$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft File: Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft (raw, json) Hash identifier: FyK+5VZ9/i1b3xhxZ2xaWoDk8HQYx7Nrw9uyJjHHe2A= Subject key identifier: A8:29:92:F3:9E:05:71:AA:85:08:B3:34:C1:37:55:4F:D1:48:CA:93 Authority key identifier: 42:9E:CE:19:38:CC:89:24:B1:11:09:65:C9:CF:4F:96:48:60:20:18 Certificate issuer: /CN=A914EAE4/serialNumber=429ECE1938CC8924B1110965C9CF4F9648602018 Certificate serial: 1BA6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qp7OGTjMiSSxEQllyc9PlkhgIBg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft Manifest number: 1B9F Signing time: Mon 02 Mar 2026 16:19:14 +0000 Manifest this update: Mon 02 Mar 2026 16:19:13 +0000 Manifest next update: Mon 09 Mar 2026 16:19:13 +0000 Files and hashes: 1: Qp7OGTjMiSSxEQllyc9PlkhgIBg.crl (hash: iy7wuB0XmvHrwDHCnXnJWo7xiU1UiltGEf0cAOsEXf8=) 2: 7E1ADD74E00E11EDA7E1B640C4F9AE02.roa (hash: VUPltuoFww8hZ1Urrtv19HM0IQZ3a1bmc12QvfJk9Ts=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.crl rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qp7OGTjMiSSxEQllyc9PlkhgIBg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 16:19:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7078 (0x1ba6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE4, serialNumber=429ECE1938CC8924B1110965C9CF4F9648602018 Validity Not Before: Mar 2 16:19:13 2026 GMT Not After : Mar 9 16:19:13 2026 GMT Subject: CN=69a5b882-7632 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:cd:ba:9f:7a:32:fb:ce:72:3d:98:1a:0a:b7: c1:f1:e6:cc:4b:c3:88:30:b7:99:dd:fb:51:87:ec: bd:da:02:21:2b:2d:fd:9a:b0:39:67:ad:6d:ad:26: ae:51:4c:0a:81:6a:f8:60:4e:a9:64:7b:cd:7d:cc: 31:cb:a4:a5:4b:dd:78:74:bf:1f:ca:71:50:2c:ca: 03:78:57:f7:79:f1:16:b3:9f:ab:0c:d5:5c:3b:62: f8:5b:09:dc:d2:c4:d0:0f:ce:39:71:51:87:a7:c7: 91:f4:3d:d7:e0:d2:96:b9:cd:86:fb:cf:2b:c7:fc: 38:9b:05:26:ad:87:51:1a:67:27:30:a4:65:4b:9f: 31:60:3d:d3:a0:d3:25:9a:70:e5:63:8b:39:96:0f: ec:27:93:9f:4e:4f:f6:c4:36:bf:56:55:66:5a:fb: b2:a3:47:dd:f0:b0:73:52:aa:90:b1:83:20:78:88: c4:85:6f:74:ae:18:7d:53:2a:fe:33:b5:c6:58:02: 14:df:a7:fd:54:2f:1c:a0:e4:6c:29:5a:c2:64:f4: 81:23:52:77:6b:bf:00:ba:02:89:35:ca:06:2e:93: c6:ee:ee:7b:82:08:d7:73:1b:74:7b:7a:29:d2:04: 03:3a:a6:73:15:2a:cb:11:75:56:a9:a1:ab:43:30: 26:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:29:92:F3:9E:05:71:AA:85:08:B3:34:C1:37:55:4F:D1:48:CA:93 X509v3 Authority Key Identifier: