGd1R0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALjLhTLtss82IAwNrqS1So6sddRd0vj0hyzCOBJXt+ODB6SEnnFAtBQyR2gpn Iqu9jQ4wEJrFdkrtQM0yQZhJU0gBM57wAs2R6V3KejKns/LXP4+RIXLI8hzGhiK4 Mo4TrledZbcKZ2TUMSe4mjdDm6vjA6HeBdo/pxDGHjI9PI3nd8+h2OcH5A+aGrQG RIqw5bSyr3iTBZV+bTXcFpmRuoEE4xD+DIwpJ02kQcMY08v8A6YfmkXu9JgjxIs9 pHClwqxWQ6klqf9rCYaUYVyvjlXnxVCv2OuuCRkUUCEkBp3CISnD3u2DDEMzCt7q D2RP9KtvEFiOwA790as9sRpl6w== -----END CERTIFICATE-----Generated at Mon Mar 2 10:41:31 2026 by rpki-client