$ rpki-client -vvf rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.mft File: Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.mft (raw, json) Hash identifier: XwXT6F/0AjPjWj4YTyUlYnqyDPssY03rfizzRSFB+J0= Subject key identifier: D7:2C:98:B5:BB:71:C1:B8:86:36:4B:C8:59:06:90:11:16:99:3C:B4 Authority key identifier: 43:8D:82:3E:C3:34:4B:4B:F1:C9:9E:11:DE:0F:56:F8:42:EF:D9:8E Certificate issuer: /CN=A9199885/serialNumber=438D823EC3344B4BF1C99E11DE0F56F842EFD98E Certificate serial: 2161 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.mft Manifest number: 5670 Signing time: Sat 04 Apr 2026 14:52:20 +0000 Manifest this update: Sat 04 Apr 2026 14:52:19 +0000 Manifest next update: Sat 11 Apr 2026 14:52:19 +0000 Files and hashes: 1: Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.crl (hash: vteZp9Hhqdn/Do9igSowhgTfgCcr/4zTClcJ9HnUJPE=) 2: 01804686B48E11EF81F55F3CC4F9AE02.roa (hash: N4+8fycTDr0KyyL1T8BnM1QnlOy4E1P+9kvY0kSTWus=) 3: 0211478AB48E11EF81F55F3CC4F9AE02.roa (hash: eXbj2/2PGJubPsuJy/6g3AgLU0HNFQl847an+DeMHhU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.crl rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 14:52:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8545 (0x2161) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199885, serialNumber=438D823EC3344B4BF1C99E11DE0F56F842EFD98E Validity Not Before: Apr 4 14:52:19 2026 GMT Not After : Apr 11 14:52:19 2026 GMT Subject: CN=69d125a4-f0e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a3:00:ba:d9:d0:47:91:6b:81:8b:64:dc:b4: df:ef:b7:ea:4e:ac:ae:7a:4c:81:f7:69:99:c3:22: 8e:27:4c:28:6a:29:d2:22:89:97:9d:8b:ba:f5:c2: 3e:05:c2:aa:c8:21:88:9d:d9:e1:99:d4:a5:0f:cb: 79:19:e9:dc:c1:32:1a:7a:7b:3f:de:54:78:ea:d9: 47:ff:a1:c8:85:fb:2d:80:d3:52:02:bc:66:65:58: 1e:5a:7b:f7:6a:80:22:74:fe:39:5c:d9:71:d1:19: 0f:63:6d:00:97:0d:18:55:9f:a0:2e:e5:33:d6:51: 3f:a1:eb:39:00:e6:55:0e:1f:3f:e4:26:0e:10:18: c3:c4:e1:05:6b:70:bb:80:21:09:36:a1:37:ff:97: 4c:92:e0:0a:0f:8c:92:55:82:68:63:2e:9a:06:3c: 0d:36:18:97:ab:17:4b:94:04:96:6e:c4:5d:be:94: 60:23:37:72:3a:22:7e:22:08:02:c7:14:73:d8:25: 50:f9:78:ff:2e:7f:98:bb:b9:01:88:77:a2:b5:36: 67:a2:f2:88:27:96:a6:db:ee:ef:fd:55:1b:e0:83: f8:70:d0:7d:b5:ff:35:df:02:80:2f:45:0e:21:1e: 6f:92:a8:9d:6c:62:05:c6:77:32:c7:a4:1f:6d:36: b3:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:2C:98:B5:BB:71:C1:B8:86:36:4B:C8:59:06:90:11:16:99:3C:B4 X509v3 Authority Key Identifier: