$ rpki-client -vvf rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft File: Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft (raw, json) Hash identifier: 6UvAD7K+4+Sd5FjgNazHXwhXqApvgxLAWIIKE0VAJE8= Subject key identifier: 2E:75:01:E3:5D:78:8B:80:44:25:BF:9C:19:28:F9:97:22:63:1C:98 Authority key identifier: 43:F7:42:3F:93:D6:BA:09:69:40:59:FB:23:DE:F8:52:8D:26:49:9D Certificate issuer: /CN=A9186D9F/serialNumber=43F7423F93D6BA09694059FB23DEF8528D26499D Certificate serial: 014F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q_dCP5PWuglpQFn7I974Uo0mSZ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft Manifest number: 0142 Signing time: Tue 03 Mar 2026 04:51:53 +0000 Manifest this update: Tue 03 Mar 2026 04:51:53 +0000 Manifest next update: Tue 10 Mar 2026 04:51:53 +0000 Files and hashes: 1: Q_dCP5PWuglpQFn7I974Uo0mSZ0.crl (hash: yLdiqQO5VBJBZAHE9vMRfQYg+fW9sArF403uXb1E9BI=) 2: 17EA0C7A38DF11EF8EEDB25EC4F9AE02.roa (hash: qO2Q3Q5zR4BZKw3pBS7JR4NiTCN8t4Ujvg2GOjsbNkA=) 3: A63A2DFA2F5411EF9A12027FC4F9AE02.roa (hash: vZ2S+w3GcPa+h6MU9zMiF5RlRO5/+gC76nWMxy6HcwM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.crl rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q_dCP5PWuglpQFn7I974Uo0mSZ0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 04:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 335 (0x14f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186D9F, serialNumber=43F7423F93D6BA09694059FB23DEF8528D26499D Validity Not Before: Mar 3 04:51:53 2026 GMT Not After : Mar 10 04:51:53 2026 GMT Subject: CN=69a668e9-85b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:28:6f:78:8d:64:ac:51:28:a1:78:17:44:5d: 38:ae:e0:36:22:d6:12:63:c9:f5:f9:3f:f2:9a:63: 0d:39:ef:8a:a0:d0:10:0b:4a:14:4f:ab:14:a9:90: 85:63:86:a5:f8:df:d4:f1:7c:3d:d0:1f:d9:37:f6: 6e:b3:b7:57:cd:cb:ef:20:a7:00:1e:22:c4:43:b8: e6:69:3d:eb:e4:61:be:71:a3:f0:f1:09:90:23:4a: 5c:c9:de:10:87:16:2c:e1:c4:aa:79:01:bd:68:41: 46:63:08:17:b5:8f:7b:4d:e8:ab:1c:19:e9:5d:9a: 93:e2:1e:f4:5c:aa:6b:77:8d:ce:57:26:89:f8:8e: cb:03:c8:b8:a9:30:f6:04:67:2b:03:5a:61:a2:6a: 72:d4:89:55:78:3c:19:ff:f4:fc:db:a9:d7:21:9e: 46:e1:4a:bc:27:71:c9:97:10:0f:18:89:ed:8a:2c: 36:05:0c:10:1a:3f:17:de:2a:be:7e:54:b8:ea:10: 99:1a:55:57:e1:9c:af:dc:3e:2a:03:44:79:f4:18: bb:ee:a3:b7:44:95:39:55:d1:ef:73:cc:b8:6a:35: 1a:3f:da:12:af:22:da:56:93:d9:ab:0f:44:9b:bb: 82:51:83:63:df:51:07:6b:fc:7a:ce:a9:d4:45:9d: 70:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:75:01:E3:5D:78:8B:80:44:25:BF:9C:19:28:F9:97:22:63:1C:98 X509v3 Authority Key Identifier: keyid:43:F7:42:3F:93:D6:BA:09:69:40:59:FB:23:DE:F8:52:8D:26:49:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q_dCP5PWuglpQFn7I974Uo0mSZ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:b5:6c:57:f7:50:2d:f5:e4:78:35:06:66:e3:53:0b:58:b6: 26:75:47:58:44:2d:6e:b3:09:15:25:69:9d:3d:6a:71:8a:44: d6:d9:d9:25:2f:34:af:2a:85:ac:d8:d9:f4:a6:01:20:66:36: 39:50:f2:ae:4b:ed:ca:89:bd:d8:cc:38:46:a1:38:c1:e8:f4: e0:1a:a9:87:54:3a:39:68:cc:c5:41:e2:ab:83:8b:50:25:5c: 99:2d:88:f4:bb:fb:d0:16:e3:03:96:f4:b3:c6:0e:b2:c1:51: 2a:94:7d:5e:7c:00:a2:e1:2e:90:4d:eb:00:80:d1:a8:e8:01: 0b:b4:16:ee:ee:20:c0:9d:d4:b9:98:a8:67:67:b7:ff:0b:12: c3:bf:c8:57:fe:c8:3d:3d:23:28:ad:d0:f2:92:ba:c7:bc:21: 14:ad:1f:5f:c1:da:4a:97:21:9e:a8:ee:e3:08:5c:2b:22:d7: 67:ea:d7:36:2a:88:dd:34:45:ca:d8:c3:12:6a:8c:01:49:a3: eb:76:c7:4a:e6:e9:a6:e1:25:eb:d1:e0:25:43:49:14:7f:71: d3:c6:21:88:d0:6f:3e:ad:c0:e0:2b:41:42:8f:9a:48:21:26: 97:0c:f5:fd:51:61:67:b8:fd:bb:13:e4:b2:05:87:f2:84:fc: a9:f9:76:50 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZEOUYxMTAvBgNVBAUTKDQzRjc0MjNGOTNENkJBMDk2OTQwNTlGQjIzREVGODUy OEQyNjQ5OUQwHhcNMjYwMzAzMDQ1MTUzWhcNMjYwMzEwMDQ1MTUzWjAYMRYwFAYD VQQDEw02OWE2NjhlOS04NWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlShveI1krFEooXgXRF04ruA2ItYSY8n1+T/ymmMNOe+KoNAQC0oUT6sUqZCF Y4al+N/U8Xw90B/ZN/Zus7dXzcvvIKcAHiLEQ7jmaT3r5GG+caPw8QmQI0pcyd4Q hxYs4cSqeQG9aEFGYwgXtY97TeirHBnpXZqT4h70XKprd43OVyaJ+I7LA8i4qTD2 BGcrA1phompy1IlVeDwZ//T826nXIZ5G4Uq8J3HJlxAPGIntiiw2BQwQGj8X3iq+ flS46hCZGlVX4Zyv3D4qA0R59Bi77qO3RJU5VdHvc8y4ajUaP9oSryLaVpPZqw9E m7uCUYNj31EHa/x6zqnURZ1wfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC51AeNd eIuARCW/nBko+ZciYxyYMB8GA1UdIwQYMBaAFEP3Qj+T1roJaUBZ+yPe+FKNJkmd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkQ5Ri9BOTM2RTQ0MDJF MDQxMUVGODZGMjlENzlDNEY5QUUwMi9RX2RDUDVQV3VnbHBRRm43STk3NFVvMG1T WjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FfZENQNVBXdWdscFFGbjdJOTc0VW8wbVNaMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkQ5Ri9BOTM2RTQ0MDJFMDQxMUVGODZGMjlENzlDNEY5QUUwMi9RX2RDUDVQV3Vn bHBRRm43STk3NFVvMG1TWjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAE7VsV/dQLfXkeDUGZuNTC1i2JnVHWEQtbrMJFSVpnT1qcYpE1tnZJS80ryqF rNjZ9KYBIGY2OVDyrkvtyom92Mw4RqE4wej04Bqph1Q6OWjMxUHiq4OLUCVcmS2I 9Lv70BbjA5b0s8YOssFRKpR9XnwAouEukE3rAIDRqOgBC7QW7u4gwJ3UuZioZ2e3 /wsSw7/IV/7IPT0jKK3Q8pK6x7whFK0fX8HaSpchnqju4whcKyLXZ+rXNiqI3TRF ytjDEmqMAUmj63bHSubppuEl69HgJUNJFH9x08YhiNBvPq3A4CtBQo+aSCEmlwz1 /VFhZ7j9uxPksgWH8oT8qfl2UA== -----END CERTIFICATE-----Generated at Wed Mar 4 08:38:29 2026 by rpki-client