$ rpki-client -vvf rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft File: q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft (raw, json) Hash identifier: CS5yLGzNPtuviMpTN/IeR7FzQVfsd5ukVYUli27Zkqw= Subject key identifier: 24:C4:81:AD:E9:AC:D6:BC:DF:45:BD:52:33:FE:50:17:63:84:72:BB Authority key identifier: AB:45:DB:FC:35:57:7F:27:C9:9F:CF:40:A3:9B:38:6B:32:35:0A:DA Certificate issuer: /CN=A9136CB3/serialNumber=AB45DBFC35577F27C99FCF40A39B386B32350ADA Certificate serial: 01F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0Xb_DVXfyfJn89Ao5s4azI1Cto.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft Manifest number: 01E2 Signing time: Sun 29 Mar 2026 03:12:21 +0000 Manifest this update: Sun 29 Mar 2026 03:12:21 +0000 Manifest next update: Sun 05 Apr 2026 03:12:21 +0000 Files and hashes: 1: q0Xb_DVXfyfJn89Ao5s4azI1Cto.crl (hash: FAErV1PW4Sl4Ovtd5qJrQDz5DMPpgpoeibS5HgYhsU4=) 2: 20DA8B7E571D11EEAA430244C4F9AE02.roa (hash: hdiJI/Pl7CfApe4A3Ae8zDLrz5/BDB6o+JJ3zkJ+3n8=) 3: 0648277C065B11F1BBF0D547343D8C67.roa (hash: UPZChaoPwZygYNvD1ZEQcZn9IurnbGE9M73HomojtHk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.crl rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0Xb_DVXfyfJn89Ao5s4azI1Cto.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 03:12:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 497 (0x1f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136CB3, serialNumber=AB45DBFC35577F27C99FCF40A39B386B32350ADA Validity Not Before: Mar 29 03:12:21 2026 GMT Not After : Apr 5 03:12:21 2026 GMT Subject: CN=69c89895-375a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:78:ec:5c:1c:f0:96:1f:1d:b2:33:9f:35:b0: 8c:1e:ce:31:68:e4:4f:7c:bf:64:34:ee:96:d5:d1: 0a:b4:bc:3d:5d:38:24:50:cf:d5:4b:38:bb:36:17: 9d:9d:05:f9:14:fd:18:95:c3:32:c4:ca:92:33:f9: 02:f2:af:f7:c4:33:f4:9f:f9:f2:68:84:53:58:9b: 94:8c:8a:f1:0d:15:00:ce:fe:e6:0e:b0:cf:0f:49: 1b:5f:b4:d3:6a:7f:b7:4e:d7:5d:aa:ab:83:d6:35: a5:85:42:fe:d3:ee:f0:83:73:9d:c8:27:43:58:50: 4c:78:76:5c:f2:0f:b9:bc:9f:eb:02:87:75:a8:f3: da:4d:d8:df:f3:16:ae:af:92:3b:4a:a1:ea:77:78: fc:fa:1b:c6:fb:72:3f:2f:ff:c3:79:7e:5a:b9:34: c5:16:18:41:cc:0a:ef:6c:77:11:fd:ae:7f:5c:a8: cf:c1:f0:57:6b:58:46:45:33:d7:21:0a:37:90:d7: 45:58:e5:39:14:02:09:92:9e:06:57:09:4d:4b:10: ee:c1:91:a7:7a:4d:11:41:24:b6:23:90:f6:4d:16: 9d:a1:58:21:8f:30:c8:18:3c:55:38:cd:29:be:59: a7:d8:3d:c0:f2:93:c6:57:10:78:de:d3:cc:14:b3: 6f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:C4:81:AD:E9:AC:D6:BC:DF:45:BD:52:33:FE:50:17:63:84:72:BB X509v3 Authority Key Identifier: keyid:AB:45:DB:FC:35:57:7F:27:C9:9F:CF:40:A3:9B:38:6B:32:35:0A:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0Xb_DVXfyfJn89Ao5s4azI1Cto.