$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft File: qjXi-Xe1XnL5FjW_fVO861NHmDs.mft (raw, json) Hash identifier: jAkFK2W8HrG3mt27KybFQKNMXGcS/JJSMScglHW7CLE= Subject key identifier: B7:E1:16:D4:F2:56:C2:43:9D:A0:50:05:D4:39:31:00:8C:2A:A2:0F Authority key identifier: AA:35:E2:F9:77:B5:5E:72:F9:16:35:BF:7D:53:BC:EB:53:47:98:3B Certificate issuer: /CN=A91D2C38/serialNumber=AA35E2F977B55E72F91635BF7D53BCEB5347983B Certificate serial: F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjXi-Xe1XnL5FjW_fVO861NHmDs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft Manifest number: F1 Signing time: Tue 03 Mar 2026 05:55:48 +0000 Manifest this update: Tue 03 Mar 2026 05:55:47 +0000 Manifest next update: Tue 10 Mar 2026 05:55:47 +0000 Files and hashes: 1: qjXi-Xe1XnL5FjW_fVO861NHmDs.crl (hash: Lj1vG7LHb+bD16wd75ydy5LUn3FAcm1ZuZuOJzqdQTY=) 2: 8D6B6D86A98C11EFAAC0F364C4F9AE02.roa (hash: hAmO+Dq9vGZAILDadtbesaeJmrxEB8UrXmpWc1/KCyg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.crl rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjXi-Xe1XnL5FjW_fVO861NHmDs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 05:55:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 249 (0xf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2C38, serialNumber=AA35E2F977B55E72F91635BF7D53BCEB5347983B Validity Not Before: Mar 3 05:55:47 2026 GMT Not After : Mar 10 05:55:47 2026 GMT Subject: CN=69a677e3-b024 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:16:d8:00:63:fb:e1:22:2a:ed:fc:4c:fe:05: 39:16:75:37:d2:1f:75:66:22:ff:6e:67:21:19:05: ec:a1:73:63:4e:f7:6c:e6:83:ba:56:35:ab:d1:ae: a8:15:9b:3c:ed:0b:85:0b:88:09:36:dc:28:3e:1f: ef:06:2d:9c:7e:f2:a1:30:38:fc:07:50:7a:57:53: d3:b2:e3:e0:bc:e1:78:03:d3:14:fa:cf:54:80:55: a9:46:dc:8c:a5:90:79:a1:0d:a6:2f:4b:51:78:68: e3:6c:d2:29:92:ea:a7:f5:8d:03:e0:43:c3:65:fc: 76:21:57:bb:ac:22:5a:d5:61:9f:89:90:48:09:86: 78:42:b7:a2:e4:b2:a2:d9:67:1b:1a:c6:98:6f:78: 54:14:d7:61:18:ba:48:8e:f7:cb:b8:3e:c2:fe:fa: 14:0d:10:99:35:3f:3b:5b:0d:19:68:ac:84:b1:bb: f4:59:46:bc:83:7b:82:cd:45:c7:45:1d:ec:23:d1: 51:b6:53:6f:9b:21:52:bb:14:0c:2f:88:8a:27:74: ac:da:4a:b0:91:ce:8d:f1:1b:59:b8:23:0f:cd:ad: 95:c0:1f:38:f4:7e:26:ad:a5:6e:ae:37:a3:b4:0f: c5:94:88:82:ff:e9:ad:81:7e:da:2a:dc:0a:65:54: 9c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:E1:16:D4:F2:56:C2:43:9D:A0:50:05:D4:39:31:00:8C:2A:A2:0F X509v3 Authority Key Identifier: keyid:AA:35:E2:F9:77:B5:5E:72:F9:16:35:BF:7D:53:BC:EB:53:47:98:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjXi-Xe1XnL5FjW_fVO861NHmDs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:62:0e:fa:0b:64:47:8d:de:ca:f5:47:7e:8a:3f:a6:a1:71: d2:83:5b:b7:dd:fe:06:62:12:57:cb:8b:ee:42:cf:61:dd:2b: df:ae:bc:ca:5f:51:93:4f:69:fa:a6:9c:86:4f:d5:29:ae:fd: c6:70:50:35:a7:d3:39:6d:14:a0:ff:b1:57:ef:0b:0e:d2:d1: 3b:14:d9:89:12:e0:62:61:20:84:f9:16:a0:ae:1e:92:69:11: a6:2c:66:c9:50:3c:95:73:aa:c6:4b:9b:5d:bb:c0:cb:51:59: a0:9f:32:d5:37:fd:28:1d:1e:48:3a:5d:95:ba:cb:bc:64:e7: 1f:9e:ad:28:cd:1f:c5:55:e3:e2:73:e7:bb:12:17:6b:3d:e9: 20:ce:fe:5a:47:d1:39:7e:d7:72:2c:91:9d:c1:e6:5f:18:a7: 9a:ff:2e:c6:37:d1:b3:a7:02:e2:78:eb:d5:7e:15:f9:ec:84: 36:67:11:54:39:e6:ca:3d:28:21:af:03:31:45:43:c2:71:29: b7:9d:91:99:55:eb:49:71:1e:0b:0e:af:a2:31:af:d4:a6:8b: 9b:6a:30:e9:aa:50:6e:b0:41:7b:fd:53:ed:f5:f7:2b:b3:69: a3:8b:bd:b3:ff:9e:3a:97:d5:2c:92:f7:7d:0b:63:0a:4e:7b: 79:ba:4d:3b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDJDMzgxMTAvBgNVBAUTKEFBMzVFMkY5NzdCNTVFNzJGOTE2MzVCRjdENTNCQ0VC NTM0Nzk4M0IwHhcNMjYwMzAzMDU1NTQ3WhcNMjYwMzEwMDU1NTQ3WjAYMRYwFAYD VQQDEw02OWE2NzdlMy1iMDI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoxbYAGP74SIq7fxM/gU5FnU30h91ZiL/bmchGQXsoXNjTvds5oO6VjWr0a6o FZs87QuFC4gJNtwoPh/vBi2cfvKhMDj8B1B6V1PTsuPgvOF4A9MU+s9UgFWpRtyM pZB5oQ2mL0tReGjjbNIpkuqn9Y0D4EPDZfx2IVe7rCJa1WGfiZBICYZ4Qrei5LKi 2WcbGsaYb3hUFNdhGLpIjvfLuD7C/voUDRCZNT87Ww0ZaKyEsbv0WUa8g3uCzUXH RR3sI9FRtlNvmyFSuxQML4iKJ3Ss2kqwkc6N8RtZuCMPza2VwB849H4mraVurjej tA/FlIiC/+mtgX7aKtwKZVScIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLfhFtTy VsJDnaBQBdQ5MQCMKqIPMB8GA1UdIwQYMBaAFKo14vl3tV5y+RY1v31TvOtTR5g7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkMzOC8wNEJBQTYxNEE5 OEMxMUVGOTM1MEZCNjNDNEY5QUUwMi9xalhpLVhlMVhuTDVGaldfZlZPODYxTkht RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3FqWGktWGUxWG5MNUZqV19mVk84NjFOSG1Ecy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MkMzOC8wNEJBQTYxNEE5OEMxMUVGOTM1MEZCNjNDNEY5QUUwMi9xalhpLVhlMVhu TDVGaldfZlZPODYxTkhtRHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANGIO+gtkR43eyvVHfoo/pqFx0oNbt93+BmISV8uL7kLPYd0r3668yl9Rk09p +qachk/VKa79xnBQNafTOW0UoP+xV+8LDtLROxTZiRLgYmEghPkWoK4ekmkRpixm yVA8lXOqxkubXbvAy1FZoJ8y1Tf9KB0eSDpdlbrLvGTnH56tKM0fxVXj4nPnuxIX az3pIM7+WkfROX7XciyRncHmXxinmv8uxjfRs6cC4njr1X4V+eyENmcRVDnmyj0o Ia8DMUVDwnEpt52RmVXrSXEeCw6vojGv1KaLm2ow6apQbrBBe/1T7fX3K7Npo4u9 s/+eOpfVLJL3fQtjCk57ebpNOw== -----END CERTIFICATE-----Generated at Wed Mar 4 08:22:22 2026 by rpki-client