$ rpki-client -vvf rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.mft File: qL9U9ggZZyIZNcsXzBPr-4QaYMI.mft (raw, json) Hash identifier: xVD0Llo/3B54lSzPPfe0HnEJgHdAq9+4P8pXgWNLBFU= Subject key identifier: C2:E2:B8:ED:05:A1:51:AD:1C:DA:58:90:39:AE:EF:79:D3:52:B2:93 Authority key identifier: A8:BF:54:F6:08:19:67:22:19:35:CB:17:CC:13:EB:FB:84:1A:60:C2 Certificate issuer: /CN=A914D6FC/serialNumber=A8BF54F6081967221935CB17CC13EBFB841A60C2 Certificate serial: 02A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qL9U9ggZZyIZNcsXzBPr-4QaYMI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.mft Manifest number: 029A Signing time: Sun 05 Apr 2026 01:16:07 +0000 Manifest this update: Sun 05 Apr 2026 01:16:06 +0000 Manifest next update: Sun 12 Apr 2026 01:16:06 +0000 Files and hashes: 1: qL9U9ggZZyIZNcsXzBPr-4QaYMI.crl (hash: GgkxXgILVnYXFJKsnmpZz94zvOI72+QOfsNhzr9YDtU=) 2: 11EC50B48B8F11EF8DE96E60C4F9AE02.roa (hash: Ae2D09RrIAEsj2zD2tu6+cplYXPngj1cvZnsDaiUJHM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.crl rsync://rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qL9U9ggZZyIZNcsXzBPr-4QaYMI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 01:16:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 678 (0x2a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D6FC, serialNumber=A8BF54F6081967221935CB17CC13EBFB841A60C2 Validity Not Before: Apr 5 01:16:06 2026 GMT Not After : Apr 12 01:16:06 2026 GMT Subject: CN=69d1b7d7-67d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:99:5c:d3:37:f4:af:51:ab:a0:19:30:dc:1d: d2:3c:4a:ba:ca:48:f8:e2:cc:28:12:01:5c:09:48: 0e:cf:d5:55:e1:1f:86:91:9d:f0:c8:a6:cf:f8:70: fa:e3:c4:3a:e5:73:8e:c4:5b:f3:dc:f5:22:ff:ef: 92:9d:84:66:3e:ad:08:e4:ca:69:86:48:5d:d5:7a: 76:13:2a:27:07:ae:e9:a9:98:5f:ca:94:d2:05:1a: 58:5e:44:90:5a:ad:33:e9:75:c0:d2:36:b5:8c:54: 9d:2b:0d:78:b8:5e:e4:67:40:cf:c1:f9:1e:b8:e8: ee:2d:ed:4f:5b:ab:97:34:f3:4c:e5:60:30:4b:cd: 9a:7a:3c:a9:d2:38:ee:a8:6d:ed:24:78:fb:c8:de: de:a1:17:34:c1:5f:d6:4f:33:39:21:71:e5:00:65: 14:f7:1b:11:98:30:2c:5f:d1:ce:5d:a7:e9:42:4e: 4c:77:bb:f1:48:e2:ae:3a:6b:42:a3:a4:1b:95:88: f3:25:51:6d:df:df:ef:46:04:a6:34:80:33:44:96: ca:f3:e7:da:0c:62:88:3d:a6:56:bb:4c:61:09:92: 1a:d5:4f:62:94:9b:71:0b:d5:49:56:2c:4d:e3:0c: f2:5c:11:12:1f:e1:20:fd:c9:69:d6:2f:27:49:64: 91:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:E2:B8:ED:05:A1:51:AD:1C:DA:58:90:39:AE:EF:79:D3:52:B2:93 X509v3 Authority Key Identifier: keyid:A8:BF:54:F6:08:19:67:22:19:35:CB:17:CC:13:EB:FB:84:1A:60:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qL9U9ggZZyIZNcsXzBPr-4QaYMI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:85:f4:e1:a1:82:d0:a7:6d:c0:b7:2c:83:06:4b:b7:f7:93: 42:26:e6:03:43:f0:5c:0f:b1:15:ae:6d:0e:cb:a6:14:17:9d: a9:24:37:a2:63:87:1a:1b:74:a8:de:3a:86:45:23:64:fd:11: 32:bf:d6:ea:c5:68:50:e0:55:b1:b7:66:88:fb:0f:07:f1:60: 6f:17:4a:11:95:b6:7c:56:ff:1e:bd:50:61:08:ad:a1:68:2e: fe:9a:a2:5b:5f:6c:31:4e:ff:10:22:94:79:23:38:e5:e2:7c: d6:97:7a:89:bd:2c:ef:b5:e4:0a:24:83:95:39:a9:5d:69:e7: e3:43:81:a2:92:18:c5:79:67:ec:41:83:22:76:82:3e:08:84: 98:95:ab:4d:be:43:fd:4a:85:89:23:69:7b:78:97:d5:48:09: 10:a2:16:39:d1:61:21:c2:64:83:de:5e:bc:8b:e4:72:31:00: df:17:22:77:1d:cc:bb:7d:39:2b:21:f9:37:dd:43:36:ab:28: cc:93:ed:b4:d0:34:1a:74:ff:31:5d:b9:71:e8:2b:5e:a7:84: 62:f0:07:7d:00:94:ae:a4:4f:cc:f7:34:56:08:8f:08:2b:f1: cc:3b:df:51:01:c0:b7:66:2b:d4:cd:af:0d:6f:f2:ec:9a:ce: 16:bf:74:fd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQ2RkMxMTAvBgNVBAUTKEE4QkY1NEY2MDgxOTY3MjIxOTM1Q0IxN0NDMTNFQkZC ODQxQTYwQzIwHhcNMjYwNDA1MDExNjA2WhcNMjYwNDEyMDExNjA2WjAYMRYwFAYD VQQDEw02OWQxYjdkNy02N2Q0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiplc0zf0r1GroBkw3B3SPEq6ykj44swoEgFcCUgOz9VV4R+GkZ3wyKbP+HD6 48Q65XOOxFvz3PUi/++SnYRmPq0I5Mpphkhd1Xp2EyonB67pqZhfypTSBRpYXkSQ Wq0z6XXA0ja1jFSdKw14uF7kZ0DPwfkeuOjuLe1PW6uXNPNM5WAwS82aejyp0jju qG3tJHj7yN7eoRc0wV/WTzM5IXHlAGUU9xsRmDAsX9HOXafpQk5Md7vxSOKuOmtC o6QblYjzJVFt39/vRgSmNIAzRJbK8+faDGKIPaZWu0xhCZIa1U9ilJtxC9VJVixN 4wzyXBESH+Eg/clp1i8nSWSRLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMLiuO0F oVGtHNpYkDmu73nTUrKTMB8GA1UdIwQYMBaAFKi/VPYIGWciGTXLF8wT6/uEGmDC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDZGQy84ODc1OTE4MjQz MkYxMUVEQkJEOThGNUNDNEY5QUUwMi9xTDlVOWdnWlp5SVpOY3NYekJQci00UWFZ TUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FMOVU5Z2daWnlJWk5jc1h6QlByLTRRYVlNSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDZGQy84ODc1OTE4MjQzMkYxMUVEQkJEOThGNUNDNEY5QUUwMi9xTDlVOWdnWlp5 SVpOY3NYekJQci00UWFZTUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFoX04aGC0KdtwLcsgwZLt/eTQibmA0PwXA+xFa5tDsumFBedqSQ3omOHGht0 qN46hkUjZP0RMr/W6sVoUOBVsbdmiPsPB/FgbxdKEZW2fFb/Hr1QYQitoWgu/pqi W19sMU7/ECKUeSM45eJ81pd6ib0s77XkCiSDlTmpXWnn40OBopIYxXln7EGDInaC PgiEmJWrTb5D/UqFiSNpe3iX1UgJEKIWOdFhIcJkg95evIvkcjEA3xcidx3Mu305 KyH5N91DNqsozJPttNA0GnT/MV25cegrXqeEYvAHfQCUrqRPzPc0VgiPCCvxzDvf UQHAt2Yr1M2vDW/y7JrOFr90/Q== -----END CERTIFICATE-----Generated at Mon Apr 6 13:38:02 2026 by rpki-client