$ rpki-client -vvf rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft File: Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft (raw, json) Hash identifier: nv3gCN1Avdger0MKSWwh2F70eAledNSylpuZOZJZAEo= Subject key identifier: DB:0B:CB:DC:10:06:E8:56:E2:2A:43:22:A6:7C:7C:65:B8:5B:C0:78 Authority key identifier: 43:F7:42:3F:93:D6:BA:09:69:40:59:FB:23:DE:F8:52:8D:26:49:9D Certificate issuer: /CN=A9186D9F/serialNumber=43F7423F93D6BA09694059FB23DEF8528D26499D Certificate serial: 0167 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q_dCP5PWuglpQFn7I974Uo0mSZ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft Manifest number: 015A Signing time: Fri 17 Apr 2026 04:41:29 +0000 Manifest this update: Fri 17 Apr 2026 04:41:29 +0000 Manifest next update: Fri 24 Apr 2026 04:41:29 +0000 Files and hashes: 1: Q_dCP5PWuglpQFn7I974Uo0mSZ0.crl (hash: 03zlsd4kRspPDkGlVE+9iEemwYuc36Yw5loDX72flII=) 2: A63A2DFA2F5411EF9A12027FC4F9AE02.roa (hash: vZ2S+w3GcPa+h6MU9zMiF5RlRO5/+gC76nWMxy6HcwM=) 3: 17EA0C7A38DF11EF8EEDB25EC4F9AE02.roa (hash: qO2Q3Q5zR4BZKw3pBS7JR4NiTCN8t4Ujvg2GOjsbNkA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.crl rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q_dCP5PWuglpQFn7I974Uo0mSZ0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 04:41:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 359 (0x167) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186D9F, serialNumber=43F7423F93D6BA09694059FB23DEF8528D26499D Validity Not Before: Apr 17 04:41:29 2026 GMT Not After : Apr 24 04:41:29 2026 GMT Subject: CN=69e1b9f9-4c1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4c:f9:34:f9:af:cc:99:a8:18:a2:e1:f2:88: ea:fe:af:3b:6a:fb:46:1b:40:df:dc:b2:e3:8f:0a: 38:df:5e:d2:b4:76:da:88:89:6c:94:44:ca:a3:e5: ba:57:92:a0:45:78:2d:4f:93:0a:28:63:bb:00:ba: a6:2d:c9:0b:f1:55:cf:16:b3:6e:9a:ac:a9:e5:d1: df:19:41:0a:c1:eb:bb:e7:90:bd:04:63:c8:df:42: 53:36:7a:1a:72:df:50:e4:17:da:13:5d:ce:fe:0a: 44:b6:fc:68:e2:3b:07:d2:ec:a9:c8:ab:e3:ff:f0: 5c:cb:d8:e2:e5:f2:09:0a:47:e1:94:00:b2:06:a9: 4d:25:83:19:63:6c:c9:a6:69:b3:b1:01:1f:1e:3d: 2b:c5:a8:4c:c0:12:bf:58:7c:d0:a0:41:f9:9d:0f: cd:8d:a1:9f:c3:f0:cd:e6:7f:bf:97:69:4d:f2:5e: 5b:a7:10:70:6f:dc:ef:71:5d:81:16:25:34:c4:b5: 98:57:85:61:7a:d4:ed:7e:e4:7f:7b:47:2c:2a:14: f6:ef:aa:d2:99:8a:bd:be:d0:03:82:59:16:fc:96: 62:cc:56:51:16:47:8f:5c:7b:85:e1:4a:88:44:a3: 7d:ff:af:ec:53:33:bf:8d:16:8d:54:6f:81:72:8c: 5d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:0B:CB:DC:10:06:E8:56:E2:2A:43:22:A6:7C:7C:65:B8:5B:C0:78 X509v3 Authority Key Identifier: keyid:43:F7:42:3F:93:D6:BA:09:69:40:59:FB:23:DE:F8:52:8D:26:49:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q_dCP5PWuglpQFn7I974Uo0mSZ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:f4:4a:6a:55:c7:c2:4d:b8:d7:fd:1f:75:83:46:a8:2b:16: 26:a5:d8:22:45:df:23:6b:66:d7:f7:76:2d:08:5f:01:47:81: ef:4f:6f:67:cc:af:a4:76:25:c9:18:f4:85:3c:aa:6a:91:1a: 94:04:74:e4:c8:a0:b6:04:b7:3d:86:bf:7c:3f:fc:23:46:2c: 5f:15:51:39:a5:d5:20:26:5b:6f:85:25:95:fb:f9:73:72:0f: 39:fc:43:70:99:5c:ec:96:c3:39:21:46:7e:19:50:2f:fa:85: 04:0a:26:67:5f:98:87:1a:bb:b1:aa:a6:b6:17:9d:e6:36:ec: 1f:64:81:a8:f8:d2:c9:bf:dc:36:72:a3:db:f8:50:5b:28:10: 56:b6:df:ad:22:6f:fc:5d:9b:dc:08:2f:15:ab:cc:be:5a:8a: fe:2f:f9:85:c5:0f:fd:64:9d:10:81:3f:27:e1:eb:22:6e:cb: a1:88:29:15:47:39:46:f0:26:de:3c:db:83:1c:af:ba:b4:6c: 5c:25:f2:f3:a1:d8:c9:c6:16:54:01:61:f3:f4:23:19:8b:5d: 7b:cc:d5:88:56:af:0e:96:0a:08:bd:d8:fb:41:88:25:e7:eb: 89:56:61:0e:dc:ef:48:c1:f3:d5:36:2d:49:ce:22:5e:84:b9: 80:c8:0a:65 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZEOUYxMTAvBgNVBAUTKDQzRjc0MjNGOTNENkJBMDk2OTQwNTlGQjIzREVGODUy OEQyNjQ5OUQwHhcNMjYwNDE3MDQ0MTI5WhcNMjYwNDI0MDQ0MTI5WjAYMRYwFAYD VQQDEw02OWUxYjlmOS00YzFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw0z5NPmvzJmoGKLh8ojq/q87avtGG0Df3LLjjwo4317StHbaiIlslETKo+W6 V5KgRXgtT5MKKGO7ALqmLckL8VXPFrNumqyp5dHfGUEKweu755C9BGPI30JTNnoa ct9Q5BfaE13O/gpEtvxo4jsH0uypyKvj//Bcy9ji5fIJCkfhlACyBqlNJYMZY2zJ pmmzsQEfHj0rxahMwBK/WHzQoEH5nQ/NjaGfw/DN5n+/l2lN8l5bpxBwb9zvcV2B FiU0xLWYV4VhetTtfuR/e0csKhT276rSmYq9vtADglkW/JZizFZRFkePXHuF4UqI RKN9/6/sUzO/jRaNVG+BcoxdKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNsLy9wQ BuhW4ipDIqZ8fGW4W8B4MB8GA1UdIwQYMBaAFEP3Qj+T1roJaUBZ+yPe+FKNJkmd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkQ5Ri9BOTM2RTQ0MDJF MDQxMUVGODZGMjlENzlDNEY5QUUwMi9RX2RDUDVQV3VnbHBRRm43STk3NFVvMG1T WjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FfZENQNVBXdWdscFFGbjdJOTc0VW8wbVNaMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkQ5Ri9BOTM2RTQ0MDJFMDQxMUVGODZGMjlENzlDNEY5QUUwMi9RX2RDUDVQV3Vn bHBRRm43STk3NFVvMG1TWjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwvRKalXHwk241/0fdYNGqCsWJqXYIkXfI2tm1/d2LQhfAUeB709vZ8yvpHYl yRj0hTyqapEalAR05MigtgS3PYa/fD/8I0YsXxVROaXVICZbb4Ullfv5c3IPOfxD cJlc7JbDOSFGfhlQL/qFBAomZ1+Yhxq7saqmthed5jbsH2SBqPjSyb/cNnKj2/hQ WygQVrbfrSJv/F2b3AgvFavMvlqK/i/5hcUP/WSdEIE/J+HrIm7LoYgpFUc5RvAm 3jzbgxyvurRsXCXy86HYycYWVAFh8/QjGYtde8zViFavDpYKCL3Y+0GIJefriVZh DtzvSMHz1TYtSc4iXoS5gMgKZQ== -----END CERTIFICATE-----Generated at Sat Apr 18 21:06:57 2026 by rpki-client