$ rpki-client -vvf rpki.apnic.net/member_repository/A9174218/FF4EC8B629C511F19E03C0B292833773/GQA5xXsKn5HuC3B1uLPT2aQ4jU8.mft File: GQA5xXsKn5HuC3B1uLPT2aQ4jU8.mft (raw, json) Hash identifier: emxXU5Ovd5yc2QaJFslcg3cQWj4on0y4tkY1Fjn3fQ4= Subject key identifier: EA:59:63:38:69:0D:AF:EA:E4:7B:AC:1E:D8:49:47:03:16:2D:46:86 Authority key identifier: 19:00:39:C5:7B:0A:9F:91:EE:0B:70:75:B8:B3:D3:D9:A4:38:8D:4F Certificate issuer: /CN=A9174218/serialNumber=190039C57B0A9F91EE0B7075B8B3D3D9A4388D4F Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GQA5xXsKn5HuC3B1uLPT2aQ4jU8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174218/FF4EC8B629C511F19E03C0B292833773/GQA5xXsKn5HuC3B1uLPT2aQ4jU8.mft Manifest number: 09 Signing time: Sun 05 Apr 2026 08:31:28 +0000 Manifest this update: Sun 05 Apr 2026 08:31:27 +0000 Manifest next update: Sun 12 Apr 2026 08:31:27 +0000 Files and hashes: 1: GQA5xXsKn5HuC3B1uLPT2aQ4jU8.crl (hash: aH0MMGaM4nf8rHbxJ+/LrS0xLtQGETF69I+7+Kr4jfQ=) 2: 455BA02A29EB11F1BB259C92A0833773.roa (hash: g8eJOb8gA81Xqc3gaCShCxO43ZQLUzbdvL42NS1ZeQs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174218/FF4EC8B629C511F19E03C0B292833773/GQA5xXsKn5HuC3B1uLPT2aQ4jU8.crl rsync://rpki.apnic.net/member_repository/A9174218/FF4EC8B629C511F19E03C0B292833773/GQA5xXsKn5HuC3B1uLPT2aQ4jU8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GQA5xXsKn5HuC3B1uLPT2aQ4jU8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 08:31:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174218, serialNumber=190039C57B0A9F91EE0B7075B8B3D3D9A4388D4F Validity Not Before: Apr 5 08:31:27 2026 GMT Not After : Apr 12 08:31:27 2026 GMT Subject: CN=69d21de0-a514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e0:f5:f3:a7:c2:4a:fe:2d:e7:3d:79:cc:1f: e4:05:1c:8c:2f:11:2a:85:91:c8:1e:4f:15:37:3d: 8b:9d:61:3d:23:26:10:fd:70:5e:c3:36:2d:cf:2b: d1:17:b2:8e:11:16:dd:fb:a0:80:e5:7f:c1:4b:17: 24:2f:18:cf:4c:2e:00:f1:eb:1f:50:29:a4:2b:ac: 6c:b9:33:31:3d:e6:c0:dc:49:f4:02:e5:04:ce:7e: 19:54:d9:33:bf:7f:fc:6f:9b:ca:9c:98:66:9f:e1: 5b:b9:08:64:5d:11:b3:5d:8d:1d:e8:3c:a4:42:44: 91:c5:32:9f:7e:8f:d9:a6:2b:c5:88:6b:03:43:89: a0:38:13:5c:1b:39:0a:a3:60:ed:97:ce:06:97:bf: db:31:7b:a8:e4:66:58:36:f1:37:c6:05:52:c4:0d: 64:b2:74:61:17:90:d4:92:cd:90:09:d0:14:dd:b7: d5:13:db:31:65:2f:b5:81:0a:6a:ec:be:f1:1f:e4: ce:da:0b:06:f5:9e:cf:08:da:7c:37:ce:98:6a:aa: 92:c0:61:37:55:09:59:c7:f9:6f:80:47:eb:cb:ce: 7c:5c:8e:68:fc:60:45:08:54:9e:11:3b:96:a2:22: ff:ff:60:dc:ee:a4:ab:c4:07:df:61:d9:80:78:ad: df:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:59:63:38:69:0D:AF:EA:E4:7B:AC:1E:D8:49:47:03:16:2D:46:86 X509v3 Authority Key Identifier: keyid:19:00:39:C5:7B:0A:9F:91:EE:0B:70:75:B8:B3:D3:D9:A4:38:8D:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174218/FF4EC8B629C511F19E03C0B292833773/GQA5xXsKn5HuC3B1uLPT2aQ4jU8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GQA5xXsKn5HuC3B1uLPT2aQ4jU8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174218/FF4EC8B629C511F19E03C0B292833773/GQA5xXsKn5HuC3B1uLPT2aQ4jU8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:85:f2:19:55:7f:0f:93:f6:ce:09:e3:a6:df:04:16:85:1e: 65:ee:6e:90:43:11:ef:13:2f:5c:e9:b9:40:3f:e9:63:fd:bb: 3d:58:68:6c:85:3c:bc:4d:cc:7c:20:ed:73:e2:93:bf:46:4b: c3:98:7e:96:2c:7e:7e:ec:e2:f0:de:01:4d:77:37:c7:5d:51: c4:26:cf:5e:de:04:39:73:1c:cf:a9:e4:e1:e2:23:3a:e8:b0: e5:eb:92:9a:58:0d:c8:4f:4b:5b:af:7c:2a:10:a7:85:cb:d3: 76:b7:30:b1:4b:de:fd:e1:6e:0f:95:64:84:23:a1:1f:67:c6: bd:b6:64:71:22:fa:cb:c6:cd:6d:34:6f:a1:7d:52:f0:10:56: fc:fe:a0:96:ad:86:b2:81:18:30:c3:87:6a:a7:3b:fc:e2:08: c1:0c:6d:ba:34:6e:0a:1c:9b:68:ba:e0:07:e7:92:43:de:c9: fd:0a:7d:78:47:19:cf:68:74:0a:34:e9:16:4f:6f:6e:2d:96: 4e:cb:1b:ba:5c:d8:f1:fb:ad:1f:fc:38:29:ea:7a:07:c1:32: 09:4b:9a:3e:6e:f5:a5:ac:db:f7:bf:52:2e:65:45:1b:77:8e: f2:d4:3b:12:4b:af:f5:19:b8:c8:d4:ad:d1:5d:12:50:a2:5e: 4b:c3:fa:5d -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NDIxODExMC8GA1UEBRMoMTkwMDM5QzU3QjBBOUY5MUVFMEI3MDc1QjhCM0QzRDlB NDM4OEQ0RjAeFw0yNjA0MDUwODMxMjdaFw0yNjA0MTIwODMxMjdaMBgxFjAUBgNV BAMTDTY5ZDIxZGUwLWE1MTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC74PXzp8JK/i3nPXnMH+QFHIwvESqFkcgeTxU3PYudYT0jJhD9cF7DNi3PK9EX so4RFt37oIDlf8FLFyQvGM9MLgDx6x9QKaQrrGy5MzE95sDcSfQC5QTOfhlU2TO/ f/xvm8qcmGaf4Vu5CGRdEbNdjR3oPKRCRJHFMp9+j9mmK8WIawNDiaA4E1wbOQqj YO2XzgaXv9sxe6jkZlg28TfGBVLEDWSydGEXkNSSzZAJ0BTdt9UT2zFlL7WBCmrs vvEf5M7aCwb1ns8I2nw3zphqqpLAYTdVCVnH+W+AR+vLznxcjmj8YEUIVJ4RO5ai Iv//YNzupKvEB99h2YB4rd8LAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU6lljOGkN r+rke6we2ElHAxYtRoYwHwYDVR0jBBgwFoAUGQA5xXsKn5HuC3B1uLPT2aQ4jU8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc0MjE4L0ZGNEVDOEI2MjlD NTExRjE5RTAzQzBCMjkyODMzNzczL0dRQTV4WHNLbjVIdUMzQjF1TFBUMmFRNGpV OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvR1FBNXhYc0tuNUh1QzNCMXVMUFQyYVE0alU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc0 MjE4L0ZGNEVDOEI2MjlDNTExRjE5RTAzQzBCMjkyODMzNzczL0dRQTV4WHNLbjVI dUMzQjF1TFBUMmFRNGpVOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBMhfIZVX8Pk/bOCeOm3wQWhR5l7m6QQxHvEy9c6blAP+lj/bs9WGhshTy8Tcx8 IO1z4pO/RkvDmH6WLH5+7OLw3gFNdzfHXVHEJs9e3gQ5cxzPqeTh4iM66LDl65Ka WA3IT0tbr3wqEKeFy9N2tzCxS9794W4PlWSEI6EfZ8a9tmRxIvrLxs1tNG+hfVLw EFb8/qCWrYaygRgww4dqpzv84gjBDG26NG4KHJtouuAH55JD3sn9Cn14RxnPaHQK NOkWT29uLZZOyxu6XNjx+60f/Dgp6noHwTIJS5o+bvWlrNv3v1IuZUUbd47y1DsS S6/1GbjI1K3RXRJQol5Lw/pd -----END CERTIFICATE-----Generated at Sun Apr 5 20:57:24 2026 by rpki-client