$ rpki-client -vvf rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.mft File: QstM8CH28_wMgcT98cl9dCEAMXs.mft (raw, json) Hash identifier: +vSxXKJwdlL8/UiTLOBc/mIiiFx/N6Snt2xWTaPOA1E= Subject key identifier: 2F:83:11:92:E9:C0:47:71:09:AB:C7:92:7F:1A:9B:B5:C7:DE:F2:1B Authority key identifier: 42:CB:4C:F0:21:F6:F3:FC:0C:81:C4:FD:F1:C9:7D:74:21:00:31:7B Certificate issuer: /CN=A9113B73/serialNumber=42CB4CF021F6F3FC0C81C4FDF1C97D742100317B Certificate serial: 07E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QstM8CH28_wMgcT98cl9dCEAMXs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.mft Manifest number: 07D8 Signing time: Sat 04 Apr 2026 21:08:36 +0000 Manifest this update: Sat 04 Apr 2026 21:08:35 +0000 Manifest next update: Sat 11 Apr 2026 21:08:35 +0000 Files and hashes: 1: QstM8CH28_wMgcT98cl9dCEAMXs.crl (hash: 6AUARlVg+FqIUKvqi1+WybbOyEHevyD/XPu2H9sCY1Y=) 2: 038C732E874611EB83B41D39C4F9AE02.roa (hash: 2JfNZ4QiLkf3fWIrtV5StFupWR5RzcN8rLVkxpO3w64=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.crl rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QstM8CH28_wMgcT98cl9dCEAMXs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 21:08:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2018 (0x7e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113B73, serialNumber=42CB4CF021F6F3FC0C81C4FDF1C97D742100317B Validity Not Before: Apr 4 21:08:35 2026 GMT Not After : Apr 11 21:08:35 2026 GMT Subject: CN=69d17dd4-84fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:39:d4:d2:1c:2f:46:4e:5c:43:6c:b8:31:a0: db:94:b4:90:fc:42:b5:d3:52:fc:22:cb:81:8e:70: 87:52:0d:3b:55:52:6e:6a:bb:6c:86:18:48:6e:5d: 47:a5:5f:7a:49:a5:e3:6b:42:b9:da:5a:19:9f:e3: 8a:31:eb:74:0a:88:7c:77:c3:1c:b3:4b:af:2d:8d: 69:4f:b3:4e:bc:e0:8c:9a:f3:60:e9:b7:65:96:c1: 1a:2e:81:95:d3:bb:32:8e:7b:46:66:b1:85:f0:6f: 72:84:b7:93:5c:a1:ae:1c:7b:42:df:8f:a3:a7:da: 06:f9:51:7b:ce:7a:d1:c3:a9:23:5e:a2:78:7d:a8: eb:86:6f:e6:ce:86:ac:eb:36:84:ca:08:07:25:97: 09:c4:e1:b5:c5:b9:5b:da:e3:1b:01:94:b4:4a:90: f9:28:16:31:0f:d7:20:58:74:84:0e:b0:3f:c2:31: 5c:7e:2a:63:b1:32:12:04:23:cb:9f:9c:ec:20:ff: f4:ce:38:bf:43:4c:31:6a:f0:6b:82:f9:56:6d:13: a5:b3:45:20:34:81:d7:c1:bb:86:aa:59:ef:6b:90: 58:5a:4d:3e:67:25:3d:96:05:81:2b:8f:92:ea:23: a4:0a:ff:a0:82:69:f5:26:62:bb:6b:19:41:c7:d3: 2c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:83:11:92:E9:C0:47:71:09:AB:C7:92:7F:1A:9B:B5:C7:DE:F2:1B X509v3 Authority Key Identifier: keyid:42:CB:4C:F0:21:F6:F3:FC:0C:81:C4:FD:F1:C9:7D:74:21:00:31:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QstM8CH28_wMgcT98cl9dCEAMXs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:9c:7d:1c:e1:fe:fe:b6:66:66:84:4c:74:ce:89:d2:23:fb: 2d:39:41:28:0a:9b:9e:97:dd:b0:29:a1:af:2f:b7:c3:f9:af: 11:f1:f8:b5:5f:f5:2b:ec:0a:6e:fe:df:3e:7c:f0:5c:4b:ea: f5:8b:1c:a1:4c:a2:43:b1:f1:7e:14:a4:93:08:28:cf:61:33: 89:6b:1b:a4:0a:65:7c:f2:23:09:16:af:7f:c9:84:c7:a8:9e: de:82:0e:d4:60:75:86:97:14:84:05:4d:7d:83:6c:ca:49:46: a8:3c:9e:4c:c7:55:0a:27:02:4f:62:00:50:b5:e4:f9:1e:bc: c0:98:20:97:00:a3:1c:0e:01:d7:7e:0b:b3:8d:27:97:93:4b: ca:4e:08:b7:50:d6:48:b9:8c:69:27:14:ab:99:1b:c1:fa:88: 66:13:8e:cc:7b:8f:18:bc:24:e0:74:b6:27:ae:c4:8a:a5:46: 5c:d6:d1:c6:ef:30:5c:1d:98:ca:b8:f8:c0:d2:5b:95:0d:2f: 63:ad:78:6e:b2:d6:e6:e7:1e:f8:07:ca:8e:91:83:26:61:13: f6:94:c9:68:11:fa:49:93:36:4c:ce:50:0e:32:fe:b1:06:da: d2:91:22:2e:74:58:ae:54:ab:76:e4:ad:d2:c9:55:8c:90:ee: e1:05:53:d1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB+IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTNCNzMxMTAvBgNVBAUTKDQyQ0I0Q0YwMjFGNkYzRkMwQzgxQzRGREYxQzk3RDc0 MjEwMDMxN0IwHhcNMjYwNDA0MjEwODM1WhcNMjYwNDExMjEwODM1WjAYMRYwFAYD VQQDEw02OWQxN2RkNC04NGZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3jnU0hwvRk5cQ2y4MaDblLSQ/EK101L8IsuBjnCHUg07VVJuartshhhIbl1H pV96SaXja0K52loZn+OKMet0Coh8d8Mcs0uvLY1pT7NOvOCMmvNg6bdllsEaLoGV 07syjntGZrGF8G9yhLeTXKGuHHtC34+jp9oG+VF7znrRw6kjXqJ4fajrhm/mzoas 6zaEyggHJZcJxOG1xblb2uMbAZS0SpD5KBYxD9cgWHSEDrA/wjFcfipjsTISBCPL n5zsIP/0zji/Q0wxavBrgvlWbROls0UgNIHXwbuGqlnva5BYWk0+ZyU9lgWBK4+S 6iOkCv+ggmn1JmK7axlBx9MsPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC+DEZLp wEdxCavHkn8am7XH3vIbMB8GA1UdIwQYMBaAFELLTPAh9vP8DIHE/fHJfXQhADF7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0I3My9CQTYzNTk4MjJG RTQxMUVCOERCNDFCMjVDNEY5QUUwMi9Rc3RNOENIMjhfd01nY1Q5OGNsOWRDRUFN WHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FzdE04Q0gyOF93TWdjVDk4Y2w5ZENFQU1Ycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx M0I3My9CQTYzNTk4MjJGRTQxMUVCOERCNDFCMjVDNEY5QUUwMi9Rc3RNOENIMjhf d01nY1Q5OGNsOWRDRUFNWHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXJx9HOH+/rZmZoRMdM6J0iP7LTlBKAqbnpfdsCmhry+3w/mvEfH4tV/1K+wK bv7fPnzwXEvq9YscoUyiQ7HxfhSkkwgoz2EziWsbpAplfPIjCRavf8mEx6ie3oIO 1GB1hpcUhAVNfYNsyklGqDyeTMdVCicCT2IAULXk+R68wJgglwCjHA4B134Ls40n l5NLyk4It1DWSLmMaScUq5kbwfqIZhOOzHuPGLwk4HS2J67EiqVGXNbRxu8wXB2Y yrj4wNJblQ0vY614brLW5uce+AfKjpGDJmET9pTJaBH6SZM2TM5QDjL+sQba0pEi LnRYrlSrduSt0slVjJDu4QVT0Q== -----END CERTIFICATE-----Generated at Mon Apr 6 08:59:41 2026 by rpki-client