$ rpki-client -vvf rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft File: QJmwCEN2qeBM7XxnirxoWN2fhRo.mft (raw, json) Hash identifier: hn18ahTPjfiQnUQg89g08yHaoCYbXYee+14qxeESfyI= Subject key identifier: B2:4D:22:59:B1:C5:BE:82:AB:AA:63:AC:C6:34:5E:91:24:0F:37:66 Authority key identifier: 40:99:B0:08:43:76:A9:E0:4C:ED:7C:67:8A:BC:68:58:DD:9F:85:1A Certificate issuer: /CN=A919BCD9/serialNumber=4099B0084376A9E04CED7C678ABC6858DD9F851A Certificate serial: 0D17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJmwCEN2qeBM7XxnirxoWN2fhRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft Manifest number: 0D03 Signing time: Sat 04 Apr 2026 17:58:09 +0000 Manifest this update: Sat 04 Apr 2026 17:58:08 +0000 Manifest next update: Sat 11 Apr 2026 17:58:08 +0000 Files and hashes: 1: QJmwCEN2qeBM7XxnirxoWN2fhRo.crl (hash: Viyd7Acox3Wksx3FBmp/+yGNMfcV1YZfjfOdLt9OTsg=) 2: E4B59AA2FF8311E9B1B99628C4F9AE02.roa (hash: y4vcTjeolSMrmAigiZozXMraZgaOak5oYF52X7KfAMI=) 3: E56CD3E8FF8311E9B1B99628C4F9AE02.roa (hash: yk+S2an59M1qblQEC/oVwNcQBVVUiZw+ShOuw7y2Rac=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.crl rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJmwCEN2qeBM7XxnirxoWN2fhRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 17:58:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3351 (0xd17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919BCD9, serialNumber=4099B0084376A9E04CED7C678ABC6858DD9F851A Validity Not Before: Apr 4 17:58:08 2026 GMT Not After : Apr 11 17:58:08 2026 GMT Subject: CN=69d15131-9e0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:b8:16:a7:ee:fa:25:71:90:2a:24:f4:89:aa: 89:19:5f:d8:56:06:16:53:11:24:44:5a:65:3f:ad: 9e:40:92:3b:dd:55:c9:e0:ca:cc:be:42:37:70:32: 63:db:01:28:c7:2e:e6:ce:1b:a2:44:57:1d:35:9b: 1b:d0:37:0e:ee:49:0f:2d:0b:f8:d4:ab:df:82:86: e7:bc:cb:3d:7c:85:f1:b4:7f:59:00:a6:3a:8b:d1: 42:a9:00:66:08:f5:bb:d9:38:2c:1d:69:c9:58:68: 6c:66:17:29:09:e3:03:16:4d:9e:9a:65:2a:fe:00: 19:20:79:bc:95:14:00:fd:e2:a1:c3:03:f4:f3:76: 5e:cb:55:9f:e9:76:84:cf:db:12:7e:c7:4e:c8:42: 07:27:66:25:e2:92:f8:87:98:d9:e7:5a:33:96:fe: 2b:b6:08:17:bd:d9:d7:bb:ae:7e:72:55:78:55:e1: 3b:85:a3:89:d8:f1:65:d5:ce:e6:45:d7:d5:0b:68: 75:e1:59:70:0b:3e:76:44:d4:b7:8d:4b:78:b9:25: 35:4a:51:11:80:eb:1f:03:15:40:4f:c5:41:84:68: 87:f6:e8:1f:89:a4:fc:eb:e9:e0:bd:64:61:0f:7e: 2c:dd:21:92:f5:b5:0d:2b:c4:ff:7b:a1:f1:b1:12: 48:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:4D:22:59:B1:C5:BE:82:AB:AA:63:AC:C6:34:5E:91:24:0F:37:66 X509v3 Authority Key Identifier: keyid:40:99:B0:08:43:76:A9:E0:4C:ED:7C:67:8A:BC:68:58:DD:9F:85:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJmwCEN2qeBM7XxnirxoWN2fhRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:d1:06:22:53:bd:a1:3f:94:f1:4b:a0:ae:69:6f:88:b5:91: ec:c4:d4:a9:ab:33:2f:c0:dc:2d:a7:0a:ce:5c:cc:89:68:24: 9e:f9:09:80:26:68:f3:b6:99:14:51:ec:f8:4d:3b:e5:3c:e5: f1:d8:ea:98:e9:3f:c7:a3:37:2b:21:78:08:36:65:23:73:4a: 45:32:7b:d6:2c:f9:44:ad:91:e7:dd:f8:c7:9b:ad:99:80:c1: f5:27:bf:57:9b:3b:25:ce:0a:c3:de:33:51:95:af:68:30:d5: 23:f2:3f:d6:1b:b7:82:8b:10:93:56:80:d1:85:8f:9d:d0:6c: ab:ac:ca:e6:ac:80:cf:ae:12:e4:c8:70:90:40:d0:c3:9e:84: 3b:f3:cf:ca:1b:53:0a:f0:2e:ec:ee:4b:da:bf:ad:a0:73:60: 42:c0:ce:1b:5b:f8:48:bf:5b:3c:5a:d4:38:b4:70:df:d1:bf: fb:c2:4b:49:1e:2c:32:ef:ff:76:2e:8b:5d:17:4b:07:2c:0c: 40:62:4c:83:a2:93:2f:bd:b4:0f:11:e7:78:cf:cc:f5:cc:52: 49:7c:e5:dc:13:88:d5:45:3b:0c:e1:fa:40:0c:71:4d:4b:98: 80:c3:3a:cb:2f:b4:38:08:20:67:21:c2:d0:51:13:c4:4a:8d: a6:57:50:9e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDRcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUJDRDkxMTAvBgNVBAUTKDQwOTlCMDA4NDM3NkE5RTA0Q0VEN0M2NzhBQkM2ODU4 REQ5Rjg1MUEwHhcNMjYwNDA0MTc1ODA4WhcNMjYwNDExMTc1ODA4WjAYMRYwFAYD VQQDEw02OWQxNTEzMS05ZTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7bgWp+76JXGQKiT0iaqJGV/YVgYWUxEkRFplP62eQJI73VXJ4MrMvkI3cDJj 2wEoxy7mzhuiRFcdNZsb0DcO7kkPLQv41KvfgobnvMs9fIXxtH9ZAKY6i9FCqQBm CPW72TgsHWnJWGhsZhcpCeMDFk2emmUq/gAZIHm8lRQA/eKhwwP083Zey1Wf6XaE z9sSfsdOyEIHJ2Yl4pL4h5jZ51ozlv4rtggXvdnXu65+clV4VeE7haOJ2PFl1c7m RdfVC2h14VlwCz52RNS3jUt4uSU1SlERgOsfAxVAT8VBhGiH9ugfiaT86+ngvWRh D34s3SGS9bUNK8T/e6HxsRJI3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLJNIlmx xb6Cq6pjrMY0XpEkDzdmMB8GA1UdIwQYMBaAFECZsAhDdqngTO18Z4q8aFjdn4Ua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QkNEOS8xN0I3OEYxNkZG ODIxMUU5QjQwMkZDMjRDNEY5QUUwMi9RSm13Q0VOMnFlQk03WHhuaXJ4b1dOMmZo Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FKbXdDRU4ycWVCTTdYeG5pcnhvV04yZmhSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QkNEOS8xN0I3OEYxNkZGODIxMUU5QjQwMkZDMjRDNEY5QUUwMi9RSm13Q0VOMnFl Qk03WHhuaXJ4b1dOMmZoUm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAatEGIlO9oT+U8UugrmlviLWR7MTUqaszL8DcLacKzlzMiWgknvkJgCZo87aZ FFHs+E075Tzl8djqmOk/x6M3KyF4CDZlI3NKRTJ71iz5RK2R5934x5utmYDB9Se/ V5s7Jc4Kw94zUZWvaDDVI/I/1hu3gosQk1aA0YWPndBsq6zK5qyAz64S5MhwkEDQ w56EO/PPyhtTCvAu7O5L2r+toHNgQsDOG1v4SL9bPFrUOLRw39G/+8JLSR4sMu// di6LXRdLBywMQGJMg6KTL720DxHneM/M9cxSSXzl3BOI1UU7DOH6QAxxTUuYgMM6 yy+0OAggZyHC0FETxEqNpldQng== -----END CERTIFICATE-----Generated at Mon Apr 6 15:11:12 2026 by rpki-client