$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.mft File: qkHKgdI-9YhhkyqtErMWkNvPEAM.mft (raw, json) Hash identifier: jjytDlBKigDhNxIyenzbJUGXBeo6yasB3DCv83bMcq4= Subject key identifier: E3:E4:29:BE:52:4C:60:16:1C:97:8A:65:E5:73:74:F2:49:D0:DA:C8 Authority key identifier: AA:41:CA:81:D2:3E:F5:88:61:93:2A:AD:12:B3:16:90:DB:CF:10:03 Certificate issuer: /CN=A91A5744/serialNumber=AA41CA81D23EF58861932AAD12B31690DBCF1003 Certificate serial: 0CD8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkHKgdI-9YhhkyqtErMWkNvPEAM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.mft Manifest number: 0CD0 Signing time: Mon 02 Mar 2026 18:12:56 +0000 Manifest this update: Mon 02 Mar 2026 18:12:56 +0000 Manifest next update: Mon 09 Mar 2026 18:12:56 +0000 Files and hashes: 1: qkHKgdI-9YhhkyqtErMWkNvPEAM.crl (hash: jRb9iiuk5TmZCqTXC91W9VoaElBhCaD/Ej4bmvFYaH8=) 2: 220DBB66054011EA90A20C7EC4F9AE02.roa (hash: yHmDa4+sZL/pjlW06ii7KVBbPXMP7FrwSa8y+N4oSFo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.crl rsync://rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkHKgdI-9YhhkyqtErMWkNvPEAM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 16:03:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3288 (0xcd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5744, serialNumber=AA41CA81D23EF58861932AAD12B31690DBCF1003 Validity Not Before: Mar 2 18:12:56 2026 GMT Not After : Mar 9 18:12:56 2026 GMT Subject: CN=69a5d328-e002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:22:d7:0e:bf:b6:e0:58:15:45:7f:ca:4a:7a: 17:64:6c:92:68:b9:9c:90:ff:92:c9:40:65:11:ee: bf:dc:0b:4b:5a:1a:91:c1:e3:db:07:42:6a:51:09: 42:01:e4:f3:f2:60:b6:ee:51:26:75:9a:f1:67:8c: ea:fc:fe:f5:76:35:fa:17:c5:e5:eb:6d:b2:53:93: 71:c7:64:91:1d:3c:22:f6:6b:7e:4d:96:1a:95:28: aa:42:f1:3f:52:e0:69:09:e2:af:ec:56:6a:99:85: 31:95:70:bb:f8:a5:10:33:9c:05:95:b6:0c:2c:9d: 00:0e:2b:3e:96:b6:82:14:4e:f8:b0:4e:c3:d5:07: 47:b4:75:a0:d0:4b:3a:49:77:2e:40:ed:4d:66:a4: 79:63:8d:80:c7:5d:6f:ef:c6:b1:86:ef:6a:21:06: 16:58:86:a7:78:73:0c:fe:85:17:e8:5e:d3:a2:bd: f7:c6:05:4a:1b:36:a4:51:81:85:09:b3:22:7f:5d: 96:3b:ee:bd:f6:90:52:87:0b:f9:cd:f1:0d:04:bb: d5:04:f7:08:ed:40:ad:e7:e0:5f:e0:b8:5c:ff:bd: 25:e8:22:19:1b:e5:60:5a:de:90:aa:cb:58:2f:51: c1:9c:a6:fc:ca:2f:94:59:8f:b6:cd:d0:a3:11:b5: 67:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:E4:29:BE:52:4C:60:16:1C:97:8A:65:E5:73:74:F2:49:D0:DA:C8 X509v3 Authority Key Identifier: