$ rpki-client -vvf rpki.apnic.net/member_repository/A9198D20/3F7703C21CE911EA98897487C4F9AE02/Q8PPEXS9crQ0xpKLir6_BdYxP0A.mft File: Q8PPEXS9crQ0xpKLir6_BdYxP0A.mft (raw, json) Hash identifier: QpzTlmoz6NQg7A0FEEI8LTV/Rswm8gZdpHn38c12l34= Subject key identifier: EA:5C:2F:17:95:6C:9A:07:6F:F2:2A:5C:9D:FE:EB:E6:FE:2A:88:9B Authority key identifier: 43:C3:CF:11:74:BD:72:B4:34:C6:92:8B:8A:BE:BF:05:D6:31:3F:40 Certificate issuer: /CN=A9198D20/serialNumber=43C3CF1174BD72B434C6928B8ABEBF05D6313F40 Certificate serial: 0C6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q8PPEXS9crQ0xpKLir6_BdYxP0A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198D20/3F7703C21CE911EA98897487C4F9AE02/Q8PPEXS9crQ0xpKLir6_BdYxP0A.mft Manifest number: 0C67 Signing time: Sat 04 Apr 2026 18:29:14 +0000 Manifest this update: Sat 04 Apr 2026 18:29:14 +0000 Manifest next update: Sat 11 Apr 2026 18:29:14 +0000 Files and hashes: 1: Q8PPEXS9crQ0xpKLir6_BdYxP0A.crl (hash: M0F1bGDFxBXujmK1WoXpeIAHw1ckroXO3fc46WMzHeI=) 2: EE985C561CEA11EA8B382C0BC4F9AE02.roa (hash: diYWHRcynFoZNmpx96scFvi/2rL0ZDdh90uxb6XZ5ZY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198D20/3F7703C21CE911EA98897487C4F9AE02/Q8PPEXS9crQ0xpKLir6_BdYxP0A.crl rsync://rpki.apnic.net/member_repository/A9198D20/3F7703C21CE911EA98897487C4F9AE02/Q8PPEXS9crQ0xpKLir6_BdYxP0A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q8PPEXS9crQ0xpKLir6_BdYxP0A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 18:29:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3183 (0xc6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198D20, serialNumber=43C3CF1174BD72B434C6928B8ABEBF05D6313F40 Validity Not Before: Apr 4 18:29:14 2026 GMT Not After : Apr 11 18:29:14 2026 GMT Subject: CN=69d1587a-c5a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d4:19:a9:12:70:95:21:5a:08:97:e1:ed:0a: cb:d3:c6:e8:3a:30:d1:2c:ae:ef:49:ce:02:b8:d9: 96:bc:f9:7a:ba:97:b7:13:62:ad:89:46:54:2b:aa: 9b:bb:2b:c2:2f:97:0b:f3:1a:95:1f:75:f5:db:a5: 49:88:4a:71:3d:73:61:a4:81:91:2d:71:3d:3c:93: c1:9b:c4:56:e2:93:4d:f6:63:6b:36:82:b5:3a:ac: db:cb:d8:64:1b:a7:41:a6:3d:ae:e3:bd:23:d6:fd: c5:cd:72:63:75:b5:42:dd:c6:3d:6b:a4:70:05:c5: 88:b6:b6:fd:84:d8:e5:1e:fa:7d:19:60:de:68:dd: a5:68:74:5f:54:74:5f:0b:37:9a:41:83:ab:7a:97: 04:34:2e:99:e0:c8:81:a9:3f:0d:93:59:c4:00:d6: 37:c4:f9:6b:96:b3:03:c8:c0:9e:50:2f:c9:aa:70: d2:72:3c:92:3b:06:81:c9:02:98:3b:e7:30:46:05: 63:da:82:3f:41:6e:d4:65:06:b0:7f:3e:4c:c9:d0: 0f:4d:eb:cb:88:70:08:45:a6:61:7c:b8:40:dc:7f: 7d:58:60:68:db:d9:d9:73:c5:83:95:f9:61:55:52: d8:6f:a1:76:d3:b0:e0:f6:4a:8c:c1:b7:ef:ed:c6: ab:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:5C:2F:17:95:6C:9A:07:6F:F2:2A:5C:9D:FE:EB:E6:FE:2A:88:9B X509v3 Authority Key Identifier: