$ rpki-client -vvf rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft File: qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft (raw, json) Hash identifier: b3tfb6ESlLHcOrPVfKPv0NAPatgosa/tj/ZfGV/EFE0= Subject key identifier: A6:74:B7:34:0B:36:9B:B9:9B:46:F6:29:87:11:6D:11:33:1A:68:7D Authority key identifier: A9:BC:CA:6D:34:D3:D5:F1:EF:F8:BB:E7:83:D4:97:73:81:3E:5E:F8 Certificate issuer: /CN=A9186E8A/serialNumber=A9BCCA6D34D3D5F1EFF8BBE783D49773813E5EF8 Certificate serial: 0890 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft Manifest number: 0842 Signing time: Sat 04 Apr 2026 21:06:12 +0000 Manifest this update: Sat 04 Apr 2026 21:06:11 +0000 Manifest next update: Sat 11 Apr 2026 21:06:11 +0000 Files and hashes: 1: qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl (hash: /FnAttH/TOlO7wNHSRA/UNDgNj6SZdSdsNwBrmk+d/Y=) 2: 26E184C2B56D11F0939EAE46C4F9AE02.roa (hash: azCbrnSmOuKDp+iW9o/dWdbmL/D2BIUAZALDZgMZy1k=) 3: 8554A0A86A8A11F0BBF66881C4F9AE02.roa (hash: jG2eCQQta7MNjU1JK1KYAfsYHPf3A4prUFHK/JzlfnI=) 4: 66C1BA862FBB11EB9B861059C4F9AE02.roa (hash: azCvE0MXDPIZCtICB6ofLTQq6LREywUXev2jJIJ9EIU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 21:06:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2192 (0x890) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186E8A, serialNumber=A9BCCA6D34D3D5F1EFF8BBE783D49773813E5EF8 Validity Not Before: Apr 4 21:06:11 2026 GMT Not After : Apr 11 21:06:11 2026 GMT Subject: CN=69d17d44-4627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:13:50:85:b4:8d:dd:37:0f:21:2c:8f:26:e0: d0:63:8c:b5:dd:77:84:df:95:90:84:9a:a9:00:61: 02:b8:ed:0a:05:72:dc:eb:0c:ed:6d:69:5f:41:45: 20:ac:cb:df:7b:65:51:36:71:3c:ea:9c:08:11:96: c3:33:55:1c:e1:27:ce:e0:2c:7d:0e:6c:8a:c5:83: 0f:a2:20:0b:00:cc:f1:d2:09:e5:f9:ce:eb:9e:c6: 2a:32:81:c9:1c:e6:68:df:f5:e7:84:12:f1:49:09: b5:66:75:46:06:aa:95:14:a7:ce:55:7d:9e:a7:8d: e8:a5:0c:da:c9:09:13:7f:64:a3:90:18:65:a3:20: 15:66:f8:14:9c:f3:d7:61:e8:39:0a:f7:f4:a1:03: b3:02:d2:22:d1:5a:75:e2:ef:53:9f:b6:e0:38:17: 72:dc:18:69:4a:d7:ad:73:2a:1e:ea:7b:3a:a0:ea: b3:e2:ac:32:d9:83:58:cf:e6:f8:98:fc:f1:b5:a0: d4:d7:91:30:51:ac:e8:21:cb:10:bb:70:10:95:13: 75:ce:dc:63:1d:8e:48:d8:54:82:80:8e:ad:1c:ef: 33:b7:f6:01:e7:ab:5b:d9:4d:96:f0:1a:7d:6e:13: af:62:88:93:1c:fc:ba:75:b7:6d:e2:c0:c7:18:53: 6f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:74:B7:34:0B:36:9B:B9:9B:46:F6:29:87:11:6D:11:33:1A:68:7D X509v3 Authority Key Identifier: