$ rpki-client -vvf rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft File: qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft (raw, json) Hash identifier: /R8HsQNY9FjV/uQK7rOCKrO0YQ5Vr8nL0SSFUXX0ErY= Subject key identifier: 46:FC:E7:B5:C3:A1:D1:91:A8:86:81:7E:13:D4:C4:3A:7F:71:BD:9F Authority key identifier: A8:FC:25:9A:10:1E:AB:82:6E:E8:CB:EA:2A:0B:DA:5C:DE:CF:DA:F2 Certificate issuer: /CN=A9186B80/serialNumber=A8FC259A101EAB826EE8CBEA2A0BDA5CDECFDAF2 Certificate serial: 05A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft Manifest number: 0598 Signing time: Sat 28 Mar 2026 23:06:32 +0000 Manifest this update: Sat 28 Mar 2026 23:06:31 +0000 Manifest next update: Sat 04 Apr 2026 23:06:31 +0000 Files and hashes: 1: qPwlmhAeq4Ju6MvqKgvaXN7P2vI.crl (hash: 9P4UjHSX8ceguprnumNtp1UOH357XKN7DkErI8l5FFg=) 2: 9C09360E0C3411EDB8619843C4F9AE02.roa (hash: wMvkSHLjnq5sLqQ/zAmxIdC9rNEgP/i+2/CsALVDz+A=) 3: D3A7743C19EA11EC9C11D95AC4F9AE02.roa (hash: u3QeAH/Xjc/phjAuXipIPbI5+ZQ8m+RjZgJwXpuM0m0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.crl rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 Apr 2026 23:06:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1448 (0x5a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186B80, serialNumber=A8FC259A101EAB826EE8CBEA2A0BDA5CDECFDAF2 Validity Not Before: Mar 28 23:06:31 2026 GMT Not After : Apr 4 23:06:31 2026 GMT Subject: CN=69c85ef8-8620 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:47:7b:46:07:7b:4b:05:4d:d4:69:35:56:e8: 54:f6:b5:7f:5d:fb:3c:f1:d1:76:96:da:3c:ec:6d: c6:00:ac:9e:60:04:a7:7a:ad:54:af:ac:44:57:3c: 20:26:82:46:cf:54:2a:5e:a6:6d:a6:a9:2c:7e:da: ec:85:be:6e:56:5a:a7:6c:6d:af:d1:3c:f9:50:7e: 88:72:44:47:2c:a8:be:04:d7:5d:a2:4b:78:64:f4: c6:a9:41:59:bf:d9:29:18:b9:5d:ab:b0:1f:9b:01: 46:a7:35:b4:ec:cb:2c:e3:b1:72:60:47:16:51:c0: 1a:7d:8b:37:0c:2f:f3:08:bb:dd:da:ee:de:f5:43: 40:a7:17:11:50:52:95:87:e9:72:48:3f:38:20:42: b8:6e:c3:33:1e:d5:b8:c6:e5:0f:d0:0f:5e:0f:01: 01:7a:54:c9:81:d5:4e:f8:26:67:2b:c1:58:00:7d: d4:cc:e1:c0:59:5d:24:06:29:b2:83:c9:10:31:79: e0:dc:da:dd:9b:ac:20:ed:05:97:48:bd:14:32:6d: 62:e3:99:79:a0:c9:94:7c:1f:ff:6a:c0:ed:94:99: d6:7d:e2:84:58:12:6a:97:ec:84:b8:08:95:ef:c9: 52:58:23:7d:ed:0f:05:e7:96:f8:f5:a3:0e:6c:00: e4:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:FC:E7:B5:C3:A1:D1:91:A8:86:81:7E:13:D4:C4:3A:7F:71:BD:9F X509v3 Authority Key Identifier: keyid:A8:FC:25:9A:10:1E:AB:82:6E:E8:CB:EA:2A:0B:DA:5C:DE:CF:DA:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:22:8b:a0:11:02:13:b0:e7:96:02:f9:17:36:a5:22:f8:12: eb:07:55:0c:59:32:06:6e:e8:c6:bc:ac:6f:ad:50:c0:97:69: 09:34:41:a4:86:7f:34:50:fd:c3:55:fe:4d:b3:2b:d4:f5:db: 87:c6:64:07:b6:be:a6:ed:a2:a6:11:36:00:16:1c:1d:21:1f: 89:c8:84:d0:92:8c:b9:30:90:47:32:df:f2:c5:eb:78:81:00: 62:76:13:05:6e:67:bb:2a:3c:0f:57:8d:28:99:12:30:46:1b: 2c:63:dc:97:da:db:72:a4:28:ea:98:03:f6:72:bd:85:9f:56: b1:fa:cb:87:08:44:06:f3:ac:10:5b:1c:98:8f:36:b5:dc:43: 05:90:d2:c0:ec:bc:67:a2:6a:51:86:b0:38:bf:67:c0:6b:09: f3:6f:c7:ae:43:1e:66:fb:9e:44:27:c5:8e:a7:59:a2:9a:a8: 6d:39:da:e2:5b:09:f0:af:76:9a:80:c3:62:ad:55:5a:94:61: 5b:9a:16:5c:8e:09:6a:41:15:f6:0f:41:b1:f2:56:86:4c:cd: fc:8f:47:10:ff:ef:8e:29:b6:17:55:dc:78:ce:36:e0:82:45: 85:c7:9e:3c:c9:ef:43:0f:fc:fc:79:64:c8:9d:30:44:13:27: 92:d9:f4:27 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZCODAxMTAvBgNVBAUTKEE4RkMyNTlBMTAxRUFCODI2RUU4Q0JFQTJBMEJEQTVD REVDRkRBRjIwHhcNMjYwMzI4MjMwNjMxWhcNMjYwNDA0MjMwNjMxWjAYMRYwFAYD VQQDEw02OWM4NWVmOC04NjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArUd7Rgd7SwVN1Gk1VuhU9rV/Xfs88dF2lto87G3GAKyeYASneq1Ur6xEVzwg JoJGz1QqXqZtpqksftrshb5uVlqnbG2v0Tz5UH6IckRHLKi+BNddokt4ZPTGqUFZ v9kpGLldq7AfmwFGpzW07Mss47FyYEcWUcAafYs3DC/zCLvd2u7e9UNApxcRUFKV h+lySD84IEK4bsMzHtW4xuUP0A9eDwEBelTJgdVO+CZnK8FYAH3UzOHAWV0kBimy g8kQMXng3Nrdm6wg7QWXSL0UMm1i45l5oMmUfB//asDtlJnWfeKEWBJql+yEuAiV 78lSWCN97Q8F55b49aMObADknwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEb857XD odGRqIaBfhPUxDp/cb2fMB8GA1UdIwQYMBaAFKj8JZoQHquCbujL6ioL2lzez9ry MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkI4MC9CODY5ODA1RTEy M0IxMUVDOEExMzVGNDJDNEY5QUUwMi9xUHdsbWhBZXE0SnU2TXZxS2d2YVhON1Ay dkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FQd2xtaEFlcTRKdTZNdnFLZ3ZhWE43UDJ2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkI4MC9CODY5ODA1RTEyM0IxMUVDOEExMzVGNDJDNEY5QUUwMi9xUHdsbWhBZXE0 SnU2TXZxS2d2YVhON1AydkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACCKLoBECE7DnlgL5FzalIvgS6wdVDFkyBm7oxrysb61QwJdpCTRBpIZ/NFD9 w1X+TbMr1PXbh8ZkB7a+pu2iphE2ABYcHSEficiE0JKMuTCQRzLf8sXreIEAYnYT BW5nuyo8D1eNKJkSMEYbLGPcl9rbcqQo6pgD9nK9hZ9WsfrLhwhEBvOsEFscmI82 tdxDBZDSwOy8Z6JqUYawOL9nwGsJ82/HrkMeZvueRCfFjqdZopqobTna4lsJ8K92 moDDYq1VWpRhW5oWXI4JakEV9g9BsfJWhkzN/I9HEP/vjim2F1XceM424IJFhcee PMnvQw/8/HlkyJ0wRBMnktn0Jw== -----END CERTIFICATE-----Generated at Sun Mar 29 20:06:11 2026 by rpki-client