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:2c:2f:45:c3:65:be:95:bf:02:a3:32:52:46:ea:76:0b:46: b5:7c:3c:2f:1a:a5:a3:9b:42:10:21:4c:c6:28:b5:a0:78:07: 93:7a:30:0f:b0:7b:64:10:3d:a9:8c:8c:84:c2:4b:5c:1d:4f: 70:de:df:52:d8:70:4f:75:01:c2:7b:72:ca:b9:a8:af:dd:3a: 8a:4a:e5:55:59:dc:e4:c1:59:4f:4b:f1:68:88:71:c1:b3:2a: 10:ce:9c:71:1f:c3:d2:e9:07:7b:c2:17:2e:af:d4:05:fc:8e: 5c:5b:b6:84:c8:8e:c2:3b:1a:6e:0f:f9:38:92:55:01:52:a5: 9c:8f:4e:a5:5e:74:af:0e:97:46:dc:17:a5:9b:d0:6b:14:b0: 95:cf:6b:ef:1a:e3:ce:b4:9e:1c:5d:00:58:ee:8e:d9:06:2a: b1:74:47:bf:85:6d:6a:30:67:e8:ae:46:ca:b5:a3:ca:62:3e: 1d:32:f4:eb:f3:6a:e8:da:c4:25:f5:d1:00:c6:31:d6:65:26: 30:90:b1:9b:c3:dd:25:76:ad:ab:a9:bc:59:8a:e8:00:62:fe: 59:6b:cc:38:98:d7:74:d4:f3:51:b2:db:11:58:f9:c9:fe:a1: 61:55:e1:4a:94:1d:f2:d5:37:da:34:e2:b3:4a:2b:25:e2:41: c5:a8:bc:70 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZDQjMxMTAvBgNVBAUTKEFCNDVEQkZDMzU1NzdGMjdDOTlGQ0Y0MEEzOUIzODZC MzIzNTBBREEwHhcNMjYwMzI5MDMxMjIxWhcNMjYwNDA1MDMxMjIxWjAYMRYwFAYD VQQDEw02OWM4OTg5NS0zNzVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxXjsXBzwlh8dsjOfNbCMHs4xaORPfL9kNO6W1dEKtLw9XTgkUM/VSzi7Nhed nQX5FP0YlcMyxMqSM/kC8q/3xDP0n/nyaIRTWJuUjIrxDRUAzv7mDrDPD0kbX7TT an+3TtddqquD1jWlhUL+0+7wg3OdyCdDWFBMeHZc8g+5vJ/rAod1qPPaTdjf8xau r5I7SqHqd3j8+hvG+3I/L//DeX5auTTFFhhBzArvbHcR/a5/XKjPwfBXa1hGRTPX IQo3kNdFWOU5FAIJkp4GVwlNSxDuwZGnek0RQSS2I5D2TRadoVghjzDIGDxVOM0p vlmn2D3A8pPGVxB43tPMFLNvvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCTEga3p rNa830W9UjP+UBdjhHK7MB8GA1UdIwQYMBaAFKtF2/w1V38nyZ/PQKObOGsyNQra MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkNCMy9BNUZEODRGMjU3 MUIxMUVFQjQxOEFCM0VDNEY5QUUwMi9xMFhiX0RWWGZ5ZkpuODlBbzVzNGF6STFD dG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3EwWGJfRFZYZnlmSm44OUFvNXM0YXpJMUN0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkNCMy9BNUZEODRGMjU3MUIxMUVFQjQxOEFCM0VDNEY5QUUwMi9xMFhiX0RWWGZ5 ZkpuODlBbzVzNGF6STFDdG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAViwvRcNlvpW/AqMyUkbqdgtGtXw8Lxqlo5tCECFMxii1oHgHk3owD7B7ZBA9 qYyMhMJLXB1PcN7fUthwT3UBwntyyrmor906ikrlVVnc5MFZT0vxaIhxwbMqEM6c cR/D0ukHe8IXLq/UBfyOXFu2hMiOwjsabg/5OJJVAVKlnI9OpV50rw6XRtwXpZvQ axSwlc9r7xrjzrSeHF0AWO6O2QYqsXRHv4VtajBn6K5GyrWjymI+HTL06/Nq6NrE JfXRAMYx1mUmMJCxm8PdJXatq6m8WYroAGL+WWvMOJjXdNTzUbLbEVj5yf6hYVXh SpQd8tU32jTis0orJeJBxai8cA== -----END CERTIFICATE-----Generated at Mon Mar 30 09:28:30 2026 by rpki-client