$ rpki-client -vvf rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft File: QOWCY5crniQUK6qbWvoFNIGjcZ4.mft (raw, json) Hash identifier: b68EvlWFjOq3Y4jmANpa5gm9BPpxzrrE2SSE/eo9ggo= Subject key identifier: 25:DA:0A:98:F2:9B:63:95:7F:1D:D1:86:3C:02:05:AD:6E:00:13:50 Authority key identifier: 40:E5:82:63:97:2B:9E:24:14:2B:AA:9B:5A:FA:05:34:81:A3:71:9E Certificate issuer: /CN=A91C31A2/serialNumber=40E58263972B9E24142BAA9B5AFA053481A3719E Certificate serial: 02E1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft Manifest number: 02C5 Signing time: Tue 03 Mar 2026 01:33:35 +0000 Manifest this update: Tue 03 Mar 2026 01:33:34 +0000 Manifest next update: Tue 10 Mar 2026 01:33:34 +0000 Files and hashes: 1: QOWCY5crniQUK6qbWvoFNIGjcZ4.crl (hash: tLxQztix8PVbEWpoDieTolNS0779vgTgvujxlfgGthc=) 2: 4F9ACB7461F511F0A6467D40C4F9AE02.roa (hash: Kp6nhlIWiSEv3o8kjtdJQRQ6WBFrZkqBEq1j7bnbEso=) 3: 94855EA0357711EDB81B8A34C4F9AE02.roa (hash: WEQNjKUUarvWFek2QKEOk5VWDSS6XlisXMiNSu5mDsg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.crl rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 01:33:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 737 (0x2e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C31A2, serialNumber=40E58263972B9E24142BAA9B5AFA053481A3719E Validity Not Before: Mar 3 01:33:34 2026 GMT Not After : Mar 10 01:33:34 2026 GMT Subject: CN=69a63a6e-e11c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:8b:e0:ce:ab:43:d0:bc:72:6c:90:30:df:32: ef:e3:0c:80:03:1b:8f:0b:64:d6:86:0b:d0:0c:7a: 9f:5e:ec:7c:31:3e:d4:bd:d6:c1:dd:9c:5d:1e:fd: ea:a5:5b:d4:3d:3c:eb:50:14:38:b1:be:77:8a:bb: 7e:c6:2c:13:fe:2c:54:85:55:f5:23:04:c5:e1:31: 81:d6:94:e9:8c:81:44:e9:0d:c5:73:12:ca:b6:70: 10:0f:43:95:5c:0f:03:71:2f:9a:5c:a8:f6:5e:0d: 70:08:68:d8:6e:c9:9e:8d:1f:58:88:57:c4:16:8b: 7c:11:ea:d2:4c:f0:da:f2:67:42:47:45:aa:eb:2d: 7b:e6:68:23:b9:9e:a9:e1:87:26:bb:8b:7a:09:b4: 84:d4:92:c7:de:cd:ff:64:c7:4a:94:32:f8:c1:b1: b9:6d:6a:a1:c3:1f:68:85:c0:f3:5e:55:c7:b7:88: a8:96:ed:c8:45:08:36:c5:8b:b6:7b:f5:05:ff:2b: b2:44:a4:37:5d:01:37:95:f2:ba:a0:2d:74:be:55: 17:b8:66:42:94:4f:d1:47:de:20:93:b0:b1:df:af: e1:89:2f:2b:30:38:d9:3f:75:18:25:07:ca:9f:a8: 2a:15:c0:19:7e:21:e4:0f:c2:d0:d4:df:fc:8f:5e: 4c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:DA:0A:98:F2:9B:63:95:7F:1D:D1:86:3C:02:05:AD:6E:00:13:50 X509v3 Authority Key Identifier: