$ rpki-client -vvf rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft File: Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft (raw, json) Hash identifier: 86dcvJR16MSxecQmkXNHG+gC4POmsAzk1apz5C3qyYE= Subject key identifier: D9:6D:4F:8B:8A:64:96:61:2C:00:D9:47:D8:0C:63:F8:FF:64:6A:2F Authority key identifier: 43:D2:50:D5:C1:F6:09:ED:17:4D:FF:26:43:01:DB:45:BE:25:B1:B4 Certificate issuer: /CN=A91978DD/serialNumber=43D250D5C1F609ED174DFF264301DB45BE25B1B4 Certificate serial: 17CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft Manifest number: 17C1 Signing time: Thu 12 Mar 2026 16:26:19 +0000 Manifest this update: Thu 12 Mar 2026 16:26:19 +0000 Manifest next update: Thu 19 Mar 2026 16:26:19 +0000 Files and hashes: 1: Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.crl (hash: zI2H4O6gdp0WzwKhRzAgl/JlkHdlGVYl4ciyIe5vV84=) 2: 16ABD910E0C111E7BA64DE22C4F9AE02.roa (hash: R19qxLrIh1c+/g96rJpVUSyzG1wIPKCyqhlsnSxYpaw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.crl rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Mar 2026 16:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6093 (0x17cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91978DD, serialNumber=43D250D5C1F609ED174DFF264301DB45BE25B1B4 Validity Not Before: Mar 12 16:26:19 2026 GMT Not After : Mar 19 16:26:19 2026 GMT Subject: CN=69b2e92b-fd9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:75:90:9a:90:c8:cc:c4:13:b7:0b:61:c1:95: b3:39:fe:6a:5c:54:bd:c0:33:96:b5:e1:71:c3:92: 92:4b:b5:8b:fb:1b:ba:f7:bb:69:4f:5f:e3:af:49: cd:33:28:91:3d:bc:c9:8e:ba:59:95:a2:7f:f1:14: 8f:c3:5e:ae:72:70:d0:5a:0b:0c:e4:d9:6a:17:8d: af:4f:43:b6:b5:a7:1e:7e:9f:e7:5f:7e:a4:9e:b4: 82:b4:d5:a4:5a:c1:d0:47:2b:71:cd:44:1d:37:66: aa:41:5c:c9:a8:22:1c:ec:7f:be:67:dd:d8:67:bc: dc:f9:67:53:07:23:99:1c:73:39:04:00:08:8d:53: ad:d7:02:ef:7c:ff:1b:47:63:fc:bf:00:69:05:c9: 87:a6:6f:ac:e5:4d:28:26:a3:6c:f8:df:ae:99:44: 17:34:bd:ef:26:82:7c:40:ee:59:76:dc:bc:31:b6: 08:54:00:52:da:64:40:22:f2:64:a5:53:74:ee:6f: 9f:09:aa:66:7b:ab:b6:ad:7a:57:7e:ca:f3:8a:20: 82:0e:f8:08:1e:c7:48:0d:63:ba:b6:0d:d9:f8:b8: f1:b6:12:25:6e:2a:05:b0:22:81:56:4a:44:83:3e: 65:a4:3c:38:50:51:e2:3d:78:49:82:1c:e0:e5:98: 60:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:6D:4F:8B:8A:64:96:61:2C:00:D9:47:D8:0C:63:F8:FF:64:6A:2F X509v3 Authority Key Identifier: keyid:43:D2:50:D5:C1:F6:09:ED:17:4D:FF:26:43:01:DB:45:BE:25:B1:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:1d:d6:0b:cc:4d:c5:a8:5f:11:c1:9d:cd:00:70:4a:9f:9a: 