keyid:AA:41:CA:81:D2:3E:F5:88:61:93:2A:AD:12:B3:16:90:DB:CF:10:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkHKgdI-9YhhkyqtErMWkNvPEAM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:10:9b:05:da:f8:f1:da:1c:20:d5:15:65:a8:12:cb:2c:b0: d6:52:18:0e:b1:ce:ee:2b:14:f0:10:3c:c0:ff:8b:83:64:e5: 92:e5:ea:b3:9b:a6:e7:d6:7f:99:a2:df:50:77:60:ba:62:9f: d1:4d:d4:30:67:c9:fa:13:dd:ca:ef:ec:21:30:07:b8:b2:47: 23:80:e7:a7:8c:af:97:a2:4c:9f:55:74:42:0b:04:f4:ae:b5: 25:7d:88:13:4a:3e:04:e6:34:77:da:18:13:28:65:80:f7:3f: 02:e6:94:67:f0:5b:d2:0c:51:21:06:a4:83:46:19:fc:16:fa: 54:eb:2b:5f:69:dd:88:2f:68:30:20:4a:56:21:5b:49:e4:0b: ad:c8:17:46:32:1c:72:b7:02:ab:9e:58:78:40:74:2a:43:91: f7:c5:53:94:30:d1:e7:2a:0a:61:06:50:3d:3a:ba:d8:f9:b7: 9c:76:68:01:66:a1:73:59:2b:70:e4:20:93:29:d4:7e:31:88: 76:94:f3:00:33:80:2c:a9:8d:9c:18:96:c7:9e:0e:e5:50:a0: 20:a6:3d:2f:32:42:98:b9:8c:a0:9b:be:e6:1e:7d:b8:e0:d9: 17:69:bb:38:50:e8:ef:f8:ef:68:44:7d:ce:1a:87:98:16:47: 04:e3:ef:02 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDNgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU3NDQxMTAvBgNVBAUTKEFBNDFDQTgxRDIzRUY1ODg2MTkzMkFBRDEyQjMxNjkw REJDRjEwMDMwHhcNMjYwMzAyMTgxMjU2WhcNMjYwMzA5MTgxMjU2WjAYMRYwFAYD VQQDEw02OWE1ZDMyOC1lMDAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtSLXDr+24FgVRX/KSnoXZGySaLmckP+SyUBlEe6/3AtLWhqRwePbB0JqUQlC AeTz8mC27lEmdZrxZ4zq/P71djX6F8Xl622yU5Nxx2SRHTwi9mt+TZYalSiqQvE/ UuBpCeKv7FZqmYUxlXC7+KUQM5wFlbYMLJ0ADis+lraCFE74sE7D1QdHtHWg0Es6 SXcuQO1NZqR5Y42Ax11v78axhu9qIQYWWIaneHMM/oUX6F7Tor33xgVKGzakUYGF CbMif12WO+699pBShwv5zfENBLvVBPcI7UCt5+Bf4Lhc/70l6CIZG+VgWt6QqstY L1HBnKb8yi+UWY+2zdCjEbVnxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOPkKb5S TGAWHJeKZeVzdPJJ0NrIMB8GA1UdIwQYMBaAFKpByoHSPvWIYZMqrRKzFpDbzxAD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTc0NC8zOTdGNkNENDA1 MkUxMUVBOUQzMTQxNDVDNEY5QUUwMi9xa0hLZ2RJLTlZaGhreXF0RXJNV2tOdlBF QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FrSEtnZEktOVloaGt5cXRFck1Xa052UEVBTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTc0NC8zOTdGNkNENDA1MkUxMUVBOUQzMTQxNDVDNEY5QUUwMi9xa0hLZ2RJLTlZ aGhreXF0RXJNV2tOdlBFQU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAohCbBdr48docINUVZagSyyyw1lIYDrHO7isU8BA8wP+Lg2TlkuXqs5um59Z/ maLfUHdgumKf0U3UMGfJ+hPdyu/sITAHuLJHI4Dnp4yvl6JMn1V0QgsE9K61JX2I E0o+BOY0d9oYEyhlgPc/AuaUZ/Bb0gxRIQakg0YZ/Bb6VOsrX2ndiC9oMCBKViFb SeQLrcgXRjIccrcCq55YeEB0KkOR98VTlDDR5yoKYQZQPTq62Pm3nHZoAWahc1kr cOQgkynUfjGIdpTzADOALKmNnBiWx54O5VCgIKY9LzJCmLmMoJu+5h59uODZF2m7 OFDo7/jvaER9zhqHmBZHBOPvAg== -----END CERTIFICATE-----Generated at Mon Mar 2 21:55:47 2026 by rpki-client