keyid:40:E5:82:63:97:2B:9E:24:14:2B:AA:9B:5A:FA:05:34:81:A3:71:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:52:d8:48:1d:c9:73:42:4c:7f:81:18:f9:52:d8:6e:c7:d5: d6:a3:40:35:5e:f6:d2:6a:dd:fc:d9:33:f0:37:92:88:33:e1: 5f:33:f3:f6:ce:00:fe:49:05:f4:c9:18:a8:77:48:aa:f4:95: d1:fc:11:40:87:9b:8c:8c:fa:c1:ce:f7:90:64:b3:27:6f:38: 77:3c:fa:87:a0:e1:fc:4d:18:3e:ea:96:0d:f9:3d:2a:5a:47: 3a:7d:f5:f0:1e:45:d5:e1:18:48:b0:42:6b:a7:a9:80:83:7c: e3:e9:0f:4d:1f:18:43:a3:54:2d:69:3a:8f:dd:51:b3:82:c7: 27:ce:5c:d1:7f:9b:60:d5:ae:b2:66:11:0b:68:22:db:39:fd: 38:78:9d:de:e1:bb:6a:0c:bf:39:01:64:c2:eb:24:27:df:24: a1:f4:98:3c:10:3c:6a:74:8f:da:69:4f:d6:01:e6:0d:bb:2d: 08:30:68:e4:eb:dc:37:fa:f5:79:bb:2d:e2:e5:2b:1b:82:70: 77:3b:85:34:4d:fd:c7:36:05:e4:bd:12:92:09:23:88:75:8d: 49:6b:66:9e:58:d9:99:1c:f0:c7:bf:27:75:92:d7:c1:49:e5: 69:53:c5:36:11:5a:c3:7f:df:f9:f0:30:81:95:58:6e:99:58: 01:f2:7c:bf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAuEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzMxQTIxMTAvBgNVBAUTKDQwRTU4MjYzOTcyQjlFMjQxNDJCQUE5QjVBRkEwNTM0 ODFBMzcxOUUwHhcNMjYwMzAzMDEzMzM0WhcNMjYwMzEwMDEzMzM0WjAYMRYwFAYD VQQDEw02OWE2M2E2ZS1lMTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA04vgzqtD0LxybJAw3zLv4wyAAxuPC2TWhgvQDHqfXux8MT7UvdbB3ZxdHv3q pVvUPTzrUBQ4sb53irt+xiwT/ixUhVX1IwTF4TGB1pTpjIFE6Q3FcxLKtnAQD0OV XA8DcS+aXKj2Xg1wCGjYbsmejR9YiFfEFot8EerSTPDa8mdCR0Wq6y175mgjuZ6p 4Ycmu4t6CbSE1JLH3s3/ZMdKlDL4wbG5bWqhwx9ohcDzXlXHt4iolu3IRQg2xYu2 e/UF/yuyRKQ3XQE3lfK6oC10vlUXuGZClE/RR94gk7Cx36/hiS8rMDjZP3UYJQfK n6gqFcAZfiHkD8LQ1N/8j15M2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCXaCpjy m2OVfx3RhjwCBa1uABNQMB8GA1UdIwQYMBaAFEDlgmOXK54kFCuqm1r6BTSBo3Ge MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzFBMi9ENDc2RUQ3NjM1 NzIxMUVEQUU5Nzc4MzlDNEY5QUUwMi9RT1dDWTVjcm5pUVVLNnFiV3ZvRk5JR2pj WjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FPV0NZNWNybmlRVUs2cWJXdm9GTklHamNaNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzFBMi9ENDc2RUQ3NjM1NzIxMUVEQUU5Nzc4MzlDNEY5QUUwMi9RT1dDWTVjcm5p UVVLNnFiV3ZvRk5JR2pjWjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATVLYSB3Jc0JMf4EY+VLYbsfV1qNANV720mrd/Nkz8DeSiDPhXzPz9s4A/kkF 9MkYqHdIqvSV0fwRQIebjIz6wc73kGSzJ284dzz6h6Dh/E0YPuqWDfk9KlpHOn31 8B5F1eEYSLBCa6epgIN84+kPTR8YQ6NULWk6j91Rs4LHJ85c0X+bYNWusmYRC2gi 2zn9OHid3uG7agy/OQFkwuskJ98kofSYPBA8anSP2mlP1gHmDbstCDBo5OvcN/r1 ebst4uUrG4JwdzuFNE39xzYF5L0SkgkjiHWNSWtmnljZmRzwx78ndZLXwUnlaVPF NhFaw3/f+fAwgZVYbplYAfJ8vw== -----END CERTIFICATE-----Generated at Wed Mar 4 16:06:38 2026 by rpki-client