$ rpki-client -vvvf rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft File: qkybf_t3YNE02jT6MRKd4Rod4q4.mft (raw, json) Hash identifier: yva5+QtycARIkH8T4eDAfFdAkymyenuRt3I2t2XtBeY= Subject key identifier: 3B:F4:D7:EA:E7:ED:C1:09:07:97:33:10:7B:B2:93:7B:54:ED:F8:D4 Authority key identifier: AA:4C:9B:7F:FB:77:60:D1:34:DA:34:FA:31:12:9D:E1:1A:1D:E2:AE Certificate issuer: /CN=A9156021/serialNumber=AA4C9B7FFB7760D134DA34FA31129DE11A1DE2AE Certificate serial: 2F07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkybf_t3YNE02jT6MRKd4Rod4q4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft Manifest number: 2EF4 Signing time: Mon 28 Sep 2026 15:29:09 +0000 Manifest this update: Mon 28 Sep 2026 15:29:08 +0000 Manifest next update: Mon 05 Oct 2026 15:29:08 +0000 Files and hashes: 1: qkybf_t3YNE02jT6MRKd4Rod4q4.crl (hash: wN8NvEjgSX+zhhKa1ByDWqIKQWdMosouohkexy2hgms=) 2: 5B102332845711EEB3DC4A5EC4F9AE02.roa (hash: oSWS0zrJzdXGwHmrgHH9I5fI7OsRk41AspXzhYBYi10=) 3: 3408D944DC0311EC879DE280C4F9AE02.roa (hash: X2TaF3YKM0s8VUzzhEaphXHF/ct0sZDe6tpxxxbTq9I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.crl rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkybf_t3YNE02jT6MRKd4Rod4q4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 15:29:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12039 (0x2f07) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156021, serialNumber=AA4C9B7FFB7760D134DA34FA31129DE11A1DE2AE Validity Not Before: Sep 28 15:29:08 2026 GMT Not After : Oct 5 15:29:08 2026 GMT Subject: CN=6aba87c5-e0f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8b:fd:b0:7a:d9:0a:28:66:f5:35:5d:90:96: 8d:5b:a7:4d:9f:f3:23:2a:53:22:ad:f8:5d:d6:64: b9:e4:f3:53:9b:d1:a8:f8:6c:77:8b:50:63:85:f3: 14:50:18:2a:72:f9:b0:8b:cb:64:6d:e6:14:a8:6e: ff:fa:4e:5f:b3:1b:3e:92:9e:a1:01:18:00:8c:d4: 26:85:03:6c:9e:2f:e8:eb:a2:44:ce:d8:36:ee:42: 40:89:dc:e8:6e:a3:8f:3f:f5:e8:ad:e8:df:b0:67: 7d:ae:d3:32:89:77:a4:00:2d:af:b3:09:39:d9:05: e7:3e:bb:5d:b0:0a:88:af:48:94:38:c0:b9:03:b5: e8:cc:aa:85:d2:fb:cc:5d:58:c0:03:4f:89:ad:1a: 6c:bb:9d:da:2d:1c:b8:f2:1a:a4:5e:37:37:0a:10: 0c:65:50:4b:12:3f:58:11:5d:86:b4:e0:1a:4e:88: 21:6b:bd:eb:70:d5:fc:97:03:03:b6:69:f6:4e:de: e9:5f:00:3b:bf:05:85:75:2c:08:17:6d:e0:d2:3c: d9:19:58:60:ce:3a:b3:c3:0a:1d:74:17:bd:d2:2c: 37:42:6d:92:1d:2d:9f:94:77:0a:14:68:dd:a3:4d: 1a:69:47:bb:99:e5:e5:6e:b2:72:59:93:c3:67:e2: 3b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:F4:D7:EA:E7:ED:C1:09:07:97:33:10:7B:B2:93:7B:54:ED:F8:D4 X509v3 Authority Key Identifier: