$ rpki-client -vvf rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft File: qkybf_t3YNE02jT6MRKd4Rod4q4.mft (raw, json) Hash identifier: s35iIGzFosdHOtUPUguwQ9SU6XNGpPrqNgUfDvAnuF0= Subject key identifier: C0:E8:4E:2B:DB:38:D8:78:E7:45:C1:B5:BA:AE:25:14:B7:DA:F7:03 Authority key identifier: AA:4C:9B:7F:FB:77:60:D1:34:DA:34:FA:31:12:9D:E1:1A:1D:E2:AE Certificate issuer: /CN=A9156021/serialNumber=AA4C9B7FFB7760D134DA34FA31129DE11A1DE2AE Certificate serial: 2EB3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkybf_t3YNE02jT6MRKd4Rod4q4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft Manifest number: 2EA0 Signing time: Thu 16 Apr 2026 15:27:14 +0000 Manifest this update: Thu 16 Apr 2026 15:27:14 +0000 Manifest next update: Thu 23 Apr 2026 15:27:14 +0000 Files and hashes: 1: qkybf_t3YNE02jT6MRKd4Rod4q4.crl (hash: c1W0x2+QaizctzNfKA77Vj4/AlfjlUCMCWMlTFONVCI=) 2: 3408D944DC0311EC879DE280C4F9AE02.roa (hash: X2TaF3YKM0s8VUzzhEaphXHF/ct0sZDe6tpxxxbTq9I=) 3: 5B102332845711EEB3DC4A5EC4F9AE02.roa (hash: oSWS0zrJzdXGwHmrgHH9I5fI7OsRk41AspXzhYBYi10=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.crl rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkybf_t3YNE02jT6MRKd4Rod4q4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 15:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11955 (0x2eb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156021, serialNumber=AA4C9B7FFB7760D134DA34FA31129DE11A1DE2AE Validity Not Before: Apr 16 15:27:14 2026 GMT Not After : Apr 23 15:27:14 2026 GMT Subject: CN=69e0ffd2-bc16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:48:c6:c2:72:5a:0d:ba:a5:fc:6f:94:f0:e8: a8:46:b2:4a:e4:10:4f:b8:29:d5:5a:6c:a5:82:42: ca:12:ce:b4:bd:4a:c4:b7:f1:87:f2:49:11:29:a7: 6e:f2:73:a7:d1:a6:0b:8c:7e:ef:0e:ea:98:34:9e: 03:18:f5:4a:ca:f2:d3:cc:57:5e:69:d8:30:49:ca: ed:2c:e6:57:eb:cc:3f:23:eb:b6:15:f0:22:b8:a4: 30:e6:53:2d:2d:6f:79:6d:a0:5d:30:0d:4f:24:1e: 61:4f:36:8c:23:a7:c8:2e:88:a5:8f:1a:ce:85:8a: dc:53:85:ba:e7:af:db:9a:3d:15:4d:de:42:cb:54: 1c:09:66:59:e6:57:28:48:d9:96:0f:be:11:8f:db: 7b:5e:79:a2:80:b7:e9:09:2b:ac:c7:3a:6b:b2:94: 80:df:ce:6c:07:63:5e:90:ca:d6:97:ae:6a:75:6e: 34:ff:1e:5a:5b:f4:c0:4d:49:c5:04:53:d9:6f:87: 4d:94:a8:76:9b:e4:83:16:b8:5d:b7:3b:b7:cc:d2: e8:ee:28:59:81:af:fd:64:9c:fe:5a:e6:ad:3b:f3: 8c:d8:f7:2d:e9:a0:2c:69:a4:e6:e7:a6:ae:68:ab: 75:07:8b:bb:ae:3f:86:99:ed:1a:30:cb:e6:f1:6c: 7c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:E8:4E:2B:DB:38:D8:78:E7:45:C1:B5:BA:AE:25:14:B7:DA:F7:03 X509v3 Authority Key Identifier: keyid:AA:4C:9B:7F:FB:77:60:D1:34:DA:34:FA:31:12:9D:E1:1A:1D:E2:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkybf_t3YNE02jT6MRKd4Rod4q4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:41:38:11:54:d4:9e:b5:c8:63:b3:e8:37:a5:f3:fe:e5:7d: fe:bf:5e:bf:5b:f7:54:0f:12:94:37:b5:c9:0b:0b:7c:aa:a8: 66:bd:af:6e:b7:99:1d:38:e1:92:64:d3:ef:76:12:8c:7e:fc: 64:a7:32:04:80:79:a8:ea:57:94:8d:b5:e9:ff:4f:89:6b:56: 0c:c1:8e:0f:93:e9:80:7b:e3:34:7c:c0:a8:9a:18:c5:4b:e6: 12:a8:cf:41:a7:fb:b6:b7:6d:ec:cf:e6:25:07:a6:c0:dc:61: a1:ac:c6:95:6e:85:64:87:d3:46:ac:88:43:02:9a:3d:e5:98: 91:54:42:87:26:0f:f0:c1:50:4c:0e:fb:93:c4:7f:31:68:60: b1:6b:a6:34:a2:ae:61:5e:50:4e:90:e3:9a:44:2b:e1:db:10: 44:b0:9c:09:95:a7:0b:cc:6e:a6:ef:a9:93:39:7a:34:7b:1b: f2:4a:9c:20:4f:5c:07:7f:05:ce:75:21:06:eb:0c:a3:de:d6: ba:33:4d:03:b5:86:9f:b1:c2:b3:71:3a:8e:7a:74:bf:f6:1f: 08:b7:c0:d5:15:78:62:71:57:e9:ca:5e:76:a2:c0:b3:01:94: dd:95:e4:22:ef:79:ab:49:74:e9:35:f5:dc:b4:5c:fd:14:5c: b7:fb:42:07 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICLrMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYwMjExMTAvBgNVBAUTKEFBNEM5QjdGRkI3NzYwRDEzNERBMzRGQTMxMTI5REUx MUExREUyQUUwHhcNMjYwNDE2MTUyNzE0WhcNMjYwNDIzMTUyNzE0WjAYMRYwFAYD VQQDEw02OWUwZmZkMi1iYzE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApUjGwnJaDbql/G+U8OioRrJK5BBPuCnVWmylgkLKEs60vUrEt/GH8kkRKadu 8nOn0aYLjH7vDuqYNJ4DGPVKyvLTzFdeadgwScrtLOZX68w/I+u2FfAiuKQw5lMt LW95baBdMA1PJB5hTzaMI6fILoiljxrOhYrcU4W656/bmj0VTd5Cy1QcCWZZ5lco SNmWD74Rj9t7XnmigLfpCSusxzprspSA385sB2NekMrWl65qdW40/x5aW/TATUnF BFPZb4dNlKh2m+SDFrhdtzu3zNLo7ihZga/9ZJz+WuatO/OM2Pct6aAsaaTm56au aKt1B4u7rj+Gme0aMMvm8Wx8WwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMDoTivb ONh450XBtbquJRS32vcDMB8GA1UdIwQYMBaAFKpMm3/7d2DRNNo0+jESneEaHeKu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjAyMS9EOTg3NjFENDY5 MkUxMUUzODhDODI1MkU1OTExRUEzMi9xa3liZl90M1lORTAyalQ2TVJLZDRSb2Q0 cTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FreWJmX3QzWU5FMDJqVDZNUktkNFJvZDRxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjAyMS9EOTg3NjFENDY5MkUxMUUzODhDODI1MkU1OTExRUEzMi9xa3liZl90M1lO RTAyalQ2TVJLZDRSb2Q0cTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhkE4EVTUnrXIY7PoN6Xz/uV9/r9ev1v3VA8SlDe1yQsLfKqoZr2vbreZHTjh kmTT73YSjH78ZKcyBIB5qOpXlI216f9PiWtWDMGOD5PpgHvjNHzAqJoYxUvmEqjP Qaf7trdt7M/mJQemwNxhoazGlW6FZIfTRqyIQwKaPeWYkVRChyYP8MFQTA77k8R/ MWhgsWumNKKuYV5QTpDjmkQr4dsQRLCcCZWnC8xupu+pkzl6NHsb8kqcIE9cB38F znUhBusMo97WujNNA7WGn7HCs3E6jnp0v/YfCLfA1RV4YnFX6cpedqLAswGU3ZXk Iu95q0l06TX13LRc/RRct/tCBw== -----END CERTIFICATE-----Generated at Fri Apr 17 14:40:04 2026 by rpki-client