keyid:42:9E:CE:19:38:CC:89:24:B1:11:09:65:C9:CF:4F:96:48:60:20:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qp7OGTjMiSSxEQllyc9PlkhgIBg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:97:be:13:61:dc:3d:bd:9f:a2:90:66:29:4b:91:6f:bd:a7: fc:a2:dd:d4:fc:b7:1b:7a:8d:36:fa:93:1d:81:85:e5:a2:68: 80:4f:a0:34:1f:63:70:bf:ec:8f:9e:34:a2:b5:af:f7:bf:ca: a0:77:a0:70:d9:fc:81:91:a4:f3:b9:c1:f9:2f:d4:72:b3:dd: d3:c2:2c:46:11:f2:f7:4a:45:3a:54:f3:31:ec:6e:16:3e:1d: 36:ca:52:21:32:0c:e8:33:3f:f0:09:6e:f9:66:4b:09:fa:13: 21:49:86:36:43:3c:eb:3a:fd:bf:19:61:bb:df:7d:ad:23:5f: 50:52:80:f9:bd:60:30:84:88:5e:39:bb:9e:8b:85:64:8e:82: 74:ea:fd:84:52:ae:80:92:f6:35:5d:77:5c:38:e9:81:95:57: 62:48:a0:8a:6f:9a:7e:21:94:65:7a:6b:d7:f1:3c:55:1a:20: b7:ac:bb:d4:63:2d:3e:7f:38:62:74:71:4d:a1:e7:be:bb:37: e5:81:10:ca:b9:35:96:e5:18:ee:f3:74:eb:3f:04:67:53:d3: 64:3d:55:5d:aa:90:73:dd:16:f8:15:93:46:42:cc:db:94:f9: 96:bb:7e:0a:cf:0e:2f:a8:3e:63:35:2d:d3:16:47:37:5d:9d: d4:c9:2c:c2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICG6YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVBRTQxMTAvBgNVBAUTKDQyOUVDRTE5MzhDQzg5MjRCMTExMDk2NUM5Q0Y0Rjk2 NDg2MDIwMTgwHhcNMjYwMzAyMTYxOTEzWhcNMjYwMzA5MTYxOTEzWjAYMRYwFAYD VQQDEw02OWE1Yjg4Mi03NjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3826n3oy+85yPZgaCrfB8ebMS8OIMLeZ3ftRh+y92gIhKy39mrA5Z61trSau UUwKgWr4YE6pZHvNfcwxy6SlS914dL8fynFQLMoDeFf3efEWs5+rDNVcO2L4Wwnc 0sTQD845cVGHp8eR9D3X4NKWuc2G+88rx/w4mwUmrYdRGmcnMKRlS58xYD3ToNMl mnDlY4s5lg/sJ5OfTk/2xDa/VlVmWvuyo0fd8LBzUqqQsYMgeIjEhW90rhh9Uyr+ M7XGWAIU36f9VC8coORsKVrCZPSBI1J3a78AugKJNcoGLpPG7u57ggjXcxt0e3op 0gQDOqZzFSrLEXVWqaGrQzAmTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKgpkvOe BXGqhQizNME3VU/RSMqTMB8GA1UdIwQYMBaAFEKezhk4zIkksREJZcnPT5ZIYCAY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUFFNC81RUNDMTVBQTI1 NzUxMUU3QUMwRDE3MkFDNEY5QUUwMi9RcDdPR1RqTWlTU3hFUWxseWM5UGxraGdJ QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FwN09HVGpNaVNTeEVRbGx5YzlQbGtoZ0lCZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUFFNC81RUNDMTVBQTI1NzUxMUU3QUMwRDE3MkFDNEY5QUUwMi9RcDdPR1RqTWlT U3hFUWxseWM5UGxraGdJQmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZpe+E2HcPb2fopBmKUuRb72n/KLd1Py3G3qNNvqTHYGF5aJogE+gNB9jcL/s j540orWv97/KoHegcNn8gZGk87nB+S/UcrPd08IsRhHy90pFOlTzMexuFj4dNspS ITIM6DM/8Alu+WZLCfoTIUmGNkM86zr9vxlhu999rSNfUFKA+b1gMISIXjm7nouF ZI6CdOr9hFKugJL2NV13XDjpgZVXYkigim+afiGUZXpr1/E8VRogt6y71GMtPn84 YnRxTaHnvrs35YEQyrk1luUY7vN06z8EZ1PTZD1VXaqQc90W+BWTRkLM25T5lrt+ Cs8OL6g+YzUt0xZHN12d1Mkswg== -----END CERTIFICATE-----Generated at Wed Mar 4 08:36:28 2026 by rpki-client