keyid:AA:4C:9B:7F:FB:77:60:D1:34:DA:34:FA:31:12:9D:E1:1A:1D:E2:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkybf_t3YNE02jT6MRKd4Rod4q4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:80:33:aa:45:92:8b:4a:fe:9a:33:00:04:a2:6c:98:56:fe: 82:ec:9c:0f:4b:74:d8:8b:ea:e9:47:77:3d:c2:bd:64:77:77: e9:18:e1:d0:ea:9d:0c:4a:54:71:7d:b5:37:34:3a:30:e6:96: 2b:29:8f:74:09:71:98:15:e7:ee:f7:05:15:80:1e:23:6a:fa: ce:a9:c5:84:d4:29:60:ae:aa:86:2d:d9:60:31:b7:ca:96:04: c6:24:23:cc:12:94:8d:2a:be:be:87:4f:02:5a:33:90:06:8b: cd:03:09:7d:76:0a:54:44:3f:bb:d4:57:37:8f:84:28:e0:38: 7a:a9:f9:c4:1e:ad:51:70:76:c7:4e:33:bb:a4:12:9c:18:ed: 51:4c:f5:c4:bf:24:92:70:5f:90:f0:ed:78:47:16:e6:b9:2f: 67:2c:91:21:06:56:bd:84:98:9c:ec:1f:c0:5c:dd:ab:3b:5e: ec:c9:66:82:c1:f4:1e:97:dc:a1:4c:27:82:ef:a7:5b:23:40: 49:c8:34:d6:48:97:5e:ba:08:36:83:29:75:47:bc:36:69:f6: 63:01:dc:68:81:81:ab:8b:61:5b:33:7f:39:c2:a1:1b:18:1b: 0f:ff:44:52:d1:e2:d2:ba:68:5a:bf:04:0f:08:f5:a2:5a:93: 99:57:ac:e9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICLwcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYwMjExMTAvBgNVBAUTKEFBNEM5QjdGRkI3NzYwRDEzNERBMzRGQTMxMTI5REUx MUExREUyQUUwHhcNMjYwOTI4MTUyOTA4WhcNMjYxMDA1MTUyOTA4WjAYMRYwFAYD VQQDEw02YWJhODdjNS1lMGY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvYv9sHrZCihm9TVdkJaNW6dNn/MjKlMirfhd1mS55PNTm9Go+Gx3i1BjhfMU UBgqcvmwi8tkbeYUqG7/+k5fsxs+kp6hARgAjNQmhQNsni/o66JEztg27kJAidzo bqOPP/XorejfsGd9rtMyiXekAC2vswk52QXnPrtdsAqIr0iUOMC5A7XozKqF0vvM XVjAA0+JrRpsu53aLRy48hqkXjc3ChAMZVBLEj9YEV2GtOAaTogha73rcNX8lwMD tmn2Tt7pXwA7vwWFdSwIF23g0jzZGVhgzjqzwwoddBe90iw3Qm2SHS2flHcKFGjd o00aaUe7meXlbrJyWZPDZ+I7/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDv01+rn 7cEJB5czEHuyk3tU7fjUMB8GA1UdIwQYMBaAFKpMm3/7d2DRNNo0+jESneEaHeKu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjAyMS9EOTg3NjFENDY5 MkUxMUUzODhDODI1MkU1OTExRUEzMi9xa3liZl90M1lORTAyalQ2TVJLZDRSb2Q0 cTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FreWJmX3QzWU5FMDJqVDZNUktkNFJvZDRxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjAyMS9EOTg3NjFENDY5MkUxMUUzODhDODI1MkU1OTExRUEzMi9xa3liZl90M1lO RTAyalQ2TVJLZDRSb2Q0cTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApIAzqkWSi0r+mjMABKJsmFb+guycD0t02Ivq6Ud3PcK9ZHd36Rjh0OqdDEpU cX21NzQ6MOaWKymPdAlxmBXn7vcFFYAeI2r6zqnFhNQpYK6qhi3ZYDG3ypYExiQj zBKUjSq+vodPAlozkAaLzQMJfXYKVEQ/u9RXN4+EKOA4eqn5xB6tUXB2x04zu6QS nBjtUUz1xL8kknBfkPDteEcW5rkvZyyRIQZWvYSYnOwfwFzdqzte7MlmgsH0Hpfc oUwngu+nWyNAScg01kiXXroINoMpdUe8Nmn2YwHcaIGBq4thWzN/OcKhGxgbD/9E UtHi0rpoWr8EDwj1olqTmVes6Q== -----END CERTIFICATE-----Generated at Wed Sep 30 04:53:11 2026 by rpki-client