$ rpki-client -vvf rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.mft File: qZhc3TeTLh02TExtddulA79yZ3w.mft (raw, json) Hash identifier: IbKwec2C0w55nbFMmHvh2rPShXGIdcfgEPFnuOBX6ms= Subject key identifier: AD:B2:29:3F:66:2B:11:33:98:9A:71:F4:83:03:B2:D4:51:E3:28:4F Authority key identifier: A9:98:5C:DD:37:93:2E:1D:36:4C:4C:6D:75:DB:A5:03:BF:72:67:7C Certificate issuer: /CN=A911B12B/serialNumber=A9985CDD37932E1D364C4C6D75DBA503BF72677C Certificate serial: 024E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZhc3TeTLh02TExtddulA79yZ3w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.mft Manifest number: 023A Signing time: Fri 13 Mar 2026 01:57:43 +0000 Manifest this update: Fri 13 Mar 2026 01:57:43 +0000 Manifest next update: Fri 20 Mar 2026 01:57:43 +0000 Files and hashes: 1: qZhc3TeTLh02TExtddulA79yZ3w.crl (hash: sgCRlT+YuWRjWyj9r83rX3Yx7DrlAfXWYbjjEodfi4s=) 2: 3370378A9D1F11F08AA63833C4F9AE02.roa (hash: MxG5JeI0s1DDujkYeGnSi1n1rR5cTlPjYLG12mySBEo=) 3: 1B38341C6B7C11F095B90A2BC4F9AE02.roa (hash: vnClLHCLhMH1PDS6B+hUbxjRXbWWCDwm+ivihh2znyE=) 4: 5BC485B09D1F11F09313A14DC4F9AE02.roa (hash: a7mFbdEd5Rjo2JTpy6uMvBLZm7bSHGiAu3zDsnwY9wE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.crl rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZhc3TeTLh02TExtddulA79yZ3w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Mar 2026 01:57:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 590 (0x24e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B12B, serialNumber=A9985CDD37932E1D364C4C6D75DBA503BF72677C Validity Not Before: Mar 13 01:57:43 2026 GMT Not After : Mar 20 01:57:43 2026 GMT Subject: CN=69b36f17-afb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:66:1e:40:c3:a7:e0:25:4c:2b:a7:77:6f:a4: 45:8f:13:6a:1e:f3:a1:56:c1:cd:ff:8a:95:c7:f8: eb:80:30:86:56:0c:8d:89:97:de:81:35:3e:22:b7: c8:37:33:2a:60:2f:fe:b7:fb:1e:b0:a6:dd:13:6f: 26:aa:a1:88:58:d1:58:24:6c:d7:f4:bf:a7:98:74: 32:eb:82:e4:3f:74:1b:c7:ac:a1:bd:a6:ee:0f:50: db:25:42:68:35:2a:78:23:e4:ef:80:d4:61:cc:5e: 2e:49:ac:aa:c2:4b:d2:af:33:65:0f:3e:95:dc:b0: fc:b3:a4:87:56:c2:dd:67:89:2c:06:36:ac:b9:63: 7f:0b:c2:df:9d:2d:f4:af:88:bf:ec:e0:3e:7b:7b: 14:68:a9:33:84:b0:82:75:fc:60:7d:91:cb:a6:78: 68:f8:1a:6b:d6:20:5d:3c:11:0c:24:5a:2a:13:3d: b9:83:84:24:0d:3c:d9:8a:73:cb:04:c5:00:be:87: 38:da:71:13:f7:c0:ad:25:6e:6e:04:a2:ba:fd:29: 90:77:a0:14:38:1b:fb:a6:91:a4:27:70:32:4b:7e: 75:ad:4f:a4:b3:88:5c:e6:bc:48:0c:38:38:e0:9d: 13:92:7c:a9:fd:c4:81:ff:c1:c1:3c:46:df:fd:4d: 72:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:B2:29:3F:66:2B:11:33:98:9A:71:F4:83:03:B2:D4:51:E3:28:4F X509v3 Authority Key