78:ee:34:ad:5b:34:d8:d6:77:f3:21:f2:bd:2b:89:ab:bc:18: 7a:a1:3e:df:ac:ce:16:b7:f0:9c:9b:ce:7d:e3:4b:fb:4a:8c: 57:c4:df:65:54:bf:b7:b8:16:1c:fc:d1:b8:35:fd:23:e0:c3: b0:03:cd:be:8b:7c:88:b3:05:62:eb:95:08:85:8a:c1:47:df: f1:a1:38:b5:6a:39:02:74:82:9b:8c:32:d5:1c:a3:ef:83:75: 0d:21:b2:a7:35:fe:b1:7d:0b:5e:51:a4:6e:73:2d:a6:0a:2b: 81:fa:a2:e9:0f:e3:7d:24:b4:ea:03:04:f5:73:f8:cd:09:9c: a6:4d:90:81:e0:54:70:6b:eb:db:ca:bc:32:2c:df:57:9e:ec: 58:29:a0:3e:cd:1a:e9:e2:d7:a6:4e:e4:ae:6d:5f:cc:6b:a0: ab:20:41:c0:9b:92:2c:a7:e3:e2:7d:73:4a:81:2c:e1:6e:d6: ea:2b:da:19:a8:4a:27:01:f0:0d:f9:96:e5:54:ed:f5:08:e2: 64:ac:eb:03:00:de:3d:ec:3f:c1:ac:90:13:be:45:8d:b8:6e: d4:ec:3b:65:7f:aa:60:2b:8c:53:c6:86:81:e8:19:fe:69:c6: 3d:22:cb:2b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICF80wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTc4REQxMTAvBgNVBAUTKDQzRDI1MEQ1QzFGNjA5RUQxNzRERkYyNjQzMDFEQjQ1 QkUyNUIxQjQwHhcNMjYwMzEyMTYyNjE5WhcNMjYwMzE5MTYyNjE5WjAYMRYwFAYD VQQDEw02OWIyZTkyYi1mZDljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmnWQmpDIzMQTtwthwZWzOf5qXFS9wDOWteFxw5KSS7WL+xu697tpT1/jr0nN MyiRPbzJjrpZlaJ/8RSPw16ucnDQWgsM5NlqF42vT0O2tacefp/nX36knrSCtNWk WsHQRytxzUQdN2aqQVzJqCIc7H++Z93YZ7zc+WdTByOZHHM5BAAIjVOt1wLvfP8b R2P8vwBpBcmHpm+s5U0oJqNs+N+umUQXNL3vJoJ8QO5Zdty8MbYIVABS2mRAIvJk pVN07m+fCapme6u2rXpXfsrziiCCDvgIHsdIDWO6tg3Z+LjxthIlbioFsCKBVkpE gz5lpDw4UFHiPXhJghzg5ZhgYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNltT4uK ZJZhLADZR9gMY/j/ZGovMB8GA1UdIwQYMBaAFEPSUNXB9gntF03/JkMB20W+JbG0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzhERC9DQzE4RDlENEUw QjYxMUU3OTlBMkI2ODJDNEY5QUUwMi9ROUpRMWNIMkNlMFhUZjhtUXdIYlJiNGxz YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1E5SlExY0gyQ2UwWFRmOG1Rd0hiUmI0bHNiUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzhERC9DQzE4RDlENEUwQjYxMUU3OTlBMkI2ODJDNEY5QUUwMi9ROUpRMWNIMkNl MFhUZjhtUXdIYlJiNGxzYlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsB3WC8xNxahfEcGdzQBwSp+aeO40rVs02NZ38yHyvSuJq7wYeqE+36zOFrfw nJvOfeNL+0qMV8TfZVS/t7gWHPzRuDX9I+DDsAPNvot8iLMFYuuVCIWKwUff8aE4 tWo5AnSCm4wy1Ryj74N1DSGypzX+sX0LXlGkbnMtpgorgfqi6Q/jfSS06gME9XP4 zQmcpk2QgeBUcGvr28q8MizfV57sWCmgPs0a6eLXpk7krm1fzGugqyBBwJuSLKfj 4n1zSoEs4W7W6ivaGahKJwHwDfmW5VTt9QjiZKzrAwDePew/wayQE75Fjbhu1Ow7 ZX+qYCuMU8aGgegZ/mnGPSLLKw== -----END CERTIFICATE-----Generated at Fri Mar 13 14:53:59 2026 by rpki-client