$ rpki-client -vvf rpki.apnic.net/member_repository/A9196DC9/0E6FF54AAE5B11F08C7CAC53C4F9AE02/sQnalQV25mJneVo066kbw3qZI7Q.mft File: sQnalQV25mJneVo066kbw3qZI7Q.mft (raw, json) Hash identifier: Yl2BTBDoSwIoqfFuRjk7AQhWkq4CbPtALyQXvyaufmQ= Subject key identifier: F3:E7:25:A8:AB:D4:5C:0A:07:41:CA:58:3B:C5:A8:D7:2A:FB:EF:F7 Authority key identifier: B1:09:DA:95:05:76:E6:62:67:79:5A:34:EB:A9:1B:C3:7A:99:23:B4 Certificate issuer: /CN=A9196DC9/serialNumber=B109DA950576E66267795A34EBA91BC37A9923B4 Certificate serial: 59 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sQnalQV25mJneVo066kbw3qZI7Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196DC9/0E6FF54AAE5B11F08C7CAC53C4F9AE02/sQnalQV25mJneVo066kbw3qZI7Q.mft Manifest number: 4F Signing time: Tue 03 Mar 2026 07:58:39 +0000 Manifest this update: Tue 03 Mar 2026 07:58:38 +0000 Manifest next update: Tue 10 Mar 2026 07:58:38 +0000 Files and hashes: 1: sQnalQV25mJneVo066kbw3qZI7Q.crl (hash: AA09mHB2A8U3Z75vQ3n9IynsetyoNbJ6vIKM400qEzQ=) 2: EBBEEC14C36711F084BC3465C4F9AE02.roa (hash: uPG9pu8QvfhYYfKydayvidbu8T+6yea/sIcvIkCXplU=) 3: 0FDE83B6C36811F0BB7F9C65C4F9AE02.roa (hash: MzAB5KprvbK6qlIO9zxGM5M9rFh7aMIvXuGpXbvRjV4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196DC9/0E6FF54AAE5B11F08C7CAC53C4F9AE02/sQnalQV25mJneVo066kbw3qZI7Q.crl rsync://rpki.apnic.net/member_repository/A9196DC9/0E6FF54AAE5B11F08C7CAC53C4F9AE02/sQnalQV25mJneVo066kbw3qZI7Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sQnalQV25mJneVo066kbw3qZI7Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 07:58:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 89 (0x59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196DC9, serialNumber=B109DA950576E66267795A34EBA91BC37A9923B4 Validity Not Before: Mar 3 07:58:38 2026 GMT Not After : Mar 10 07:58:38 2026 GMT Subject: CN=69a694af-3bd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3a:89:c7:1c:c3:b3:9e:86:a0:58:ce:42:ff: 24:81:5c:d2:40:c1:8a:54:03:1b:5e:d0:dc:d6:08: 19:19:cf:9b:ae:a0:bf:3c:76:4a:c4:10:25:65:b5: 14:e2:80:b3:0a:57:b3:a3:e8:09:31:63:44:d9:1d: 04:f1:01:ea:9b:f6:5f:79:47:58:80:32:bf:1a:cd: d8:bb:0f:e7:c7:77:3c:c4:3b:a1:39:5f:74:4d:09: c1:03:74:d2:10:e4:e9:72:47:36:16:24:57:71:91: 4d:66:cc:20:3b:3e:9c:01:b4:1a:43:cb:8b:8c:04: 59:62:53:9f:9c:9e:91:03:05:70:dd:bd:6d:9b:2c: 28:93:ca:30:c9:cb:0b:84:f8:14:e5:9f:24:16:ef: 88:e9:ed:0c:19:81:fd:99:a9:41:12:3a:e5:8c:1d: 12:fe:2e:22:25:ec:7d:ce:5a:87:d6:91:09:ce:d4: 04:0d:84:d8:2f:36:03:88:0f:67:84:6f:ba:e7:f1: b3:d6:d5:d2:a9:e3:7b:1d:00:3b:bb:1b:58:6d:83: cb:da:59:44:1a:69:70:f9:75:d2:fc:47:67:3b:41: 27:bd:0f:a4:3c:64:65:14:a6:5a:3a:c7:f6:29:08: 2f:6e:24:e2:4f:01:4a:76:92:4d:96:15:7c:2c:d4: 9b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:E7:25:A8:AB:D4:5C:0A:07:41:CA:58:3B:C5:A8:D7:2A:FB:EF:F7 X509v3 Authority Key Identifier: keyid:B1:09:DA:95:05:76:E6:62:67:79:5A:34:EB:A9:1B:C3:7A:99:23:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196DC9/0E6FF54AAE5B11F08C7CAC53C4F9AE02/sQnalQV25mJneVo066kbw3qZI7Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sQnalQV25mJneVo066kbw3qZI7Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196DC9/0E6FF54AAE5B11F08C7CAC53C4F9AE02/sQnalQV25mJneVo066kbw3qZI7Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:cd:25:15:fc:4e:aa:46:52:ce:e8:91:a4:19:3b:e4:96:1f: 7e:2a:ec:39:88:17:4f:64:f4:33:f8:91:2e:5e:4b:07:70:6b: 95:63:8b:1b:fc:c8:27:60:56:95:bd:ac:09:5d:dc:38:ad:fe: ee:d9:02:d9:f7:aa:43:ef:d2:2e:05:0d:da:c8:57:61:41:3a: 5f:ba:91:b9:9d:d6:29:da:ac:69:a5:c4:d4:23:0f:c4:bc:81: 69:d2:5e:a2:5f:a0:2c:0a:94:3a:2d:ca:8a:61:99:ed:47:78: d7:66:c7:2e:06:78:a3:40:96:69:81:13:3e:f4:bc:77:d1:2b: d2:0a:8d:70:05:d0:90:31:45:be:8c:04:55:92:51:a5:42:45: e8:bd:d9:e5:b2:f4:e5:c9:71:c5:fa:8d:ab:05:9c:be:aa:e6: b7:91:b0:80:2b:c5:f4:54:d5:6d:e5:3b:af:3e:16:f0:4b:a5: ea:23:e8:61:77:00:03:1b:8b:fb:95:78:f4:5e:a5:2e:d0:28: 28:dc:32:1d:dd:9c:d5:e7:83:8b:ff:eb:e6:e8:fb:f7:4f:71: c2:f6:d7:71:c8:c8:c1:6f:9e:ef:ba:77:4f:71:a6:fe:2f:c5: 62:5e:24:8c:19:ae:70:05:3e:d6:53:bb:a3:8e:c2:d4:b0:f9: 0b:07:0f:9c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBWTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NkRDOTExMC8GA1UEBRMoQjEwOURBOTUwNTc2RTY2MjY3Nzk1QTM0RUJBOTFCQzM3 QTk5MjNCNDAeFw0yNjAzMDMwNzU4MzhaFw0yNjAzMTAwNzU4MzhaMBgxFjAUBgNV BAMTDTY5YTY5NGFmLTNiZDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGOonHHMOznoagWM5C/ySBXNJAwYpUAxte0NzWCBkZz5uuoL88dkrEECVltRTi gLMKV7Oj6AkxY0TZHQTxAeqb9l95R1iAMr8azdi7D+fHdzzEO6E5X3RNCcEDdNIQ 5OlyRzYWJFdxkU1mzCA7PpwBtBpDy4uMBFliU5+cnpEDBXDdvW2bLCiTyjDJywuE +BTlnyQW74jp7QwZgf2ZqUESOuWMHRL+LiIl7H3OWofWkQnO1AQNhNgvNgOID2eE b7rn8bPW1dKp43sdADu7G1htg8vaWUQaaXD5ddL8R2c7QSe9D6Q8ZGUUplo6x/Yp CC9uJOJPAUp2kk2WFXws1JsJAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU8+clqKvU XAoHQcpYO8Wo1yr77/cwHwYDVR0jBBgwFoAUsQnalQV25mJneVo066kbw3qZI7Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2REM5LzBFNkZGNTRBQUU1 QjExRjA4QzdDQUM1M0M0RjlBRTAyL3NRbmFsUVYyNW1KbmVWbzA2NmtidzNxWkk3 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvc1FuYWxRVjI1bUpuZVZvMDY2a2J3M3FaSTdRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2 REM5LzBFNkZGNTRBQUU1QjExRjA4QzdDQUM1M0M0RjlBRTAyL3NRbmFsUVYyNW1K bmVWbzA2NmtidzNxWkk3US5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBIzSUV/E6qRlLO6JGkGTvklh9+Kuw5iBdPZPQz+JEuXksHcGuVY4sb/MgnYFaV vawJXdw4rf7u2QLZ96pD79IuBQ3ayFdhQTpfupG5ndYp2qxppcTUIw/EvIFp0l6i X6AsCpQ6LcqKYZntR3jXZscuBnijQJZpgRM+9Lx30SvSCo1wBdCQMUW+jARVklGl QkXovdnlsvTlyXHF+o2rBZy+qua3kbCAK8X0VNVt5TuvPhbwS6XqI+hhdwADG4v7 lXj0XqUu0Cgo3DId3ZzV54OL/+vm6Pv3T3HC9tdxyMjBb57vundPcab+L8ViXiSM Ga5wBT7WU7ujjsLUsPkLBw+c -----END CERTIFICATE-----Generated at Wed Mar 4 08:30:11 2026 by rpki-client