$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.mft File: QSPpAOai7I_ptdcDt5KA7yFAfIE.mft (raw, json) Hash identifier: MZEW1A+j9fVziVD+dFaE7L5CB67y2amzW+FTW5EaV14= Subject key identifier: 53:2D:DB:13:C1:E6:37:E9:CA:DA:9E:FA:52:9A:BB:6F:C3:47:C9:0B Authority key identifier: 41:23:E9:00:E6:A2:EC:8F:E9:B5:D7:03:B7:92:80:EF:21:40:7C:81 Certificate issuer: /CN=A91F3B2E/serialNumber=4123E900E6A2EC8FE9B5D703B79280EF21407C81 Certificate serial: 0250 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSPpAOai7I_ptdcDt5KA7yFAfIE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.mft Manifest number: 023A Signing time: Sun 01 Mar 2026 03:34:52 +0000 Manifest this update: Sun 01 Mar 2026 03:34:51 +0000 Manifest next update: Sun 08 Mar 2026 03:34:51 +0000 Files and hashes: 1: QSPpAOai7I_ptdcDt5KA7yFAfIE.crl (hash: EgkSviErdDuz+K9kyv/6Wx2Lsco9rHGRyvLanI7MqMY=) 2: 2B8EF9AA083911F0A051CE72C4F9AE02.roa (hash: U4hflDFiKzIzkmVmGYic0KydMkEZUA9QRNyYQLbXDWI=) 3: A91AF6A8CE7811EF89FA3944C4F9AE02.roa (hash: Qpm/PK+QpCXAkfZ9HxjLsvivJLetZd2cSoOE/pQSCZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.crl rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSPpAOai7I_ptdcDt5KA7yFAfIE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 03:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 592 (0x250) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3B2E, serialNumber=4123E900E6A2EC8FE9B5D703B79280EF21407C81 Validity Not Before: Mar 1 03:34:51 2026 GMT Not After : Mar 8 03:34:51 2026 GMT Subject: CN=69a3b3dc-c25d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c5:dc:92:47:d8:43:42:c9:0f:89:57:ae:c7: c9:68:dd:50:ea:37:9e:7f:2c:d5:8c:ad:4c:56:7b: 25:f9:44:18:69:d0:47:ab:4b:ed:8e:c5:a3:56:04: bb:62:9f:1e:8f:c9:37:23:9c:4c:78:91:f2:93:6e: 07:3a:6f:cf:27:cf:ba:9c:70:0b:d3:df:0f:1c:f2: 33:41:71:6c:10:ce:44:4b:22:28:69:e0:61:f1:db: b2:99:71:22:4f:fd:f6:cd:15:3c:cf:3f:b6:b0:b0: e6:a6:b5:2a:9c:94:11:2a:eb:4d:47:d8:3d:49:ae: 9c:50:22:bc:bc:71:0b:0a:40:8e:fd:cc:95:17:5b: 5f:aa:ac:53:0a:a4:e2:1e:c4:88:bd:cc:b3:93:eb: 39:3f:30:cb:21:ef:c7:94:14:24:07:a7:96:a7:ce: 7c:a7:b2:64:6c:d9:41:2f:42:c0:e2:82:c8:51:bc: 21:6e:d9:49:23:5d:ea:57:aa:75:69:85:ce:56:fa: d2:e9:72:57:f6:c6:d5:f7:ee:a0:c4:d7:55:ab:f3: eb:43:71:b2:de:64:ff:1d:e5:56:2d:0d:d3:02:43: af:98:20:c1:9e:18:da:d4:a4:03:f4:2c:53:86:f3: cf:ad:59:0b:7b:61:67:39:a4:2a:f7:36:45:51:63: 83:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:2D:DB:13:C1:E6:37:E9:CA:DA:9E:FA:52:9A:BB:6F:C3:47:C9:0B X509v3 Authority Key Identifier: