$ rpki-client -vvf rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft File: qkybf_t3YNE02jT6MRKd4Rod4q4.mft (raw, json) Hash identifier: Z5ktV1McDADsaOYxn9eBKNkWQ23kq63othtiFv4ZY/k= Subject key identifier: C3:FF:D6:1B:07:19:78:2B:6D:3A:6A:FC:1B:96:C9:51:DD:7E:79:D3 Authority key identifier: AA:4C:9B:7F:FB:77:60:D1:34:DA:34:FA:31:12:9D:E1:1A:1D:E2:AE Certificate issuer: /CN=A9156021/serialNumber=AA4C9B7FFB7760D134DA34FA31129DE11A1DE2AE Certificate serial: 2E9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkybf_t3YNE02jT6MRKd4Rod4q4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft Manifest number: 2E88 Signing time: Mon 02 Mar 2026 01:59:54 +0000 Manifest this update: Mon 02 Mar 2026 01:59:53 +0000 Manifest next update: Mon 09 Mar 2026 01:59:53 +0000 Files and hashes: 1: qkybf_t3YNE02jT6MRKd4Rod4q4.crl (hash: 0MYqYx5aBDZV5E9OaymR84PeHna+ee41nPgsOOzdX1k=) 2: 3408D944DC0311EC879DE280C4F9AE02.roa (hash: X2TaF3YKM0s8VUzzhEaphXHF/ct0sZDe6tpxxxbTq9I=) 3: 5B102332845711EEB3DC4A5EC4F9AE02.roa (hash: oSWS0zrJzdXGwHmrgHH9I5fI7OsRk41AspXzhYBYi10=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.crl rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkybf_t3YNE02jT6MRKd4Rod4q4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:59:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11931 (0x2e9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156021, serialNumber=AA4C9B7FFB7760D134DA34FA31129DE11A1DE2AE Validity Not Before: Mar 2 01:59:53 2026 GMT Not After : Mar 9 01:59:53 2026 GMT Subject: CN=69a4ef1a-cf17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:57:2a:0d:b1:77:39:f1:17:b2:ae:02:c5:79: 00:62:1f:19:d9:e8:61:c3:93:4c:8f:38:4d:c6:91: 6f:53:91:33:2c:95:12:ae:0b:5e:21:f2:8a:8f:aa: 81:91:0c:b0:d2:48:48:8b:e2:1c:64:12:cf:e3:fa: b6:9c:73:11:61:a3:c2:17:de:35:f6:0b:69:f8:b0: 48:c6:5b:e6:9d:8e:fa:22:73:ab:54:3d:ef:92:7b: f4:98:0d:93:5f:88:3a:9e:6e:01:13:4e:03:49:4f: 00:2a:af:7c:2f:03:ba:a0:1d:4b:36:8c:63:80:d8: b4:c4:ed:39:54:cb:7a:c0:1e:4a:5b:3b:c8:68:71: 4b:34:fd:fa:e6:6a:73:f0:97:9b:e6:29:09:23:dc: 45:2f:f8:3e:49:40:92:ab:4f:8b:c5:78:3f:68:bf: a6:e2:91:28:9b:b8:12:9d:1a:10:b0:25:90:5f:21: 28:10:ca:d2:73:d8:b3:2a:78:6b:9d:30:34:44:a8: 41:b4:25:bc:f1:ef:c4:25:ff:42:5f:74:a0:1f:a9: 81:72:ad:f0:1e:58:e5:31:c3:8f:6e:c9:7d:10:f3: 01:7e:0b:ed:f0:03:b0:d1:d1:65:6e:0d:85:9a:f0: d5:4f:89:f3:20:eb:f6:2d:11:56:90:93:03:79:e4: ff:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:FF:D6:1B:07:19:78:2B:6D:3A:6A:FC:1B:96:C9:51:DD:7E:79:D3 X509v3 Authority Key Identifier: keyid:AA:4C:9B:7F:FB:77:60:D1:34:DA:34:FA:31:12:9D:E1:1A:1D:E2:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkybf_t3YNE02jT6MRKd4Rod4q4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:37:91:a4:d0:36:21:8a:57:70:43:14:2a:89:31:91:32:52: 60:18:65:3e:e9:74:d7:e7:c1:49:10:be:be:67:d7:bc:51:41: 22:81:61:a3:9d:b0:c3:09:b6:60:0b:67:02:2b:a2:09:d5:19: 92:a7:9f:d1:cf:28:36:88:76:8a:0a:36:1c:d4:f8:80:28:0f: c0:9a:bb:be:40:1f:c4:b5:2a:fb:e1:df:24:c3:b0:52:59:21: 78:31:57:33:06:fa:d2:47:f7:1b:1d:7a:a3:1a:b5:ee:88:4f: af:63:59:00:d9:7a:0c:3f:83:83:52:76:b9:fd:b0:c3:83:0d: 73:d5:91:00:f5:05:62:a1:d9:49:d8:c4:df:40:72:85:ce:fb: b4:03:13:1d:2e:74:1a:ae:89:db:ba:91:9b:00:0e:da:c0:d9: bb:00:33:28:4f:dd:d3:22:c8:af:20:d9:ff:cd:94:e4:df:ea: 70:03:9b:d3:bf:81:a7:0e:be:a4:a1:49:15:2a:ca:fe:13:87: 10:86:e0:29:cd:f8:34:1a:6d:fc:c1:93:7d:8d:5d:3c:59:ad: 6c:ef:63:83:27:8a:0f:14:c5:51:43:e6:7d:fd:a6:e1:e0:86: c9:54:91:73:6b:31:31:71:07:27:93:34:04:b3:d1:e3:e7:36: 35:eb:73:0c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICLpswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYwMjExMTAvBgNVBAUTKEFBNEM5QjdGRkI3NzYwRDEzNERBMzRGQTMxMTI5REUx MUExREUyQUUwHhcNMjYwMzAyMDE1OTUzWhcNMjYwMzA5MDE1OTUzWjAYMRYwFAYD VQQDEw02OWE0ZWYxYS1jZjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkFcqDbF3OfEXsq4CxXkAYh8Z2ehhw5NMjzhNxpFvU5EzLJUSrgteIfKKj6qB kQyw0khIi+IcZBLP4/q2nHMRYaPCF9419gtp+LBIxlvmnY76InOrVD3vknv0mA2T X4g6nm4BE04DSU8AKq98LwO6oB1LNoxjgNi0xO05VMt6wB5KWzvIaHFLNP365mpz 8Jeb5ikJI9xFL/g+SUCSq0+LxXg/aL+m4pEom7gSnRoQsCWQXyEoEMrSc9izKnhr nTA0RKhBtCW88e/EJf9CX3SgH6mBcq3wHljlMcOPbsl9EPMBfgvt8AOw0dFlbg2F mvDVT4nzIOv2LRFWkJMDeeT/CQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMP/1hsH GXgrbTpq/BuWyVHdfnnTMB8GA1UdIwQYMBaAFKpMm3/7d2DRNNo0+jESneEaHeKu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjAyMS9EOTg3NjFENDY5 MkUxMUUzODhDODI1MkU1OTExRUEzMi9xa3liZl90M1lORTAyalQ2TVJLZDRSb2Q0 cTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FreWJmX3QzWU5FMDJqVDZNUktkNFJvZDRxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjAyMS9EOTg3NjFENDY5MkUxMUUzODhDODI1MkU1OTExRUEzMi9xa3liZl90M1lO RTAyalQ2TVJLZDRSb2Q0cTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKjeRpNA2IYpXcEMUKokxkTJSYBhlPul01+fBSRC+vmfXvFFBIoFho52wwwm2 YAtnAiuiCdUZkqef0c8oNoh2igo2HNT4gCgPwJq7vkAfxLUq++HfJMOwUlkheDFX Mwb60kf3Gx16oxq17ohPr2NZANl6DD+Dg1J2uf2ww4MNc9WRAPUFYqHZSdjE30By hc77tAMTHS50Gq6J27qRmwAO2sDZuwAzKE/d0yLIryDZ/82U5N/qcAOb07+Bpw6+ pKFJFSrK/hOHEIbgKc34NBpt/MGTfY1dPFmtbO9jgyeKDxTFUUPmff2m4eCGyVSR c2sxMXEHJ5M0BLPR4+c2NetzDA== -----END CERTIFICATE-----Generated at Mon Mar 2 09:25:16 2026 by rpki-client