keyid:43:8D:82:3E:C3:34:4B:4B:F1:C9:9E:11:DE:0F:56:F8:42:EF:D9:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:69:19:c0:1b:44:e3:52:0d:9d:a5:36:19:ce:cc:0f:63:ed: 54:bb:02:37:e5:51:12:4b:15:51:ac:81:b6:f6:52:5a:c6:1a: e0:ae:f2:76:6d:d3:78:69:21:17:ed:ff:0e:c8:6b:0a:50:40: 3f:ac:26:bd:86:1c:11:30:3c:22:f5:98:de:ee:d0:31:28:7b: 0d:89:d8:6f:bf:a7:36:b0:27:22:60:17:e7:62:1d:bb:0f:32: 96:8a:46:2f:91:7d:58:f6:22:db:1f:ec:c6:ee:59:8b:2c:ba: e0:6c:ec:36:a9:e6:1c:ce:a2:29:70:e7:3e:43:94:f3:72:ca: 17:77:07:4f:38:19:1d:b5:0e:78:64:76:de:fe:df:0d:a1:85: 30:5b:1f:90:1f:3b:9f:3a:0c:17:d5:24:08:45:66:7e:e6:17: 02:e6:8f:4d:91:5d:22:c5:ba:ac:a7:5d:5d:d1:55:1c:dc:0e: 7e:02:4d:c2:2f:69:c1:45:0a:e5:47:c5:5d:09:b9:3c:73:19: a6:30:a9:9a:89:e8:e4:14:09:0a:d8:13:5e:a2:dc:42:9a:f6: 18:0e:4d:c8:71:b7:59:d4:69:71:52:b0:50:42:b2:c6:96:33: 1b:43:d8:a6:d5:c6:cc:1d:82:ca:d5:45:ad:d9:fb:23:b2:0e: 1d:19:11:e9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICIWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk4ODUxMTAvBgNVBAUTKDQzOEQ4MjNFQzMzNDRCNEJGMUM5OUUxMURFMEY1NkY4 NDJFRkQ5OEUwHhcNMjYwNDA0MTQ1MjE5WhcNMjYwNDExMTQ1MjE5WjAYMRYwFAYD VQQDEw02OWQxMjVhNC1mMGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvqMAutnQR5FrgYtk3LTf77fqTqyuekyB92mZwyKOJ0woainSIomXnYu69cI+ BcKqyCGIndnhmdSlD8t5GencwTIaens/3lR46tlH/6HIhfstgNNSArxmZVgeWnv3 aoAidP45XNlx0RkPY20Alw0YVZ+gLuUz1lE/oes5AOZVDh8/5CYOEBjDxOEFa3C7 gCEJNqE3/5dMkuAKD4ySVYJoYy6aBjwNNhiXqxdLlASWbsRdvpRgIzdyOiJ+IggC xxRz2CVQ+Xj/Ln+Yu7kBiHeitTZnovKIJ5am2+7v/VUb4IP4cNB9tf813wKAL0UO IR5vkqidbGIFxncyx6QfbTazywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNcsmLW7 ccG4hjZLyFkGkBEWmTy0MB8GA1UdIwQYMBaAFEONgj7DNEtL8cmeEd4PVvhC79mO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTg4NS9EMDUwNjg1QTFE OTgxMUUyQUU2QjFGODMwOEIwMkNEMi9RNDJDUHNNMFMwdnh5WjRSM2c5Vy1FTHYy WTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1E0MkNQc00wUzB2eHlaNFIzZzlXLUVMdjJZNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTg4NS9EMDUwNjg1QTFEOTgxMUUyQUU2QjFGODMwOEIwMkNEMi9RNDJDUHNNMFMw dnh5WjRSM2c5Vy1FTHYyWTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGWkZwBtE41INnaU2Gc7MD2PtVLsCN+VREksVUayBtvZSWsYa4K7ydm3TeGkh F+3/DshrClBAP6wmvYYcETA8IvWY3u7QMSh7DYnYb7+nNrAnImAX52Iduw8ylopG L5F9WPYi2x/sxu5Ziyy64GzsNqnmHM6iKXDnPkOU83LKF3cHTzgZHbUOeGR23v7f DaGFMFsfkB87nzoMF9UkCEVmfuYXAuaPTZFdIsW6rKddXdFVHNwOfgJNwi9pwUUK 5UfFXQm5PHMZpjCpmono5BQJCtgTXqLcQpr2GA5NyHG3WdRpcVKwUEKyxpYzG0PY ptXGzB2CytVFrdn7I7IOHRkR6Q== -----END CERTIFICATE-----Generated at Sun Apr 5 19:43:48 2026 by rpki-client