keyid:41:23:E9:00:E6:A2:EC:8F:E9:B5:D7:03:B7:92:80:EF:21:40:7C:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSPpAOai7I_ptdcDt5KA7yFAfIE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:b4:d1:4b:5f:42:eb:5d:d8:a8:ea:a5:3e:3e:42:bf:18:2d: 81:45:7f:2e:1d:d7:5f:98:15:f4:43:20:e6:40:6e:da:99:02: 3a:b0:64:0c:d8:1a:b7:0e:a5:84:8a:5c:56:b5:6f:5f:81:40: 6f:40:96:77:83:9c:94:a3:4a:88:57:ce:5b:3a:5f:02:f6:57: db:b6:a6:71:fd:e3:3f:f6:8d:1a:da:7c:d3:75:be:3c:02:9c: ae:91:16:1f:bc:db:d7:34:9f:05:2c:1b:59:00:a8:f4:09:81: 19:71:d0:f2:13:04:4d:7c:d9:bd:3b:f3:3b:ce:55:98:d4:44: de:c4:f7:a8:df:ad:5c:0c:d4:d6:71:41:24:4a:2b:47:21:d8: 90:b2:d0:f4:5d:be:5a:84:25:3b:67:7e:1c:83:9f:79:f9:0f: 2c:01:42:13:cd:5f:b1:03:f7:1b:8d:90:a6:56:27:ce:bb:30: 9e:58:3f:2e:6e:0c:3d:ee:b1:80:9d:8e:79:83:fe:73:79:8f: 93:25:4d:9d:8b:7a:7b:7f:95:2b:0d:3a:af:ba:08:60:fc:05: 90:a1:f6:39:fa:d3:54:40:90:cb:40:ab:6f:4f:69:81:d3:91: a9:85:a9:8e:50:68:1e:5b:b3:86:63:2d:bd:93:1a:9c:94:40: 89:00:19:47 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNCMkUxMTAvBgNVBAUTKDQxMjNFOTAwRTZBMkVDOEZFOUI1RDcwM0I3OTI4MEVG MjE0MDdDODEwHhcNMjYwMzAxMDMzNDUxWhcNMjYwMzA4MDMzNDUxWjAYMRYwFAYD VQQDDA02OWEzYjNkYy1jMjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2cXckkfYQ0LJD4lXrsfJaN1Q6jeefyzVjK1MVnsl+UQYadBHq0vtjsWjVgS7 Yp8ej8k3I5xMeJHyk24HOm/PJ8+6nHAL098PHPIzQXFsEM5ESyIoaeBh8duymXEi T/32zRU8zz+2sLDmprUqnJQRKutNR9g9Sa6cUCK8vHELCkCO/cyVF1tfqqxTCqTi HsSIvcyzk+s5PzDLIe/HlBQkB6eWp858p7JkbNlBL0LA4oLIUbwhbtlJI13qV6p1 aYXOVvrS6XJX9sbV9+6gxNdVq/PrQ3Gy3mT/HeVWLQ3TAkOvmCDBnhja1KQD9CxT hvPPrVkLe2FnOaQq9zZFUWODtQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFMt2xPB 5jfpytqe+lKau2/DR8kLMB8GA1UdIwQYMBaAFEEj6QDmouyP6bXXA7eSgO8hQHyB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0IyRS8wRjU1QzY5NkQ2 N0QxMUVEODZEMzM3NTBDNEY5QUUwMi9RU1BwQU9haTdJX3B0ZGNEdDVLQTd5RkFm SUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FTUHBBT2FpN0lfcHRkY0R0NUtBN3lGQWZJRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG M0IyRS8wRjU1QzY5NkQ2N0QxMUVEODZEMzM3NTBDNEY5QUUwMi9RU1BwQU9haTdJ X3B0ZGNEdDVLQTd5RkFmSUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXrTRS19C613YqOqlPj5CvxgtgUV/Lh3XX5gV9EMg5kBu2pkCOrBkDNgatw6l hIpcVrVvX4FAb0CWd4OclKNKiFfOWzpfAvZX27amcf3jP/aNGtp803W+PAKcrpEW H7zb1zSfBSwbWQCo9AmBGXHQ8hMETXzZvTvzO85VmNRE3sT3qN+tXAzU1nFBJEor RyHYkLLQ9F2+WoQlO2d+HIOfefkPLAFCE81fsQP3G42QplYnzrswnlg/Lm4MPe6x gJ2OeYP+c3mPkyVNnYt6e3+VKw06r7oIYPwFkKH2OfrTVECQy0Crb09pgdORqYWp jlBoHluzhmMtvZManJRAiQAZRw== -----END CERTIFICATE-----Generated at Sun Mar 1 20:24:40 2026 by rpki-client