keyid:A9:BC:CA:6D:34:D3:D5:F1:EF:F8:BB:E7:83:D4:97:73:81:3E:5E:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:72:2e:be:f2:a9:db:ef:bc:94:61:54:5d:a6:de:c3:8d:e9: 4b:ac:ce:38:6e:52:49:65:05:79:7d:cf:2e:1f:d0:b7:a7:ce: 0b:4d:f6:f6:1a:59:f0:d0:fa:a2:d4:48:5f:23:94:49:63:c4: f8:42:9c:53:d4:6c:6c:5f:15:4b:46:8a:d9:c7:45:3b:ef:94: 70:de:ef:c3:18:0b:4e:45:6f:51:70:21:6f:e4:ca:34:c2:6f: 9f:2b:69:12:15:60:3e:db:df:5f:42:02:24:93:44:52:83:47: bc:cd:1f:5d:97:0a:4d:76:dd:44:26:4c:03:44:6c:d9:86:91: 5b:00:a5:9f:2e:9b:2f:55:e8:e2:87:7e:ea:0f:07:90:25:f9: d9:94:a6:36:c0:aa:7e:35:3c:39:a0:80:76:9e:ba:d3:56:d9: 04:d1:47:c5:61:dc:e1:c5:a6:3a:0e:68:40:07:75:e3:b5:61: a1:da:81:44:4d:44:ca:11:f3:f0:be:b7:c9:c6:c8:22:2f:0e: 99:dd:cf:93:9f:be:1e:ba:33:2e:cd:6b:4e:7f:54:35:f7:a1: 51:2c:d0:5f:b7:52:7b:8b:b8:7f:ec:bc:2b:c1:6b:43:68:dc: 91:bf:ec:74:0c:9e:37:c9:77:bc:f0:43:21:7f:81:e5:f5:7c: aa:a4:98:6a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZFOEExMTAvBgNVBAUTKEE5QkNDQTZEMzREM0Q1RjFFRkY4QkJFNzgzRDQ5Nzcz ODEzRTVFRjgwHhcNMjYwNDA0MjEwNjExWhcNMjYwNDExMjEwNjExWjAYMRYwFAYD VQQDEw02OWQxN2Q0NC00NjI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvxNQhbSN3TcPISyPJuDQY4y13XeE35WQhJqpAGECuO0KBXLc6wztbWlfQUUg rMvfe2VRNnE86pwIEZbDM1Uc4SfO4Cx9DmyKxYMPoiALAMzx0gnl+c7rnsYqMoHJ HOZo3/XnhBLxSQm1ZnVGBqqVFKfOVX2ep43opQzayQkTf2SjkBhloyAVZvgUnPPX Yeg5Cvf0oQOzAtIi0Vp14u9Tn7bgOBdy3BhpStetcyoe6ns6oOqz4qwy2YNYz+b4 mPzxtaDU15EwUazoIcsQu3AQlRN1ztxjHY5I2FSCgI6tHO8zt/YB56tb2U2W8Bp9 bhOvYoiTHPy6dbdt4sDHGFNvowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKZ0tzQL Npu5m0b2KYcRbREzGmh9MB8GA1UdIwQYMBaAFKm8ym0009Xx7/i754PUl3OBPl74 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkU4QS8zQjQ3NkU3QzJE RkYxMUVCODY4QTkxMzVDNEY5QUUwMi9xYnpLYlRUVDFmSHYtTHZuZzlTWGM0RS1Y dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FiektiVFRUMWZIdi1Mdm5nOVNYYzRFLVh2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkU4QS8zQjQ3NkU3QzJERkYxMUVCODY4QTkxMzVDNEY5QUUwMi9xYnpLYlRUVDFm SHYtTHZuZzlTWGM0RS1YdmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADnIuvvKp2++8lGFUXabew43pS6zOOG5SSWUFeX3PLh/Qt6fOC0329hpZ8ND6 otRIXyOUSWPE+EKcU9RsbF8VS0aK2cdFO++UcN7vwxgLTkVvUXAhb+TKNMJvnytp EhVgPtvfX0ICJJNEUoNHvM0fXZcKTXbdRCZMA0Rs2YaRWwClny6bL1Xo4od+6g8H kCX52ZSmNsCqfjU8OaCAdp6601bZBNFHxWHc4cWmOg5oQAd147VhodqBRE1EyhHz 8L63ycbIIi8Omd3Pk5++HrozLs1rTn9UNfehUSzQX7dSe4u4f+y8K8FrQ2jckb/s dAyeN8l3vPBDIX+B5fV8qqSYag== -----END CERTIFICATE-----Generated at Sun Apr 5 19:53:11 2026 by rpki-client