Identifier: keyid:A9:98:5C:DD:37:93:2E:1D:36:4C:4C:6D:75:DB:A5:03:BF:72:67:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZhc3TeTLh02TExtddulA79yZ3w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:3d:c6:b3:61:1f:39:38:60:e3:43:25:57:b6:ac:0a:8f:e7: 03:25:6c:2d:1a:cc:04:2b:cf:90:c0:04:c9:b7:85:25:a9:2a: d6:1a:e6:48:f5:ee:b3:7c:82:e3:58:d2:c3:3c:f5:c2:aa:ad: c5:52:51:d1:a7:2b:3a:22:b1:56:95:8e:55:49:25:18:b8:8f: d4:1f:73:f4:06:47:7f:f3:e7:7e:8a:15:c7:a1:65:46:73:07: f9:b8:a9:9c:43:4c:58:7a:0e:59:40:05:e8:fa:e3:30:b7:cc: f1:37:1d:af:c4:9f:5a:9f:6c:bd:f0:90:8a:4d:a2:27:8f:28: ba:b9:ea:11:3a:0d:7a:03:90:11:37:43:8a:1a:a2:c0:33:a6: 32:51:93:9a:8d:ce:99:1b:34:47:5e:6c:35:bb:be:3b:78:31: ff:a6:17:4d:d0:20:1a:86:fe:6a:f3:0c:42:35:dc:a9:12:ff: 85:86:3c:ac:e5:30:0d:84:9a:72:17:e3:bf:c5:69:65:fe:df: e2:92:df:7e:13:92:9a:d7:e4:8e:f8:85:64:ad:06:4d:79:8b: 13:ea:5a:07:13:d1:91:03:83:d3:40:4e:47:13:00:c2:b7:59: aa:9c:6f:b4:2b:3c:a4:71:bf:d9:16:ee:95:25:c0:46:bf:02: a6:56:49:71 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAk4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUIxMkIxMTAvBgNVBAUTKEE5OTg1Q0REMzc5MzJFMUQzNjRDNEM2RDc1REJBNTAz QkY3MjY3N0MwHhcNMjYwMzEzMDE1NzQzWhcNMjYwMzIwMDE1NzQzWjAYMRYwFAYD VQQDEw02OWIzNmYxNy1hZmIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtWYeQMOn4CVMK6d3b6RFjxNqHvOhVsHN/4qVx/jrgDCGVgyNiZfegTU+IrfI NzMqYC/+t/sesKbdE28mqqGIWNFYJGzX9L+nmHQy64LkP3Qbx6yhvabuD1DbJUJo NSp4I+TvgNRhzF4uSayqwkvSrzNlDz6V3LD8s6SHVsLdZ4ksBjasuWN/C8LfnS30 r4i/7OA+e3sUaKkzhLCCdfxgfZHLpnho+Bpr1iBdPBEMJFoqEz25g4QkDTzZinPL BMUAvoc42nET98CtJW5uBKK6/SmQd6AUOBv7ppGkJ3AyS351rU+ks4hc5rxIDDg4 4J0Tknyp/cSB/8HBPEbf/U1yTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK2yKT9m KxEzmJpx9IMDstRR4yhPMB8GA1UdIwQYMBaAFKmYXN03ky4dNkxMbXXbpQO/cmd8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjEyQi8wOEMyNzUzMkRC NjgxMUVEOTZDNDlDM0RDNEY5QUUwMi9xWmhjM1RlVExoMDJURXh0ZGR1bEE3OXla M3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FaaGMzVGVUTGgwMlRFeHRkZHVsQTc5eVozdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjEyQi8wOEMyNzUzMkRCNjgxMUVEOTZDNDlDM0RDNEY5QUUwMi9xWmhjM1RlVExo MDJURXh0ZGR1bEE3OXlaM3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUz3Gs2EfOThg40MlV7asCo/nAyVsLRrMBCvPkMAEybeFJakq1hrmSPXus3yC 41jSwzz1wqqtxVJR0acrOiKxVpWOVUklGLiP1B9z9AZHf/PnfooVx6FlRnMH+bip nENMWHoOWUAF6PrjMLfM8Tcdr8SfWp9svfCQik2iJ48ournqEToNegOQETdDihqi wDOmMlGTmo3OmRs0R15sNbu+O3gx/6YXTdAgGob+avMMQjXcqRL/hYY8rOUwDYSa chfjv8VpZf7f4pLffhOSmtfkjviFZK0GTXmLE+paBxPRkQOD00BORxMAwrdZqpxv tCs8pHG/2RbulSXARr8CplZJcQ== -----END CERTIFICATE-----Generated at Sat Mar 14 05:38:29 2026 by rpki-client