keyid:43:C3:CF:11:74:BD:72:B4:34:C6:92:8B:8A:BE:BF:05:D6:31:3F:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198D20/3F7703C21CE911EA98897487C4F9AE02/Q8PPEXS9crQ0xpKLir6_BdYxP0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q8PPEXS9crQ0xpKLir6_BdYxP0A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198D20/3F7703C21CE911EA98897487C4F9AE02/Q8PPEXS9crQ0xpKLir6_BdYxP0A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:d5:88:e7:e5:43:66:cc:f6:a4:c7:2c:7b:c9:fc:06:81:d7: 65:05:b6:b3:93:42:56:e6:50:83:3a:c8:b5:ec:d4:af:4c:ac: 7a:9c:b0:0c:a6:23:f0:83:3c:45:c7:39:f7:d5:40:1b:39:32: 42:52:32:41:0c:95:2b:6b:cb:33:fd:b2:09:06:c5:c7:bd:2c: af:3c:53:de:66:85:63:03:13:ab:95:ef:f3:e5:66:f9:58:8f: ff:dc:48:d4:a5:2b:3c:fc:bc:2a:28:07:dc:dc:53:a4:c2:97: 03:37:74:27:50:d9:a7:89:c7:1c:01:60:66:34:d4:ef:73:84: 92:93:8c:e6:5d:2e:17:b5:3a:f1:66:29:bc:25:18:06:9d:5b: b6:b7:3b:cb:8a:07:c8:dc:dd:6e:fe:69:af:ee:b5:94:fa:ca: 7f:c8:e0:9e:64:ab:af:1b:1b:0f:d5:e3:6d:95:a1:42:61:9a: cc:12:9a:bf:4e:bc:8c:bc:2f:f0:05:bd:31:89:b7:fb:d6:fe: 45:48:c5:23:a9:3a:23:7f:7f:22:95:7b:b6:c5:cf:ac:81:c3: e9:1d:21:2c:ab:de:65:d0:19:28:a4:4b:68:c1:60:78:58:07: 07:6a:ce:63:94:e9:20:8c:33:7f:ae:a0:d6:8f:39:43:ee:8b: 39:7e:8d:e6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDG8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OThEMjAxMTAvBgNVBAUTKDQzQzNDRjExNzRCRDcyQjQzNEM2OTI4QjhBQkVCRjA1 RDYzMTNGNDAwHhcNMjYwNDA0MTgyOTE0WhcNMjYwNDExMTgyOTE0WjAYMRYwFAYD VQQDEw02OWQxNTg3YS1jNWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsdQZqRJwlSFaCJfh7QrL08boOjDRLK7vSc4CuNmWvPl6upe3E2KtiUZUK6qb uyvCL5cL8xqVH3X126VJiEpxPXNhpIGRLXE9PJPBm8RW4pNN9mNrNoK1Oqzby9hk G6dBpj2u470j1v3FzXJjdbVC3cY9a6RwBcWItrb9hNjlHvp9GWDeaN2laHRfVHRf CzeaQYOrepcENC6Z4MiBqT8Nk1nEANY3xPlrlrMDyMCeUC/JqnDScjySOwaByQKY O+cwRgVj2oI/QW7UZQawfz5MydAPTevLiHAIRaZhfLhA3H99WGBo29nZc8WDlflh VVLYb6F207Dg9kqMwbfv7carJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOpcLxeV bJoHb/IqXJ3+6+b+KoibMB8GA1UdIwQYMBaAFEPDzxF0vXK0NMaSi4q+vwXWMT9A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OEQyMC8zRjc3MDNDMjFD RTkxMUVBOTg4OTc0ODdDNEY5QUUwMi9ROFBQRVhTOWNyUTB4cEtMaXI2X0JkWXhQ MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1E4UFBFWFM5Y3JRMHhwS0xpcjZfQmRZeFAwQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OEQyMC8zRjc3MDNDMjFDRTkxMUVBOTg4OTc0ODdDNEY5QUUwMi9ROFBQRVhTOWNy UTB4cEtMaXI2X0JkWXhQMEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATdWI5+VDZsz2pMcse8n8BoHXZQW2s5NCVuZQgzrItezUr0ysepywDKYj8IM8 Rcc599VAGzkyQlIyQQyVK2vLM/2yCQbFx70srzxT3maFYwMTq5Xv8+Vm+ViP/9xI 1KUrPPy8KigH3NxTpMKXAzd0J1DZp4nHHAFgZjTU73OEkpOM5l0uF7U68WYpvCUY Bp1btrc7y4oHyNzdbv5pr+61lPrKf8jgnmSrrxsbD9XjbZWhQmGazBKav068jLwv 8AW9MYm3+9b+RUjFI6k6I39/IpV7tsXPrIHD6R0hLKveZdAZKKRLaMFgeFgHB2rO Y5TpIIwzf66g1o85Q+6LOX6N5g== -----END CERTIFICATE-----Generated at Mon Apr 6 09:55:28 2026 by rpki-client